wearedevs_exploit_api.dll

vUnknown 64-bit Unknown OS Analyzed
Description
—
Authors
Unknown
File size
6.5 MB
Uploaded
2026-04-12 20:41
Views
327
SHA-256
8395222042500439f699fe10368ac614

Exported functions 5

DllMain #1 · 0x3990
add #2 · 0x3c70
execute #3 · 0x3cd0
initialize #4 · 0x3db0
isAttached #5 · 0x4640

Imported DLLs & functions 177

advapi32.dll 9
CopySid 0x180476060
GetLengthSid 0x180476050
GetTokenInformation 0x180476058
IsValidSid 0x180476048
OpenProcessToken 0x180476068
RegCloseKey 0x180476070
RegCreateKeyExW 0x180476078
RegOpenKeyExW 0x180476080
RegQueryValueExW 0x180476088
api-ms-win-core-synch-l1-2-0.dll 3
WaitOnAddress 0x1804760a0
WakeByAddressAll 0x1804760a8
WakeByAddressSingle 0x180476098
api-ms-win-crt-heap-l1-1-0.dll 1
free 0x1804760b8
api-ms-win-crt-math-l1-1-0.dll 1
pow 0x1804760c8
api-ms-win-crt-runtime-l1-1-0.dll 8
_cexit 0x180476100
_configure_narrow_argv 0x1804760e8
_execute_onexit_table 0x1804760f8
_initialize_narrow_environment 0x1804760e0
_initialize_onexit_table 0x1804760d8
_initterm 0x180476108
_initterm_e 0x180476110
_seh_filter_dll 0x1804760f0
api-ms-win-crt-string-l1-1-0.dll 2
strlen 0x180476128
wcslen 0x180476120
bcryptprimitives.dll 1
ProcessPrng 0x180476138
crypt32.dll 11
CertAddCertificateContextToStore 0x180476170
CertCloseStore 0x180476158
CertDuplicateCertificateChain 0x180476190
CertDuplicateCertificateContext 0x180476168
CertDuplicateStore 0x180476160
CertEnumCertificatesInStore 0x180476148
CertFreeCertificateChain 0x180476180
CertFreeCertificateContext 0x180476178
CertGetCertificateChain 0x180476150
CertOpenStore 0x180476188
CertVerifyCertificateChainPolicy 0x180476198
kernel32.dll 77
CloseHandle 0x180476270
CreateDirectoryW 0x180476388
CreateFileW 0x180476298
CreateIoCompletionPort 0x180476218
CreateMutexA 0x180476400
CreateThread 0x180476240
DeleteFileW 0x180476368
FindClose 0x180476308
FindFirstFileExW 0x180476348
FindNextFileW 0x1804761e8
FormatMessageW 0x1804762e8
FreeLibrary 0x180476260
GetConsoleMode 0x180476300
GetConsoleOutputCP 0x180476248
GetCurrentDirectoryW 0x1804763a0
GetCurrentProcess 0x1804763e0
GetCurrentProcessId 0x180476338
GetCurrentThread 0x1804763b0
GetCurrentThreadId 0x1804762d0
GetEnvironmentVariableW 0x180476398
GetFileInformationByHandle 0x180476370
GetFileInformationByHandleEx 0x180476380
GetFinalPathNameByHandleW 0x180476360
GetFullPathNameW 0x1804762d8
GetLastError 0x180476330
GetModuleFileNameW 0x180476238
GetModuleHandleA 0x1804762c8
GetModuleHandleW 0x1804762e0
GetProcAddress 0x1804761a8
GetProcessHeap 0x1804761c0
GetProcessIoCounters 0x180476340
GetProcessTimes 0x180476328
GetQueuedCompletionStatusEx 0x180476228
GetStdHandle 0x180476250
GetSystemInfo 0x1804762a8
GetSystemTimeAsFileTime 0x1804761c8
GetSystemTimePreciseAsFileTime 0x180476350
GetSystemTimes 0x180476320
GlobalMemoryStatusEx 0x1804762b0
HeapAlloc 0x1804761d8
HeapFree 0x1804761f8
HeapReAlloc 0x1804763d8
InitializeSListHead 0x1804761b0
IsDebuggerPresent 0x1804761b8
