libeay64.dll

Description: Windows Image Helper

Version: 10.0.3636.19041

Architecture: 64-bit

Operating System: Windows NT

SHA256: c38c1fd52f3493f5203add9807c1c5f6

File Size: 256.5 KB

Uploaded At: May 20, 2026, 9:29 p.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory

Exported Functions

SymAllocDiaString (Ordinal: 1111, Address: 0x399d7)
SymFreeDiaString (Ordinal: 1112, Address: 0x3a30a)
EnumerateLoadedModules (Ordinal: 1113, Address: 0x4cf0)
SymGetLineFromAddrEx (Ordinal: 1114, Address: 0x3a7e4)
EnumerateLoadedModulesEx (Ordinal: 1115, Address: 0x4d50)
ImageDirectoryEntryToDataEx (Ordinal: 1116, Address: 0x4db0)
ImageNtHeader (Ordinal: 1117, Address: 0x4e20)
ImageRvaToVa (Ordinal: 1118, Address: 0x4e60)
SymAddSourceStream (Ordinal: 1119, Address: 0x4ed0)
SymGetLineFromNameEx (Ordinal: 1120, Address: 0x3a9a4)
SymGetLineNextEx (Ordinal: 1121, Address: 0x3aaa6)
SymGetLinePrevEx (Ordinal: 1122, Address: 0x3ab9c)
SymGetOmapBlockBase (Ordinal: 1123, Address: 0x3ad63)
SymAddSourceStreamA (Ordinal: 1124, Address: 0x4f40)
_EFN_DumpImage (Ordinal: 1125, Address: 0x3c084)
DbgHelpCreateUserDump (Ordinal: 1126, Address: 0x38e57)
DbgHelpCreateUserDumpW (Ordinal: 1127, Address: 0x38ea0)
EnumDirTree (Ordinal: 1128, Address: 0x38edf)
EnumDirTreeW (Ordinal: 1129, Address: 0x38f14)
SymCompareInlineTrace (Ordinal: 1130, Address: 0x4fb0)
EnumerateLoadedModules64 (Ordinal: 1131, Address: 0x38f56)
SymGetDiaSession (Ordinal: 1132, Address: 0x5020)
EnumerateLoadedModulesExW (Ordinal: 1133, Address: 0x38fa5)
EnumerateLoadedModulesW64 (Ordinal: 1134, Address: 0x38ff5)
ExtensionApiVersion (Ordinal: 1135, Address: 0x3903f)
FindDebugInfoFile (Ordinal: 1136, Address: 0x39081)
FindDebugInfoFileEx (Ordinal: 1137, Address: 0x390c3)
FindDebugInfoFileExW (Ordinal: 1138, Address: 0x39108)
FindExecutableImage (Ordinal: 1139, Address: 0x3914d)
FindExecutableImageEx (Ordinal: 1140, Address: 0x39193)
FindExecutableImageExW (Ordinal: 1141, Address: 0x391dc)
FindFileInPath (Ordinal: 1142, Address: 0x3921e)
FindFileInSearchPath (Ordinal: 1143, Address: 0x3925e)
GetSymLoadError (Ordinal: 1144, Address: 0x3929f)
GetTimestampForLoadedLibrary (Ordinal: 1145, Address: 0x392e8)
ImageDirectoryEntryToData (Ordinal: 1146, Address: 0x3933b)
SymGetFileLineOffsets64 (Ordinal: 1147, Address: 0x5080)
SymGetModuleBase (Ordinal: 1148, Address: 0x50f0)
ImageRvaToSection (Ordinal: 1149, Address: 0x39383)
SymGetSearchPath (Ordinal: 1150, Address: 0x5140)
ImagehlpApiVersion (Ordinal: 1151, Address: 0x393c4)
ImagehlpApiVersionEx (Ordinal: 1152, Address: 0x39408)
