payload.dll
Description:
Authors:
Version:
Architecture: 64-bit
Operating System:
SHA256: 257bda190139132bb1655981d3885eed
File Size: 200.5 KB
Uploaded At: Aug. 16, 2026, 11:15 p.m.
Views: 15
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- _GCC_specific_handler (Ordinal: 1, Address: 0x15d70)
- _Unwind_Backtrace (Ordinal: 2, Address: 0x161d0)
- _Unwind_DeleteException (Ordinal: 3, Address: 0x161b0)
- _Unwind_FindEnclosingFunction (Ordinal: 4, Address: 0x15d20)
- _Unwind_ForcedUnwind (Ordinal: 5, Address: 0x16180)
- _Unwind_GetCFA (Ordinal: 6, Address: 0x15cc0)
- _Unwind_GetDataRelBase (Ordinal: 7, Address: 0x15d50)
- _Unwind_GetGR (Ordinal: 8, Address: 0x15c80)
- _Unwind_GetIP (Ordinal: 9, Address: 0x15cd0)
- _Unwind_GetIPInfo (Ordinal: 10, Address: 0x15ce0)
- _Unwind_GetLanguageSpecificData (Ordinal: 11, Address: 0x15d00)
- _Unwind_GetRegionStart (Ordinal: 12, Address: 0x15d10)
- _Unwind_GetTextRelBase (Ordinal: 13, Address: 0x15d60)
- _Unwind_RaiseException (Ordinal: 14, Address: 0x16010)
- _Unwind_Resume (Ordinal: 15, Address: 0x16050)
- _Unwind_Resume_or_Rethrow (Ordinal: 16, Address: 0x16130)
- _Unwind_SetGR (Ordinal: 17, Address: 0x15ca0)
- _Unwind_SetIP (Ordinal: 18, Address: 0x15cf0)
- _Z10swprintf_sILy40EEiRAT__wPKwz (Ordinal: 19, Address: 0x24e30)
- _Z10swprintf_sILy96EEiRAT__wPKwz (Ordinal: 20, Address: 0x24e80)
- _ZN7Gdiplus10SolidBrushD0Ev (Ordinal: 21, Address: 0x25e80)
- _ZN7Gdiplus10SolidBrushD1Ev (Ordinal: 22, Address: 0x25eb0)
- _ZN7Gdiplus17PathGradientBrushD0Ev (Ordinal: 23, Address: 0x25ed0)
- _ZN7Gdiplus17PathGradientBrushD1Ev (Ordinal: 24, Address: 0x25f00)
- _ZN7Gdiplus19LinearGradientBrushD0Ev (Ordinal: 25, Address: 0x25f20)
- _ZN7Gdiplus19LinearGradientBrushD1Ev (Ordinal: 26, Address: 0x25f50)
- _ZN7Gdiplus5BrushD0Ev (Ordinal: 27, Address: 0x25f70)
- _ZN7Gdiplus5BrushD1Ev (Ordinal: 28, Address: 0x25fa0)
- _ZN7JNIEnv_13CallIntMethodEP8_jobjectP10_jmethodIDz (Ordinal: 29, Address: 0x25fc0)
- _ZN7JNIEnv_16CallObjectMethodEP8_jobjectP10_jmethodIDz (Ordinal: 30, Address: 0x25ff0)
- _ZNK7Gdiplus10SolidBrush5CloneEv (Ordinal: 31, Address: 0x26630)
- _ZNK7Gdiplus17PathGradientBrush5CloneEv (Ordinal: 32, Address: 0x26690)
- _ZNK7Gdiplus19LinearGradientBrush5CloneEv (Ordinal: 33, Address: 0x266f0)
- _ZNK7Gdiplus5Brush5CloneEv (Ordinal: 34, Address: 0x26750)
- _ZTIN7Gdiplus10SolidBrushE (Ordinal: 35, Address: 0x2c630)
- _ZTIN7Gdiplus11GdiplusBaseE (Ordinal: 36, Address: 0x2c650)
- _ZTIN7Gdiplus17PathGradientBrushE (Ordinal: 37, Address: 0x2c660)
- _ZTIN7Gdiplus19LinearGradientBrushE (Ordinal: 38, Address: 0x2c680)
- _ZTIN7Gdiplus5BrushE (Ordinal: 39, Address: 0x2c6a0)
- _ZTSN7Gdiplus10SolidBrushE (Ordinal: 40, Address: 0x2c860)
- _ZTSN7Gdiplus11GdiplusBaseE (Ordinal: 41, Address: 0x2c880)
- _ZTSN7Gdiplus17PathGradientBrushE (Ordinal: 42, Address: 0x2c8a0)
- _ZTSN7Gdiplus19LinearGradientBrushE (Ordinal: 43, Address: 0x2c8c0)
- _ZTSN7Gdiplus5BrushE (Ordinal: 44, Address: 0x2c8e0)
