Polytoria.dll

Description: [File deleted after analysis due to size limit > 20MB]

Authors:

Version: 1.0.0.0

Architecture: 64-bit

Operating System: Windows

SHA256: 0abbdae86417d267eb9fc3164237c24e

File Size: 37.5 MB

Uploaded At: April 23, 2026, 10:24 p.m.

Views: 39

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DotNetRuntimeDebugHeader (Ordinal: 1, Address: 0x235eec0)
  • godotsharp_game_main_init (Ordinal: 2, Address: 0x65b680)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x1812af000)
  • DeregisterEventSource (Address: 0x1812af008)
  • LookupPrivilegeValueW (Address: 0x1812af010)
  • OpenProcessToken (Address: 0x1812af018)
  • RegCloseKey (Address: 0x1812af020)
  • RegEnumKeyExW (Address: 0x1812af028)
  • RegisterEventSourceW (Address: 0x1812af040)
  • RegOpenKeyExW (Address: 0x1812af030)
  • RegQueryValueExW (Address: 0x1812af038)
  • ReportEventW (Address: 0x1812af048)
api-ms-win-crt-convert-l1-1-0.dll
  • strtoull (Address: 0x1812af6a0)
api-ms-win-crt-heap-l1-1-0.dll
  • _aligned_free (Address: 0x1812af6b8)
  • _aligned_malloc (Address: 0x1812af6d8)
  • _callnewh (Address: 0x1812af6b0)
  • calloc (Address: 0x1812af6d0)
  • free (Address: 0x1812af6c8)
  • malloc (Address: 0x1812af6c0)
api-ms-win-crt-math-l1-1-0.dll
  • acos (Address: 0x1812af7b0)
  • acosf (Address: 0x1812af798)
  • acosh (Address: 0x1812af730)
  • acoshf (Address: 0x1812af6e8)
  • asin (Address: 0x1812af7b8)
  • asinf (Address: 0x1812af810)
  • asinh (Address: 0x1812af6f0)
  • asinhf (Address: 0x1812af6f8)
  • atan (Address: 0x1812af700)
  • atan2 (Address: 0x1812af708)
  • atan2f (Address: 0x1812af710)
  • atanf (Address: 0x1812af718)
  • atanh (Address: 0x1812af720)
  • atanhf (Address: 0x1812af728)
  • ceil (Address: 0x1812af738)
  • ceilf (Address: 0x1812af740)
  • cos (Address: 0x1812af748)
  • cosf (Address: 0x1812af750)
  • cosh (Address: 0x1812af758)
  • coshf (Address: 0x1812af760)
  • exp (Address: 0x1812af768)
  • expf (Address: 0x1812af770)
  • floor (Address: 0x1812af778)
  • floorf (Address: 0x1812af780)
  • fmod (Address: 0x1812af788)
  • fmodf (Address: 0x1812af790)
  • log (Address: 0x1812af7a0)
  • logf (Address: 0x1812af7a8)
  • modf (Address: 0x1812af818)
  • pow (Address: 0x1812af7c0)
  • powf (Address: 0x1812af7c8)
  • sin (Address: 0x1812af7d0)
  • sinf (Address: 0x1812af7d8)
  • sinh (Address: 0x1812af7e0)
  • sinhf (Address: 0x1812af7e8)
  • tan (Address: 0x1812af7f0)
  • tanf (Address: 0x1812af7f8)
  • tanh (Address: 0x1812af800)
  • tanhf (Address: 0x1812af808)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x1812af838)
  • _configure_narrow_argv (Address: 0x1812af868)
  • _crt_atexit (Address: 0x1812af848)
  • _execute_onexit_table (Address: 0x1812af828)
  • _initialize_narrow_environment (Address: 0x1812af858)
  • _initialize_onexit_table (Address: 0x1812af840)
  • _initterm (Address: 0x1812af850)
  • _initterm_e (Address: 0x1812af880)
  • _register_onexit_function (Address: 0x1812af830)
  • _seh_filter_dll (Address: 0x1812af870)
  • abort (Address: 0x1812af878)
  • terminate (Address: 0x1812af860)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsnprintf_s (Address: 0x1812af890)
api-ms-win-crt-string-l1-1-0.dll
  • _stricmp (Address: 0x1812af8a0)
  • strcmp (Address: 0x1812af8a8)