MakeSureDirectoryPathExists (Ordinal: 1153, Address: 0x39455)
MiniDumpReadDumpStream (Ordinal: 1154, Address: 0x394a4)
MiniDumpWriteDump (Ordinal: 1155, Address: 0x394e9)
RangeMapAddPeImageSections (Ordinal: 1156, Address: 0x39532)
RangeMapCreate (Ordinal: 1157, Address: 0x39578)
RangeMapFree (Ordinal: 1158, Address: 0x395b0)
RangeMapRead (Ordinal: 1159, Address: 0x395e6)
RangeMapRemove (Ordinal: 1160, Address: 0x3961e)
RangeMapWrite (Ordinal: 1161, Address: 0x39657)
RemoveInvalidModuleList (Ordinal: 1162, Address: 0x39699)
ReportSymbolLoadSummary (Ordinal: 1163, Address: 0x396e5)
SearchTreeForFile (Ordinal: 1164, Address: 0x3972b)
SearchTreeForFileW (Ordinal: 1165, Address: 0x3976c)
SetCheckUserInterruptShared (Ordinal: 1166, Address: 0x397b7)
SetSymLoadError (Ordinal: 1167, Address: 0x397ff)
StackWalk (Ordinal: 1168, Address: 0x39835)
StackWalk64 (Ordinal: 1169, Address: 0x39867)
StackWalkEx (Ordinal: 1170, Address: 0x3989b)
SymGetSearchPathW (Ordinal: 1171, Address: 0x51a0)
SymGetSourceVarFromToken (Ordinal: 1172, Address: 0x5200)
SymAddSourceStreamW (Ordinal: 1173, Address: 0x398d7)
SymAddSymbol (Ordinal: 1174, Address: 0x39914)
SymAddSymbolW (Ordinal: 1175, Address: 0x3994b)
SymAddrIncludeInlineTrace (Ordinal: 1176, Address: 0x3998f)
SymCleanup (Ordinal: 1177, Address: 0x39a10)
SymGetSymFromAddr (Ordinal: 1178, Address: 0x5270)
SymDeleteSymbol (Ordinal: 1179, Address: 0x39a47)
SymDeleteSymbolW (Ordinal: 1180, Address: 0x39a84)
SymEnumLines (Ordinal: 1181, Address: 0x39abe)
SymEnumLinesW (Ordinal: 1182, Address: 0x39af5)
SymEnumProcesses (Ordinal: 1183, Address: 0x39b30)
SymEnumSourceFileTokens (Ordinal: 1184, Address: 0x39b75)
SymEnumSourceFiles (Ordinal: 1185, Address: 0x39bbc)
SymEnumSourceFilesW (Ordinal: 1186, Address: 0x39bff)
SymEnumSourceLines (Ordinal: 1187, Address: 0x39c42)
SymEnumSourceLinesW (Ordinal: 1188, Address: 0x39c85)
SymEnumSym (Ordinal: 1189, Address: 0x39cc0)
SymEnumSymbols (Ordinal: 1190, Address: 0x39cf6)
SymEnumSymbolsEx (Ordinal: 1191, Address: 0x39d32)
SymEnumSymbolsExW (Ordinal: 1192, Address: 0x39d71)
SymEnumSymbolsForAddr (Ordinal: 1193, Address: 0x39db5)
SymEnumSymbolsForAddrW (Ordinal: 1194, Address: 0x39dfe)
SymEnumSymbolsW (Ordinal: 1195, Address: 0x39e41)
SymEnumTypes (Ordinal: 1196, Address: 0x39e7a)
SymEnumTypesByName (Ordinal: 1197, Address: 0x39eb6)
SymEnumTypesByNameW (Ordinal: 1198, Address: 0x39ef9)
SymEnumTypesW (Ordinal: 1199, Address: 0x39f37)
SymEnumerateModules (Ordinal: 1200, Address: 0x39f75)
SymEnumerateModules64 (Ordinal: 1201, Address: 0x39fbb)
SymEnumerateModulesW64 (Ordinal: 1202, Address: 0x3a004)
