Execution.dll

Description: [File deleted after analysis due to size limit > 20MB]

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: ce04ef13a8423084714e366d88c77251

File Size: 20.0 MB

Uploaded At: July 15, 2026, midnight

Views: 11

Exported Functions

No exported functions.

Imported DLLs & Functions

D3DCOMPILER_47.dll

D3DCompile (Address: 0x181bd9000)

dwmapi.dll

DwmEnableBlurBehindWindow (Address: 0x181bd9a68)
DwmGetColorizationColor (Address: 0x181bd9a58)
DwmIsCompositionEnabled (Address: 0x181bd9a60)

GDI32.dll

CreateRectRgn (Address: 0x181bd9070)
DeleteObject (Address: 0x181bd9060)
GetDeviceCaps (Address: 0x181bd9068)

IMM32.dll

ImmGetContext (Address: 0x181bd90d0)
ImmReleaseContext (Address: 0x181bd90d8)
ImmSetCandidateWindow (Address: 0x181bd90e8)
ImmSetCompositionWindow (Address: 0x181bd90e0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x181bd9458)
AreFileApisANSI (Address: 0x181bd95b8)
CloseHandle (Address: 0x181bd9198)
CloseThreadpoolTimer (Address: 0x181bd9680)
CloseThreadpoolWait (Address: 0x181bd9698)
CompareStringEx (Address: 0x181bd96a8)
CompareStringW (Address: 0x181bd9380)
CopyFileW (Address: 0x181bd95d0)
CreateDirectoryExW (Address: 0x181bd95c8)
CreateDirectoryW (Address: 0x181bd9538)
CreateEventExW (Address: 0x181bd9638)
CreateFileA (Address: 0x181bd9278)
CreateFileMappingA (Address: 0x181bd92a8)
CreateFileW (Address: 0x181bd9540)
CreateHardLinkW (Address: 0x181bd95e0)
CreatePipe (Address: 0x181bd92f8)
CreateProcessW (Address: 0x181bd93f0)
CreateSemaphoreExW (Address: 0x181bd9640)
CreateSymbolicLinkW (Address: 0x181bd95f0)
CreateThread (Address: 0x181bd9268)
CreateThreadpoolTimer (Address: 0x181bd9668)
CreateThreadpoolWait (Address: 0x181bd9688)
CreateToolhelp32Snapshot (Address: 0x181bd9218)
DecodePointer (Address: 0x181bd9620)
DeleteCriticalSection (Address: 0x181bd9610)
DeleteFileW (Address: 0x181bd92e8)
DeviceIoControl (Address: 0x181bd95c0)
DisableThreadLibraryCalls (Address: 0x181bd9270)
DuplicateHandle (Address: 0x181bd9418)
EncodePointer (Address: 0x181bd9618)
EnterCriticalSection (Address: 0x181bd95f8)
EnumSystemLocalesW (Address: 0x181bd9358)
ExitProcess (Address: 0x181bd9250)
FindClose (Address: 0x181bd9548)
FindFirstFileExW (Address: 0x181bd9558)
FindFirstFileW (Address: 0x181bd9550)
FindNextFileW (Address: 0x181bd9560)
FlsAlloc (Address: 0x181bd93c0)
FlsFree (Address: 0x181bd93a8)
FlsGetValue (Address: 0x181bd93b8)
FlsSetValue (Address: 0x181bd93b0)
FlushFileBuffers (Address: 0x181bd9348)
FlushInstructionCache (Address: 0x181bd9208)
FlushProcessWriteBuffers (Address: 0x181bd9648)
FormatMessageA (Address: 0x181bd9248)
FreeEnvironmentStringsW (Address: 0x181bd9438)
FreeLibrary (Address: 0x181bd9150)
FreeLibraryWhenCallbackReturns (Address: 0x181bd9660)
GetACP (Address: 0x181bd92d0)
GetCommandLineA (Address: 0x181bd92c0)
GetCommandLineW (Address: 0x181bd92b8)
GetConsoleMode (Address: 0x181bd9330)
GetConsoleOutputCP (Address: 0x181bd9338)
GetConsoleWindow (Address: 0x181bd9260)
GetCPInfo (Address: 0x181bd96b0)
GetCurrentDirectoryW (Address: 0x181bd9530)
GetCurrentProcess (Address: 0x181bd9178)
GetCurrentProcessId (Address: 0x181bd91d0)
GetCurrentProcessorNumber (Address: 0x181bd9650)
GetCurrentThread (Address: 0x181bd9350)
GetCurrentThreadId (Address: 0x181bd91d8)
GetDateFormatW (Address: 0x181bd9390)
GetDiskFreeSpaceExW (Address: 0x181bd9568)
GetEnvironmentStringsW (Address: 0x181bd92b0)
GetExitCodeProcess (Address: 0x181bd9300)
GetFileAttributesExW (Address: 0x181bd9578)
GetFileAttributesW (Address: 0x181bd9570)
GetFileInformationByHandle (Address: 0x181bd9580)
GetFileInformationByHandleEx (Address: 0x181bd95e8)
GetFileSizeEx (Address: 0x181bd9280)
GetFileType (Address: 0x181bd93d0)
GetFinalPathNameByHandleW (Address: 0x181bd9588)
GetFullPathNameW (Address: 0x181bd9590)
GetLastError (Address: 0x181bd9230)
GetLocaleInfoA (Address: 0x181bd9170)
GetLocaleInfoEx (Address: 0x181bd9520)
