krnl.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported functions 16
IndiciumEngineAllocCustomContext
#1 · 0xb7b80
IndiciumEngineCreate
#2 · 0xb79b0
IndiciumEngineDestroy
#3 · 0xb7ae0
IndiciumEngineFreeCustomContext
#4 · 0xb7bf0
IndiciumEngineGetCustomContext
#5 · 0xb7c20
IndiciumEngineGetHandleFromD3D9Device
#6 · 0xb7c70
IndiciumEngineGetHandleFromD3D9ExDevice
#7 · 0xb7c70
IndiciumEngineLogDebug
#8 · 0x65e0
IndiciumEngineLogError
#9 · 0x65e0
IndiciumEngineLogInfo
#10 · 0x65e0
IndiciumEngineLogWarning
#11 · 0x65e0
IndiciumEngineSetARCEventCallbacks
#12 · 0xb7d60
IndiciumEngineSetD3D10EventCallbacks
#13 · 0xb7ce0
IndiciumEngineSetD3D11EventCallbacks
#14 · 0xb7d00
IndiciumEngineSetD3D12EventCallbacks
#15 · 0xb7d30
IndiciumEngineSetD3D9EventCallbacks
#16 · 0xb7c40
No function matches your filter.
Imported DLLs & functions 418
ADVAPI32.dll
15
AdjustTokenPrivileges
0x1069f0cc
CryptAcquireContextA
0x1069f0c4
CryptCreateHash
0x1069f0b4
CryptDestroyHash
0x1069f0b0
CryptGenRandom
0x1069f0b8
CryptGetHashParam
0x1069f0bc
CryptHashData
0x1069f0c8
CryptReleaseContext
0x1069f0c0
LookupPrivilegeValueA
0x1069f0d0
OpenProcessToken
0x1069f0d4
RegCloseKey
0x1069f0d8
RegCreateKeyExA
0x1069f0e0
RegGetValueA
0x1069f0dc
RegOpenKeyExA
0x1069f0e8
RegSetValueExA
0x1069f0e4
CRYPT32.dll
13
CertAddCertificateContextToStore
0x1069f098
CertCloseStore
0x1069f078
CertCreateCertificateChainEngine
0x1069f08c
CertEnumCertificatesInStore
0x1069f07c
CertFindCertificateInStore
0x1069f0a0
CertFreeCertificateChain
0x1069f0a4
CertFreeCertificateChainEngine
0x1069f088
CertFreeCertificateContext
0x1069f080
CertGetCertificateChain
0x1069f084
CertGetNameStringA
0x1069f094
CertOpenStore
0x1069f0a8
CryptQueryObject
0x1069f090
CryptStringToBinaryA
0x1069f09c
D3DCompile
0x1069f460
ImageNtHeader
0x1069f438
StackWalk
0x1069f428
SymCleanup
0x1069f440
SymFunctionTableAccess
0x1069f434
SymGetLineFromAddr
0x1069f43c
SymGetModuleBase
0x1069f430
SymGetSymFromAddr
0x1069f444
SymInitialize
0x1069f42c
UnDecorateSymbolName
0x1069f448
ImmGetContext
0x1069f458
ImmReleaseContext
0x1069f450
ImmSetCompositionWindow
0x1069f454
KERNEL32.dll
288
AcquireSRWLockExclusive
0x1069f2b8
AllocConsole
0x1069f14c
AreFileApisANSI
0x1069f2d4
CloseHandle
0x1069f4fc
CloseHandle
0x1069f0f4
CompareStringW
0x1069f318
ConnectNamedPipe
0x1069f114
CopyFileW
0x1069f2d0
CreateDirectoryW
0x1069f380
CreateEventA
0x1069f260
CreateEventA
0x1069f4d0
CreateEventW
0x1069f208
CreateFileA
0x1069f368
CreateFileA
0x1069f5b0
CreateFileW
0x1069f5a0
CreateFileW
0x1069f384
CreateMutexA
0x1069f164
CreateNamedPipeA
0x1069f10c
CreateThread
0x1069f170
CreateToolhelp32Snapshot
0x1069f198
CreateToolhelp32Snapshot
0x1069f4e4
DecodePointer
0x1069f290
DeleteCriticalSection
0x1069f340
DeleteCriticalSection
0x1069f560
DisableThreadLibraryCalls
0x1069f16c
DisconnectNamedPipe
0x1069f110
EncodePointer
0x1069f294
EnterCriticalSection
0x1069f334
EnterCriticalSection
0x1069f554
EnumResourceLanguagesA
0x1069f590
EnumResourceLanguagesW
0x1069f594
