ToxicPS.dll
v1.3.3.0
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 0
No exported functions.
No function matches your filter.
Imported DLLs & functions 325
CryptAcquireContextA
0x1800c8028
CryptCreateHash
0x1800c8010
CryptDestroyHash
0x1800c8000
CryptDestroyKey
0x1800c8030
CryptEncrypt
0x1800c8040
CryptGetHashParam
0x1800c8018
CryptHashData
0x1800c8008
CryptImportKey
0x1800c8038
CryptReleaseContext
0x1800c8020
atof
0x1800c8820
atoi
0x1800c8840
strtol
0x1800c8838
strtoll
0x1800c8830
strtoul
0x1800c8848
strtoull
0x1800c8818
wcstombs
0x1800c8828
_access
0x1800c8868
_fstat64
0x1800c8860
_stat64
0x1800c8858
_unlink
0x1800c8870
_callnewh
0x1800c8898
calloc
0x1800c88a0
free
0x1800c8880
malloc
0x1800c8890
realloc
0x1800c8888
_fdclass
0x1800c88c0
_fdopen
0x1800c88b0
acosf
0x1800c88c8
ceilf
0x1800c88d0
cosf
0x1800c88e0
fmodf
0x1800c88e8
powf
0x1800c88b8
sinf
0x1800c88d8
sqrtf
0x1800c88f0
__sys_errlist
0x1800c8968
__sys_nerr
0x1800c8970
_beginthreadex
0x1800c8930
_cexit
0x1800c8948
_configure_narrow_argv
0x1800c8918
_crt_atexit
0x1800c8940
_errno
0x1800c8908
_execute_onexit_table
0x1800c8938
_initialize_narrow_environment
0x1800c8920
_initialize_onexit_table
0x1800c8928
_initterm
0x1800c8950
_initterm_e
0x1800c8958
_invalid_parameter_noinfo_noreturn
0x1800c8978
_register_onexit_function
0x1800c8960
_seh_filter_dll
0x1800c8910
terminate
0x1800c8900
__acrt_iob_func
0x1800c89f0
__stdio_common_vfprintf
0x1800c8a10
__stdio_common_vsprintf
0x1800c8a20
__stdio_common_vsscanf
0x1800c8a40
__stdio_common_vswprintf
0x1800c89a0
_close
0x1800c89c0
_fileno
0x1800c89c8
_fseeki64
0x1800c89b8
_lseeki64
0x1800c89b0
_open
0x1800c89d0
_read
0x1800c89e0
_wfopen
0x1800c8a38
_write
0x1800c89d8
fclose
0x1800c8a00
feof
0x1800c8a30
fflush
0x1800c89f8
fgets
0x1800c8998
fopen
0x1800c8988
fputc
0x1800c8990
fputs
0x1800c89a8
fread
0x1800c8a18
fseek
0x1800c8a08
ftell
0x1800c89e8
fwrite
0x1800c8a28
_strdup
0x1800c8a68
strcmp
0x1800c8a70
strcspn
0x1800c8a80
strncmp
0x1800c8a58
strncpy
0x1800c8a78
strpbrk
0x1800c8a50
strspn
0x1800c8a60
BCryptGenRandom
0x1800c8ac8
CRYPT32.dll
16
CertAddCertificateContextToStore
0x1800c8090
CertCloseStore
0x1800c8058
CertCreateCertificateChainEngine
0x1800c80b0
CertEnumCertificatesInStore
0x1800c8060
CertFindCertificateInStore
0x1800c8068
CertFindExtension
0x1800c8098
CertFreeCertificateChain
0x1800c80c8
CertFreeCertificateChainEngine
0x1800c80b8
CertFreeCertificateContext
0x1800c8070
CertGetCertificateChain
0x1800c80c0
CertGetNameStringA
0x1800c80a0
CertOpenStore
0x1800c8050
CryptDecodeObjectEx
0x1800c8088
CryptQueryObject
0x1800c80a8
CryptStringToBinaryA
0x1800c8078
PFXImportCertStore
0x1800c8080
D3DCompile
0x1800c80d8
ImmGetContext
0x1800c8100
ImmReleaseContext
0x1800c80f8
ImmSetCandidateWindow
0x1800c80e8
ImmSetCompositionWindow
0x1800c80f0
KERNEL32.dll
79
AcquireSRWLockExclusive
0x1800c8168
CloseHandle
0x1800c8250
CreateEventA
0x1800c82e0
CreateFileA
0x1800c8340
CreateThread
0x1800c8128
CreateToolhelp32Snapshot
0x1800c8258
DeleteCriticalSection
0x1800c82c8
DisableThreadLibraryCalls
0x1800c8120
EnterCriticalSection
0x1800c82b0
FlushInstructionCache
0x1800c8228
FormatMessageW
0x1800c82a0
FreeLibrary