- _ZTVN7Gdiplus10SolidBrushE (Ordinal: 45, Address: 0x2cb60)
- _ZTVN7Gdiplus17PathGradientBrushE (Ordinal: 46, Address: 0x2cb90)
- _ZTVN7Gdiplus19LinearGradientBrushE (Ordinal: 47, Address: 0x2cbc0)
- _ZTVN7Gdiplus5BrushE (Ordinal: 48, Address: 0x2cbf0)
- __emutls_get_address (Ordinal: 49, Address: 0x16400)
- __emutls_register_common (Ordinal: 50, Address: 0x16660)
- _snprintf_s (Ordinal: 51, Address: 0x27030)
- swprintf_s (Ordinal: 52, Address: 0x27090)
Imported DLLs & Functions
api-ms-win-crt-convert-l1-1-0.dll
- _wtof (Address: 0x1db635b10)
- mbrtowc (Address: 0x1db635b18)
- mbsrtowcs (Address: 0x1db635b20)
- strtoul (Address: 0x1db635b28)
- wcrtomb (Address: 0x1db635b30)
api-ms-win-crt-environment-l1-1-0.dll
- getenv (Address: 0x1db635b40)
api-ms-win-crt-heap-l1-1-0.dll
- calloc (Address: 0x1db635b50)
- free (Address: 0x1db635b58)
- malloc (Address: 0x1db635b60)
- realloc (Address: 0x1db635b68)
api-ms-win-crt-locale-l1-1-0.dll
- localeconv (Address: 0x1db635b78)
api-ms-win-crt-private-l1-1-0.dll
- __intrinsic_setjmp (Address: 0x1db635b88)
- longjmp (Address: 0x1db635b90)
- memcmp (Address: 0x1db635b98)
- memcpy (Address: 0x1db635ba0)
- memmove (Address: 0x1db635ba8)
- strchr (Address: 0x1db635bb0)
- wcschr (Address: 0x1db635bb8)
api-ms-win-crt-runtime-l1-1-0.dll
- _assert (Address: 0x1db635bc8)
- _beginthreadex (Address: 0x1db635bd0)
- _endthreadex (Address: 0x1db635bd8)
- _errno (Address: 0x1db635be0)
- _execute_onexit_table (Address: 0x1db635be8)
- _exit (Address: 0x1db635bf0)
- _initialize_onexit_table (Address: 0x1db635bf8)
- _initterm (Address: 0x1db635c00)
- _initterm_e (Address: 0x1db635c08)
- _register_onexit_function (Address: 0x1db635c10)
- _set_errno (Address: 0x1db635c18)
- abort (Address: 0x1db635c20)
- strerror (Address: 0x1db635c28)
api-ms-win-crt-stdio-l1-1-0.dll
- __acrt_iob_func (Address: 0x1db635c38)
- __stdio_common_vfprintf (Address: 0x1db635c40)
- __stdio_common_vsnprintf_s (Address: 0x1db635c48)
- __stdio_common_vsprintf (Address: 0x1db635c50)
- __stdio_common_vswprintf_s (Address: 0x1db635c58)
- _fileno (Address: 0x1db635c60)
- _setmode (Address: 0x1db635c68)
- fflush (Address: 0x1db635c70)
- fputc (Address: 0x1db635c78)
- fputs (Address: 0x1db635c80)
- fwrite (Address: 0x1db635c88)
api-ms-win-crt-string-l1-1-0.dll
- _strdup (Address: 0x1db635c98)
- memset (Address: 0x1db635ca0)
- strcmp (Address: 0x1db635ca8)
- strlen (Address: 0x1db635cb0)
- strncmp (Address: 0x1db635cb8)
- strncpy_s (Address: 0x1db635cc0)
- strnlen (Address: 0x1db635cc8)
- wcscpy_s (Address: 0x1db635cd0)
- wcslen (Address: 0x1db635cd8)
- wcsncpy_s (Address: 0x1db635ce0)
- wcsnlen (Address: 0x1db635ce8)
GDI32.dll
- BitBlt (Address: 0x1db6357c0)
- CreateCompatibleBitmap (Address: 0x1db6357c8)
- CreateCompatibleDC (Address: 0x1db6357d0)
- CreateRoundRectRgn (Address: 0x1db6357d8)
- DeleteDC (Address: 0x1db6357e0)
- DeleteObject (Address: 0x1db6357e8)
- SelectObject (Address: 0x1db6357f0)
gdiplus.dll
