Heinich Executor UI.exe

Description:

Authors:

Version: 1.0.0.0

Architecture: 64-bit

Operating System: Windows

SHA256: a6ae20b1f786e9e696ba94ea1eb1ffe5

File Size: 161.5 KB

Uploaded At: April 20, 2026, 8:30 p.m.

Views: 46

Exported Functions

No exported functions.

Imported DLLs & Functions

ADVAPI32.dll
  • DeregisterEventSource (Address: 0x14001a028)
  • RegCloseKey (Address: 0x14001a000)
  • RegGetValueW (Address: 0x14001a020)
  • RegisterEventSourceW (Address: 0x14001a010)
  • RegOpenKeyExW (Address: 0x14001a018)
  • ReportEventW (Address: 0x14001a008)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x14001a230)
  • wcstoul (Address: 0x14001a238)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x14001a260)
  • _set_new_mode (Address: 0x14001a248)
  • calloc (Address: 0x14001a250)
  • free (Address: 0x14001a268)
  • malloc (Address: 0x14001a258)
api-ms-win-crt-locale-l1-1-0.dll
  • ___lc_codepage_func (Address: 0x14001a288)
  • ___lc_locale_name_func (Address: 0x14001a290)
  • ___mb_cur_max_func (Address: 0x14001a280)
  • __pctype_func (Address: 0x14001a298)
  • _configthreadlocale (Address: 0x14001a2a0)
  • _create_locale (Address: 0x14001a278)
  • _free_locale (Address: 0x14001a2b8)
  • _lock_locales (Address: 0x14001a2b0)
  • _unlock_locales (Address: 0x14001a2c0)
  • setlocale (Address: 0x14001a2a8)
api-ms-win-crt-math-l1-1-0.dll
  • __setusermatherr (Address: 0x14001a2d0)
api-ms-win-crt-runtime-l1-1-0.dll
  • __p___argc (Address: 0x14001a300)
  • __p___wargv (Address: 0x14001a2f8)
  • _c_exit (Address: 0x14001a2f0)
  • _cexit (Address: 0x14001a358)
  • _configure_wide_argv (Address: 0x14001a340)
  • _crt_atexit (Address: 0x14001a360)
  • _errno (Address: 0x14001a320)
  • _exit (Address: 0x14001a308)
  • _get_initial_wide_environment (Address: 0x14001a330)
  • _initialize_onexit_table (Address: 0x14001a370)
  • _initialize_wide_environment (Address: 0x14001a338)
  • _initterm (Address: 0x14001a328)
  • _initterm_e (Address: 0x14001a318)
  • _invoke_watson (Address: 0x14001a380)
  • _register_onexit_function (Address: 0x14001a368)
  • _register_thread_local_exe_atexit_callback (Address: 0x14001a2e8)
  • _seh_filter_exe (Address: 0x14001a350)
  • _set_app_type (Address: 0x14001a348)
  • abort (Address: 0x14001a378)
  • exit (Address: 0x14001a310)
  • terminate (Address: 0x14001a2e0)
api-ms-win-crt-stdio-l1-1-0.dll
  • __acrt_iob_func (Address: 0x14001a3a8)
  • __p__commode (Address: 0x14001a398)
  • __stdio_common_vfwprintf (Address: 0x14001a390)
  • __stdio_common_vsnwprintf_s (Address: 0x14001a3d8)
  • __stdio_common_vswprintf (Address: 0x14001a3b0)
  • _set_fmode (Address: 0x14001a3b8)
  • _wfsopen (Address: 0x14001a3c0)
  • fflush (Address: 0x14001a3c8)
  • fputwc (Address: 0x14001a3a0)
  • setvbuf (Address: 0x14001a3d0)
api-ms-win-crt-string-l1-1-0.dll
  • _wcsdup (Address: 0x14001a410)
  • strcmp (Address: 0x14001a3f0)
  • strcpy_s (Address: 0x14001a408)
  • strlen (Address: 0x14001a3e8)