IsProcessorFeaturePresent 0x180476318
K32GetPerformanceInfo 0x180476290
LoadLibraryA 0x1804763f8
LoadLibraryExA 0x1804761d0
LoadLibraryExW 0x1804761e0
LocalFree 0x1804762b8
lstrlenW 0x1804763d0
MoveFileExW 0x180476390
MultiByteToWideChar 0x180476288
OpenProcess 0x1804763c0
PostQueuedCompletionStatus 0x180476220
QueryPerformanceCounter 0x180476210
QueryPerformanceFrequency 0x1804762a0
ReadProcessMemory 0x1804762f8
ReleaseMutex 0x180476408
RtlCaptureContext 0x180476200
RtlLookupFunctionEntry 0x1804762f0
RtlVirtualUnwind 0x1804761f0
SetCurrentDirectoryW 0x1804762c0
SetFileCompletionNotificationModes 0x180476208
SetFileInformationByHandle 0x1804763c8
SetHandleInformation 0x180476278
SetLastError 0x1804763a8
SetThreadErrorMode 0x180476230
SetThreadStackGuarantee 0x1804763b8
SetUnhandledExceptionFilter 0x180476268
SwitchToThread 0x180476378
UnhandledExceptionFilter 0x180476258
VirtualQueryEx 0x180476310
WaitForSingleObject 0x180476358
WaitForSingleObjectEx 0x1804763f0
WideCharToMultiByte 0x1804763e8
WriteConsoleW 0x180476280
ntdll.dll 9
NtCancelIoFileEx 0x180476420
NtCreateFile 0x180476430
NtDeviceIoControlFile 0x180476428
NtQueryInformationProcess 0x180476448
NtQuerySystemInformation 0x180476450
NtReadFile 0x180476440
NtWriteFile 0x180476438
RtlGetVersion 0x180476418
RtlNtStatusToDosError 0x180476458
ole32.dll 1
CoTaskMemFree 0x180476468
oleaut32.dll 3
GetErrorInfo 0x180476478
SysFreeString 0x180476488
SysStringLen 0x180476480
pdh.dll 7
PdhAddEnglishCounterW 0x1804764b8
PdhCloseQuery 0x1804764a0
PdhCollectQueryData 0x1804764c0
PdhEnumObjectsA 0x1804764b0
PdhGetFormattedCounterValue 0x1804764a8
PdhOpenQueryA 0x180476498
PdhRemoveCounter 0x1804764c8
powrprof.dll 1
CallNtPowerInformation 0x1804764d8
psapi.dll 1
GetModuleFileNameExW 0x1804764e8
secur32.dll 10
AcceptSecurityContext 0x180476500
AcquireCredentialsHandleA 0x180476538
ApplyControlToken 0x180476530
DecryptMessage 0x180476518
DeleteSecurityContext 0x180476510
EncryptMessage 0x180476540
FreeContextBuffer 0x180476508
FreeCredentialsHandle 0x180476520
InitializeSecurityContextW 0x1804764f8
QueryContextAttributesW 0x180476528
shell32.dll 2
CommandLineToArgvW 0x180476550
SHGetKnownFolderPath 0x180476558
user32.dll 3
FindWindowA 0x180476568
IsWindowVisible 0x180476578
MessageBoxW 0x180476570
VCRUNTIME140.dll 8
__C_specific_handler 0x180476010
__CxxFrameHandler3 0x180476000
__std_type_info_destroy_list 0x180476008
_CxxThrowException 0x180476018
memcmp 0x180476020
memcpy 0x180476038
memmove 0x180476028
memset 0x180476030
ws2_32.dll 19
bind 0x1804765c0
closesocket 0x1804765b0
connect 0x1804765e0
freeaddrinfo 0x180476610
getaddrinfo 0x1804765d0
getpeername 0x180476598
getsockname 0x180476590
getsockopt 0x1804765a8
ioctlsocket 0x180476588
recv 0x1804765c8
send 0x180476608
setsockopt 0x1804765a0
shutdown 0x1804765e8
WSACleanup 0x1804765f8
WSAGetLastError 0x1804765f0
WSAIoctl 0x1804765b8
WSASend 0x180476618
WSASocketW 0x1804765d8
WSAStartup 0x180476600