0x1800c81f8
GetCurrentProcess
0x1800c81b0
GetCurrentProcessId
0x1800c8238
GetCurrentThreadId
0x1800c8198
GetEnvironmentVariableA
0x1800c8300
GetFileSizeEx
0x1800c8348
GetFileType
0x1800c8310
GetLastError
0x1800c8220
GetLocaleInfoA
0x1800c8288
GetModuleHandleA
0x1800c8290
GetModuleHandleW
0x1800c8230
GetProcAddress
0x1800c8208
GetStdHandle
0x1800c8308
GetSystemDirectoryA
0x1800c82e8
GetSystemInfo
0x1800c81d8
GetSystemTimeAsFileTime
0x1800c8210
GetThreadContext
0x1800c8240
GetTickCount
0x1800c82a8
GlobalAlloc
0x1800c8370
GlobalFree
0x1800c8368
GlobalLock
0x1800c8360
GlobalUnlock
0x1800c8350
HeapAlloc
0x1800c8248
HeapCreate
0x1800c81c8
HeapFree
0x1800c81b8
HeapReAlloc
0x1800c8260
InitializeCriticalSectionEx
0x1800c82c0
InitializeSListHead
0x1800c8218
IsDebuggerPresent
0x1800c8180
IsProcessorFeaturePresent
0x1800c8158
LeaveCriticalSection
0x1800c82b8
LoadLibraryA
0x1800c8280
MoveFileExA
0x1800c82f0
MultiByteToWideChar
0x1800c8378
OpenProcess
0x1800c8118
OpenThread
0x1800c8110
PeekNamedPipe
0x1800c8320
QueryPerformanceCounter
0x1800c81f0
QueryPerformanceFrequency
0x1800c8278
ReadFile
0x1800c8318
ReleaseSRWLockExclusive
0x1800c8160
ResumeThread
0x1800c8270
RtlCaptureContext
0x1800c8380
RtlLookupFunctionEntry
0x1800c8130
RtlVirtualUnwind
0x1800c8138
SetEvent
0x1800c82d0
SetLastError
0x1800c8298
SetThreadContext
0x1800c81a0
SetUnhandledExceptionFilter
0x1800c8148
Sleep
0x1800c8188
SleepConditionVariableSRW
0x1800c8178
SleepEx
0x1800c8330
SuspendThread
0x1800c8190
TerminateProcess
0x1800c8150
Thread32First
0x1800c8268
Thread32Next
0x1800c81a8
UnhandledExceptionFilter
0x1800c8140
VerifyVersionInfoW
0x1800c8338
VerSetConditionMask
0x1800c8200
VirtualAlloc
0x1800c81e0
VirtualFree
0x1800c81e8
VirtualProtect
0x1800c81c0
VirtualQuery
0x1800c81d0
WaitForMultipleObjects
0x1800c8328
WaitForSingleObject
0x1800c82d8
WaitForSingleObjectEx
0x1800c82f8
WakeAllConditionVariable
0x1800c8170
WideCharToMultiByte
0x1800c8358
MSVCP140.dll
36
_Query_perf_counter
0x1800c8478
_Query_perf_frequency
0x1800c8430
_Thrd_id
0x1800c8480
_Thrd_join
0x1800c8470
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
0x1800c83b8
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
0x1800c8460
?_Throw_Cpp_error@std@@YAXH@Z
0x1800c84a8
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
0x1800c83c0
?_Xinvalid_argument@std@@YAXPEBD@Z
0x1800c8498
?_Xlength_error@std@@YAXPEBD@Z
0x1800c8428
?_Xout_of_range@std@@YAXPEBD@Z
0x1800c8490
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
0x1800c8448
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x1800c8390
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
0x1800c8468
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x1800c83a8
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x1800c8400
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x1800c83b0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
0x1800c8418
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
0x1800c8408
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
0x1800c8410
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
0x1800c8488
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
0x1800c83a0
?good@ios_base@std@@QEBA_NXZ
