defender.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 6eb102aacd2c284b741abcc4954f5d87

File Size: 760.7 KB

Uploaded At: May 6, 2026, 6:32 p.m.

Views: 45

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • Agent_OnLoad (Ordinal: 1, Address: 0x177a)

Imported DLLs & Functions

KERNEL32.dll
  • CloseHandle (Address: 0x21189e370)
  • CreateEventA (Address: 0x21189e378)
  • CreateSemaphoreA (Address: 0x21189e380)
  • DeleteCriticalSection (Address: 0x21189e388)
  • DuplicateHandle (Address: 0x21189e390)
  • EnterCriticalSection (Address: 0x21189e398)
  • FormatMessageA (Address: 0x21189e3a0)
  • GetCPInfo (Address: 0x21189e3a8)
  • GetCurrentProcess (Address: 0x21189e3b0)
  • GetCurrentProcessId (Address: 0x21189e3b8)
  • GetCurrentThread (Address: 0x21189e3c0)
  • GetCurrentThreadId (Address: 0x21189e3c8)
  • GetLastError (Address: 0x21189e3d0)
  • GetModuleHandleA (Address: 0x21189e3d8)
  • GetProcAddress (Address: 0x21189e3e0)
  • GetProcessAffinityMask (Address: 0x21189e3e8)
  • GetSystemTimeAsFileTime (Address: 0x21189e3f0)
  • GetThreadContext (Address: 0x21189e3f8)
  • GetThreadPriority (Address: 0x21189e400)
  • GetTickCount (Address: 0x21189e408)
  • InitializeCriticalSection (Address: 0x21189e410)
  • IsProcessorFeaturePresent (Address: 0x21189e418)
  • LeaveCriticalSection (Address: 0x21189e420)
  • LoadLibraryW (Address: 0x21189e428)
  • LocalFree (Address: 0x21189e430)
  • MultiByteToWideChar (Address: 0x21189e438)
  • OpenProcess (Address: 0x21189e440)
  • OutputDebugStringA (Address: 0x21189e448)
  • QueryPerformanceCounter (Address: 0x21189e450)
  • QueryPerformanceFrequency (Address: 0x21189e458)
  • RaiseException (Address: 0x21189e460)
  • ReleaseSemaphore (Address: 0x21189e468)
  • ResetEvent (Address: 0x21189e470)
  • ResumeThread (Address: 0x21189e478)
  • RtlCaptureContext (Address: 0x21189e480)
  • RtlLookupFunctionEntry (Address: 0x21189e488)
  • RtlUnwindEx (Address: 0x21189e490)
  • RtlVirtualUnwind (Address: 0x21189e498)
  • SetEvent (Address: 0x21189e4a0)
  • SetLastError (Address: 0x21189e4a8)
  • SetProcessAffinityMask (Address: 0x21189e4b0)
  • SetThreadContext (Address: 0x21189e4b8)
  • SetThreadPriority (Address: 0x21189e4c0)
  • Sleep (Address: 0x21189e4c8)
  • SuspendThread (Address: 0x21189e4d0)
  • TerminateProcess (Address: 0x21189e4d8)
  • TlsAlloc (Address: 0x21189e4e0)
  • TlsGetValue (Address: 0x21189e4e8)
  • TlsSetValue (Address: 0x21189e4f0)
  • TryEnterCriticalSection (Address: 0x21189e4f8)
  • VirtualProtect (Address: 0x21189e500)
  • VirtualQuery (Address: 0x21189e508)
  • WaitForMultipleObjects (Address: 0x21189e510)
  • WaitForSingleObject (Address: 0x21189e518)
  • WideCharToMultiByte (Address: 0x21189e520)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x21189e530)
  • ___mb_cur_max_func (Address: 0x21189e538)
  • __iob_func (Address: 0x21189e540)
  • _amsg_exit (Address: 0x21189e548)
  • _assert (Address: 0x21189e550)
  • _beginthreadex (Address: 0x21189e558)
  • _endthreadex (Address: 0x21189e560)
  • _errno (Address: 0x21189e568)
  • _fileno (Address: 0x21189e570)
  • _initterm (Address: 0x21189e578)
  • _lock (Address: 0x21189e580)
  • _read (Address: 0x21189e588)
  • _setjmp (Address: 0x21189e590)
  • _setmode (Address: 0x21189e598)
  • _strdup (Address: 0x21189e5a0)
  • _unlock (Address: 0x21189e5a8)
  • _vscprintf (Address: 0x21189e5b0)
  • _vsnprintf (Address: 0x21189e5b8)
  • _write (Address: 0x21189e5c0)
  • abort (Address: 0x21189e5c8)
  • calloc (Address: 0x21189e5d0)
  • fflush (Address: 0x21189e5d8)
  • fprintf (Address: 0x21189e5e0)
  • fputc (Address: 0x21189e5e8)
  • fputs (Address: 0x21189e5f0)
  • free (Address: 0x21189e5f8)
  • fwrite (Address: 0x21189e600)
  • getenv (Address: 0x21189e608)
  • localeconv (Address: 0x21189e610)
  • longjmp (Address: 0x21189e618)
  • malloc (Address: 0x21189e620)
  • memchr (Address: 0x21189e628)
  • memcmp (Address: 0x21189e630)
  • memcpy (Address: 0x21189e638)
  • memmove (Address: 0x21189e640)
  • memset (Address: 0x21189e648)
  • realloc (Address: 0x21189e650)
  • strchr (Address: 0x21189e658)
  • strcmp (Address: 0x21189e660)
  • strerror (Address: 0x21189e668)
  • strlen (Address: 0x21189e670)
  • strncmp (Address: 0x21189e678)
  • strtoul (Address: 0x21189e680)
  • vfprintf (Address: 0x21189e688)
  • wcslen (Address: 0x21189e690)