- GdipAddPathArc (Address: 0x1db635800)
- GdipAddPathEllipse (Address: 0x1db635808)
- GdipAlloc (Address: 0x1db635810)
- GdipCloneBrush (Address: 0x1db635818)
- GdipClosePathFigure (Address: 0x1db635820)
- GdipCreateFont (Address: 0x1db635828)
- GdipCreateFontFamilyFromName (Address: 0x1db635830)
- GdipCreateFromHDC (Address: 0x1db635838)
- GdipCreateLineBrush (Address: 0x1db635840)
- GdipCreatePath (Address: 0x1db635848)
- GdipCreatePathGradientFromPath (Address: 0x1db635850)
- GdipCreatePen1 (Address: 0x1db635858)
- GdipCreateSolidFill (Address: 0x1db635860)
- GdipCreateStringFormat (Address: 0x1db635868)
- GdipDeleteBrush (Address: 0x1db635870)
- GdipDeleteFontFamily (Address: 0x1db635878)
- GdipDeleteGraphics (Address: 0x1db635880)
- GdipDeletePath (Address: 0x1db635888)
- GdipDeletePen (Address: 0x1db635890)
- GdipDeleteStringFormat (Address: 0x1db635898)
- GdipDrawEllipse (Address: 0x1db6358a0)
- GdipDrawLine (Address: 0x1db6358a8)
- GdipDrawPath (Address: 0x1db6358b0)
- GdipDrawRectangle (Address: 0x1db6358b8)
- GdipDrawString (Address: 0x1db6358c0)
- GdipFillEllipse (Address: 0x1db6358c8)
- GdipFillPath (Address: 0x1db6358d0)
- GdipFillRectangle (Address: 0x1db6358d8)
- GdipFree (Address: 0x1db6358e0)
- GdiplusShutdown (Address: 0x1db635920)
- GdiplusStartup (Address: 0x1db635928)
- GdipMeasureString (Address: 0x1db6358e8)
- GdipSetPathGradientCenterColor (Address: 0x1db6358f0)
- GdipSetPathGradientSurroundColorsWithCount (Address: 0x1db6358f8)
- GdipSetSmoothingMode (Address: 0x1db635900)
- GdipSetStringFormatAlign (Address: 0x1db635908)
- GdipSetStringFormatLineAlign (Address: 0x1db635910)
- GdipSetTextRenderingHint (Address: 0x1db635918)
KERNEL32.dll
- CloseHandle (Address: 0x1db635938)
- CreateEventA (Address: 0x1db635940)
- CreateSemaphoreA (Address: 0x1db635948)
- CreateThread (Address: 0x1db635950)
- DeleteCriticalSection (Address: 0x1db635958)
- DisableThreadLibraryCalls (Address: 0x1db635960)
- DuplicateHandle (Address: 0x1db635968)
- EnterCriticalSection (Address: 0x1db635970)
- FileTimeToSystemTime (Address: 0x1db635978)
- FreeLibrary (Address: 0x1db635980)
- FreeLibraryAndExitThread (Address: 0x1db635988)
- GetCurrentProcess (Address: 0x1db635990)
- GetCurrentProcessId (Address: 0x1db635998)
- GetCurrentThread (Address: 0x1db6359a0)
- GetCurrentThreadId (Address: 0x1db6359a8)
- GetLastError (Address: 0x1db6359b0)
- GetModuleHandleA (Address: 0x1db6359b8)
- GetProcAddress (Address: 0x1db6359c0)
- GetProcessAffinityMask (Address: 0x1db6359c8)
- GetProcessTimes (Address: 0x1db6359d0)
- GetSystemTimeAdjustment (Address: 0x1db6359d8)
- GetSystemTimeAsFileTime (Address: 0x1db6359e0)
- GetThreadContext (Address: 0x1db6359e8)
- GetThreadPriority (Address: 0x1db6359f0)
- GetThreadTimes (Address: 0x1db6359f8)
- GetTickCount (Address: 0x1db635a00)
- InitializeCriticalSection (Address: 0x1db635a08)
- LeaveCriticalSection (Address: 0x1db635a10)
- LoadLibraryA (Address: 0x1db635a18)
