0_.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
loader_main_thunk
#1 · 0x4cc0
dda_enter_privacy
#2 · 0x4cd0
ldr_thunk_data
#3 · 0x21620
loader_entry_thread_thunk
#4 · 0x2f00
No function matches your filter.
Imported DLLs & functions 113
ADVAPI32.dll
13
AdjustTokenPrivileges
0x180016008
BuildTrusteeWithSidW
0x180016030
CreateWellKnownSid
0x180016018
GetSecurityInfo
0x180016038
GetTokenInformation
0x180016050
ImpersonateLoggedOnUser
0x180016048
IsWellKnownSid
0x180016060
LookupPrivilegeValueW
0x180016010
OpenProcessToken
0x180016000
OpenThreadToken
0x180016058
RevertToSelf
0x180016040
SetEntriesInAclW
0x180016020
SetSecurityInfo
0x180016028
KERNEL32.dll
92
CloseHandle
0x180016228
CreateEventW
0x180016270
CreateFileW
0x1800161f0
CreateMutexW
0x1800161a0
DecodePointer
0x1800162d0
DeleteCriticalSection
0x180016140
EncodePointer
0x1800162c8
EnterCriticalSection
0x180016200
ExitProcess
0x1800160d0
FlsAlloc
0x180016180
FlsFree
0x180016190
FlsGetValue
0x180016198
FlsSetValue
0x1800162b0
FlushFileBuffers
0x180016348
FormatMessageW
0x180016258
FreeEnvironmentStringsW
0x180016130
FreeLibrary
0x180016240
GetACP
0x180016330
GetCommandLineA
0x1800162b8
GetConsoleCP
0x1800160f0
GetConsoleMode
0x1800160f8
GetCPInfo
0x180016328
GetCurrentProcess
0x1800160c8
GetCurrentProcessId
0x1800160a8
GetCurrentThread
0x1800161c8
GetCurrentThreadId
0x180016210
GetEnvironmentStringsW
0x180016128
GetExitCodeThread
0x180016298
GetFileType
0x180016150
GetLastError
0x1800160e0
GetModuleFileNameA
0x180016138
GetModuleFileNameW
0x180016278
GetModuleHandleExW
0x1800160c0
GetModuleHandleW
0x180016170
GetOEMCP
0x180016338
GetProcAddress
0x180016250
GetProcessId
0x180016280
GetStartupInfoW
0x180016148
GetStdHandle
0x180016160
GetStringTypeW
0x1800162e8
GetSystemTime
0x180016230
GetSystemTimeAsFileTime
0x180016110
GetTickCount
0x180016080
GetVersion
0x180016118
HeapAlloc
0x1800162d8
HeapCreate
0x180016098
HeapDestroy
0x180016090
HeapFree
0x1800162c0
HeapReAlloc
0x1800160e8
HeapSetInformation
0x180016120
HeapSize
0x180016078
InitializeCriticalSection
0x1800161d8
InitializeCriticalSectionAndSpinCount
0x180016158
IsDebuggerPresent
0x180016300
IsValidCodePage
0x180016340
LCMapStringW
0x180016070
LeaveCriticalSection
0x1800160a0
LoadLibraryW
0x180016248
LocalAlloc
0x1800162a0
LocalFree
0x180016260
MultiByteToWideChar
0x180016290
OpenProcess
0x1800160b8
OutputDebugStringA
0x180016208
ProcessIdToSessionId
0x1800160b0
QueryPerformanceCounter
0x180016088
RaiseException
0x1800161f8
ReadFile
0x1800161e8
ReleaseMutex
0x180016218
RtlCaptureContext
0x180016318
RtlLookupFunctionEntry
0x180016310
RtlPcToFileHeader
0x1800162e0
RtlUnwindEx
0x180016178
RtlVirtualUnwind
0x180016308
SetEndOfFile
0x1800161b8
SetEvent
0x180016268
SetFilePointer
0x1800161a8
SetHandleCount
0x180016168
SetLastError
0x180016188
SetStdHandle
0x180016100
SetUnhandledExceptionFilter
0x1800162f8
Sleep
0x1800161e0
TerminateProcess
0x180016320
TlsAlloc
0x180016220
TlsFree
0x180016238
TlsGetValue
0x1800161b0
UnhandledExceptionFilter
0x1800162f0
VirtualFree
0x1800162a8
VirtualProtect
0x1800160d8
WaitForSingleObject
0x1800161c0
WideCharToMultiByte
0x180016288
WriteConsoleW
0x180016108
WriteFile
0x1800161d0
DispatchMessageW
0x180016360
InvalidateRect
0x180016378
MessageBoxA
0x180016358
MsgWaitForMultipleObjectsEx
0x180016388
PeekMessageW
0x180016380
PostQuitMessage
0x180016368
TranslateMessage
0x180016370
UpdateWindow
0x180016390
No function matches your filter.