hidder_vault.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
Java_com_example_hidder_NativeBridge_computeHmac
#1 · 0x2970
Java_com_example_hidder_NativeBridge_detectLauncher
#2 · 0x4af0
Java_com_example_hidder_NativeBridge_encrypt
#3 · 0x2300
Java_com_example_hidder_NativeBridge_sign
#4 · 0x2120
Java_com_example_hidder_NativeBridge_signBeacon
#5 · 0x27c0
No function matches your filter.
Imported DLLs & functions 80
getenv
0x18000c140
_cexit
0x18000c170
_configure_narrow_argv
0x18000c1a0
_crt_atexit
0x18000c178
_execute_onexit_table
0x18000c1b8
_initialize_narrow_environment
0x18000c198
_initialize_onexit_table
0x18000c190
_initterm
0x18000c180
_initterm_e
0x18000c1b0
_invoke_watson
0x18000c1c0
_register_onexit_function
0x18000c188
_seh_filter_dll
0x18000c1a8
KERNEL32.dll
23
CloseHandle
0x18000c070
CreateToolhelp32Snapshot
0x18000c048
DisableThreadLibraryCalls
0x18000c090
GetCommandLineW
0x18000c078
GetCurrentProcess
0x18000c008
GetCurrentProcessId
0x18000c068
GetCurrentThreadId
0x18000c0a0
GetSystemTimeAsFileTime
0x18000c098
InitializeSListHead
0x18000c088
IsDebuggerPresent
0x18000c080
IsProcessorFeaturePresent
0x18000c000
OpenProcess
0x18000c060
Process32FirstW
0x18000c040
Process32NextW
0x18000c038
QueryFullProcessImageNameW
0x18000c058
QueryPerformanceCounter
0x18000c0a8
RtlCaptureContext
0x18000c030
RtlLookupFunctionEntry
0x18000c028
RtlVirtualUnwind
0x18000c020
SetUnhandledExceptionFilter
0x18000c010
TerminateProcess
0x18000c0b0
UnhandledExceptionFilter
0x18000c018
WideCharToMultiByte
0x18000c050
BN_bin2bn
0x18000c2b8
EVP_aes_256_cbc
0x18000c260
EVP_CIPHER_CTX_free
0x18000c250
EVP_CIPHER_CTX_new
0x18000c248
EVP_DigestSignFinal
0x18000c240
EVP_DigestSignInit
0x18000c230
EVP_DigestSignUpdate
0x18000c2a8
EVP_EncryptFinal_ex
0x18000c210
EVP_EncryptInit_ex
0x18000c2b0
EVP_EncryptUpdate
0x18000c1f8
EVP_MD_CTX_free
0x18000c238
EVP_MD_CTX_new
0x18000c228
EVP_PKEY_assign
0x18000c268
EVP_PKEY_CTX_free
0x18000c280
EVP_PKEY_CTX_new
0x18000c278
EVP_PKEY_CTX_set_rsa_padding
0x18000c218
EVP_PKEY_encrypt
0x18000c290
EVP_PKEY_encrypt_init
0x18000c288
EVP_PKEY_new
0x18000c270
EVP_sha256
0x18000c258
HMAC
0x18000c2a0
RAND_bytes
0x18000c298
RSA_new
0x18000c1f0
RSA_set0_crt_params
0x18000c220
RSA_set0_factors
0x18000c208
RSA_set0_key
0x18000c200
?_Xlength_error@std@@YAXPEBD@Z
0x18000c0c0
?_Xout_of_range@std@@YAXPEBD@Z
0x18000c0c8
__CxxFrameHandler4
0x18000c130
__C_specific_handler
0x18000c120
__std_exception_copy
0x18000c0d8
__std_exception_destroy
0x18000c108
__std_type_info_destroy_list
0x18000c118
_CxxThrowException
0x18000c110
memchr
0x18000c0f8
memcmp
0x18000c0e0
memcpy
0x18000c0e8
memmove
0x18000c0f0
memset
0x18000c100
No function matches your filter.