EnumResourceNamesA
0x1069f588
EnumResourceNamesW
0x1069f58c
EnumResourceTypesA
0x1069f598
EnumResourceTypesW
0x1069f59c
EnumSystemLocalesW
0x1069f284
ExitProcess
0x1069f1d8
ExitProcess
0x1069f6a4
ExitProcess
0x1069f550
ExitThread
0x1069f1dc
ExpandEnvironmentStringsA
0x1069f354
FileTimeToSystemTime
0x1069f2f4
FileTimeToSystemTime
0x1069f53c
FillConsoleOutputAttribute
0x1069f140
FillConsoleOutputCharacterA
0x1069f134
FindClose
0x1069f370
FindFirstFileExW
0x1069f388
FindNextFileW
0x1069f374
FindResourceExA
0x1069f574
FindResourceExW
0x1069f570
FlushFileBuffers
0x1069f5ac
FlushFileBuffers
0x1069f30c
FlushInstructionCache
0x1069f1b0
FormatMessageA
0x1069f178
FreeConsole
0x1069f13c
FreeEnvironmentStringsA
0x1069f628
FreeEnvironmentStringsW
0x1069f630
FreeEnvironmentStringsW
0x1069f23c
FreeLibrary
0x1069f328
FreeLibrary
0x1069f6a8
FreeLibrary
0x1069f530
FreeLibraryAndExitThread
0x1069f1cc
GetACP
0x1069f250
GetACP
0x1069f5dc
GetCommandLineA
0x1069f5c0
GetCommandLineA
0x1069f248
GetCommandLineW
0x1069f244
GetComputerNameA
0x1069f270
GetConsoleCP
0x1069f1f8
GetConsoleCP
0x1069f660
GetConsoleMode
0x1069f664
GetConsoleMode
0x1069f2ec
GetConsoleOutputCP
0x1069f5b8
GetConsoleScreenBufferInfo
0x1069f138
GetConsoleWindow
0x1069f128
GetCPInfo
0x1069f5d0
GetCPInfo
0x1069f224
GetCurrentDirectoryW
0x1069f37c
GetCurrentProcess
0x1069f264
GetCurrentProcess
0x1069f4e0
GetCurrentProcessId
0x1069f4ec
GetCurrentProcessId
0x1069f100
GetCurrentThread
0x1069f0f0
GetCurrentThread
0x1069f524
GetCurrentThreadId
0x1069f4f0
GetCurrentThreadId
0x1069f18c
GetDateFormatW
0x1069f310
GetDriveTypeW
0x1069f2fc
GetEnvironmentStrings
0x1069f62c
GetEnvironmentStringsW
0x1069f634
GetEnvironmentStringsW
0x1069f240
GetExitCodeThread
0x1069f2b0
GetFileAttributesExW
0x1069f38c
GetFileInformationByHandle
0x1069f390
GetFileInformationByHandleEx
0x1069f2cc
GetFileSizeEx
0x1069f36c
GetFileType
0x1069f35c
GetFileType
0x1069f61c
GetFullPathNameW
0x1069f2e4
GetLastError
0x1069f5a8
GetLastError
0x1069f168
GetLocaleInfoA
0x1069f650
GetLocaleInfoW
0x1069f298
GetModuleFileNameA
0x1069f26c
GetModuleFileNameA
0x1069f624
GetModuleFileNameW
0x1069f690
GetModuleFileNameW
0x1069f2f0
GetModuleFileNameW
0x1069f4d4
GetModuleHandleA
0x1069f4cc
GetModuleHandleA
0x1069f6b0
GetModuleHandleA
0x1069f274
GetModuleHandleExA
0x1069f1c4
GetModuleHandleExW
0x1069f1e0
GetModuleHandleW
0x1069f1ac
GetModuleHandleW
0x1069f564
GetOEMCP
0x1069f5e0
GetOEMCP
0x1069f24c
GetProcAddress
0x1069f54c
GetProcAddress
0x1069f0fc
GetProcAddress
0x1069f6b4
GetProcessAffinityMask
0x1069f694
GetProcessAffinityMask
0x1069f51c
GetProcessHeap
0x1069f234
GetStartupInfoA
0x1069f620
GetStartupInfoW
0x1069f200
GetStdHandle
0x1069f27c
GetStdHandle
0x1069f618
GetStringTypeA
0x1069f648
GetStringTypeW
0x1069f64c
GetStringTypeW
0x1069f228
GetSystemDefaultLCID
0x1069f584
GetSystemDirectoryA
0x1069f34c
GetSystemInfo
0x1069f50c
GetSystemTimeAsFileTime
0x1069f4c8
GetSystemTimeAsFileTime
0x1069f22c
GetSystemWow64DirectoryA
0x1069f144
GetThreadContext
0x1069f1a8
