InjectedMouse.dll

Description: [File deleted after analysis due to size limit > 20MB]

Authors:

Version: 1.0.0.0

Architecture: 64-bit

Operating System: Windows

SHA256: 40dafa2f3e4c162cbd8bf43228a6c687

File Size: 23.0 MB

Uploaded At: Aug. 17, 2026, 10:06 p.m.

Views: 14

Exported Functions

DllGetClassObject (Ordinal: 1, Address: 0x1013ee0)
RHBinder__ShimExeMain (Ordinal: 2, Address: 0xca1db0)

Imported DLLs & Functions

advapi32.dll

CryptAcquireContextW (Address: 0x180a80640)
CryptDestroyKey (Address: 0x180a806b8)
CryptGenKey (Address: 0x180a80668)
CryptGetDefaultProviderW (Address: 0x180a80690)
CryptGetKeyParam (Address: 0x180a80698)
CryptGetProvParam (Address: 0x180a80680)
CryptGetUserKey (Address: 0x180a80688)
CryptImportKey (Address: 0x180a80678)
CryptReleaseContext (Address: 0x180a806c0)
CryptSetProvParam (Address: 0x180a80670)
DuplicateTokenEx (Address: 0x180a80660)
GetTokenInformation (Address: 0x180a80638)
ImpersonateLoggedOnUser (Address: 0x180a80620)
LsaClose (Address: 0x180a806a8)
LsaFreeMemory (Address: 0x180a806b0)
LsaLookupNames2 (Address: 0x180a80650)
LsaLookupSids (Address: 0x180a80658)
LsaNtStatusToWinError (Address: 0x180a806a0)
LsaOpenPolicy (Address: 0x180a80648)
OpenProcessToken (Address: 0x180a80628)
OpenThreadToken (Address: 0x180a80630)
RevertToSelf (Address: 0x180a80618)

api-ms-win-core-localization-l1-2-0.dll

IsValidLocaleName (Address: 0x180a80ad8)
ResolveLocaleName (Address: 0x180a80ae0)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180a80a38)
RoInitialize (Address: 0x180a80a30)

api-ms-win-core-winrt-robuffer-l1-1-0.dll

RoGetBufferMarshaler (Address: 0x180a80ab8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateStringReference (Address: 0x180a80ac8)

BCrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x180a80820)
BCryptCreateHash (Address: 0x180a80800)
BCryptDestroyHash (Address: 0x180a80818)
BCryptDestroyKey (Address: 0x180a80810)
BCryptExportKey (Address: 0x180a80808)
BCryptGenRandom (Address: 0x180a807e8)
BCryptGetProperty (Address: 0x180a807f8)
BCryptOpenAlgorithmProvider (Address: 0x180a807f0)

crypt32.dll

CertAddCertificateLinkToStore (Address: 0x180a80920)
CertCloseStore (Address: 0x180a809c0)
CertControlStore (Address: 0x180a80980)
CertDuplicateCertificateContext (Address: 0x180a80908)
CertEnumCertificatesInStore (Address: 0x180a80918)
CertFindCertificateInStore (Address: 0x180a80940)
CertFindExtension (Address: 0x180a80950)
CertFreeCertificateChain (Address: 0x180a809d0)
CertFreeCertificateContext (Address: 0x180a809c8)
CertGetCertificateChain (Address: 0x180a80930)
CertGetCertificateContextProperty (Address: 0x180a80910)
CertGetIntendedKeyUsage (Address: 0x180a80948)
CertGetNameStringW (Address: 0x180a80978)
CertGetValidUsages (Address: 0x180a80960)
CertNameToStrW (Address: 0x180a809b0)
CertOpenStore (Address: 0x180a80938)
CertVerifyCertificateChainPolicy (Address: 0x180a80928)
CertVerifyTimeValidity (Address: 0x180a80970)
CryptDecodeObject (Address: 0x180a80958)
CryptFindOIDInfo (Address: 0x180a80968)
CryptFormatObject (Address: 0x180a809a8)
CryptImportPublicKeyInfoEx2 (Address: 0x180a809a0)
CryptMsgClose (Address: 0x180a809b8)
CryptMsgGetParam (Address: 0x180a80988)
CryptQueryObject (Address: 0x180a80998)
PFXImportCertStore (Address: 0x180a80990)