SymEnumerateSymbols (Ordinal: 1203, Address: 0x3a04b)
SymEnumerateSymbols64 (Ordinal: 1204, Address: 0x3a091)
SymEnumerateSymbolsW (Ordinal: 1205, Address: 0x3a0d8)
SymEnumerateSymbolsW64 (Ordinal: 1206, Address: 0x3a120)
SymFindDebugInfoFile (Ordinal: 1207, Address: 0x3a168)
SymFindDebugInfoFileW (Ordinal: 1208, Address: 0x3a1af)
SymFindExecutableImage (Ordinal: 1209, Address: 0x3a1f8)
SymFindExecutableImageW (Ordinal: 1210, Address: 0x3a243)
SymFindFileInPath (Ordinal: 1211, Address: 0x3a289)
SymFindFileInPathW (Ordinal: 1212, Address: 0x3a2ca)
SymFromAddr (Ordinal: 1213, Address: 0x3a343)
SymFromAddrW (Ordinal: 1214, Address: 0x3a378)
SymFromIndex (Ordinal: 1215, Address: 0x3a3ae)
SymFromIndexW (Ordinal: 1216, Address: 0x3a3e5)
SymFromInlineContext (Ordinal: 1217, Address: 0x3a424)
SymFromInlineContextW (Ordinal: 1218, Address: 0x3a46b)
SymFromName (Ordinal: 1219, Address: 0x3a4a9)
SymFromNameW (Ordinal: 1220, Address: 0x3a4de)
SymFromToken (Ordinal: 1221, Address: 0x3a514)
SymFromTokenW (Ordinal: 1222, Address: 0x3a54b)
SymFunctionTableAccess (Ordinal: 1223, Address: 0x3a58c)
SymFunctionTableAccess64 (Ordinal: 1224, Address: 0x3a5d8)
SymFunctionTableAccess64AccessRoutines (Ordinal: 1225, Address: 0x3a634)
SymGetExtendedOption (Ordinal: 1226, Address: 0x3a68c)
SymGetSymbolFile (Ordinal: 1227, Address: 0x52e0)
SymGetHomeDirectory (Ordinal: 1228, Address: 0x3a6d1)
SymGetHomeDirectoryW (Ordinal: 1229, Address: 0x3a716)
SymGetLineFromAddr (Ordinal: 1230, Address: 0x3a75a)
SymGetLineFromAddr64 (Ordinal: 1231, Address: 0x3a79e)
SymGetLineFromAddrW64 (Ordinal: 1232, Address: 0x3a82b)
SymGetLineFromInlineContext (Ordinal: 1233, Address: 0x3a879)
SymGetLineFromInlineContextW (Ordinal: 1234, Address: 0x3a8ce)
SymGetLineFromName (Ordinal: 1235, Address: 0x3a91a)
SymGetLineFromName64 (Ordinal: 1236, Address: 0x3a95e)
SymGetLineFromNameW64 (Ordinal: 1237, Address: 0x3a9eb)
SymGetLineNext (Ordinal: 1238, Address: 0x3aa2c)
SymGetLineNext64 (Ordinal: 1239, Address: 0x3aa68)
SymGetLineNextW64 (Ordinal: 1240, Address: 0x3aae5)
SymGetLinePrev (Ordinal: 1241, Address: 0x3ab22)
SymGetLinePrev64 (Ordinal: 1242, Address: 0x3ab5e)
SymGetLinePrevW64 (Ordinal: 1243, Address: 0x3abdb)
SymGetTypeInfo (Ordinal: 1244, Address: 0x5350)
SymGetModuleBase64 (Ordinal: 1245, Address: 0x3ac1c)
SymGetModuleInfo (Ordinal: 1246, Address: 0x3ac5c)
SymGetModuleInfo64 (Ordinal: 1247, Address: 0x3ac9c)
SymGetModuleInfoW (Ordinal: 1248, Address: 0x3acdd)
SymGetModuleInfoW64 (Ordinal: 1249, Address: 0x3ad1f)
SymGetOmaps (Ordinal: 1250, Address: 0x3ad9f)