GetThreadLocale
0x1069f57c
GetTickCount
0x1069f534
GetTickCount
0x1069f330
GetTimeFormatW
0x1069f314
GetTimeZoneInformation
0x1069f25c
GetUserDefaultLCID
0x1069f288
GetUserDefaultLCID
0x1069f580
GetVolumeInformationA
0x1069f278
GlobalAlloc
0x1069f120
GlobalFree
0x1069f154
GlobalFree
0x1069f540
GlobalLock
0x1069f124
GlobalUnlock
0x1069f130
HeapAlloc
0x1069f1a4
HeapAlloc
0x1069f608
HeapCreate
0x1069f638
HeapCreate
0x1069f17c
HeapDestroy
0x1069f63c
HeapFree
0x1069f180
HeapFree
0x1069f5cc
HeapReAlloc
0x1069f644
HeapReAlloc
0x1069f1a0
HeapSize
0x1069f230
HeapSize
0x1069f654
InitializeConditionVariable
0x1069f2ac
InitializeCriticalSection
0x1069f55c
InitializeCriticalSectionAndSpinCount
0x1069f210
InitializeCriticalSectionAndSpinCount
0x1069f668
InitializeCriticalSectionEx
0x1069f33c
InitializeSListHead
0x1069f1fc
InitializeSRWLock
0x1069f2c0
InitOnceBeginInitialize
0x1069f2c4
InitOnceComplete
0x1069f2c8
InterlockedDecrement
0x1069f5d8
InterlockedFlushSList
0x1069f1f4
InterlockedIncrement
0x1069f5d4
IsBadReadPtr
0x1069f12c
IsDebuggerPresent
0x1069f204
IsDebuggerPresent
0x1069f604
IsProcessorFeaturePresent
0x1069f214
IsValidCodePage
0x1069f254
IsValidCodePage
0x1069f5e4
IsValidLocale
0x1069f28c
K32GetModuleInformation
0x1069f0f8
LCMapStringA
0x1069f60c
LCMapStringEx
0x1069f268
LCMapStringW
0x1069f31c
LCMapStringW
0x1069f610
LeaveCriticalSection
0x1069f338
LeaveCriticalSection
0x1069f558
LoadLibraryA
0x1069f4d8
LoadLibraryA
0x1069f6ac
LoadLibraryA
0x1069f11c
LoadLibraryExW
0x1069f32c
LoadLibraryW
0x1069f5a4
LoadResource
0x1069f568
LocalAlloc
0x1069f544
LocalAlloc
0x1069f688
LocalFree
0x1069f68c
LocalFree
0x1069f378
LocalFree
0x1069f548
MultiByteToWideChar
0x1069f56c
MultiByteToWideChar
0x1069f150
OpenThread
0x1069f1b8
OpenThread
0x1069f4f4
PeekNamedPipe
0x1069f360
QueryPerformanceCounter
0x1069f160
QueryPerformanceCounter
0x1069f640
QueryPerformanceFrequency
0x1069f15c
RaiseException
0x1069f174
RaiseException
0x1069f5c4
ReadConsoleW
0x1069f2e8
ReadFile
0x1069f108
ReleaseSRWLockExclusive
0x1069f2bc
ResetEvent
0x1069f308
ResumeThread
0x1069f504
ResumeThread
0x1069f194
RtlUnwind
0x1069f320
RtlUnwind
0x1069f5c8
SetConsoleCursorPosition
0x1069f148
SetConsoleTextAttribute
0x1069f304
SetConsoleTitleA
0x1069f118
SetEndOfFile
0x1069f2e0
SetEnvironmentVariableW
0x1069f238
SetEvent
0x1069f280
SetFileInformationByHandle
0x1069f2dc
SetFilePointer
0x1069f65c
SetFilePointerEx
0x1069f2d8
SetHandleCount
0x1069f614
SetLastError
0x1069f5f8
SetLastError
0x1069f324
SetProcessAffinityMask
0x1069f698
SetProcessAffinityMask
0x1069f520
SetStdHandle
0x1069f66c
SetStdHandle
0x1069f258
SetThreadAffinityMask
0x1069f69c
SetThreadAffinityMask
0x1069f528
SetThreadContext
0x1069f1b4
SetUnhandledExceptionFilter
0x1069f600
SetUnhandledExceptionFilter
0x1069f21c
Sleep
0x1069f6a0
Sleep
0x1069f19c
Sleep
0x1069f52c
SleepConditionVariableCS
0x1069f2a0
SleepConditionVariableSRW
0x1069f29c
SleepEx
0x1069f344
SuspendThread
0x1069f500
SuspendThread
0x1069f190
SystemTimeToFileTime
0x1069f538