iphlpapi.dll

GetNetworkParams (Address: 0x180a809e0)

kernel32.dll

CheckTokenMembershipEx (Address: 0x180a80718)
CloseHandle (Address: 0x180a80778)
CopyFileExW (Address: 0x180a80738)
CreateDirectoryW (Address: 0x180a80748)
CreateFile2 (Address: 0x180a80730)
DuplicateHandle (Address: 0x180a806e8)
FindClose (Address: 0x180a807b8)
FindFirstFileExW (Address: 0x180a80700)
FormatMessageW (Address: 0x180a806d0)
GetConsoleCP (Address: 0x180a80798)
GetConsoleMode (Address: 0x180a80768)
GetConsoleOutputCP (Address: 0x180a80790)
GetConsoleScreenBufferInfo (Address: 0x180a807a8)
GetCPInfoExW (Address: 0x180a807d8)
GetCurrentProcess (Address: 0x180a806e0)
GetCurrentProcessId (Address: 0x180a807a0)
GetCurrentThread (Address: 0x180a806d8)
GetFileAttributesExW (Address: 0x180a80708)
GetFileType (Address: 0x180a80760)
GetStdHandle (Address: 0x180a80758)
LocalAlloc (Address: 0x180a806f0)
LocalFree (Address: 0x180a80770)
MultiByteToWideChar (Address: 0x180a807d0)
ReadConsoleW (Address: 0x180a80728)
ReadFile (Address: 0x180a80788)
SetConsoleMode (Address: 0x180a807c0)
SetConsoleTextAttribute (Address: 0x180a807b0)
SetFileAttributesW (Address: 0x180a80750)
SetFileCompletionNotificationModes (Address: 0x180a80710)
SetFileInformationByHandle (Address: 0x180a80740)
SetThreadErrorMode (Address: 0x180a806f8)
WideCharToMultiByte (Address: 0x180a807c8)
WriteConsoleW (Address: 0x180a80720)
WriteFile (Address: 0x180a80780)

mrt100_app.dll

__chkstk (Address: 0x180a805c8)
RhAllocLocal (Address: 0x180a804f0)
RhArrayStoreCheckAny (Address: 0x180a805c0)
RhBoxAny (Address: 0x180a805a0)
RhBulkMoveWithWriteBarrier (Address: 0x180a805b8)
RhHandleSet (Address: 0x180a805d0)
RhpAssignRefEDX (Address: 0x180a804a8)
RhpCheckCctor2 (Address: 0x180a804b0)
RhpCheckedAssignRefEDX (Address: 0x180a804d8)
RhpCheckedLockCmpXchg (Address: 0x180a80570)
RhpCheckedXchg (Address: 0x180a80590)
RhpCopyAnyWithWriteBarrier (Address: 0x180a805a8)
RhpCopyMultibyte (Address: 0x180a80538)
RhpCopyMultibyteNoGCRefs (Address: 0x180a80600)
RhpCopyMultibyteWithWriteBarrier (Address: 0x180a804e8)
RhpDblRemRev (Address: 0x180a805f8)
RhpGetThread (Address: 0x180a805d8)
RhpInitialInterfaceDispatch (Address: 0x180a804c8)
RhpInitMultibyte (Address: 0x180a804f8)
RhpLoopHijack (Address: 0x180a80608)
RhpNewArray (Address: 0x180a804a0)
RhpNewFast (Address: 0x180a80498)
RhpNewFinalizable (Address: 0x180a804b8)
RhpPInvokeExceptionGuard (Address: 0x180a80510)
RhpRegisterModule (Address: 0x180a80520)
RhpResolveInterfaceMethod (Address: 0x180a804d0)
RhpRethrow (Address: 0x180a80568)
RhpReversePInvoke (Address: 0x180a80500)
RhpReversePInvokeReturn (Address: 0x180a80508)
RhpSuppressGcStress (Address: 0x180a80518)
RhpThrowEx (Address: 0x180a80548)
RhpTrapThreads (Address: 0x180a805e0)
RhpUnsuppressGcStress (Address: 0x180a80528)
RhpWaitForGC (Address: 0x180a805f0)
RhpWaitForSuspend (Address: 0x180a805e8)
RhTypeCast_CheckArrayStore (Address: 0x180a804c0)
RhTypeCast_CheckCast (Address: 0x180a80530)
RhTypeCast_CheckCastArray (Address: 0x180a80540)
RhTypeCast_CheckCastClass (Address: 0x180a804e0)
RhTypeCast_CheckCastInterface (Address: 0x180a80580)
RhTypeCast_CheckUnbox (Address: 0x180a80560)
RhTypeCast_CheckVectorElemAddr (Address: 0x180a80578)
RhTypeCast_IsInstanceOf (Address: 0x180a80550)
RhTypeCast_IsInstanceOfArray (Address: 0x180a80588)
RhTypeCast_IsInstanceOfClass (Address: 0x180a80558)
RhTypeCast_IsInstanceOfInterface (Address: 0x180a80598)
RhUnboxAny (Address: 0x180a805b0)