  • toupper (Address: 0x14001a400)
  • wcsncmp (Address: 0x14001a3f8)
  • wcsnlen (Address: 0x14001a418)
api-ms-win-crt-time-l1-1-0.dll
  • _gmtime64_s (Address: 0x14001a430)
  • _time64 (Address: 0x14001a428)
  • wcsftime (Address: 0x14001a438)
KERNEL32.dll
  • ActivateActCtx (Address: 0x14001a048)
  • CreateActCtxW (Address: 0x14001a040)
  • DecodePointer (Address: 0x14001a1e8)
  • DeleteCriticalSection (Address: 0x14001a110)
  • EncodePointer (Address: 0x14001a1e0)
  • EnterCriticalSection (Address: 0x14001a090)
  • FindClose (Address: 0x14001a0d8)
  • FindFirstFileExW (Address: 0x14001a088)
  • FindNextFileW (Address: 0x14001a0a0)
  • FindResourceW (Address: 0x14001a058)
  • FreeLibrary (Address: 0x14001a078)
  • GetConsoleMode (Address: 0x14001a0f0)
  • GetCurrentProcess (Address: 0x14001a0a8)
  • GetCurrentProcessId (Address: 0x14001a130)
  • GetCurrentThreadId (Address: 0x14001a1d0)
  • GetEnvironmentVariableW (Address: 0x14001a0d0)
  • GetFileAttributesExW (Address: 0x14001a0f8)
  • GetFileAttributesW (Address: 0x14001a0e0)
  • GetFullPathNameW (Address: 0x14001a098)
  • GetLastError (Address: 0x14001a050)
  • GetModuleFileNameW (Address: 0x14001a0c0)
  • GetModuleHandleExW (Address: 0x14001a0b8)
  • GetModuleHandleW (Address: 0x14001a070)
  • GetProcAddress (Address: 0x14001a068)
  • GetStdHandle (Address: 0x14001a0b0)
  • GetStringTypeW (Address: 0x14001a1c0)
  • GetSystemTimeAsFileTime (Address: 0x14001a200)
  • GetWindowsDirectoryW (Address: 0x14001a060)
  • InitializeCriticalSectionAndSpinCount (Address: 0x14001a150)
  • InitializeCriticalSectionEx (Address: 0x14001a1d8)
  • InitializeSListHead (Address: 0x14001a178)
  • IsDebuggerPresent (Address: 0x14001a180)
  • IsProcessorFeaturePresent (Address: 0x14001a188)
  • IsWow64Process (Address: 0x14001a120)
  • LCMapStringEx (Address: 0x14001a1f0)
  • LeaveCriticalSection (Address: 0x14001a0c8)
  • LoadLibraryA (Address: 0x14001a100)
  • LoadLibraryExW (Address: 0x14001a080)
  • MultiByteToWideChar (Address: 0x14001a0e8)
  • OutputDebugStringW (Address: 0x14001a128)
  • QueryPerformanceCounter (Address: 0x14001a1f8)
  • RaiseException (Address: 0x14001a160)
  • RtlCaptureContext (Address: 0x14001a1b8)
  • RtlLookupFunctionEntry (Address: 0x14001a1b0)
  • RtlPcToFileHeader (Address: 0x14001a168)
  • RtlUnwindEx (Address: 0x14001a170)
  • RtlVirtualUnwind (Address: 0x14001a1a8)
  • SetLastError (Address: 0x14001a158)
  • SetUnhandledExceptionFilter (Address: 0x14001a198)
  • SwitchToThread (Address: 0x14001a1c8)
  • TerminateProcess (Address: 0x14001a190)
  • TlsAlloc (Address: 0x14001a148)
  • TlsFree (Address: 0x14001a038)
  • TlsGetValue (Address: 0x14001a140)
  • TlsSetValue (Address: 0x14001a138)
  • UnhandledExceptionFilter (Address: 0x14001a1a0)
  • WideCharToMultiByte (Address: 0x14001a118)
  • WriteConsoleW (Address: 0x14001a108)
SHELL32.dll
  • ShellExecuteW (Address: 0x14001a210)
USER32.dll
  • MessageBoxW (Address: 0x14001a220)