vles.dll
v1.1.1.3
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
I
#1 · 0xb580
ServiceMain
#2 · 0xb9a0
No function matches your filter.
Imported DLLs & functions 378
ADVAPI32.dll
48
AllocateAndInitializeSid
0x18020d128
ChangeServiceConfig2W
0x18020d010
CloseServiceHandle
0x18020d030
ControlService
0x18020d150
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18020d118
CreateProcessAsUserW
0x18020d0e8
CreateServiceA
0x18020d040
CryptAcquireContextA
0x18020d058
CryptAcquireContextW
0x18020d0d0
CryptCreateHash
0x18020d0b0
CryptDecrypt
0x18020d098
CryptDeriveKey
0x18020d0a0
CryptDestroyHash
0x18020d0c0
CryptDestroyKey
0x18020d088
CryptEncrypt
0x18020d090
CryptGenRandom
0x18020d0d8
CryptGetHashParam
0x18020d0c8
CryptHashData
0x18020d0b8
CryptImportKey
0x18020d0a8
CryptReleaseContext
0x18020d000
DuplicateTokenEx
0x18020d0f0
EnumDependentServicesW
0x18020d158
EnumServicesStatusW
0x18020d078
FreeSid
0x18020d140
GetNamedSecurityInfoW
0x18020d138
GetTokenInformation
0x18020d0f8
ImpersonateLoggedOnUser
0x18020d0e0
OpenSCManagerW
0x18020d020
OpenServiceW
0x18020d170
QueryServiceConfigW
0x18020d168
QueryServiceStatusEx
0x18020d120
RegCloseKey
0x18020d038
RegCreateKeyExA
0x18020d008
RegEnumKeyExW
0x18020d110
RegEnumValueW
0x18020d080
RegGetValueA
0x18020d108
RegGetValueW
0x18020d068
RegisterServiceCtrlHandlerExA
0x18020d178
RegOpenKeyExA
0x18020d050
RegOpenKeyExW
0x18020d070
RegQueryValueExA
0x18020d028
RegQueryValueExW
0x18020d048
RegSetValueExA
0x18020d060
RevertToSelf
0x18020d100
SetEntriesInAclW
0x18020d148
SetNamedSecurityInfoW
0x18020d130
SetServiceStatus
0x18020d018
StartServiceW
0x18020d160
CRYPT32.dll
18
CertAddCertificateContextToStore
0x18020d1e0
CertCloseStore
0x18020d198
CertCreateCertificateChainEngine
0x18020d1c0
CertEnumCertificatesInStore
0x18020d200
CertFindCertificateInStore
0x18020d190
CertFindExtension
0x18020d1d8
CertFreeCertificateChain
0x18020d1a8
CertFreeCertificateChainEngine
0x18020d1b8
CertFreeCertificateContext
0x18020d208
CertGetCertificateChain
0x18020d1b0
CertGetNameStringA
0x18020d1d0
CertOpenStore
0x18020d1f8
CryptBinaryToStringA
0x18020d1e8
CryptDecodeObjectEx
0x18020d210
CryptHashPublicKeyInfo
0x18020d1f0
CryptQueryObject
0x18020d1c8
CryptStringToBinaryA
0x18020d1a0
PFXImportCertStore
0x18020d188
KERNEL32.dll
206
AcquireSRWLockExclusive
0x18020d610
AreFileApisANSI
0x18020d4c0
CancelIo
0x18020d368
CloseHandle
0x18020d270
CompareStringEx
0x18020d640
CompareStringW
0x18020d798
ConnectNamedPipe
0x18020d338
CreateDirectoryA
0x18020d410
CreateDirectoryW
0x18020d898
CreateEventW
0x18020d260
CreateFileA
0x18020d370
CreateFileMappingW
0x18020d5c0
CreateFileW
0x18020d2a0
CreateMutexW
0x18020d518
CreateNamedPipeW