  • strcpy (Address: 0x1812af8b0)
  • strcpy_s (Address: 0x1812af8c8)
  • strlen (Address: 0x1812af8b8)
  • wcsncmp (Address: 0x1812af8c0)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x1812af938)
  • BCryptCreateHash (Address: 0x1812af8e8)
  • BCryptDecrypt (Address: 0x1812af8d8)
  • BCryptDestroyHash (Address: 0x1812af8e0)
  • BCryptDestroyKey (Address: 0x1812af900)
  • BCryptEncrypt (Address: 0x1812af908)
  • BCryptFinishHash (Address: 0x1812af910)
  • BCryptGenRandom (Address: 0x1812af918)
  • BCryptGetProperty (Address: 0x1812af920)
  • BCryptHashData (Address: 0x1812af928)
  • BCryptImportKey (Address: 0x1812af930)
  • BCryptOpenAlgorithmProvider (Address: 0x1812af8f8)
  • BCryptSetProperty (Address: 0x1812af8f0)
IPHLPAPI.DLL
  • ConvertInterfaceLuidToIndex (Address: 0x1812af058)
  • ConvertInterfaceNameToLuidW (Address: 0x1812af060)
KERNEL32.dll
  • AddVectoredExceptionHandler (Address: 0x1812af438)
  • CancelIoEx (Address: 0x1812af0d0)
  • CancelSynchronousIo (Address: 0x1812af0d8)
  • CancelThreadpoolIo (Address: 0x1812af0e0)
  • CloseHandle (Address: 0x1812af0e8)
  • CloseThreadpoolIo (Address: 0x1812af0f0)
  • CloseThreadpoolWait (Address: 0x1812af0f8)
  • CloseThreadpoolWork (Address: 0x1812af100)
  • CreateDirectoryW (Address: 0x1812af108)
  • CreateEventExW (Address: 0x1812af110)
  • CreateEventW (Address: 0x1812af488)
  • CreateFileW (Address: 0x1812af118)
  • CreateMemoryResourceNotification (Address: 0x1812af4d8)
  • CreatePipe (Address: 0x1812af120)
  • CreateProcessW (Address: 0x1812af128)
  • CreateThread (Address: 0x1812af130)
  • CreateThreadpoolIo (Address: 0x1812af138)
  • CreateThreadpoolTimer (Address: 0x1812af140)
  • CreateThreadpoolWait (Address: 0x1812af148)
  • CreateThreadpoolWork (Address: 0x1812af150)
  • DebugBreak (Address: 0x1812af528)
  • DeleteCriticalSection (Address: 0x1812af158)
  • DeleteFileW (Address: 0x1812af160)
  • DeleteVolumeMountPointW (Address: 0x1812af168)
  • DeviceIoControl (Address: 0x1812af170)
  • DuplicateHandle (Address: 0x1812af178)
  • EncodePointer (Address: 0x1812af080)
  • EnterCriticalSection (Address: 0x1812af180)
  • ExitProcess (Address: 0x1812af188)
  • ExpandEnvironmentStringsW (Address: 0x1812af190)
  • FileTimeToSystemTime (Address: 0x1812af198)
  • FindClose (Address: 0x1812af1a0)
  • FindFirstFileExW (Address: 0x1812af1a8)
  • FindNextFileW (Address: 0x1812af1b0)
  • FlsAlloc (Address: 0x1812af468)
  • FlsGetValue (Address: 0x1812af470)
  • FlsSetValue (Address: 0x1812af478)
  • FlushFileBuffers (Address: 0x1812af1b8)
  • FlushInstructionCache (Address: 0x1812af4c0)
  • FlushProcessWriteBuffers (Address: 0x1812af4a8)
  • FormatMessageW (Address: 0x1812af1c0)
  • FreeLibrary (Address: 0x1812af1c8)
  • GetConsoleCP (Address: 0x1812af1e0)
  • GetConsoleMode (Address: 0x1812af1e8)
  • GetConsoleOutputCP (Address: 0x1812af1f0)
  • GetCPInfo (Address: 0x1812af1d0)
  • GetCPInfoExW (Address: 0x1812af1d8)
  • GetCurrentDirectoryW (Address: 0x1812af1f8)
  • GetCurrentProcess (Address: 0x1812af200)
  • GetCurrentProcessId (Address: 0x1812af490)
  • GetCurrentProcessorNumberEx (Address: 0x1812af208)
  • GetCurrentThread (Address: 0x1812af210)
  • GetCurrentThreadId (Address: 0x1812af218)
  • GetDynamicTimeZoneInformation (Address: 0x1812af220)
