downloader.dll

vUnknown 32-bit Unknown OS Analyzed
Download
Description
—
Authors
Unknown
File size
197.5 KB
Uploaded
2026-01-28 23:25
Views
110
SHA-256
96f7b268820511abeeb6bbfad0918cf9

Exported functions 1

GetEsd #1 · 0xefc0

Imported DLLs & functions 144

ADVAPI32.dll 24
ControlTraceW 0x1002e034
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1002e028
CryptAcquireContextW 0x1002e01c
CryptCreateHash 0x1002e014
CryptDeriveKey 0x1002e010
CryptDestroyHash 0x1002e008
CryptDestroyKey 0x1002e05c
CryptEncrypt 0x1002e018
CryptGetHashParam 0x1002e004
CryptHashData 0x1002e00c
CryptReleaseContext 0x1002e000
EnableTraceEx2 0x1002e020
EventRegister 0x1002e04c
EventSetInformation 0x1002e044
EventUnregister 0x1002e030
EventWriteTransfer 0x1002e050
QueryTraceW 0x1002e02c
RegCloseKey 0x1002e054
RegCreateKeyExW 0x1002e048
RegOpenKeyExW 0x1002e038
RegQueryValueExW 0x1002e024
RegSetKeySecurity 0x1002e040
RegSetValueExW 0x1002e03c
StartTraceW 0x1002e058
KERNEL32.dll 58
CloseHandle 0x1002e0a8
CompareStringW 0x1002e0d8
CopyFileW 0x1002e118
CreateDirectoryW 0x1002e0c8
CreateFileW 0x1002e088
CreateMutexExW 0x1002e0b4
CreateMutexW 0x1002e0f0
CreateSemaphoreExW 0x1002e06c
DebugBreak 0x1002e0c0
DeleteFileW 0x1002e104
FindClose 0x1002e0f4
FindFirstFileW 0x1002e0d4
FindNextFileW 0x1002e0dc
FormatMessageW 0x1002e094
FreeLibrary 0x1002e114
GetCurrentProcess 0x1002e0e0
GetCurrentProcessId 0x1002e144
GetCurrentThreadId 0x1002e08c
GetFileAttributesW 0x1002e0fc
GetFileSizeEx 0x1002e068
GetFullPathNameW 0x1002e140
GetLastError 0x1002e098
GetModuleFileNameA 0x1002e064
GetModuleFileNameW 0x1002e0e8
GetModuleHandleExW 0x1002e080
GetModuleHandleW 0x1002e0bc
GetProcAddress 0x1002e0b0
GetProcessHeap 0x1002e0b8
GetSystemDefaultUILanguage 0x1002e0e4
GetSystemInfo 0x1002e10c
GetSystemTimeAsFileTime 0x1002e148
GetTempPathW 0x1002e0ec
GetTickCount 0x1002e13c
GlobalFree 0x1002e108
HeapAlloc 0x1002e0ac
HeapFree 0x1002e070
InitOnceBeginInitialize 0x1002e0d0
InitOnceComplete 0x1002e100
IsDebuggerPresent 0x1002e0c4
LoadLibraryExW 0x1002e124
LocalAlloc 0x1002e0f8
LocalFree 0x1002e110
MoveFileW 0x1002e120
OpenSemaphoreW 0x1002e0a4
OutputDebugStringW 0x1002e09c
QueryPerformanceCounter 0x1002e138
ReadFile 0x1002e0cc
ReleaseMutex 0x1002e090
ReleaseSemaphore 0x1002e078
SetLastError 0x1002e074
SetUnhandledExceptionFilter 0x1002e130
Sleep 0x1002e128
TerminateProcess 0x1002e134
UnhandledExceptionFilter 0x1002e12c
WaitForSingleObject 0x1002e084
WaitForSingleObjectEx 0x1002e0a0
WideCharToMultiByte 0x1002e11c
WriteFile 0x1002e07c
msvcrt.dll 28
__dllonexit 0x1002e1bc
_amsg_exit 0x1002e1d4
_except_handler4_common 0x1002e1b4
_initterm 0x1002e1c8
_lock 0x1002e1c4
_onexit 0x1002e1b8
_purecall 0x1002e1f0
_unlock 0x1002e1c0
_vsnwprintf 0x1002e1a8
_wcsicmp 0x1002e1a0
_wcsnicmp 0x1002e19c
_wcstoui64 0x1002e1e0
_wtoi64 0x1002e1f4
_XcptFilter 0x1002e1d8
bsearch 0x1002e1a4
free 0x1002e1d0
iswspace 0x1002e198
malloc 0x1002e1cc
memcmp 0x1002e1ac
memcpy 0x1002e200
memcpy_s 0x1002e1fc
memmove 0x1002e1b0
memset 0x1002e204
sprintf_s 0x1002e1dc
strncmp 0x1002e1ec
swprintf_s 0x1002e1e8
wcscat_s 0x1002e1f8
wcschr 0x1002e1e4
ntdll.dll 18
DbgPrintEx 0x1002e20c
NtClose 0x1002e228
NtOpenFile 0x1002e218
NtQueryInformationFile 0x1002e220
NtReadFile 0x1002e230
NtSetInformationFile 0x1002e234
NtWaitForSingleObject 0x1002e21c
NtWriteFile 0x1002e240
NtYieldExecution 0x1002e210
RtlAllocateHeap 0x1002e248
RtlDosPathNameToNtPathName_U_WithStatus 0x1002e23c
RtlExpandEnvironmentStrings 0x1002e224
RtlFreeHeap 0x1002e244
RtlGetVersion 0x1002e250
RtlInitUnicodeString 0x1002e238
RtlNtStatusToDosError 0x1002e24c
RtlRaiseStatus 0x1002e214
RtlReAllocateHeap 0x1002e22c
ole32.dll 1
CoCreateGuid 0x1002e258
RPCRT4.dll 1
UuidCreate 0x1002e150
SHLWAPI.dll 2
PathFileExistsW 0x1002e15c
PathRemoveFileSpecW 0x1002e158
WINHTTP.dll 12
WinHttpCloseHandle 0x1002e164
WinHttpConnect 0x1002e174
WinHttpCrackUrl 0x1002e188
WinHttpGetIEProxyConfigForCurrentUser 0x1002e168
WinHttpGetProxyForUrl 0x1002e180
WinHttpOpen 0x1002e16c
WinHttpOpenRequest 0x1002e178
WinHttpQueryHeaders 0x1002e184
WinHttpReadData 0x1002e190
WinHttpReceiveResponse 0x1002e170
WinHttpSendRequest 0x1002e18c
WinHttpSetOption 0x1002e17c