last.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
dh_apply_session
#1 · 0x22ef70
No function matches your filter.
Imported DLLs & functions 250
WaitOnAddress
0x18069d680
BCryptCloseAlgorithmProvider
0x18069d6c8
BCryptCreateHash
0x18069d6d0
BCryptDestroyHash
0x18069d6d8
BCryptFinishHash
0x18069d6e0
BCryptGetProperty
0x18069d6e8
BCryptHash
0x18069d6f0
BCryptHashData
0x18069d6f8
BCryptOpenAlgorithmProvider
0x18069d700
D3D11CreateDeviceAndSwapChain
0x18069d798
D3DCompile
0x18069d6b8
ImmGetContext
0x18069d690
ImmReleaseContext
0x18069d698
ImmSetCandidateWindow
0x18069d6a0
ImmSetCompositionWindow
0x18069d6a8
KERNEL32.dll
178
AcquireSRWLockExclusive
0x18069cf80
AcquireSRWLockShared
0x18069cf88
AddVectoredExceptionHandler
0x18069cf90
AreFileApisANSI
0x18069cf98
CheckRemoteDebuggerPresent
0x18069cfa0
CloseHandle
0x18069cfa8
CompareStringW
0x18069cfb0
CreateDirectoryW
0x18069cfb8
CreateFile2
0x18069cfc0
CreateFileA
0x18069cfc8
CreateFileMappingA
0x18069cfd0
CreateFileMappingW
0x18069cfd8
CreateFileW
0x18069cfe0
CreatePipe
0x18069cfe8
CreateProcessW
0x18069cff0
CreateThread
0x18069cff8
CreateToolhelp32Snapshot
0x18069d000
DecodePointer
0x18069d008
DeleteCriticalSection
0x18069d010
DeleteFileW
0x18069d018
DisableThreadLibraryCalls
0x18069d020
DuplicateHandle
0x18069d028
EncodePointer
0x18069d030
EnterCriticalSection
0x18069d038
EnumSystemLocalesW
0x18069d040
ExitProcess
0x18069d048
ExitThread
0x18069d050
FindClose
0x18069d058
FindFirstFileExW
0x18069d060
FindFirstFileW
0x18069d068
FindNextFileW
0x18069d070
FlsAlloc
0x18069d078
FlsFree
0x18069d080
FlsGetValue
0x18069d088
FlsSetValue
0x18069d090
FlushFileBuffers
0x18069d098
FlushInstructionCache
0x18069d0a0
FormatMessageA
0x18069d0a8
FreeEnvironmentStringsW
0x18069d0b0
FreeLibrary
0x18069d0b8
FreeLibraryAndExitThread
0x18069d0c0
GetACP
0x18069d0c8
GetCommandLineA
0x18069d0d8
GetCommandLineW
0x18069d0e0
GetConsoleMode
0x18069d0e8
GetConsoleOutputCP
0x18069d0f0
GetCPInfo
0x18069d0d0
GetCurrentProcess
0x18069d0f8
GetCurrentProcessId
0x18069d100
GetCurrentThread
0x18069d108
GetCurrentThreadId
0x18069d110
GetDateFormatW
0x18069d118
GetEnvironmentStringsW
0x18069d120
GetEnvironmentVariableW
0x18069d128
GetExitCodeProcess
0x18069d130
GetExitCodeThread
0x18069d138
GetFileAttributesExW
0x18069d140
GetFileInformationByHandleEx
0x18069d148
GetFileSizeEx
0x18069d150
GetFileType
0x18069d158
GetLastError
0x18069d160
GetLocaleInfoA
0x18069d170
GetLocaleInfoEx
0x18069d178
GetLocaleInfoW
0x18069d180
GetLocalTime
0x18069d168
GetLogicalProcessorInformationEx
0x18069d188
GetModuleFileNameA
0x18069d190
GetModuleFileNameW
0x18069d198
GetModuleHandleA
0x18069d1a0
GetModuleHandleExA
0x18069d1a8
GetModuleHandleExW
0x18069d1b0
GetModuleHandleW
0x18069d1b8
GetOEMCP
0x18069d1c0
GetProcAddress
0x18069d1c8
GetProcessHeap
0x18069d1d0
GetProcessId
0x18069d1d8
GetStartupInfoW
0x18069d1e0
GetStdHandle
0x18069d1e8
GetStringTypeW
0x18069d1f0
GetSystemTime
0x18069d1f8
GetSystemTimeAsFileTime
0x18069d200
GetSystemTimePreciseAsFileTime
0x18069d208
GetSystemTimes
0x18069d210
GetTempFileNameW
0x18069d218
GetTempPathW
0x18069d220
GetThreadContext
0x18069d228
GetTickCount
0x18069d230
GetTickCount64
0x18069d238
GetTimeFormatW
0x18069d240
GetTimeZoneInformation
0x18069d248
GetUserDefaultLCID
0x18069d250
GetWindowsDirectoryW
0x18069d258
GlobalAlloc
0x18069d260
GlobalFree
0x18069d268
GlobalLock
0x18069d270
GlobalMemoryStatusEx
0x18069d278
GlobalUnlock
0x18069d280
HeapAlloc
0x18069d288
HeapFree
0x18069d290
HeapReAlloc
0x18069d298
HeapSize
0x18069d2a0
InitializeCriticalSectionEx
0x18069d2b8
InitializeSListHead
0x18069d2c0
InitOnceBeginInitialize
0x18069d2a8
InitOnceComplete
0x18069d2b0
InterlockedFlushSList
0x18069d2c8
