ExLoader_Installer.exe

Description: [File deleted after analysis due to size limit > 20MB]

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 59d78963e8f56b25b95c18d5c672789d

File Size: 22.2 MB

Uploaded At: April 7, 2026, 9:31 p.m.

Views: 8

Exported Functions

No exported functions.

Imported DLLs & Functions

ADVAPI32.dll
  • RegCloseKey (Address: 0x140010000)
  • RegCreateKeyExA (Address: 0x140010018)
  • RegOpenKeyExA (Address: 0x140010008)
  • RegQueryValueExA (Address: 0x140010010)
  • RegSetValueExA (Address: 0x140010020)
COMCTL32.dll
  • (Address: 0x140010030)
GDI32.dll
  • CreateCompatibleBitmap (Address: 0x140010058)
  • CreateCompatibleDC (Address: 0x140010048)
  • DeleteDC (Address: 0x140010078)
  • DeleteObject (Address: 0x140010070)
  • GetDeviceCaps (Address: 0x140010040)
  • GetObjectA (Address: 0x140010050)
  • SelectObject (Address: 0x140010060)
  • StretchBlt (Address: 0x140010068)
KERNEL32.dll
  • CloseHandle (Address: 0x140010280)
  • CompareStringA (Address: 0x140010150)
  • CreateDirectoryA (Address: 0x1400100b0)
  • CreateDirectoryW (Address: 0x1400100b8)
  • CreateFileA (Address: 0x140010268)
  • CreateFileW (Address: 0x140010258)
  • DeleteFileA (Address: 0x1400100a0)
  • DeleteFileW (Address: 0x1400100a8)
  • DosDateTimeToFileTime (Address: 0x140010180)
  • ExitProcess (Address: 0x140010158)
  • ExpandEnvironmentStringsA (Address: 0x1400101a8)
  • FileTimeToLocalFileTime (Address: 0x1400101a0)
  • FileTimeToSystemTime (Address: 0x140010198)
  • FindClose (Address: 0x1400100c0)
  • FindFirstFileA (Address: 0x1400100d0)
  • FindFirstFileW (Address: 0x1400100e0)
  • FindNextFileA (Address: 0x1400100c8)
  • FindNextFileW (Address: 0x1400100d8)
  • FindResourceA (Address: 0x140010120)
  • FreeLibrary (Address: 0x140010210)
  • GetCommandLineA (Address: 0x1400101e8)
  • GetCPInfo (Address: 0x140010208)
  • GetCurrentDirectoryA (Address: 0x140010220)
  • GetDateFormatA (Address: 0x140010188)
  • GetFileAttributesA (Address: 0x140010230)
  • GetFileAttributesW (Address: 0x140010228)
  • GetFileType (Address: 0x140010270)
  • GetFullPathNameA (Address: 0x140010090)
  • GetLastError (Address: 0x140010290)
  • GetLocaleInfoA (Address: 0x140010298)
  • GetModuleFileNameA (Address: 0x140010118)
  • GetModuleFileNameW (Address: 0x1400101d8)
  • GetModuleHandleA (Address: 0x140010128)
  • GetNumberFormatA (Address: 0x140010168)
  • GetProcAddress (Address: 0x140010178)
  • GetProcessHeap (Address: 0x140010138)
  • GetStdHandle (Address: 0x140010248)
  • GetTempPathA (Address: 0x1400101c8)
  • GetTickCount (Address: 0x1400100e8)
  • GetTimeFormatA (Address: 0x140010190)
  • GetVersionExA (Address: 0x140010100)
  • GlobalAlloc (Address: 0x140010108)
  • HeapAlloc (Address: 0x140010130)
  • HeapFree (Address: 0x140010140)
  • HeapReAlloc (Address: 0x140010148)
  • IsDBCSLeadByte (Address: 0x140010200)
  • LoadLibraryA (Address: 0x140010218)
  • LocalFileTimeToFileTime (Address: 0x1400101f0)
  • lstrcmpiA (Address: 0x140010170)
  • lstrlenA (Address: 0x140010110)
  • MoveFileA (Address: 0x140010098)
  • MoveFileExA (Address: 0x1400101d0)
  • MultiByteToWideChar (Address: 0x1400100f8)
  • ReadFile (Address: 0x140010250)
  • SetCurrentDirectoryA (Address: 0x1400101b8)
  • SetEndOfFile (Address: 0x140010288)
  • SetEnvironmentVariableA (Address: 0x1400101e0)
