CleanMem.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: dac23ed1af08cb7409a18dc09b0c3523

File Size: 1.0 KB

Uploaded At: March 14, 2026, 5:16 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • halo_shg_clean (Ordinal: 1, Address: 0x1000)
  • halo_shg_get_mem (Ordinal: 2, Address: 0x1030)

Imported DLLs & Functions

KERNEL32.DLL
  • CloseHandle (Address: 0x4010e0)
  • GetCurrentProcessId (Address: 0x4010d8)
  • OpenProcess (Address: 0x4010dc)
PSAPI.DLL
  • EmptyWorkingSet (Address: 0x401126)
  • GetProcessMemoryInfo (Address: 0x40112a)