ifs_hook.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
__layeredfs_version
#1 · 0x125ee0
init
#2 · 0x42c0
No function matches your filter.
Imported DLLs & functions 165
KERNEL32.dll
75
AddVectoredExceptionHandler
0x693822d8
CloseHandle
0x693822dc
CreateDirectoryA
0x693822e0
CreateEventA
0x693822e4
CreateFileW
0x693822e8
CreateSemaphoreA
0x693822ec
CreateToolhelp32Snapshot
0x693822f0
DeleteCriticalSection
0x693822f4
DuplicateHandle
0x693822f8
EnterCriticalSection
0x693822fc
FindClose
0x69382300
FindFirstFileA
0x69382304
FindNextFileA
0x69382308
FlushInstructionCache
0x6938230c
FreeLibrary
0x69382310
GetCurrentProcess
0x69382314
GetCurrentProcessId
0x69382318
GetCurrentThread
0x6938231c
GetCurrentThreadId
0x69382320
GetFileAttributesA
0x69382324
GetFileTime
0x69382328
GetHandleInformation
0x6938232c
GetLastError
0x69382330
GetModuleFileNameA
0x69382334
GetModuleHandleA
0x69382338
GetModuleHandleW
0x6938233c
GetProcAddress
0x69382340
GetProcessAffinityMask
0x69382344
GetSystemTime
0x69382348
GetSystemTimeAsFileTime
0x6938234c
GetThreadContext
0x69382350
GetThreadPriority
0x69382354
GetTickCount
0x69382358
HeapAlloc
0x6938235c
HeapCreate
0x69382360
HeapDestroy
0x69382364
HeapFree
0x69382368
HeapReAlloc
0x6938236c
InitializeCriticalSection
0x69382370
IsDBCSLeadByteEx
0x69382374
IsDebuggerPresent
0x69382378
LeaveCriticalSection
0x6938237c
LoadLibraryA
0x69382380
LoadLibraryW
0x69382384
MultiByteToWideChar
0x69382388
OpenProcess
0x6938238c
OpenThread
0x69382390
OutputDebugStringA
0x69382394
QueryPerformanceCounter
0x69382398
QueryPerformanceFrequency
0x6938239c
RaiseException
0x693823a0
ReleaseSemaphore
0x693823a4
RemoveVectoredExceptionHandler
0x693823a8
ResetEvent
0x693823ac
ResumeThread
0x693823b0
SetEvent
0x693823b4
SetLastError
0x693823b8
SetProcessAffinityMask
0x693823bc
SetThreadContext
0x693823c0
SetThreadPriority
0x693823c4
Sleep
0x693823c8
SuspendThread
0x693823cc
Thread32First
0x693823d0
Thread32Next
0x693823d4
TlsAlloc
0x693823d8
TlsGetValue
0x693823dc
TlsSetValue
0x693823e0
TryEnterCriticalSection
0x693823e4
VirtualAlloc
0x693823e8
VirtualFree
0x693823ec
VirtualProtect
0x693823f0
VirtualQuery
0x693823f4
WaitForMultipleObjects
0x693823f8
WaitForSingleObject
0x693823fc
WideCharToMultiByte
0x69382400
msvcrt.dll
90
__argc
0x69382408
__mb_cur_max
0x6938240c
__p___argv
0x69382410
__setusermatherr
0x69382414
_aligned_free
0x69382418
_aligned_malloc
0x6938241c
_amsg_exit
0x69382420
_assert
0x69382424
_beginthreadex
0x69382428
_close
0x6938256c
_endthreadex
0x6938242c
_errno
0x69382430
_fdopen
0x69382568
_filelengthi64
0x69382434
_fileno
0x69382438
_fileno
0x69382564
_fstat64
0x6938243c
_initterm
0x69382440
_iob
0x69382444
_lock
0x69382448
_lseeki64
0x6938244c
_read
0x69382560
_setjmp3
0x69382450
_strdup
0x6938255c
_stricmp
0x6938253c
_strnicmp
0x69382540
_ultoa
0x69382454
_unlock
0x69382458
_wfopen
0x6938245c
_write
0x69382558
abort
0x69382460
atoi
0x69382464
calloc
0x69382468
exit
0x6938246c
fclose
0x69382470
fflush
0x69382474
fgetpos
0x69382478
fopen
0x6938247c
fprintf
0x69382480
fputc
0x69382484
fputs
0x69382488
fread
0x6938248c
free
0x69382490
fseek
0x69382494
fsetpos
0x69382498
ftell
0x6938249c
fwrite
0x693824a0
getc
0x693824a4
getwc
0x693824a8
islower
0x693824ac
isspace
0x693824b0
isupper
0x693824b4
iswctype
0x693824b8
isxdigit
0x693824bc
localeconv
0x693824c0
longjmp
0x69382554
malloc
0x693824c4
memchr
0x693824c8
memcmp
0x693824cc
memcpy
0x693824d0
memmove
0x693824d4
memset
0x693824d8
printf
0x693824dc
putc
0x693824e0
putwc
0x693824e4
realloc
0x693824e8
setlocale
0x693824ec
setvbuf
0x693824f0
strchr
0x693824f4
strcmp
0x693824f8
strcoll
0x693824fc
strerror
0x69382500
strftime
0x69382504
strlen
0x69382508
strncmp
0x6938250c
strstr
0x69382510
strtol
0x69382514
strtoul
0x69382518
strxfrm
0x6938251c
tolower
0x69382520
toupper
0x69382524
towlower
0x69382528
towupper
0x6938252c
ungetc
0x69382530
ungetwc
0x69382534
vfprintf
0x69382538
wcscoll
0x69382544
wcsftime
0x69382548
wcslen
0x6938254c
wcsxfrm
0x69382550
No function matches your filter.