Aurora17RedirectShim.dll
v0.1.0.0
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 17
GetFileVersionInfoA
#1 · 0xbec0
GetFileVersionInfoByHandle
#2 · 0xbf20
GetFileVersionInfoExA
#3 · 0xbf80
GetFileVersionInfoExW
#4 · 0xbff0
GetFileVersionInfoSizeA
#5 · 0xc060
GetFileVersionInfoSizeExA
#6 · 0xc0b0
GetFileVersionInfoSizeExW
#7 · 0xc110
GetFileVersionInfoSizeW
#8 · 0xc170
GetFileVersionInfoW
#9 · 0xc1c0
VerFindFileA
#10 · 0xc220
VerFindFileW
#11 · 0xc2b0
VerInstallFileA
#12 · 0xc340
VerInstallFileW
#13 · 0xc3d0
VerLanguageNameA
#14 · 0xc460
VerLanguageNameW
#15 · 0xc4c0
VerQueryValueA
#16 · 0xc520
VerQueryValueW
#17 · 0xc580
No function matches your filter.
Imported DLLs & functions 118
BCryptCloseAlgorithmProvider
0x1800243a0
BCryptCreateHash
0x180024388
BCryptDestroyHash
0x180024398
BCryptFinishHash
0x1800243a8
BCryptGenRandom
0x1800243b0
BCryptGetProperty
0x180024390
BCryptHashData
0x1800243c0
BCryptOpenAlgorithmProvider
0x1800243b8
KERNEL32.dll
103
CloseHandle
0x180024150
CompareStringOrdinal
0x1800240e8
CreateDirectoryW
0x180024060
CreateFileW
0x1800240f8
CreateThread
0x180024158
DeleteCriticalSection
0x180024280
DisableThreadLibraryCalls
0x180024148
EncodePointer
0x180024268
EnterCriticalSection
0x180024270
ExitProcess
0x1800242b0
FindClose
0x1800242c0
FindFirstFileExW
0x1800242c8
FindNextFileW
0x1800242d0
FlsAlloc
0x180024328
FlsFree
0x180024340
FlsGetValue
0x180024330
FlsSetValue
0x180024338
FlushFileBuffers
0x180024038
FlushInstructionCache
0x1800241a0
FreeEnvironmentStringsW
0x180024320
FreeLibrary
0x180024198
GetACP
0x1800242e0
GetCommandLineA
0x1800242f8
GetCommandLineW
0x180024300
GetConsoleMode
0x180024028
GetConsoleOutputCP
0x180024030
GetCPInfo
0x1800242f0
GetCurrentProcess
0x1800240b0
GetCurrentProcessId
0x180024180
GetCurrentThreadId
0x180024228
GetEnvironmentStringsW
0x180024318
GetEnvironmentVariableW
0x1800240f0
GetExitCodeProcess
0x1800241e0
GetFileInformationByHandleEx
0x180024078
GetFileSizeEx
0x180024080
GetFileType
0x1800241b8
GetLastError
0x180024130
GetModuleFileNameW
0x1800240d8
GetModuleHandleExW
0x1800240c0
GetModuleHandleW
0x180024190
GetNamedPipeServerProcessId
0x180024168
GetOEMCP
0x1800242e8
GetProcAddress
0x180024170
GetProcessHeap
0x180024188
GetStartupInfoW
0x180024240
GetStdHandle
0x1800242b8
GetStringTypeW
0x180024058
GetSystemDirectoryW
0x180024108
GetSystemTime
0x1800241c0
GetSystemTimeAsFileTime
0x1800241b0
GetTickCount64
0x180024128
HeapAlloc
0x180024160
HeapFree
0x180024098
HeapReAlloc
0x180024040
HeapSize
0x180024048
InitializeCriticalSectionAndSpinCount
0x180024288
InitializeCriticalSectionEx
0x180024348
InitializeSListHead
0x180024230
InitOnceExecuteOnce
0x180024088
InterlockedFlushSList
0x180024260
IsDebuggerPresent
0x180024238
IsProcessorFeaturePresent
0x180024218
IsValidCodePage
0x1800242d8
LCMapStringW
0x180024350
LeaveCriticalSection
0x180024278
LoadLibraryExW
0x1800241d8
MultiByteToWideChar
0x180024308
OpenEventW
0x180024100
OpenProcess
0x180024110
OutputDebugStringA
0x1800240c8
ProcessIdToSessionId
0x180024118
QueryFullProcessImageNameW
0x1800241a8
QueryPerformanceCounter
0x180024220
RaiseException
0x180024258
RaiseFailFastException
0x180024138
ReadFile
0x180024068
RtlCaptureContext
0x1800241e8
RtlLookupFunctionEntry
0x1800241f0
RtlPcToFileHeader
0x180024250
RtlUnwindEx
0x180024248
RtlVirtualUnwind
0x1800241f8
SetEnvironmentVariableW
0x1800240e0
SetEvent
0x180024140
SetFilePointerEx
0x180024178
SetLastError
0x1800240a0
SetNamedPipeHandleState
0x180024070
SetStdHandle
0x180024050
SetUnhandledExceptionFilter
0x180024208
Sleep
0x180024120
TerminateProcess
0x180024210
TlsAlloc
0x180024290
TlsFree
0x1800242a8
TlsGetValue
0x180024298
TlsSetValue
0x1800242a0
UnhandledExceptionFilter
0x180024200
VirtualAlloc
0x1800240d0
VirtualFree
0x1800240a8
VirtualProtect
0x180024090
VirtualQuery
0x1800241d0
WaitNamedPipeW
0x1800241c8
WideCharToMultiByte
0x180024310
WriteConsoleW
0x180024020
WriteFile
0x1800240b8
No function matches your filter.