GetLocaleInfoW (Address: 0x181bd9370)
GetModuleFileNameA (Address: 0x181bd9238)
GetModuleFileNameW (Address: 0x181bd9460)
GetModuleHandleA (Address: 0x181bd9158)
GetModuleHandleExW (Address: 0x181bd9420)
GetModuleHandleW (Address: 0x181bd9210)
GetOEMCP (Address: 0x181bd92c8)
GetProcAddress (Address: 0x181bd9160)
GetProcessHeap (Address: 0x181bd9290)
GetStartupInfoW (Address: 0x181bd94f8)
GetStdHandle (Address: 0x181bd93d8)
GetStringTypeW (Address: 0x181bd96a0)
GetSystemInfo (Address: 0x181bd9180)
GetSystemTimeAsFileTime (Address: 0x181bd9500)
GetTempPathW (Address: 0x181bd95b0)
GetThreadContext (Address: 0x181bd91f8)
GetTickCount (Address: 0x181bd9258)
GetTickCount64 (Address: 0x181bd9658)
GetTimeFormatW (Address: 0x181bd9388)
GetTimeZoneInformation (Address: 0x181bd92f0)
GetUserDefaultLCID (Address: 0x181bd9360)
GlobalAlloc (Address: 0x181bd9430)
GlobalFree (Address: 0x181bd9408)
GlobalLock (Address: 0x181bd9410)
GlobalUnlock (Address: 0x181bd9428)
HeapAlloc (Address: 0x181bd91b0)
HeapCreate (Address: 0x181bd91a0)
HeapDestroy (Address: 0x181bd91a8)
HeapFree (Address: 0x181bd91c0)
HeapQueryInformation (Address: 0x181bd92e0)
HeapReAlloc (Address: 0x181bd91b8)
HeapSize (Address: 0x181bd93e8)
HeapValidate (Address: 0x181bd93e0)
InitializeCriticalSectionAndSpinCount (Address: 0x181bd9490)
InitializeCriticalSectionEx (Address: 0x181bd9608)
InitializeSListHead (Address: 0x181bd9508)
InitOnceExecuteOnce (Address: 0x181bd9630)
InterlockedFlushSList (Address: 0x181bd94a0)
InterlockedPushEntrySList (Address: 0x181bd94a8)
IsDebuggerPresent (Address: 0x181bd94f0)
IsProcessorFeaturePresent (Address: 0x181bd94e8)
IsThreadAFiber (Address: 0x181bd93a0)
IsValidCodePage (Address: 0x181bd92d8)
IsValidLocale (Address: 0x181bd9368)
LCMapStringEx (Address: 0x181bd9628)
LCMapStringW (Address: 0x181bd9378)
LeaveCriticalSection (Address: 0x181bd9600)
LoadLibraryA (Address: 0x181bd9168)
LoadLibraryExA (Address: 0x181bd9240)
LoadLibraryExW (Address: 0x181bd9468)
LocalFree (Address: 0x181bd9518)
MapViewOfFile (Address: 0x181bd9298)
MoveFileExW (Address: 0x181bd95d8)
MultiByteToWideChar (Address: 0x181bd9400)
OpenThread (Address: 0x181bd91e0)
OutputDebugStringW (Address: 0x181bd9318)
QueryPerformanceCounter (Address: 0x181bd92a0)
QueryPerformanceFrequency (Address: 0x181bd9148)
RaiseException (Address: 0x181bd96b8)
ReadConsoleW (Address: 0x181bd9328)
ReadFile (Address: 0x181bd9288)
ReleaseSRWLockExclusive (Address: 0x181bd94b0)
ResumeThread (Address: 0x181bd91f0)
SetConsoleCtrlHandler (Address: 0x181bd9310)
SetCurrentDirectoryW (Address: 0x181bd9528)
SetEndOfFile (Address: 0x181bd94b8)
SetEnvironmentVariableW (Address: 0x181bd9448)
SetFileAttributesW (Address: 0x181bd9598)
SetFileInformationByHandle (Address: 0x181bd95a0)
SetFilePointerEx (Address: 0x181bd9320)
SetFileTime (Address: 0x181bd95a8)
SetLastError (Address: 0x181bd9498)
SetStdHandle (Address: 0x181bd9440)
SetThreadContext (Address: 0x181bd9200)
SetThreadpoolTimer (Address: 0x181bd9670)
SetThreadpoolWait (Address: 0x181bd9690)
SetUnhandledExceptionFilter (Address: 0x181bd94d8)
Sleep (Address: 0x181bd91c8)
SleepConditionVariableSRW (Address: 0x181bd94c8)
SuspendThread (Address: 0x181bd91e8)
TerminateProcess (Address: 0x181bd94e0)
Thread32First (Address: 0x181bd9220)
Thread32Next (Address: 0x181bd9228)
TlsAlloc (Address: 0x181bd9488)
TlsFree (Address: 0x181bd9470)
TlsGetValue (Address: 0x181bd9480)
TlsSetValue (Address: 0x181bd9478)
TryAcquireSRWLockExclusive (Address: 0x181bd9510)
UnhandledExceptionFilter (Address: 0x181bd94d0)
UnmapViewOfFile (Address: 0x181bd9450)
VirtualFree (Address: 0x181bd9188)
VirtualProtect (Address: 0x181bd9398)
VirtualQuery (Address: 0x181bd9190)
WaitForSingleObject (Address: 0x181bd9308)
WaitForThreadpoolTimerCallbacks (Address: 0x181bd9678)
WakeAllConditionVariable (Address: 0x181bd94c0)
WideCharToMultiByte (Address: 0x181bd93f8)
WriteConsoleW (Address: 0x181bd93c8)
WriteFile (Address: 0x181bd9340)

