4TquG6qY7KoNUUjv.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: bcc0a22aabea03511150c83e0573ce73

File Size: 87.0 KB

Uploaded At: May 1, 2026, 9:53 a.m.

Views: 41

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory

Exported Functions

  • OnInject (Ordinal: 1, Address: 0x13e0)

Imported DLLs & Functions

KERNEL32.dll
  • CloseHandle (Address: 0x1000f03c)
  • CreateFileMappingW (Address: 0x1000f060)
  • CreateFileW (Address: 0x1000f058)
  • CreateMutexA (Address: 0x1000f034)
  • CreateMutexW (Address: 0x1000f05c)
  • CreateThread (Address: 0x1000f044)
  • DecodePointer (Address: 0x1000f0b8)
  • DisableThreadLibraryCalls (Address: 0x1000f028)
  • EncodePointer (Address: 0x1000f0bc)
  • ExitProcess (Address: 0x1000f0a8)
  • FlushInstructionCache (Address: 0x1000f048)
  • FormatMessageW (Address: 0x1000f054)
  • FreeLibraryAndExitThread (Address: 0x1000f01c)
  • GetCommandLineW (Address: 0x1000f0a4)
  • GetCurrentProcess (Address: 0x1000f008)
  • GetCurrentProcessId (Address: 0x1000f090)
  • GetCurrentThread (Address: 0x1000f010)
  • GetCurrentThreadId (Address: 0x1000f080)
  • GetFileSize (Address: 0x1000f050)
  • GetLastError (Address: 0x1000f020)
  • GetLocalTime (Address: 0x1000f02c)
  • GetModuleFileNameW (Address: 0x1000f018)
  • GetModuleHandleExW (Address: 0x1000f00c)
  • GetModuleHandleW (Address: 0x1000f088)
  • GetSystemInfo (Address: 0x1000f064)
  • GetSystemTimeAsFileTime (Address: 0x1000f08c)
  • GetThreadContext (Address: 0x1000f06c)
  • GetTickCount (Address: 0x1000f094)
  • InterlockedCompareExchange (Address: 0x1000f078)
  • InterlockedExchange (Address: 0x1000f0b4)
  • IsDebuggerPresent (Address: 0x1000f09c)
  • MapViewOfFile (Address: 0x1000f000)
  • OpenFileMappingW (Address: 0x1000f030)
  • QueryPerformanceCounter (Address: 0x1000f098)
  • ReleaseMutex (Address: 0x1000f038)
  • ResumeThread (Address: 0x1000f068)
  • SetLastError (Address: 0x1000f024)
  • SetThreadContext (Address: 0x1000f070)
  • SetUnhandledExceptionFilter (Address: 0x1000f0a0)
  • Sleep (Address: 0x1000f014)
  • SuspendThread (Address: 0x1000f084)
  • TerminateProcess (Address: 0x1000f0b0)
  • UnhandledExceptionFilter (Address: 0x1000f0ac)
  • UnmapViewOfFile (Address: 0x1000f004)
  • VirtualAlloc (Address: 0x1000f07c)
  • VirtualProtect (Address: 0x1000f04c)
  • VirtualQuery (Address: 0x1000f074)
  • WriteProcessMemory (Address: 0x1000f040)
MSVCP100.dll
  • ?_BADOFF@std@@3_JB (Address: 0x1000f0e0)
  • ?_Decref@facet@locale@std@@QAEPAV123@XZ (Address: 0x1000f0c8)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x1000f128)
  • ?_Orphan_all@_Container_base0@std@@QAEXXZ (Address: 0x1000f134)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1000f0d8)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x1000f0fc)
  • ?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z (Address: 0x1000f130)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x1000f124)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1000f0e8)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1000f0e4)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x1000f13c)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x1000f0f4)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1000f0f0)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x1000f0ec)
  • ??1_Container_base12@std@@QAE@XZ (Address: 0x1000f0c4)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x1000f138)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000f104)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000f100)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1000f12c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z (Address: 0x1000f0f8)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x1000f0d0)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x1000f108)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x1000f110)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x1000f0cc)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x1000f120)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x1000f0d4)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z (Address: 0x1000f0dc)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x1000f10c)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x1000f11c)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x1000f140)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x1000f118)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x1000f114)
MSVCR100.dll
  • __clean_type_info_names_internal (Address: 0x1000f148)
  • __CppXcptFilter (Address: 0x1000f15c)
  • __CxxFrameHandler3 (Address: 0x1000f14c)
  • __dllonexit (Address: 0x1000f180)
  • _amsg_exit (Address: 0x1000f160)
  • _crt_debugger_hook (Address: 0x1000f158)
  • _CxxThrowException (Address: 0x1000f1dc)
  • _encoded_null (Address: 0x1000f16c)
  • _except_handler4_common (Address: 0x1000f154)
  • _initterm (Address: 0x1000f168)
  • _initterm_e (Address: 0x1000f164)
  • _lock (Address: 0x1000f17c)
  • _malloc_crt (Address: 0x1000f170)
  • _onexit (Address: 0x1000f178)
  • _unlock (Address: 0x1000f184)
  • _wgetenv (Address: 0x1000f1b0)
  • _wtoi (Address: 0x1000f1b4)
  • ?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x1000f150)
  • ??0exception@std@@QAE@ABQBD@Z (Address: 0x1000f1c0)
  • ??0exception@std@@QAE@ABV01@@Z (Address: 0x1000f1bc)
  • ??1exception@std@@UAE@XZ (Address: 0x1000f1c4)
  • ??2@YAPAXI@Z (Address: 0x1000f18c)
  • ??3@YAXPAX@Z (Address: 0x1000f194)
  • ?terminate@@YAXXZ (Address: 0x1000f174)
  • ?what@exception@std@@UBEPBDXZ (Address: 0x1000f1c8)
  • atoi (Address: 0x1000f1a8)
  • exit (Address: 0x1000f190)
  • free (Address: 0x1000f1d8)
  • memchr (Address: 0x1000f1ac)
  • memcpy (Address: 0x1000f1d4)
  • memmove (Address: 0x1000f1b8)
  • memset (Address: 0x1000f1d0)
  • printf (Address: 0x1000f198)
  • sprintf (Address: 0x1000f188)
  • tolower (Address: 0x1000f1a0)
  • vswprintf_s (Address: 0x1000f1a4)
  • wcschr (Address: 0x1000f1cc)
  • wcsstr (Address: 0x1000f19c)
USER32.dll
  • MessageBoxA (Address: 0x1000f1e4)
  • MessageBoxW (Address: 0x1000f1ec)
  • wsprintfW (Address: 0x1000f1e8)
WS2_32.dll
  • bind (Address: 0x1000f208)
  • connect (Address: 0x1000f200)
  • gethostbyname (Address: 0x1000f20c)
  • htons (Address: 0x1000f1f4)
  • inet_ntoa (Address: 0x1000f204)
  • ntohs (Address: 0x1000f1f8)
  • WSACleanup (Address: 0x1000f1fc)
  • WSAStartup (Address: 0x1000f210)