  • SetFileAttributesA (Address: 0x140010160)
  • SetFileAttributesW (Address: 0x140010088)
  • SetFilePointer (Address: 0x140010278)
  • SetFileTime (Address: 0x140010240)
  • SetLastError (Address: 0x140010260)
  • Sleep (Address: 0x1400101c0)
  • SystemTimeToFileTime (Address: 0x1400101f8)
  • WaitForSingleObject (Address: 0x1400101b0)
  • WideCharToMultiByte (Address: 0x1400100f0)
  • WriteFile (Address: 0x140010238)
ole32.dll
  • CLSIDFromString (Address: 0x1400104f0)
  • CoCreateInstance (Address: 0x1400104e0)
  • CreateStreamOnHGlobal (Address: 0x1400104d0)
  • OleInitialize (Address: 0x1400104d8)
  • OleUninitialize (Address: 0x1400104e8)
OLEAUT32.dll
  • VariantInit (Address: 0x1400102a8)
SHELL32.dll
  • SHBrowseForFolderA (Address: 0x1400102e0)
  • SHChangeNotify (Address: 0x1400102f0)
  • ShellExecuteExA (Address: 0x1400102b8)
  • SHFileOperationA (Address: 0x1400102c0)
  • SHGetFileInfoA (Address: 0x1400102c8)
  • SHGetMalloc (Address: 0x1400102d8)
  • SHGetPathFromIDListA (Address: 0x1400102e8)
  • SHGetSpecialFolderLocation (Address: 0x1400102d0)
USER32.dll
  • CharLowerA (Address: 0x140010318)
  • CharToOemA (Address: 0x1400103c8)
  • CharToOemBuffA (Address: 0x140010308)
  • CharUpperA (Address: 0x140010498)
  • CopyRect (Address: 0x140010448)
  • CreateWindowExA (Address: 0x1400103e0)
  • DefWindowProcA (Address: 0x140010418)
  • DestroyIcon (Address: 0x140010368)
  • DestroyWindow (Address: 0x140010438)
  • DialogBoxParamA (Address: 0x140010380)
  • DispatchMessageA (Address: 0x140010430)
  • EnableWindow (Address: 0x1400104b8)
  • EndDialog (Address: 0x140010360)
  • FindWindowExA (Address: 0x140010328)
  • GetClassNameA (Address: 0x140010330)
  • GetClientRect (Address: 0x140010440)
  • GetDC (Address: 0x140010340)
  • GetDlgItem (Address: 0x140010468)
  • GetDlgItemTextA (Address: 0x140010378)
  • GetMessageA (Address: 0x140010428)
  • GetParent (Address: 0x1400104b0)
  • GetSysColor (Address: 0x140010398)
  • GetSystemMetrics (Address: 0x140010478)
  • GetWindow (Address: 0x140010480)
  • GetWindowLongA (Address: 0x140010488)
  • GetWindowLongPtrA (Address: 0x140010410)
  • GetWindowRect (Address: 0x1400104a0)
  • GetWindowTextA (Address: 0x140010470)
  • IsWindow (Address: 0x140010450)
  • IsWindowVisible (Address: 0x140010388)
  • LoadBitmapA (Address: 0x1400104a8)
  • LoadCursorA (Address: 0x1400103f8)
  • LoadIconA (Address: 0x1400103c0)
  • LoadStringA (Address: 0x140010300)
  • MapWindowPoints (Address: 0x1400103d8)
  • MessageBoxA (Address: 0x140010458)
  • OemToCharA (Address: 0x1400103d0)
  • OemToCharBuffA (Address: 0x140010310)
  • PeekMessageA (Address: 0x140010420)
  • PostMessageA (Address: 0x1400103a0)
  • RegisterClassExA (Address: 0x140010400)
  • ReleaseDC (Address: 0x140010338)
  • SendDlgItemMessageA (Address: 0x140010370)
  • SendMessageA (Address: 0x140010348)
  • SetDlgItemTextA (Address: 0x140010358)
  • SetFocus (Address: 0x1400103b0)
  • SetMenu (Address: 0x1400103a8)
  • SetWindowLongA (Address: 0x140010490)
  • SetWindowLongPtrA (Address: 0x140010408)
  • SetWindowPos (Address: 0x1400103b8)
  • SetWindowTextA (Address: 0x1400103f0)
  • ShowWindow (Address: 0x140010460)
  • TranslateMessage (Address: 0x1400104c0)
  • UpdateWindow (Address: 0x1400103e8)
  • WaitForInputIdle (Address: 0x140010390)
  • wsprintfA (Address: 0x140010350)
  • wvsprintfA (Address: 0x140010320)