ntdll.dll

NtAllocateVirtualMemory (Address: 0x181bd9af8)
NtProtectVirtualMemory (Address: 0x181bd9b00)
RtlCaptureContext (Address: 0x181bd9ac8)
RtlLookupFunctionEntry (Address: 0x181bd9ad0)
RtlPcToFileHeader (Address: 0x181bd9ae8)
RtlUnwind (Address: 0x181bd9af0)
RtlUnwindEx (Address: 0x181bd9ae0)
RtlVirtualUnwind (Address: 0x181bd9ad8)
VerSetConditionMask (Address: 0x181bd9b08)

SHELL32.dll

ShellExecuteW (Address: 0x181bd9830)

USER32.dll

CallWindowProcW (Address: 0x181bd9938)
ClientToScreen (Address: 0x181bd9970)
ClipCursor (Address: 0x181bd98e0)
CloseClipboard (Address: 0x181bd98c8)
DefWindowProcW (Address: 0x181bd9940)
EmptyClipboard (Address: 0x181bd98a0)
EnumWindows (Address: 0x181bd98f8)
GetAsyncKeyState (Address: 0x181bd9948)
GetCapture (Address: 0x181bd98d8)
GetClientRect (Address: 0x181bd9990)
GetClipboardData (Address: 0x181bd9898)
GetCursorPos (Address: 0x181bd9978)
GetDC (Address: 0x181bd99a0)
GetForegroundWindow (Address: 0x181bd99a8)
GetKeyboardLayout (Address: 0x181bd98d0)
GetKeyState (Address: 0x181bd98c0)
GetMessageExtraInfo (Address: 0x181bd98b8)
GetParent (Address: 0x181bd9910)
GetWindow (Address: 0x181bd98f0)
GetWindowLongPtrW (Address: 0x181bd9918)
GetWindowThreadProcessId (Address: 0x181bd9908)
IsIconic (Address: 0x181bd9920)
IsWindow (Address: 0x181bd9930)
IsWindowUnicode (Address: 0x181bd99b0)
IsWindowVisible (Address: 0x181bd9928)
LoadCursorA (Address: 0x181bd9960)
MonitorFromWindow (Address: 0x181bd99c0)
OpenClipboard (Address: 0x181bd98a8)
ReleaseCapture (Address: 0x181bd99b8)
ReleaseDC (Address: 0x181bd9998)
ScreenToClient (Address: 0x181bd9968)
SetCapture (Address: 0x181bd9958)
SetClipboardData (Address: 0x181bd9890)
SetCursor (Address: 0x181bd9980)
SetCursorPos (Address: 0x181bd9988)
SetProcessDPIAware (Address: 0x181bd9950)
SetWindowLongPtrW (Address: 0x181bd9900)
ShowCursor (Address: 0x181bd98e8)
TrackMouseEvent (Address: 0x181bd98b0)