SymGetOptions (Ordinal: 1251, Address: 0x3add5)
SymGetScope (Ordinal: 1252, Address: 0x3ae0b)
SymGetScopeW (Ordinal: 1253, Address: 0x3ae40)
SymMatchFileName (Ordinal: 1254, Address: 0x53c0)
SymMatchString (Ordinal: 1255, Address: 0x5430)
SymGetSourceFile (Ordinal: 1256, Address: 0x3ae7a)
SymGetSourceFileChecksum (Ordinal: 1257, Address: 0x3aec0)
SymGetSourceFileChecksumW (Ordinal: 1258, Address: 0x3af0f)
SymGetSourceFileFromToken (Ordinal: 1259, Address: 0x3af5f)
SymGetSourceFileFromTokenW (Ordinal: 1260, Address: 0x3afb0)
SymGetSourceFileToken (Ordinal: 1261, Address: 0x3affd)
SymGetSourceFileTokenW (Ordinal: 1262, Address: 0x3b046)
SymGetSourceFileW (Ordinal: 1263, Address: 0x3b08b)
SymMatchStringA (Ordinal: 1264, Address: 0x5490)
SymGetSourceVarFromTokenW (Ordinal: 1265, Address: 0x3b0d3)
SymMatchStringW (Ordinal: 1266, Address: 0x54f0)
SymGetSymFromAddr64 (Ordinal: 1267, Address: 0x3b11d)
SymGetSymFromName (Ordinal: 1268, Address: 0x3b15f)
SymGetSymFromName64 (Ordinal: 1269, Address: 0x3b1a1)
SymGetSymNext (Ordinal: 1270, Address: 0x3b1df)
SymGetSymNext64 (Ordinal: 1271, Address: 0x3b219)
SymGetSymPrev (Ordinal: 1272, Address: 0x3b253)
SymGetSymPrev64 (Ordinal: 1273, Address: 0x3b28d)
SymQueryInlineTrace (Ordinal: 1274, Address: 0x5550)
SymGetSymbolFileW (Ordinal: 1275, Address: 0x3b2cb)
SymGetTypeFromName (Ordinal: 1276, Address: 0x3b30c)
SymGetTypeFromNameW (Ordinal: 1277, Address: 0x3b34f)
SymRefreshModuleList (Ordinal: 1278, Address: 0x55c0)
SymGetTypeInfoEx (Ordinal: 1279, Address: 0x3b390)
SymGetUnwindInfo (Ordinal: 1280, Address: 0x3b3ce)
SymInitialize (Ordinal: 1281, Address: 0x3b409)
SymInitializeW (Ordinal: 1282, Address: 0x3b442)
SymLoadModule (Ordinal: 1283, Address: 0x3b47b)
SymLoadModule64 (Ordinal: 1284, Address: 0x3b4b5)
SymLoadModuleEx (Ordinal: 1285, Address: 0x3b4f1)
SymLoadModuleExW (Ordinal: 1286, Address: 0x3b52e)
SymSetDiaSession (Ordinal: 1287, Address: 0x5600)
SymMatchFileNameW (Ordinal: 1288, Address: 0x3b56d)
SymSetOptions (Ordinal: 1289, Address: 0x5660)
SymUnDName (Ordinal: 1290, Address: 0x56a0)
UnDecorateSymbolNameW (Ordinal: 1291, Address: 0x5700)
SymNext (Ordinal: 1292, Address: 0x3b5a3)
SymNextW (Ordinal: 1293, Address: 0x3b5d0)
SymPrev (Ordinal: 1294, Address: 0x3b5fd)
SymPrevW (Ordinal: 1295, Address: 0x3b62a)
SymRegisterCallback (Ordinal: 1298, Address: 0x3b663)
SymRegisterCallback64 (Ordinal: 1299, Address: 0x3b6a9)
SymRegisterCallbackW64 (Ordinal: 1300, Address: 0x3b6f2)
SymRegisterFunctionEntryCallback (Ordinal: 1301, Address: 0x3b746)
SymRegisterFunctionEntryCallback64 (Ordinal: 1302, Address: 0x3b7a6)
