wearedevs_exploit_api (1).dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllMain
#1 · 0x291d0
attach
#2 · 0x2a310
execute
#3 · 0x2a3e0
initialize
#4 · 0x2a460
isAttached
#5 · 0x2a5d0
No function matches your filter.
Imported DLLs & functions 176
advapi32.dll
11
CopySid
0x1802021b0
GetLengthSid
0x1802021b8
GetTokenInformation
0x1802021c8
IsValidSid
0x1802021c0
OpenProcessToken
0x1802021d0
RegCloseKey
0x1802021d8
RegCreateKeyExW
0x180202190
RegCreateKeyTransactedW
0x180202188
RegOpenKeyExW
0x1802021a0
RegOpenKeyTransactedW
0x180202198
RegQueryValueExW
0x1802021a8
WaitOnAddress
0x1802021f0
WakeByAddressAll
0x1802021e8
WakeByAddressSingle
0x1802021f8
free
0x180202208
pow
0x180202218
_cexit
0x180202250
_configure_narrow_argv
0x180202240
_execute_onexit_table
0x180202248
_initialize_narrow_environment
0x180202258
_initialize_onexit_table
0x180202230
_initterm
0x180202228
_initterm_e
0x180202260
_seh_filter_dll
0x180202238
ProcessPrng
0x180202288
CoTaskMemFree
0x180202298
crypt32.dll
11
CertAddCertificateContextToStore
0x1802022b0
CertCloseStore
0x1802022a8
CertDuplicateCertificateChain
0x1802022b8
CertDuplicateCertificateContext
0x1802022e0
CertDuplicateStore
0x1802022f0
CertEnumCertificatesInStore
0x1802022c8
CertFreeCertificateChain
0x1802022c0
CertFreeCertificateContext
0x1802022f8
CertGetCertificateChain
0x1802022d0
CertOpenStore
0x1802022e8
CertVerifyCertificateChainPolicy
0x1802022d8
CreateDirectoryW
0x180202000
CreateMutexA
0x180202058
CreateThread
0x180202108
DeleteFileW
0x1802020a0
FindClose
0x1802020b8
FindFirstFileExW
0x1802020b0
FindNextFileW
0x180202128
GetConsoleMode
0x1802020c0
GetConsoleOutputCP
0x180202100
GetCurrentDirectoryW
0x180202020
GetCurrentProcess
0x180202078
GetCurrentProcessId
0x180202348
GetCurrentThread
0x180202030
GetCurrentThreadId
0x180202120
GetEnvironmentVariableW
0x180202018
GetFileInformationByHandle
0x180202130
GetFileInformationByHandleEx
0x180202098
GetFinalPathNameByHandleW
0x1802020a8
GetFullPathNameW
0x1802020c8
GetLastError
0x180202398
GetModuleHandleA
0x1802020d0
GetModuleHandleW
0x180202410
GetOverlappedResult
0x1802023c8
GetProcAddress
0x180202368
GetProcessHeap
0x1802023e8
GetProcessIoCounters
0x180202310
GetProcessTimes
0x180202388
GetQueuedCompletionStatusEx
0x180202390
GetStdHandle
0x1802020f8
GetSystemTimePreciseAsFileTime
0x180202110
GetSystemTimes
0x180202318
GlobalMemoryStatusEx
0x180202340
HeapAlloc
0x1802023e0
HeapFree
0x1802023d0
HeapReAlloc
0x180202080
InitializeSListHead
0x180202010
K32GetPerformanceInfo
0x180202090
LoadLibraryA
0x180202060
ReadFile
0x1802023b0
ReadProcessMemory
0x180202088
ReleaseMutex
0x180202050
SetCurrentDirectoryW
0x1802020d8
SetFileCompletionNotificationModes
0x1802023d8
SetFileInformationByHandle
0x180202048
SetHandleInformation
0x180202350
SetLastError
0x180202028
WaitForSingleObjectEx
0x180202068
WideCharToMultiByte
0x180202070
WriteConsoleW
0x1802020f0
WriteFile
0x1802023a8
ntdll.dll
12
NtCancelIoFileEx
0x180202478
NtCreateFile
0x180202468
NtDeviceIoControlFile
0x180202470
NtQueryInformationProcess
0x180202440
NtQuerySystemInformation
0x180202438
NtReadFile
0x180202428
NtWriteFile
0x180202448
RtlCaptureContext
0x180202450
RtlGetVersion
0x180202430
RtlLookupFunctionEntry
0x180202458
RtlNtStatusToDosError
0x180202420
RtlVirtualUnwind
0x180202460
GetErrorInfo
0x180202488
pdh.dll
7
PdhAddEnglishCounterW
0x1802024a8
PdhCloseQuery
0x180202498
PdhCollectQueryData
0x1802024b8
PdhEnumObjectsA
0x1802024b0
PdhGetFormattedCounterValue
0x1802024a0
PdhOpenQueryA
0x1802024c8
PdhRemoveCounter
0x1802024c0
CallNtPowerInformation
0x1802024d8
GetModuleFileNameExW
0x1802024e8
secur32.dll
10
AcceptSecurityContext
0x180202520
AcquireCredentialsHandleA
0x1802024f8
ApplyControlToken
0x180202508
DecryptMessage
0x180202510
DeleteSecurityContext
0x180202538
EncryptMessage
0x180202518
FreeContextBuffer
0x180202530
FreeCredentialsHandle
0x180202500
InitializeSecurityContextW
0x180202528
QueryContextAttributesW
0x180202540
__C_specific_handler
0x180202140
__CxxFrameHandler3
0x180202158
__std_type_info_destroy_list
0x180202170
_CxxThrowException
0x180202178
memcmp
0x180202150
memcpy
0x180202148
memmove
0x180202160
memset
0x180202168
ws2_32.dll
19
bind
0x1802025f0
closesocket
0x1802025c8
connect
0x1802025c0
freeaddrinfo
0x1802025a8
getaddrinfo
0x1802025b0
getpeername
0x180202590
getsockname
0x1802025a0
getsockopt
0x180202610
ioctlsocket
0x1802025e0
recv
0x1802025d8
send
0x180202608
setsockopt
0x180202600
shutdown
0x1802025f8
WSACleanup
0x180202598
WSAGetLastError
0x180202618
WSAIoctl
0x1802025b8
WSASend
0x180202588
WSASocketW
0x1802025d0
WSAStartup
0x1802025e8
No function matches your filter.