0x18020d320
CreatePipe
0x18020d438
CreateProcessW
0x18020d450
CreateThread
0x18020d278
CreateToolhelp32Snapshot
0x18020d3b8
DecodePointer
0x18020d458
DeleteCriticalSection
0x18020d238
DeleteFileA
0x18020d3e0
DeleteFileW
0x18020d2a8
DisconnectNamedPipe
0x18020d328
DuplicateHandle
0x18020d760
EncodePointer
0x18020d630
EnterCriticalSection
0x18020d4d8
EnumSystemLocalesW
0x18020d7c0
ExitProcess
0x18020d728
ExitThread
0x18020d768
ExpandEnvironmentStringsA
0x18020d340
ExpandEnvironmentStringsW
0x18020d2d0
FileTimeToSystemTime
0x18020d758
FindClose
0x18020d448
FindFirstFileExW
0x18020d808
FindFirstFileW
0x18020d420
FindNextFileW
0x18020d428
FindResourceExW
0x18020d3f8
FindResourceW
0x18020d408
FlushFileBuffers
0x18020d310
FlushViewOfFile
0x18020d560
FormatMessageA
0x18020d5b8
FormatMessageW
0x18020d348
FreeEnvironmentStringsW
0x18020d840
FreeLibrary
0x18020d2c0
FreeLibraryAndExitThread
0x18020d770
GetACP
0x18020d818
GetCommandLineA
0x18020d828
GetCommandLineW
0x18020d830
GetComputerNameA
0x18020d360
GetConsoleMode
0x18020d7e0
GetConsoleOutputCP
0x18020d7d8
GetCPInfo
0x18020d648
GetCurrentDirectoryW
0x18020d7f0
GetCurrentProcess
0x18020d398
GetCurrentProcessId
0x18020d598
GetCurrentThreadId
0x18020d520
GetDateFormatW
0x18020d788
GetDiskFreeSpaceA
0x18020d540
GetDiskFreeSpaceW
0x18020d4e0
GetDriveTypeW
0x18020d738
GetEnvironmentStringsW
0x18020d838
GetEnvironmentVariableA
0x18020d870
GetExitCodeProcess
0x18020d418
GetFileAttributesA
0x18020d548
GetFileAttributesExW
0x18020d550
GetFileAttributesW
0x18020d460
GetFileInformationByHandle
0x18020d740
GetFileSize
0x18020d2f8
GetFileSizeEx
0x18020d7c8
GetFileType
0x18020d748
GetFullPathNameA
0x18020d500
GetFullPathNameW
0x18020d390
GetLastError
0x18020d670
GetLocaleInfoEx
0x18020d628
GetLocaleInfoW
0x18020d7a8
GetLocalTime
0x18020d2f0
GetModuleFileNameA
0x18020d248
GetModuleFileNameW
0x18020d778
GetModuleHandleA
0x18020d868
GetModuleHandleExW
0x18020d730
GetModuleHandleW
0x18020d350
GetNativeSystemInfo
0x18020d3f0
GetOEMCP
0x18020d820
GetOverlappedResult
0x18020d378
GetProcAddress
0x18020d2b8
GetProcessHeap
0x18020d240
GetStartupInfoW
0x18020d380
GetStdHandle
0x18020d780
GetStringTypeW
0x18020d618
GetSystemDirectoryA
0x18020d860
GetSystemInfo
0x18020d578
GetSystemTime
0x18020d5b0
GetSystemTimeAsFileTime
0x18020d5a8
GetTempPathA
0x18020d538
GetTempPathW
0x18020d510
GetTickCount
0x18020d2c8
GetTimeFormatW
0x18020d790
GetTimeZoneInformation
0x18020d800
GetUserDefaultLCID
0x18020d7b8
HeapAlloc
0x18020d658
HeapCompact
0x18020d580
HeapCreate
0x18020d4d0
HeapDestroy
0x18020d888
HeapFree
0x18020d690
HeapReAlloc
0x18020d668
HeapSize
0x18020d680
HeapValidate
0x18020d530
InitializeConditionVariable