  • GetEnabledXStateFeatures (Address: 0x1812af508)
  • GetEnvironmentVariableW (Address: 0x1812af228)
  • GetExitCodeProcess (Address: 0x1812af230)
  • GetFileAttributesExW (Address: 0x1812af238)
  • GetFileInformationByHandleEx (Address: 0x1812af240)
  • GetFileType (Address: 0x1812af248)
  • GetFullPathNameW (Address: 0x1812af250)
  • GetLargePageMinimum (Address: 0x1812af558)
  • GetLastError (Address: 0x1812af258)
  • GetLocaleInfoEx (Address: 0x1812af260)
  • GetLogicalProcessorInformation (Address: 0x1812af548)
  • GetLogicalProcessorInformationEx (Address: 0x1812af550)
  • GetLongPathNameW (Address: 0x1812af268)
  • GetModuleFileNameW (Address: 0x1812af270)
  • GetModuleHandleA (Address: 0x1812af278)
  • GetModuleHandleExW (Address: 0x1812af4e8)
  • GetModuleHandleW (Address: 0x1812af440)
  • GetNumaHighestNodeNumber (Address: 0x1812af578)
  • GetOverlappedResult (Address: 0x1812af280)
  • GetProcAddress (Address: 0x1812af288)
  • GetProcessAffinityMask (Address: 0x1812af4f0)
  • GetProcessGroupAffinity (Address: 0x1812af580)
  • GetProcessHeap (Address: 0x1812af5b8)
  • GetProcessId (Address: 0x1812af290)
  • GetStdHandle (Address: 0x1812af298)
  • GetSystemDirectoryW (Address: 0x1812af2a0)
  • GetSystemInfo (Address: 0x1812af540)
  • GetSystemTime (Address: 0x1812af2a8)
  • GetSystemTimeAsFileTime (Address: 0x1812af4c8)
  • GetThreadContext (Address: 0x1812af4b0)
  • GetThreadPriority (Address: 0x1812af2b0)
  • GetTickCount64 (Address: 0x1812af2b8)
  • GetTimeZoneInformation (Address: 0x1812af2c0)
  • GlobalMemoryStatusEx (Address: 0x1812af538)
  • HeapAlloc (Address: 0x1812af5a8)
  • HeapCreate (Address: 0x1812af598)
  • HeapDestroy (Address: 0x1812af5a0)
  • HeapFree (Address: 0x1812af5b0)
  • InitializeConditionVariable (Address: 0x1812af2c8)
  • InitializeContext (Address: 0x1812af500)
  • InitializeCriticalSection (Address: 0x1812af2d0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1812af078)
  • InitializeSListHead (Address: 0x1812af0a0)
  • InterlockedFlushSList (Address: 0x1812af090)
  • IsDebuggerPresent (Address: 0x1812af590)
  • IsProcessInJob (Address: 0x1812af570)
  • IsProcessorFeaturePresent (Address: 0x1812af0a8)
  • K32EnumProcesses (Address: 0x1812af2d8)
  • K32GetProcessMemoryInfo (Address: 0x1812af588)
  • LeaveCriticalSection (Address: 0x1812af2e0)
  • LoadLibraryExW (Address: 0x1812af2e8)
  • LocalAlloc (Address: 0x1812af2f0)
  • LocalFree (Address: 0x1812af2f8)
  • LocateXStateFeature (Address: 0x1812af510)
  • MoveFileExW (Address: 0x1812af300)
  • MultiByteToWideChar (Address: 0x1812af308)
  • OpenProcess (Address: 0x1812af310)
  • OpenThread (Address: 0x1812af318)
  • OutputDebugStringW (Address: 0x1812af320)
  • QueryInformationJobObject (Address: 0x1812af4e0)
  • QueryPerformanceCounter (Address: 0x1812af328)
  • QueryPerformanceFrequency (Address: 0x1812af330)
  • QueryUnbiasedInterruptTime (Address: 0x1812af338)
  • RaiseException (Address: 0x1812af430)
  • RaiseFailFastException (Address: 0x1812af340)
  • ReadConsoleW (Address: 0x1812af348)
  • ReadFile (Address: 0x1812af350)
  • RemoveDirectoryW (Address: 0x1812af358)
  • ResetEvent (Address: 0x1812af360)
  • ResumeThread (Address: 0x1812af368)
  • RtlCaptureContext (Address: 0x1812af450)
  • RtlLookupFunctionEntry (Address: 0x1812af5c8)
