wearedevs_exploit_api.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 8395222042500439f699fe10368ac614

File Size: 6.5 MB

Uploaded At: April 12, 2026, 8:41 p.m.

Views: 237

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllMain (Ordinal: 1, Address: 0x3990)
add (Ordinal: 2, Address: 0x3c70)
execute (Ordinal: 3, Address: 0x3cd0)
initialize (Ordinal: 4, Address: 0x3db0)
isAttached (Ordinal: 5, Address: 0x4640)

Imported DLLs & Functions

advapi32.dll

CopySid (Address: 0x180476060)
GetLengthSid (Address: 0x180476050)
GetTokenInformation (Address: 0x180476058)
IsValidSid (Address: 0x180476048)
OpenProcessToken (Address: 0x180476068)
RegCloseKey (Address: 0x180476070)
RegCreateKeyExW (Address: 0x180476078)
RegOpenKeyExW (Address: 0x180476080)
RegQueryValueExW (Address: 0x180476088)

api-ms-win-core-synch-l1-2-0.dll

WaitOnAddress (Address: 0x1804760a0)
WakeByAddressAll (Address: 0x1804760a8)
WakeByAddressSingle (Address: 0x180476098)

api-ms-win-crt-heap-l1-1-0.dll

free (Address: 0x1804760b8)

api-ms-win-crt-math-l1-1-0.dll

pow (Address: 0x1804760c8)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x180476100)
_configure_narrow_argv (Address: 0x1804760e8)
_execute_onexit_table (Address: 0x1804760f8)
_initialize_narrow_environment (Address: 0x1804760e0)
_initialize_onexit_table (Address: 0x1804760d8)
_initterm (Address: 0x180476108)
_initterm_e (Address: 0x180476110)
_seh_filter_dll (Address: 0x1804760f0)

api-ms-win-crt-string-l1-1-0.dll

strlen (Address: 0x180476128)
wcslen (Address: 0x180476120)

bcryptprimitives.dll

ProcessPrng (Address: 0x180476138)

crypt32.dll

CertAddCertificateContextToStore (Address: 0x180476170)
CertCloseStore (Address: 0x180476158)
CertDuplicateCertificateChain (Address: 0x180476190)
CertDuplicateCertificateContext (Address: 0x180476168)
CertDuplicateStore (Address: 0x180476160)
CertEnumCertificatesInStore (Address: 0x180476148)
CertFreeCertificateChain (Address: 0x180476180)
CertFreeCertificateContext (Address: 0x180476178)
CertGetCertificateChain (Address: 0x180476150)
CertOpenStore (Address: 0x180476188)
CertVerifyCertificateChainPolicy (Address: 0x180476198)

kernel32.dll

CloseHandle (Address: 0x180476270)
CreateDirectoryW (Address: 0x180476388)
CreateFileW (Address: 0x180476298)
CreateIoCompletionPort (Address: 0x180476218)
CreateMutexA (Address: 0x180476400)
CreateThread (Address: 0x180476240)
DeleteFileW (Address: 0x180476368)
FindClose (Address: 0x180476308)
FindFirstFileExW (Address: 0x180476348)
FindNextFileW (Address: 0x1804761e8)
FormatMessageW (Address: 0x1804762e8)
FreeLibrary (Address: 0x180476260)
GetConsoleMode (Address: 0x180476300)
GetConsoleOutputCP (Address: 0x180476248)
GetCurrentDirectoryW (Address: 0x1804763a0)
GetCurrentProcess (Address: 0x1804763e0)
GetCurrentProcessId (Address: 0x180476338)
GetCurrentThread (Address: 0x1804763b0)
GetCurrentThreadId (Address: 0x1804762d0)
GetEnvironmentVariableW (Address: 0x180476398)
GetFileInformationByHandle (Address: 0x180476370)
GetFileInformationByHandleEx (Address: 0x180476380)
GetFinalPathNameByHandleW (Address: 0x180476360)
GetFullPathNameW (Address: 0x1804762d8)
GetLastError (Address: 0x180476330)
GetModuleFileNameW (Address: 0x180476238)
GetModuleHandleA (Address: 0x1804762c8)
GetModuleHandleW (Address: 0x1804762e0)
GetProcAddress (Address: 0x1804761a8)
GetProcessHeap (Address: 0x1804761c0)
GetProcessIoCounters (Address: 0x180476340)
GetProcessTimes (Address: 0x180476328)
GetQueuedCompletionStatusEx (Address: 0x180476228)
GetStdHandle (Address: 0x180476250)
GetSystemInfo (Address: 0x1804762a8)
GetSystemTimeAsFileTime (Address: 0x1804761c8)
GetSystemTimePreciseAsFileTime (Address: 0x180476350)
GetSystemTimes (Address: 0x180476320)
GlobalMemoryStatusEx (Address: 0x1804762b0)
HeapAlloc (Address: 0x1804761d8)
HeapFree (Address: 0x1804761f8)
HeapReAlloc (Address: 0x1804763d8)
InitializeSListHead (Address: 0x1804761b0)
IsDebuggerPresent (Address: 0x1804761b8)
IsProcessorFeaturePresent (Address: 0x180476318)
K32GetPerformanceInfo (Address: 0x180476290)
LoadLibraryA (Address: 0x1804763f8)
LoadLibraryExA (Address: 0x1804761d0)
LoadLibraryExW (Address: 0x1804761e0)
LocalFree (Address: 0x1804762b8)
lstrlenW (Address: 0x1804763d0)
MoveFileExW (Address: 0x180476390)
MultiByteToWideChar (Address: 0x180476288)
OpenProcess (Address: 0x1804763c0)
PostQueuedCompletionStatus (Address: 0x180476220)
QueryPerformanceCounter (Address: 0x180476210)
QueryPerformanceFrequency (Address: 0x1804762a0)
ReadProcessMemory (Address: 0x1804762f8)
ReleaseMutex (Address: 0x180476408)
RtlCaptureContext (Address: 0x180476200)
RtlLookupFunctionEntry (Address: 0x1804762f0)
RtlVirtualUnwind (Address: 0x1804761f0)
SetCurrentDirectoryW (Address: 0x1804762c0)
SetFileCompletionNotificationModes (Address: 0x180476208)
SetFileInformationByHandle (Address: 0x1804763c8)
SetHandleInformation (Address: 0x180476278)
SetLastError (Address: 0x1804763a8)
SetThreadErrorMode (Address: 0x180476230)
SetThreadStackGuarantee (Address: 0x1804763b8)
SetUnhandledExceptionFilter (Address: 0x180476268)
SwitchToThread (Address: 0x180476378)
UnhandledExceptionFilter (Address: 0x180476258)
VirtualQueryEx (Address: 0x180476310)
WaitForSingleObject (Address: 0x180476358)
WaitForSingleObjectEx (Address: 0x1804763f0)
WideCharToMultiByte (Address: 0x1804763e8)
WriteConsoleW (Address: 0x180476280)