IsDBCSLeadByte
0x18069d2d0
IsDebuggerPresent
0x18069d2d8
IsProcessorFeaturePresent
0x18069d2e0
IsValidCodePage
0x18069d2e8
IsValidLocale
0x18069d2f0
LCMapStringEx
0x18069d2f8
LCMapStringW
0x18069d300
LeaveCriticalSection
0x18069d308
LoadLibraryA
0x18069d310
LoadLibraryExA
0x18069d318
LoadLibraryExW
0x18069d320
LoadLibraryW
0x18069d328
LocalFree
0x18069d330
MapViewOfFile
0x18069d338
MoveFileExW
0x18069d340
MultiByteToWideChar
0x18069d348
OpenFileMappingW
0x18069d350
OpenProcess
0x18069d358
OpenThread
0x18069d360
OutputDebugStringA
0x18069d368
PeekNamedPipe
0x18069d370
Process32FirstW
0x18069d378
Process32NextW
0x18069d380
QueryFullProcessImageNameW
0x18069d388
QueryPerformanceCounter
0x18069d390
QueryPerformanceFrequency
0x18069d398
RaiseException
0x18069d3a0
ReadConsoleW
0x18069d3a8
ReadFile
0x18069d3b0
ReleaseSRWLockExclusive
0x18069d3b8
ReleaseSRWLockShared
0x18069d3c0
RemoveVectoredExceptionHandler
0x18069d3c8
ResumeThread
0x18069d3d0
RtlAddFunctionTable
0x18069d3d8
RtlCaptureContext
0x18069d3e0
RtlDeleteFunctionTable
0x18069d3e8
RtlLookupFunctionEntry
0x18069d3f0
RtlPcToFileHeader
0x18069d3f8
RtlUnwind
0x18069d400
RtlUnwindEx
0x18069d408
RtlVirtualUnwind
0x18069d410
SetEndOfFile
0x18069d418
SetEnvironmentVariableW
0x18069d420
SetFileInformationByHandle
0x18069d428
SetFilePointer
0x18069d430
SetFilePointerEx
0x18069d438
SetLastError
0x18069d440
SetStdHandle
0x18069d448
SetUnhandledExceptionFilter
0x18069d450
Sleep
0x18069d458
SleepConditionVariableSRW
0x18069d460
SuspendThread
0x18069d468
SwitchToThread
0x18069d470
TerminateProcess
0x18069d478
Thread32First
0x18069d480
Thread32Next
0x18069d488
TlsAlloc
0x18069d490
TlsFree
0x18069d498
TlsGetValue
0x18069d4a0
TlsSetValue
0x18069d4a8
TryAcquireSRWLockExclusive
0x18069d4b0
UnhandledExceptionFilter
0x18069d4b8
UnmapViewOfFile
0x18069d4c0
VirtualAlloc
0x18069d4c8
VirtualProtect
0x18069d4d0
VirtualQuery
0x18069d4d8
WaitForSingleObject
0x18069d4e0
WaitForSingleObjectEx
0x18069d4e8
WakeAllConditionVariable
0x18069d4f0
WideCharToMultiByte
0x18069d4f8
WriteConsoleW
0x18069d500
WriteFile
0x18069d508
CoCreateInstance
0x18069d658
CoInitializeEx
0x18069d660
CoUninitialize
0x18069d668
CreateStreamOnHGlobal
0x18069d670
pdh.dll
6
PdhAddEnglishCounterW
0x18069d710
PdhCloseQuery
0x18069d718
PdhCollectQueryData
0x18069d720
PdhGetFormattedCounterArrayW
0x18069d728
PdhGetFormattedCounterValue
0x18069d730
PdhOpenQueryW
0x18069d738
USER32.dll
35
ClientToScreen
0x18069d518
CloseClipboard
0x18069d520
CreateWindowExA
0x18069d528
DefWindowProcA
0x18069d530
DefWindowProcW
0x18069d538
DestroyWindow
0x18069d540
EmptyClipboard
0x18069d548
GetAsyncKeyState
0x18069d550
GetCapture
0x18069d558
GetClientRect
0x18069d560
GetClipboardData
0x18069d568
GetCursorPos
0x18069d570
GetForegroundWindow
0x18069d578
GetKeyboardLayout
0x18069d590
GetKeyNameTextW
0x18069d580
GetKeyState
0x18069d588
GetLastInputInfo
0x18069d598
GetMessageExtraInfo
0x18069d5a0
GetSystemMetrics
0x18069d5a8
GetWindowLongPtrW
0x18069d5b0
GetWindowThreadProcessId
0x18069d5b8
IsWindowUnicode
0x18069d5c0
LoadCursorW
0x18069d5c8
MapVirtualKeyW
0x18069d5d0
MessageBoxA
0x18069d5d8
OpenClipboard
0x18069d5e0
RegisterClassExA
0x18069d5e8
ReleaseCapture
0x18069d5f0
ScreenToClient
0x18069d5f8
SetCapture
0x18069d600
SetClipboardData
0x18069d608
SetCursor
0x18069d610
SetCursorPos
0x18069d618
TrackMouseEvent
0x18069d620
UnregisterClassA
0x18069d628
WinHttpCloseHandle
0x18069d748
WinHttpConnect
0x18069d750
WinHttpOpen
0x18069d758
WinHttpOpenRequest
0x18069d760
WinHttpQueryHeaders
0x18069d768
WinHttpReadData
0x18069d770
WinHttpReceiveResponse
0x18069d778
WinHttpSendRequest
0x18069d780
WinHttpSetTimeouts
0x18069d788
No function matches your filter.