  • RtlPcToFileHeader (Address: 0x1812af088)
  • RtlRestoreContext (Address: 0x1812af458)
  • RtlUnwindEx (Address: 0x1812af098)
  • RtlVirtualUnwind (Address: 0x1812af448)
  • SetEvent (Address: 0x1812af370)
  • SetFileInformationByHandle (Address: 0x1812af378)
  • SetFilePointerEx (Address: 0x1812af380)
  • SetLastError (Address: 0x1812af388)
  • SetThreadContext (Address: 0x1812af4b8)
  • SetThreadErrorMode (Address: 0x1812af390)
  • SetThreadpoolTimer (Address: 0x1812af3a0)
  • SetThreadpoolWait (Address: 0x1812af3a8)
  • SetThreadPriority (Address: 0x1812af398)
  • SetUnhandledExceptionFilter (Address: 0x1812af0b0)
  • SetXStateFeaturesMask (Address: 0x1812af518)
  • Sleep (Address: 0x1812af3b0)
  • SleepConditionVariableCS (Address: 0x1812af3b8)
  • SleepEx (Address: 0x1812af530)
  • StartThreadpoolIo (Address: 0x1812af3c0)
  • SubmitThreadpoolWork (Address: 0x1812af3c8)
  • SuspendThread (Address: 0x1812af4a0)
  • SwitchToThread (Address: 0x1812af498)
  • SystemTimeToFileTime (Address: 0x1812af3d0)
  • TerminateProcess (Address: 0x1812af3d8)
  • TlsAlloc (Address: 0x1812af0c8)
  • TlsFree (Address: 0x1812af0c0)
  • TlsGetValue (Address: 0x1812af070)
  • TlsSetValue (Address: 0x1812af0b8)
  • TzSpecificLocalTimeToSystemTime (Address: 0x1812af3e0)
  • UnhandledExceptionFilter (Address: 0x1812af5c0)
  • VerifyVersionInfoW (Address: 0x1812af4f8)
  • VerSetConditionMask (Address: 0x1812af460)
  • VirtualAlloc (Address: 0x1812af3e8)
  • VirtualAllocExNuma (Address: 0x1812af568)
  • VirtualFree (Address: 0x1812af3f0)
  • VirtualProtect (Address: 0x1812af4d0)
  • VirtualQuery (Address: 0x1812af520)
  • VirtualUnlock (Address: 0x1812af560)
  • WaitForMultipleObjectsEx (Address: 0x1812af3f8)
  • WaitForSingleObject (Address: 0x1812af400)
  • WaitForSingleObjectEx (Address: 0x1812af480)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1812af408)
  • WakeConditionVariable (Address: 0x1812af410)
  • WideCharToMultiByte (Address: 0x1812af418)
  • WriteConsoleW (Address: 0x1812af420)
  • WriteFile (Address: 0x1812af428)
ole32.dll
  • CoCreateGuid (Address: 0x1812af958)
  • CoGetApartmentType (Address: 0x1812af978)
  • CoInitializeEx (Address: 0x1812af948)
  • CoTaskMemAlloc (Address: 0x1812af970)
  • CoTaskMemFree (Address: 0x1812af950)
  • CoUninitialize (Address: 0x1812af968)
  • CoWaitForMultipleHandles (Address: 0x1812af960)
WS2_32.dll
  • bind (Address: 0x1812af670)
  • closesocket (Address: 0x1812af678)
  • FreeAddrInfoExW (Address: 0x1812af608)
  • FreeAddrInfoW (Address: 0x1812af610)
  • GetAddrInfoExW (Address: 0x1812af618)
  • GetAddrInfoW (Address: 0x1812af620)
  • GetNameInfoW (Address: 0x1812af628)
  • getsockname (Address: 0x1812af680)
  • getsockopt (Address: 0x1812af688)
  • ioctlsocket (Address: 0x1812af690)
  • listen (Address: 0x1812af5e0)
  • recv (Address: 0x1812af5d8)
  • select (Address: 0x1812af5e8)
  • send (Address: 0x1812af640)
  • setsockopt (Address: 0x1812af600)
  • shutdown (Address: 0x1812af5f8)
  • WSACleanup (Address: 0x1812af630)
  • WSAConnect (Address: 0x1812af638)
  • WSAGetOverlappedResult (Address: 0x1812af5f0)
  • WSAIoctl (Address: 0x1812af648)
  • WSARecv (Address: 0x1812af650)
  • WSASend (Address: 0x1812af658)
  • WSASocketW (Address: 0x1812af660)
  • WSAStartup (Address: 0x1812af668)