ntdll.dll

NtCancelIoFileEx (Address: 0x180476420)
NtCreateFile (Address: 0x180476430)
NtDeviceIoControlFile (Address: 0x180476428)
NtQueryInformationProcess (Address: 0x180476448)
NtQuerySystemInformation (Address: 0x180476450)
NtReadFile (Address: 0x180476440)
NtWriteFile (Address: 0x180476438)
RtlGetVersion (Address: 0x180476418)
RtlNtStatusToDosError (Address: 0x180476458)

ole32.dll

CoTaskMemFree (Address: 0x180476468)

oleaut32.dll

GetErrorInfo (Address: 0x180476478)
SysFreeString (Address: 0x180476488)
SysStringLen (Address: 0x180476480)

pdh.dll

PdhAddEnglishCounterW (Address: 0x1804764b8)
PdhCloseQuery (Address: 0x1804764a0)
PdhCollectQueryData (Address: 0x1804764c0)
PdhEnumObjectsA (Address: 0x1804764b0)
PdhGetFormattedCounterValue (Address: 0x1804764a8)
PdhOpenQueryA (Address: 0x180476498)
PdhRemoveCounter (Address: 0x1804764c8)

powrprof.dll

CallNtPowerInformation (Address: 0x1804764d8)

psapi.dll

GetModuleFileNameExW (Address: 0x1804764e8)

secur32.dll

AcceptSecurityContext (Address: 0x180476500)
AcquireCredentialsHandleA (Address: 0x180476538)
ApplyControlToken (Address: 0x180476530)
DecryptMessage (Address: 0x180476518)
DeleteSecurityContext (Address: 0x180476510)
EncryptMessage (Address: 0x180476540)
FreeContextBuffer (Address: 0x180476508)
FreeCredentialsHandle (Address: 0x180476520)
InitializeSecurityContextW (Address: 0x1804764f8)
QueryContextAttributesW (Address: 0x180476528)

shell32.dll

CommandLineToArgvW (Address: 0x180476550)
SHGetKnownFolderPath (Address: 0x180476558)

user32.dll

FindWindowA (Address: 0x180476568)
IsWindowVisible (Address: 0x180476578)
MessageBoxW (Address: 0x180476570)

VCRUNTIME140.dll

__C_specific_handler (Address: 0x180476010)
__CxxFrameHandler3 (Address: 0x180476000)
__std_type_info_destroy_list (Address: 0x180476008)
_CxxThrowException (Address: 0x180476018)
memcmp (Address: 0x180476020)
memcpy (Address: 0x180476038)
memmove (Address: 0x180476028)
memset (Address: 0x180476030)

ws2_32.dll

bind (Address: 0x1804765c0)
closesocket (Address: 0x1804765b0)
connect (Address: 0x1804765e0)
freeaddrinfo (Address: 0x180476610)
getaddrinfo (Address: 0x1804765d0)
getpeername (Address: 0x180476598)
getsockname (Address: 0x180476590)
getsockopt (Address: 0x1804765a8)
ioctlsocket (Address: 0x180476588)
recv (Address: 0x1804765c8)
send (Address: 0x180476608)
setsockopt (Address: 0x1804765a0)
shutdown (Address: 0x1804765e8)
WSACleanup (Address: 0x1804765f8)
WSAGetLastError (Address: 0x1804765f0)
WSAIoctl (Address: 0x1804765b8)
WSASend (Address: 0x180476618)
WSASocketW (Address: 0x1804765d8)
WSAStartup (Address: 0x180476600)