SymSearch (Ordinal: 1303, Address: 0x3b7ef)
SymSearchW (Ordinal: 1304, Address: 0x3b820)
SymSetContext (Ordinal: 1305, Address: 0x3b855)
SymSetExtendedOption (Ordinal: 1306, Address: 0x3b894)
SymSetHomeDirectory (Ordinal: 1307, Address: 0x3b8d9)
SymSetHomeDirectoryW (Ordinal: 1308, Address: 0x3b91e)
SymSetParentWindow (Ordinal: 1310, Address: 0x3b962)
SymSetScopeFromAddr (Ordinal: 1311, Address: 0x3b9a5)
SymSetScopeFromIndex (Ordinal: 1312, Address: 0x3b9ea)
SymSetScopeFromInlineContext (Ordinal: 1313, Address: 0x3ba38)
SymSetSearchPath (Ordinal: 1314, Address: 0x3ba82)
SymSetSearchPathW (Ordinal: 1315, Address: 0x3bac1)
SymSrvDeltaName (Ordinal: 1316, Address: 0x3baff)
SymSrvDeltaNameW (Ordinal: 1317, Address: 0x3bb3c)
SymSrvGetFileIndexInfo (Ordinal: 1318, Address: 0x3bb80)
SymSrvGetFileIndexInfoW (Ordinal: 1319, Address: 0x3bbcb)
SymSrvGetFileIndexString (Ordinal: 1320, Address: 0x3bc18)
SymSrvGetFileIndexStringW (Ordinal: 1321, Address: 0x3bc67)
SymSrvGetFileIndexes (Ordinal: 1322, Address: 0x3bcb2)
SymSrvGetFileIndexesW (Ordinal: 1323, Address: 0x3bcf9)
SymSrvGetSupplement (Ordinal: 1324, Address: 0x3bd3f)
SymSrvGetSupplementW (Ordinal: 1325, Address: 0x3bd84)
SymSrvIsStore (Ordinal: 1326, Address: 0x3bdc3)
SymSrvIsStoreW (Ordinal: 1327, Address: 0x3bdfc)
SymSrvStoreFile (Ordinal: 1328, Address: 0x3be37)
SymSrvStoreFileW (Ordinal: 1329, Address: 0x3be74)
SymSrvStoreSupplement (Ordinal: 1330, Address: 0x3beb7)
SymSrvStoreSupplementW (Ordinal: 1331, Address: 0x3bf00)
SymUnDName64 (Ordinal: 1333, Address: 0x3bf40)
SymUnloadModule (Ordinal: 1334, Address: 0x3bf79)
SymUnloadModule64 (Ordinal: 1335, Address: 0x3bfb7)
UnDecorateSymbolName (Ordinal: 1336, Address: 0x3bffa)
WinDbgExtensionDllInit (Ordinal: 1338, Address: 0x3c042)
block (Ordinal: 1339, Address: 0x3c0b5)
chksym (Ordinal: 1340, Address: 0x3c0de)
dbghelp (Ordinal: 1341, Address: 0x3c109)
dh (Ordinal: 1342, Address: 0x3c130)
fptr (Ordinal: 1343, Address: 0x3c154)
homedir (Ordinal: 1344, Address: 0x3c17d)
inlinedbg (Ordinal: 1345, Address: 0x3c1ab)
itoldyouso (Ordinal: 1346, Address: 0x3c1dc)
lmi (Ordinal: 1347, Address: 0x3c207)
lminfo (Ordinal: 1348, Address: 0x3c22e)
omap (Ordinal: 1349, Address: 0x3c256)
optdbgdump (Ordinal: 1350, Address: 0x3c282)
optdbgdumpaddr (Ordinal: 1351, Address: 0x3c2b8)
srcfiles (Ordinal: 1352, Address: 0x3c2ec)
stack_force_ebp (Ordinal: 1353, Address: 0x3c321)
stackdbg (Ordinal: 1354, Address: 0x3c356)
sym (Ordinal: 1355, Address: 0x3c37f)
symsrv (Ordinal: 1356, Address: 0x3c3a6)
vc7fpo (Ordinal: 1357, Address: 0x3c3d0)