- MultiByteToWideChar (Address: 0x1db635a20)
- OpenProcess (Address: 0x1db635a28)
- OutputDebugStringA (Address: 0x1db635a30)
- QueryPerformanceCounter (Address: 0x1db635a38)
- QueryPerformanceFrequency (Address: 0x1db635a40)
- RaiseException (Address: 0x1db635a48)
- ReleaseSemaphore (Address: 0x1db635a50)
- ResetEvent (Address: 0x1db635a58)
- ResumeThread (Address: 0x1db635a60)
- RtlCaptureContext (Address: 0x1db635a68)
- RtlLookupFunctionEntry (Address: 0x1db635a70)
- RtlUnwindEx (Address: 0x1db635a78)
- RtlVirtualUnwind (Address: 0x1db635a80)
- SetEvent (Address: 0x1db635a88)
- SetLastError (Address: 0x1db635a90)
- SetProcessAffinityMask (Address: 0x1db635a98)
- SetSystemTime (Address: 0x1db635aa0)
- SetThreadContext (Address: 0x1db635aa8)
- SetThreadPriority (Address: 0x1db635ab0)
- Sleep (Address: 0x1db635ab8)
- SuspendThread (Address: 0x1db635ac0)
- TlsAlloc (Address: 0x1db635ac8)
- TlsGetValue (Address: 0x1db635ad0)
- TlsSetValue (Address: 0x1db635ad8)
- TryEnterCriticalSection (Address: 0x1db635ae0)
- VirtualProtect (Address: 0x1db635ae8)
- VirtualQuery (Address: 0x1db635af0)
- WaitForMultipleObjects (Address: 0x1db635af8)
- WaitForSingleObject (Address: 0x1db635b00)
USER32.dll
- BeginPaint (Address: 0x1db635cf8)
- CallNextHookEx (Address: 0x1db635d00)
- CreateWindowExW (Address: 0x1db635d08)
- DefWindowProcW (Address: 0x1db635d10)
- DestroyWindow (Address: 0x1db635d18)
- DispatchMessageW (Address: 0x1db635d20)
- EndPaint (Address: 0x1db635d28)
- EnumWindows (Address: 0x1db635d30)
- GetAsyncKeyState (Address: 0x1db635d38)
- GetForegroundWindow (Address: 0x1db635d40)
- GetKeyNameTextW (Address: 0x1db635d48)
- GetMessageW (Address: 0x1db635d50)
- GetSystemMetrics (Address: 0x1db635d58)
- GetWindow (Address: 0x1db635d60)
- GetWindowTextA (Address: 0x1db635d68)
- GetWindowThreadProcessId (Address: 0x1db635d70)
- InvalidateRect (Address: 0x1db635d78)
- IsWindow (Address: 0x1db635d80)
- IsWindowVisible (Address: 0x1db635d88)
- KillTimer (Address: 0x1db635d90)
- LoadCursorA (Address: 0x1db635d98)
- MapVirtualKeyW (Address: 0x1db635da0)
- PostMessageW (Address: 0x1db635da8)
- PostQuitMessage (Address: 0x1db635db0)
- PostThreadMessageW (Address: 0x1db635db8)
- RegisterClassExW (Address: 0x1db635dc0)
- ReleaseCapture (Address: 0x1db635dc8)
- SendInput (Address: 0x1db635dd0)
- SendMessageW (Address: 0x1db635dd8)
- SetCapture (Address: 0x1db635de0)
- SetFocus (Address: 0x1db635de8)
- SetLayeredWindowAttributes (Address: 0x1db635df0)
- SetTimer (Address: 0x1db635df8)
- SetWindowPos (Address: 0x1db635e00)
- SetWindowRgn (Address: 0x1db635e08)
- SetWindowsHookExW (Address: 0x1db635e10)
- ShowWindow (Address: 0x1db635e18)
- TrackMouseEvent (Address: 0x1db635e20)
- TranslateMessage (Address: 0x1db635e28)
- UnhookWindowsHookEx (Address: 0x1db635e30)
- UnregisterClassW (Address: 0x1db635e38)
- UpdateWindow (Address: 0x1db635e40)
WINMM.dll
- timeBeginPeriod (Address: 0x1db635e50)
- timeEndPeriod (Address: 0x1db635e58)