0x18020d5d8
InitializeCriticalSection
0x18020d4f8
InitializeCriticalSectionAndSpinCount
0x18020d698
InitializeCriticalSectionEx
0x18020d688
InitializeSListHead
0x18020d6d8
InitializeSRWLock
0x18020d600
InterlockedFlushSList
0x18020d6e8
IsDebuggerPresent
0x18020d650
IsProcessorFeaturePresent
0x18020d6d0
IsValidCodePage
0x18020d810
IsValidLocale
0x18020d7b0
K32EnumProcesses
0x18020d498
K32EnumProcessModules
0x18020d4a0
K32GetModuleFileNameExW
0x18020d470
LCMapStringEx
0x18020d638
LCMapStringW
0x18020d7a0
LeaveCriticalSection
0x18020d4f0
LoadLibraryA
0x18020d568
LoadLibraryExW
0x18020d720
LoadLibraryW
0x18020d2b0
LoadResource
0x18020d400
LocalFree
0x18020d288
LockFile
0x18020d2d8
LockFileEx
0x18020d590
LockResource
0x18020d3d8
lstrcmpiA
0x18020d280
lstrlenA
0x18020d250
lstrlenW
0x18020d318
MapViewOfFile
0x18020d5c8
MoveFileExA
0x18020d3d0
MoveFileExW
0x18020d300
MoveFileW
0x18020d308
MultiByteToWideChar
0x18020d468
OpenProcess
0x18020d3b0
OpenThread
0x18020d4a8
OutputDebugStringA
0x18020d4e8
OutputDebugStringW
0x18020d558
PeekNamedPipe
0x18020d440
Process32FirstW
0x18020d3e8
Process32NextW
0x18020d3c8
QueryPerformanceCounter
0x18020d5d0
QueryPerformanceFrequency
0x18020d620
RaiseException
0x18020d660
ReadConsoleW
0x18020d7e8
ReadFile
0x18020d290
ReleaseSRWLockExclusive
0x18020d608
RemoveDirectoryW
0x18020d430
ResetEvent
0x18020d6a0
ResumeThread
0x18020d490
RtlCaptureContext
0x18020d6a8
RtlLookupFunctionEntry
0x18020d6b0
RtlPcToFileHeader
0x18020d6f0
RtlUnwind
0x18020d8a0
RtlUnwindEx
0x18020d6e0
RtlVirtualUnwind
0x18020d6b8
SetEndOfFile
0x18020d2e8
SetEnvironmentVariableW
0x18020d848
SetEvent
0x18020d268
SetFilePointer
0x18020d2e0
SetFilePointerEx
0x18020d7d0
SetLastError
0x18020d6f8
SetNamedPipeHandleState
0x18020d4b0
SetStdHandle
0x18020d7f8
SetUnhandledExceptionFilter
0x18020d6c8
SizeofResource
0x18020d388
Sleep
0x18020d678
SleepConditionVariableCS
0x18020d5f0
SleepConditionVariableSRW
0x18020d5f8
SleepEx
0x18020d858
SuspendThread
0x18020d488
SystemTimeToFileTime
0x18020d5a0
SystemTimeToTzSpecificLocalTime
0x18020d750
TerminateProcess
0x18020d3a8
Thread32First
0x18020d480
Thread32Next
0x18020d478
TlsAlloc
0x18020d700
TlsFree
0x18020d718
TlsGetValue
0x18020d708
TlsSetValue
0x18020d710
TryEnterCriticalSection
0x18020d4c8
UnhandledExceptionFilter
0x18020d6c0
UnlockFile
0x18020d588
UnlockFileEx
0x18020d508
UnmapViewOfFile
0x18020d528
VerifyVersionInfoW
0x18020d890
VerSetConditionMask
0x18020d880
WaitForMultipleObjects
0x18020d878
WaitForSingleObject
0x18020d258
WaitForSingleObjectEx
0x18020d570
WaitNamedPipeW
0x18020d4b8
WakeAllConditionVariable
0x18020d5e8
WakeConditionVariable
0x18020d5e0
WideCharToMultiByte
0x18020d358
WinExec
0x18020d330