ncrypt.dll

NCryptDeleteKey (Address: 0x180a809f0)
NCryptFreeObject (Address: 0x180a80a20)
NCryptGetProperty (Address: 0x180a80a10)
NCryptImportKey (Address: 0x180a80a18)
NCryptOpenKey (Address: 0x180a809f8)
NCryptOpenStorageProvider (Address: 0x180a80a00)
NCryptSetProperty (Address: 0x180a80a08)

SharedLibrary.dll

$NEAT$ (Address: 0x180a80488)
CreateCommandLine (Address: 0x180a80480)

sspicli.dll

AcceptSecurityContext (Address: 0x180a80a58)
AcquireCredentialsHandleW (Address: 0x180a80a48)
ApplyControlToken (Address: 0x180a80a80)
DecryptMessage (Address: 0x180a80a68)
DeleteSecurityContext (Address: 0x180a80a90)
EncryptMessage (Address: 0x180a80a70)
EnumerateSecurityPackagesW (Address: 0x180a80a60)
FreeContextBuffer (Address: 0x180a80aa0)
FreeCredentialsHandle (Address: 0x180a80a98)
InitializeSecurityContextW (Address: 0x180a80a50)
LsaFreeReturnBuffer (Address: 0x180a80aa8)
LsaGetLogonSessionData (Address: 0x180a80a78)
QueryContextAttributesW (Address: 0x180a80a88)

ws2_32.dll

accept (Address: 0x180a808d8)
bind (Address: 0x180a808e0)
closesocket (Address: 0x180a808a0)
freeaddrinfo (Address: 0x180a808f8)
FreeAddrInfoExW (Address: 0x180a808b0)
GetAddrInfoExW (Address: 0x180a808d0)
GetAddrInfoW (Address: 0x180a808a8)
gethostname (Address: 0x180a80890)
GetNameInfoW (Address: 0x180a808b8)
getpeername (Address: 0x180a80838)
getsockname (Address: 0x180a80848)
getsockopt (Address: 0x180a80880)
ioctlsocket (Address: 0x180a80858)
listen (Address: 0x180a808e8)
recv (Address: 0x180a80868)
select (Address: 0x180a80840)
send (Address: 0x180a808f0)
setsockopt (Address: 0x180a80850)
shutdown (Address: 0x180a80870)
WSAConnect (Address: 0x180a80878)
WSAGetOverlappedResult (Address: 0x180a80830)
WSAIoctl (Address: 0x180a80860)
WSARecv (Address: 0x180a808c8)
WSASend (Address: 0x180a808c0)
WSASocketW (Address: 0x180a80888)
WSAStartup (Address: 0x180a80898)