DefendX.dll
v1.0.0.0
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported functions 1
?Initialize@@YAHXZ
#1 · 0x6660
No function matches your filter.
Imported DLLs & functions 304
ADVAPI32.dll
14
CryptAcquireContextW
0x1002f028
CryptCreateHash
0x1002f004
CryptDestroyHash
0x1002f00c
CryptGetHashParam
0x1002f010
CryptHashData
0x1002f008
CryptReleaseContext
0x1002f014
GetUserNameA
0x1002f020
RegCloseKey
0x1002f000
RegCreateKeyExW
0x1002f018
RegOpenKeyExA
0x1002f01c
RegOpenKeyExW
0x1002f030
RegQueryValueExA
0x1002f024
RegQueryValueExW
0x1002f02c
RegSetValueExW
0x1002f034
BitBlt
0x1002f050
CreateCompatibleBitmap
0x1002f04c
CreateCompatibleDC
0x1002f040
DeleteDC
0x1002f044
DeleteObject
0x1002f048
SelectObject
0x1002f03c
gdiplus.dll
10
GdipAlloc
0x1002f3fc
GdipCloneImage
0x1002f3e0
GdipCreateBitmapFromHBITMAP
0x1002f3e8
GdipDisposeImage
0x1002f3ec
GdipFree
0x1002f400
GdipGetImageEncoders
0x1002f3dc
GdipGetImageEncodersSize
0x1002f3f0
GdiplusShutdown
0x1002f3f8
GdiplusStartup
0x1002f3e4
GdipSaveImageToStream
0x1002f3f4
GetAdaptersInfo
0x1002f058
KERNEL32.dll
77
CheckRemoteDebuggerPresent
0x1002f14c
CloseHandle
0x1002f168
CreateEventW
0x1002f128
CreateFileW
0x1002f074
CreateThread
0x1002f0e0
CreateToolhelp32Snapshot
0x1002f170
DeleteCriticalSection
0x1002f15c
DisableThreadLibraryCalls
0x1002f098
EnterCriticalSection
0x1002f13c
FindClose
0x1002f0d4
FindFirstFileW
0x1002f158
FindNextFileW
0x1002f0d0
FlushInstructionCache
0x1002f100
FreeLibraryAndExitThread
0x1002f090
GetCurrentProcess
0x1002f188
GetCurrentProcessId
0x1002f10c
GetCurrentThread
0x1002f0cc
GetCurrentThreadId
0x1002f144
GetExitCodeThread
0x1002f0bc
GetFileAttributesW
0x1002f0d8
GetLastError
0x1002f16c
GetModuleFileNameA
0x1002f088
GetModuleFileNameW
0x1002f080
GetModuleHandleA
0x1002f174
GetModuleHandleExA
0x1002f094
GetModuleHandleW
0x1002f0a8
GetProcAddress
0x1002f160
GetSystemTimeAsFileTime
0x1002f114
GetThreadContext
0x1002f164
GetThreadId
0x1002f0c0
GetTickCount
0x1002f060
GetVolumeInformationA
0x1002f064
InitializeCriticalSectionAndSpinCount
0x1002f184
InitializeSListHead
0x1002f110
IsDebuggerPresent
0x1002f150
IsProcessorFeaturePresent
0x1002f118
K32GetModuleInformation
0x1002f154
LeaveCriticalSection
0x1002f138
LoadLibraryA
0x1002f09c
LoadLibraryExA
0x1002f08c
LoadLibraryExW
0x1002f0b0
LoadLibraryW
0x1002f0a4
lstrlenW
0x1002f07c
MultiByteToWideChar
0x1002f084
OpenThread
0x1002f178
OutputDebugStringW
0x1002f140
PeekNamedPipe
0x1002f070
Process32FirstW
0x1002f0f8
Process32NextW
0x1002f0f4
QueryPerformanceCounter
0x1002f0ac
QueryPerformanceFrequency
0x1002f0a0
ReadDirectoryChangesW
0x1002f0e4
ReadFile
0x1002f068
ReadProcessMemory
0x1002f0ec
ResetEvent
0x1002f130
ResumeThread
0x1002f0b8
SetEvent
0x1002f134
SetLastError
0x1002f18c
SetThreadContext
0x1002f0fc
SetUnhandledExceptionFilter
0x1002f120
SuspendThread
0x1002f0b4
TerminateProcess
0x1002f11c
TerminateThread
0x1002f0dc
Thread32First
0x1002f17c
Thread32Next
0x1002f180
UnhandledExceptionFilter
0x1002f124
VirtualAlloc
0x1002f104
VirtualFree
0x1002f108
VirtualProtect
0x1002f190
VirtualQuery
0x1002f0f0
WaitForSingleObjectEx
0x1002f12c
WaitNamedPipeW
0x1002f078
WideCharToMultiByte
0x1002f0c8
WriteFile
0x1002f06c
WritePrivateProfileStringW
0x1002f0c4
WriteProcessMemory
0x1002f148
WTSGetActiveConsoleSessionId
0x1002f0e8
MSVCP140D.dll
103
_Cnd_broadcast
0x1002f2e4
_Cnd_do_broadcast_at_thread_exit
0x1002f2dc
_Cnd_init_in_situ
0x1002f2c0
_Cnd_timedwait
0x1002f2cc
_Mtx_current_owns
0x1002f2bc
_Mtx_destroy_in_situ
0x1002f2d0
_Mtx_init_in_situ
0x1002f2d8
_Mtx_lock
0x1002f2d4
_Mtx_unlock
0x1002f2e0
_Query_perf_counter
0x1002f208
_Query_perf_frequency
0x1002f1ec
_Thrd_sleep
0x1002f314
_Xtime_get_ticks
0x1002f2b8
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
0x1002f23c
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
0x1002f240