Imported DLLs & Functions

KERNEL32.dll

CloseHandle (Address: 0x180027058)
CreateFileW (Address: 0x1800270a8)
CreateThread (Address: 0x180027068)
CreateToolhelp32Snapshot (Address: 0x180027020)
DecodePointer (Address: 0x180027100)
DeleteCriticalSection (Address: 0x1800270f0)
DisableThreadLibraryCalls (Address: 0x180027048)
EncodePointer (Address: 0x1800270f8)
EnterCriticalSection (Address: 0x1800270d8)
EnumSystemLocalesW (Address: 0x180027298)
ExitProcess (Address: 0x1800271f0)
FindClose (Address: 0x1800272b8)
FindFirstFileExW (Address: 0x1800272c0)
FindNextFileW (Address: 0x1800272c8)
FlsAlloc (Address: 0x180027250)
FlsFree (Address: 0x180027268)
FlsGetValue (Address: 0x180027258)
FlsSetValue (Address: 0x180027260)
FlushFileBuffers (Address: 0x180027228)
FreeEnvironmentStringsW (Address: 0x180027300)
FreeLibrary (Address: 0x1800271d8)
GetACP (Address: 0x1800272d8)
GetCommandLineA (Address: 0x1800272e8)
GetCommandLineW (Address: 0x1800272f0)
GetConsoleMode (Address: 0x180027240)
GetConsoleOutputCP (Address: 0x180027238)
GetCPInfo (Address: 0x180027130)
GetCurrentProcess (Address: 0x180027008)
GetCurrentProcessId (Address: 0x180027178)
GetCurrentThreadId (Address: 0x1800270c0)
GetEnvironmentStringsW (Address: 0x1800272f8)
GetFileSizeEx (Address: 0x180027200)
GetFileType (Address: 0x180027218)
GetLastError (Address: 0x180027038)
GetLocaleInfoW (Address: 0x180027280)
GetModuleFileNameW (Address: 0x1800271f8)
GetModuleHandleExW (Address: 0x1800271e8)
GetModuleHandleW (Address: 0x180027120)
GetOEMCP (Address: 0x1800272e0)
GetProcAddress (Address: 0x180027078)
GetProcessHeap (Address: 0x1800270b8)
GetStartupInfoW (Address: 0x180027170)
GetStdHandle (Address: 0x180027210)
GetStringTypeW (Address: 0x180027128)
GetSystemTimeAsFileTime (Address: 0x180027118)
GetTickCount64 (Address: 0x180027030)
GetUserDefaultLCID (Address: 0x180027290)
HeapAlloc (Address: 0x180027220)
HeapFree (Address: 0x180027248)
HeapReAlloc (Address: 0x1800272b0)
HeapSize (Address: 0x1800270a0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800271b0)
InitializeCriticalSectionEx (Address: 0x1800270e8)
InitializeSListHead (Address: 0x180027180)
InterlockedFlushSList (Address: 0x1800271a0)
IsDebuggerPresent (Address: 0x180027168)
IsProcessorFeaturePresent (Address: 0x180027160)
IsValidCodePage (Address: 0x1800272d0)
IsValidLocale (Address: 0x180027288)
LCMapStringEx (Address: 0x180027110)
LCMapStringW (Address: 0x180027278)
LeaveCriticalSection (Address: 0x1800270e0)
LoadLibraryExW (Address: 0x1800271e0)
LoadLibraryW (Address: 0x180027060)
Module32FirstW (Address: 0x180027070)
Module32NextW (Address: 0x180027088)
MultiByteToWideChar (Address: 0x180027108)
OpenProcess (Address: 0x180027018)
Process32FirstW (Address: 0x180027050)
Process32NextW (Address: 0x180027040)
QueryPerformanceCounter (Address: 0x1800270d0)
RaiseException (Address: 0x180027198)
ReadConsoleW (Address: 0x1800272a8)
ReadFile (Address: 0x1800272a0)
ReadProcessMemory (Address: 0x180027080)
RtlCaptureContext (Address: 0x180027138)
RtlLookupFunctionEntry (Address: 0x180027140)
RtlPcToFileHeader (Address: 0x180027190)
RtlUnwind (Address: 0x180027308)
RtlUnwindEx (Address: 0x180027188)
RtlVirtualUnwind (Address: 0x180027148)
SetEndOfFile (Address: 0x180027090)
SetFilePointerEx (Address: 0x180027208)
SetLastError (Address: 0x1800271a8)
SetStdHandle (Address: 0x1800270b0)
SetUnhandledExceptionFilter (Address: 0x180027158)
Sleep (Address: 0x180027028)
TerminateProcess (Address: 0x180027010)
TlsAlloc (Address: 0x1800271b8)
TlsFree (Address: 0x1800271d0)
TlsGetValue (Address: 0x1800271c0)
TlsSetValue (Address: 0x1800271c8)
UnhandledExceptionFilter (Address: 0x180027150)
VirtualProtect (Address: 0x180027270)
WideCharToMultiByte (Address: 0x1800270c8)
WriteConsoleW (Address: 0x180027098)
WriteFile (Address: 0x180027230)
WriteProcessMemory (Address: 0x180027000)

USER32.dll

GetAsyncKeyState (Address: 0x180027318)