SystemTimeToTzSpecificLocalTime
0x1069f2f8
TerminateProcess
0x1069f218
TerminateProcess
0x1069f4dc
TerminateThread
0x1069f1d4
Thread32First
0x1069f188
Thread32First
0x1069f4e8
Thread32Next
0x1069f4f8
Thread32Next
0x1069f184
TlsAlloc
0x1069f1f0
TlsAlloc
0x1069f5ec
TlsFree
0x1069f5f4
TlsFree
0x1069f1e4
TlsGetValue
0x1069f1ec
TlsGetValue
0x1069f5e8
TlsSetValue
0x1069f5f0
TlsSetValue
0x1069f1e8
TryEnterCriticalSection
0x1069f2b4
UnhandledExceptionFilter
0x1069f220
UnhandledExceptionFilter
0x1069f5fc
VerifyVersionInfoA
0x1069f350
VerSetConditionMask
0x1069f348
VirtualAlloc
0x1069f1c0
VirtualAlloc
0x1069f510
VirtualFree
0x1069f518
VirtualFree
0x1069f1bc
VirtualProtect
0x1069f1d0
VirtualProtect
0x1069f514
VirtualQuery
0x1069f4c4
VirtualQuery
0x1069f104
WaitForMultipleObjects
0x1069f364
WaitForSingleObject
0x1069f1c8
WaitForSingleObjectEx
0x1069f358
WakeAllConditionVariable
0x1069f2a4
WakeConditionVariable
0x1069f2a8
WideCharToMultiByte
0x1069f158
WideCharToMultiByte
0x1069f578
WriteConsoleA
0x1069f5bc
WriteConsoleW
0x1069f5b4
WriteConsoleW
0x1069f300
WriteFile
0x1069f20c
WriteFile
0x1069f658
WriteProcessMemory
0x1069f508
USER32.dll
37
CharUpperBuffW
0x1069f67c
ClientToScreen
0x1069f3a8
CloseClipboard
0x1069f3f0
CreateWindowExA
0x1069f3c0
DefWindowProcA
0x1069f3c4
DestroyWindow
0x1069f3cc
EmptyClipboard
0x1069f3ec
EnableMenuItem
0x1069f3c8
GetClientRect
0x1069f39c
GetClipboardData
0x1069f410
GetCursorPos
0x1069f3d4
GetForegroundWindow
0x1069f3e0
GetKeyState
0x1069f3b4
GetProcessWindowStation
0x1069f674
GetProcessWindowStation
0x1069f6bc
GetSystemMenu
0x1069f408
GetSystemMetrics
0x1069f3fc
GetUserObjectInformationW
0x1069f678
GetUserObjectInformationW
0x1069f6c0
GetWindowTextA
0x1069f3e8
IsChild
0x1069f3a4
keybd_event
0x1069f400
LoadCursorA
0x1069f3b0
MapVirtualKeyA
0x1069f3e4
MessageBoxA
0x1069f3d0
MessageBoxW
0x1069f680
mouse_event
0x1069f3dc
OpenClipboard
0x1069f3f4
PostQuitMessage
0x1069f40c
RegisterClassExA
0x1069f3b8
ScreenToClient
0x1069f3ac
SetClipboardData
0x1069f3d8
SetCursor
0x1069f3a0
SetCursorPos
0x1069f398
SetWindowPos
0x1069f404
ShowWindow
0x1069f3f8
UnregisterClassA
0x1069f3bc
WLDAP32.dll
17
0x1069f474
0x1069f478
0x1069f47c
0x1069f480
0x1069f484
0x1069f488
0x1069f48c
0x1069f490
0x1069f494
0x1069f498
0x1069f49c
0x1069f4a0
0x1069f4a4
0x1069f4a8
0x1069f4ac
0x1069f4b0
0x1069f4b4
WS2_32.dll
29
__WSAFDIsSet
0x1069f070
accept
0x1069f000
bind
0x1069f008
closesocket
0x1069f05c
connect
0x1069f04c
freeaddrinfo
0x1069f03c
getaddrinfo
0x1069f038
gethostname
0x1069f034
getpeername
0x1069f06c
getsockname
0x1069f00c
getsockopt
0x1069f010
htonl
0x1069f024
htons
0x1069f014
ioctlsocket
0x1069f048
listen
0x1069f028
ntohl
0x1069f020
ntohs
0x1069f018
recv
0x1069f058
recvfrom
0x1069f02c
select
0x1069f068
send
0x1069f054
sendto
0x1069f030
setsockopt
0x1069f044
socket
0x1069f040
WSACleanup
0x1069f060
WSAGetLastError
0x1069f050
WSAIoctl
0x1069f01c
WSASetLastError
0x1069f004
WSAStartup
0x1069f064
WTSSendMessageW
0x1069f4bc
No function matches your filter.