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
0x1002f310
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
0x1002f25c
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x1002f1c4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x1002f260
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x1002f254
?_Incref@facet@locale@std@@UAEXXZ
0x1002f244
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
0x1002f330
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
0x1002f270
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
0x1002f1f8
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x1002f2ec
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
0x1002f1f4
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
0x1002f1d8
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x1002f20c
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
0x1002f198
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
0x1002f280
?_Throw_C_error@std@@YAXH@Z
0x1002f2c8
?_Throw_Cpp_error@std@@YAXH@Z
0x1002f2c4
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x1002f2f0
?_Xbad_alloc@std@@YAXXZ
0x1002f200
?_Xinvalid_argument@std@@YAXPBD@Z
0x1002f1d0
?_Xlength_error@std@@YAXPBD@Z
0x1002f1e8
?_Xout_of_range@std@@YAXPBD@Z
0x1002f1e4
??0_Lockit@std@@QAE@H@Z
0x1002f1e0
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
0x1002f1a0
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
0x1002f284
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
0x1002f2e8
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x1002f2b0
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
0x1002f1a4
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x1002f288
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
0x1002f328
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
0x1002f26c
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
0x1002f234
??1_Lockit@std@@QAE@XZ
0x1002f1dc
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x1002f1b4
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1002f29c
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1002f308
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1002f2b4
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x1002f1b8
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1002f2a0
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x1002f1d4
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1002f28c
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
0x1002f230
??2_Crt_new_delete@std@@SAPAXI@Z
0x1002f250
??3_Crt_new_delete@std@@SAXPAX@Z
0x1002f24c
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
0x1002f228
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
0x1002f1bc
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
0x1002f22c
??Bid@locale@std@@QAEIXZ
0x1002f248
?always_noconv@codecvt_base@std@@QBE_NXZ
0x1002f2a4
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x1002f274
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
0x1002f1f0
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
0x1002f1c0
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x1002f220
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
0x1002f32c
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
0x1002f264
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
0x1002f204
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
0x1002f258
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
0x1002f300
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
0x1002f1cc
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
0x1002f278
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
0x1002f238
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
0x1002f27c
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
0x1002f31c
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
0x1002f21c
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