Wow64DisableWow64FsRedirection
0x18020d3a0
Wow64RevertWow64FsRedirection
0x18020d3c0
WriteConsoleW
0x18020d850
WriteFile
0x18020d298
NetApiBufferFree
0x18020d8b0
NetUserEnum
0x18020d8b8
NetUserGetInfo
0x18020d8c8
NetUserModalsGet
0x18020d8c0
IdnToAscii
0x18020d8d8
CoCreateInstance
0x18020dc48
CoInitialize
0x18020dc30
CoInitializeEx
0x18020dc38
CoInitializeSecurity
0x18020dc40
CoSetProxyBlanket
0x18020dc20
CoUninitialize
0x18020dc28
OLEAUT32.dll
11
SafeArrayAccessData
0x18020d918
SafeArrayGetElement
0x18020d920
SafeArrayGetLBound
0x18020d908
SafeArrayGetUBound
0x18020d900
SafeArrayUnaccessData
0x18020d910
SysAllocString
0x18020d928
SysFreeString
0x18020d8f8
SysStringLen
0x18020d8e8
VariantChangeType
0x18020d938
VariantClear
0x18020d930
VariantInit
0x18020d8f0
PathFileExistsA
0x18020d990
PathFileExistsW
0x18020d988
PathFindExtensionW
0x18020d970
PathFindFileNameW
0x18020d980
PathIsDirectoryA
0x18020d978
PathIsDirectoryW
0x18020d968
wsprintfW
0x18020d9a0
GetFileVersionInfoA
0x18020d9c8
GetFileVersionInfoSizeA
0x18020d9d8
VerQueryValueA
0x18020d9d0
CryptCATAdminAcquireContext
0x18020da08
CryptCATAdminCalcHashFromFileHandle
0x18020da28
CryptCATAdminEnumCatalogFromHash
0x18020da00
CryptCATAdminReleaseCatalogContext
0x18020da20
CryptCATAdminReleaseContext
0x18020da18
CryptCATCatalogInfoFromContext
0x18020da10
WinVerifyTrust
0x18020d9f8
WTHelperGetProvSignerFromChain
0x18020d9e8
WTHelperProvDataFromStateData
0x18020d9f0
WLDAP32.dll
18
0x18020da68
0x18020da70
0x18020da78
0x18020da80
0x18020da88
0x18020da90
0x18020da98
0x18020daa0
0x18020daa8
0x18020dab0
0x18020dab8
0x18020dac0
0x18020da38
0x18020da40
0x18020da48
0x18020da50
0x18020da58
0x18020da60
WS2_32.dll
35
__WSAFDIsSet
0x18020dae8
accept
0x18020dad8
bind
0x18020db60
closesocket
0x18020dbe0
connect
0x18020dba0
freeaddrinfo
0x18020db88
getaddrinfo
0x18020db38
gethostname
0x18020dbc0
getpeername
0x18020db58
getsockname
0x18020db50
getsockopt
0x18020db18
htonl
0x18020dad0
htons
0x18020db10
inet_ntop
0x18020db20
ioctlsocket
0x18020dbb8
listen
0x18020db30
ntohs
0x18020dba8
recv
0x18020db90
recvfrom
0x18020db28
select
0x18020dae0
send
0x18020db80
sendto
0x18020db78
setsockopt
0x18020db08
socket
0x18020dbb0
WSACleanup
0x18020daf0
WSACloseEvent
0x18020db48
WSACreateEvent
0x18020db98
WSAEnumNetworkEvents
0x18020dbd8
WSAEventSelect
0x18020dbd0
WSAGetLastError
0x18020db68
WSAIoctl
0x18020daf8
WSAResetEvent
0x18020dbc8
WSASetLastError
0x18020db00
WSAStartup
0x18020db40
WSAWaitForMultipleEvents
0x18020db70
WTSEnumerateSessionsA
0x18020dbf8
WTSEnumerateSessionsW
0x18020dc00
WTSFreeMemory
0x18020dbf0
WTSQuerySessionInformationW
0x18020dc08
WTSQueryUserToken
0x18020dc10
No function matches your filter.