coldloader.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 4d568e8608e3dd52d251919535292c75

File Size: 114.0 KB

Uploaded At: May 27, 2026, 1:50 a.m.

Views: 58

Exported Functions

  • DllMain (Ordinal: 1, Address: 0x1000)

Imported DLLs & Functions

advapi32.dll
  • RegCloseKey (Address: 0x180018148)
  • RegCreateKeyExW (Address: 0x180018138)
  • RegOpenKeyExW (Address: 0x180018150)
  • RegQueryValueExW (Address: 0x180018140)
  • RegSetValueExW (Address: 0x180018130)
api-ms-win-core-synch-l1-2-0.dll
  • WaitOnAddress (Address: 0x180018170)
  • WakeByAddressAll (Address: 0x180018168)
  • WakeByAddressSingle (Address: 0x180018160)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x1800181b0)
  • _configure_narrow_argv (Address: 0x180018190)
  • _execute_onexit_table (Address: 0x1800181a8)
  • _initialize_narrow_environment (Address: 0x180018188)
  • _initialize_onexit_table (Address: 0x180018180)
  • _initterm (Address: 0x1800181b8)
  • _initterm_e (Address: 0x1800181a0)
  • _seh_filter_dll (Address: 0x180018198)
bcryptprimitives.dll
  • ProcessPrng (Address: 0x1800181c8)
kernel32.dll
  • CloseHandle (Address: 0x180018240)
  • CreateFileW (Address: 0x180018208)
  • CreateMutexA (Address: 0x180018290)
  • CreateThread (Address: 0x180018268)
  • CreateWaitableTimerExW (Address: 0x180018260)
  • ExitProcess (Address: 0x180018280)
  • FindClose (Address: 0x180018228)
  • FindFirstFileExW (Address: 0x180018220)
  • FormatMessageW (Address: 0x180018278)
KERNEL32.dll
  • GetConsoleMode (Address: 0x180018070)
  • GetConsoleOutputCP (Address: 0x180018068)
  • GetCurrentDirectoryW (Address: 0x1800180c8)
kernel32.dll
  • GetCurrentProcess (Address: 0x180018210)
  • GetCurrentProcessId (Address: 0x1800181e8)
  • GetCurrentThread (Address: 0x1800181f8)
  • GetCurrentThreadId (Address: 0x1800182a8)
KERNEL32.dll
  • GetEnvironmentVariableW (Address: 0x1800180c0)
kernel32.dll
  • GetFileInformationByHandle (Address: 0x180018230)
  • GetFileInformationByHandleEx (Address: 0x180018238)
  • GetFullPathNameW (Address: 0x180018200)
  • GetLastError (Address: 0x180018270)
KERNEL32.dll
  • GetModuleFileNameW (Address: 0x1800180d8)
  • GetModuleHandleA (Address: 0x1800180a8)
  • GetModuleHandleW (Address: 0x180018020)
  • GetProcAddress (Address: 0x1800180a0)
  • GetProcessHeap (Address: 0x1800180b8)
  • GetStdHandle (Address: 0x180018078)
  • GetSystemTimeAsFileTime (Address: 0x180018018)
  • HeapAlloc (Address: 0x180018000)
  • HeapFree (Address: 0x1800180b0)
  • HeapReAlloc (Address: 0x180018098)
  • InitializeSListHead (Address: 0x180018010)
kernel32.dll
  • IsDebuggerPresent (Address: 0x1800182b0)
  • IsProcessorFeaturePresent (Address: 0x1800181f0)
KERNEL32.dll
  • LoadLibraryA (Address: 0x180018038)
  • LoadLibraryW (Address: 0x1800180d0)
  • lstrlenW (Address: 0x180018060)
  • MultiByteToWideChar (Address: 0x180018088)
  • QueryPerformanceCounter (Address: 0x180018050)
  • QueryPerformanceFrequency (Address: 0x180018058)
kernel32.dll
  • ReleaseMutex (Address: 0x180018288)
KERNEL32.dll
  • RtlCaptureContext (Address: 0x180018048)
kernel32.dll
  • RtlLookupFunctionEntry (Address: 0x180018250)
KERNEL32.dll
  • RtlVirtualUnwind (Address: 0x180018040)
  • SetEnvironmentVariableW (Address: 0x180018028)
kernel32.dll
  • SetFileInformationByHandle (Address: 0x180018218)
  • SetFilePointerEx (Address: 0x180018248)
  • SetFileTime (Address: 0x180018258)
  • SetLastError (Address: 0x1800182b8)
KERNEL32.dll
  • SetUnhandledExceptionFilter (Address: 0x180018090)
kernel32.dll
  • SetWaitableTimer (Address: 0x1800182a0)
  • Sleep (Address: 0x1800181e0)
KERNEL32.dll
  • UnhandledExceptionFilter (Address: 0x180018008)
kernel32.dll
  • WaitForSingleObject (Address: 0x1800181d8)
  • WaitForSingleObjectEx (Address: 0x180018298)
KERNEL32.dll
  • WideCharToMultiByte (Address: 0x180018030)
  • WriteConsoleW (Address: 0x180018080)
ntdll.dll
  • NtReadFile (Address: 0x1800182d0)
  • NtWriteFile (Address: 0x1800182d8)
  • RtlNtStatusToDosError (Address: 0x1800182c8)
USER32.dll
  • MessageBoxA (Address: 0x1800180e8)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180018100)
  • __std_type_info_destroy_list (Address: 0x1800180f8)
  • memcmp (Address: 0x180018108)
  • memcpy (Address: 0x180018110)
  • memmove (Address: 0x180018118)
  • memset (Address: 0x180018120)