0x1002f304
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x1002f2a8
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
0x1002f2f8
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
0x1002f19c
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x1002f214
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x1002f2ac
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
0x1002f1a8
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
0x1002f290
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
0x1002f320
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x1002f224
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
0x1002f318
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0x1002f210
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x1002f2fc
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x1002f2f4
?uncaught_exception@std@@YA_NXZ
0x1002f1fc
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
0x1002f1c8
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
0x1002f268
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
0x1002f30c
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
0x1002f324
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
0x1002f218
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
0x1002f1ac
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
0x1002f294
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
0x1002f1b0
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
0x1002f298
CreateStreamOnHGlobal
0x1002f408
__acrt_iob_func
0x1002f44c
__stdio_common_vfprintf
0x1002f450
__stdio_common_vsprintf
0x1002f4bc
__stdio_common_vswprintf
0x1002f4dc
_beginthreadex
0x1002f454
_callnewh
0x1002f4a8
_cexit
0x1002f4a4
_configure_narrow_argv
0x1002f48c
_crt_atexit
0x1002f4a0
_CrtDbgReport
0x1002f4cc
_CrtDbgReportW
0x1002f4d8
_errno
0x1002f47c
_execute_onexit_table
0x1002f49c
_free_dbg
0x1002f480
_fseeki64
0x1002f43c
_get_stream_buffer_pointers
0x1002f440
_initialize_narrow_environment
0x1002f490
_initialize_onexit_table
0x1002f494
_initterm
0x1002f4ac
_initterm_e
0x1002f4b0
_invalid_parameter
0x1002f4c8
_lock_file
0x1002f420
_malloc_dbg
0x1002f484
_register_onexit_function
0x1002f498
_seh_filter_dll
0x1002f488
_time64
0x1002f4c0
_unlock_file
0x1002f41c
_wassert
0x1002f448
calloc
0x1002f478
ceil
0x1002f4b4
exit
0x1002f4e0
fclose
0x1002f414
fflush
0x1002f410
fgetc
0x1002f418
fgetpos
0x1002f428
fgetwc
0x1002f474
fputc
0x1002f4b8
fputwc
0x1002f46c
fread
0x1002f438
free
0x1002f4d4
fsetpos
0x1002f434
fwrite
0x1002f424
getchar
0x1002f444
log2
0x1002f458
malloc
0x1002f4d0
setvbuf
0x1002f42c
strncpy
0x1002f4c4
strtol
0x1002f464
terminate
0x1002f45c
tolower
0x1002f460
towlower
0x1002f468
ungetc
0x1002f430
ungetwc
0x1002f470
USER32.dll
25
CallNextHookEx
0x1002f34c
DispatchMessageW
0x1002f350
EnumChildWindows
0x1002f348
GetCursorPos
0x1002f338
GetDC
0x1002f378
GetDesktopWindow
0x1002f388
GetGUIThreadInfo
0x1002f370
GetKeyState
0x1002f394
GetMessageW
0x1002f340
GetMonitorInfoW
0x1002f384
GetParent
0x1002f36c
GetSystemMetrics
0x1002f33c
GetWindowRect
0x1002f344
GetWindowTextA
0x1002f354
GetWindowTextLengthA
0x1002f368
GetWindowThreadProcessId
0x1002f390
MapWindowPoints
0x1002f358
MonitorFromWindow
0x1002f380
PeekMessageW
0x1002f38c
PostMessageA
0x1002f398
ReleaseDC
0x1002f37c
SetWindowsHookExW
0x1002f364
TranslateMessage
0x1002f360
UnhookWindowsHookEx
0x1002f35c
wsprintfW
0x1002f374
__current_exception
0x1002f3cc
__current_exception_context
0x1002f3d0
__CxxFrameHandler3
0x1002f3a8
__std_exception_copy
0x1002f3b4
__std_exception_destroy
0x1002f3b0
__std_terminate
0x1002f3ac
__std_type_info_destroy_list
0x1002f3a4
_CxxThrowException
0x1002f3d4
_except_handler4_common
0x1002f3c8
memchr
0x1002f3a0
memcpy
0x1002f3bc
memmove
0x1002f3c4
memset
0x1002f3c0
strstr
0x1002f3b8
No function matches your filter.