perfproc.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
CloseSysProcessObject
#1 · 0x5420
CollectSysProcessObjectData
#2 · 0x2230
OpenSysProcessObject
#3 · 0x56f0
No function matches your filter.
Imported DLLs & functions 57
GetLastError
0x1000900c
SetLastError
0x10009008
SetUnhandledExceptionFilter
0x10009000
UnhandledExceptionFilter
0x10009004
CloseHandle
0x10009014
GetProcessHeap
0x10009020
HeapAlloc
0x10009024
HeapFree
0x1000901c
QueryInformationJobObject
0x1000902c
DisableThreadLibraryCalls
0x10009034
GetCurrentProcess
0x1000903c
GetCurrentProcessId
0x1000904c
GetCurrentThreadId
0x10009040
OpenProcessToken
0x10009048
TerminateProcess
0x10009044
OpenProcess
0x10009054
QueryPerformanceCounter
0x1000905c
CompareStringOrdinal
0x10009064
Sleep
0x1000906c
GetSystemInfo
0x10009074
GetSystemTimeAsFileTime
0x10009078
GetTickCount
0x1000907c
EventRegister
0x1000908c
EventUnregister
0x10009088
EventWriteTransfer
0x10009084
AdjustTokenPrivileges
0x10009094
msvcrt.dll
10
_amsg_exit
0x100090a4
_except_handler4_common
0x100090ac
_initterm
0x1000909c
_XcptFilter
0x100090b8
free
0x100090a8
malloc
0x100090a0
memcpy
0x100090b4
memmove
0x100090bc
memset
0x100090c0
wcsncmp
0x100090b0
ntdll.dll
21
NtClose
0x1000910c
NtGetContextThread
0x10009110
NtOpenDirectoryObject
0x100090d8
NtOpenJobObject
0x100090d4
NtOpenKey
0x100090fc
NtOpenProcess
0x100090e4
NtOpenThread
0x10009114
NtQueryDirectoryObject
0x100090d0
NtQueryInformationProcess
0x100090e8
NtQueryObject
0x100090cc
NtQuerySystemInformation
0x10009104
NtQueryValueKey
0x100090f0
NtQueryVirtualMemory
0x10009118
NtReadVirtualMemory
0x100090dc
RtlAppendUnicodeToString
0x10009100
RtlCopyUnicodeString
0x100090e0
RtlInitUnicodeString
0x100090f8
RtlInt64ToUnicodeString
0x100090c8
RtlIntegerToUnicodeString
0x10009108
RtlNtStatusToDosError
0x100090f4
RtlQueryHeapInformation
0x100090ec
No function matches your filter.