0x1800c8420
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
0x1800c83f8
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
0x1800c8398
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
0x1800c83e8
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
0x1800c8458
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
0x1800c83c8
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
0x1800c8440
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
0x1800c8438
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x1800c83f0
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x1800c83d0
?uncaught_exception@std@@YA_NXZ
0x1800c84a0
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
0x1800c8450
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
0x1800c83d8
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
0x1800c83e0
USER32.dll
31
CallWindowProcA
0x1800c85c0
ClientToScreen
0x1800c8570
CloseClipboard
0x1800c8510
CreateWindowExA
0x1800c8580
DefWindowProcA
0x1800c8578
DestroyWindow
0x1800c84f0
EmptyClipboard
0x1800c8508
FindWindowA
0x1800c84e8
GetAsyncKeyState
0x1800c84d0
GetCapture
0x1800c85b8
GetClientRect
0x1800c8540
GetClipboardData
0x1800c8500
GetCursorPos
0x1800c8520
GetForegroundWindow
0x1800c8558
GetKeyboardLayout
0x1800c8560
GetKeyState
0x1800c8598
GetMessageExtraInfo
0x1800c85a0
GetWindowThreadProcessId
0x1800c84d8
IsWindowUnicode
0x1800c8538
LoadCursorA
0x1800c85a8
OpenClipboard
0x1800c8518
RegisterClassExA
0x1800c8590
ReleaseCapture
0x1800c8530
ScreenToClient
0x1800c85b0
SetCapture
0x1800c8550
SetClipboardData
0x1800c84f8
SetCursor
0x1800c8548
SetCursorPos
0x1800c8528
SetWindowLongPtrA
0x1800c84e0
TrackMouseEvent
0x1800c8568
UnregisterClassA
0x1800c8588
__CxxFrameHandler4
0x1800c8658
__C_specific_handler
0x1800c8630
__current_exception
0x1800c8638
__current_exception_context
0x1800c8640
__std_exception_copy
0x1800c8620
__std_exception_destroy
0x1800c8618
__std_terminate
0x1800c8600
__std_type_info_destroy_list
0x1800c85f0
_CxxThrowException
0x1800c85f8
memchr
0x1800c85e8
memcmp
0x1800c85e0
memcpy
0x1800c85d8
memmove
0x1800c85d0
memset
0x1800c8648
strchr
0x1800c8610
strrchr
0x1800c8628
strstr
0x1800c8608
WLDAP32.dll
18
0x1800c8668
0x1800c8670
0x1800c8678
0x1800c8680
0x1800c8688
0x1800c8690
0x1800c8698
0x1800c86a0
0x1800c86a8
0x1800c86b0
0x1800c86b8
0x1800c86c0
0x1800c86c8
0x1800c86d0
0x1800c86d8
0x1800c86e0
0x1800c86e8
0x1800c86f0
WS2_32.dll
34
__WSAFDIsSet
0x1800c87d8
accept
0x1800c87f0
bind
0x1800c8808
closesocket
0x1800c8780
connect
0x1800c8800
freeaddrinfo
0x1800c8758
getaddrinfo
0x1800c8760
gethostname
0x1800c8710
getpeername
0x1800c8728
getsockname
0x1800c87e0
getsockopt
0x1800c87f8
htonl
0x1800c87c8
htons
0x1800c87c0
ioctlsocket
0x1800c8720
listen
0x1800c8770
ntohs
0x1800c8798
recv
0x1800c8768
recvfrom
0x1800c8748
select
0x1800c87e8
send
0x1800c8700
sendto
0x1800c8740
setsockopt
0x1800c87b0
socket
0x1800c87d0
WSACleanup
0x1800c87a8
WSACloseEvent
0x1800c8708
WSACreateEvent
0x1800c8718
WSAEnumNetworkEvents
0x1800c8730
WSAEventSelect
0x1800c8738
WSAGetLastError
0x1800c8790
WSAIoctl
0x1800c87b8
WSAResetEvent
0x1800c8750
WSASetLastError
0x1800c8788
WSAStartup
0x1800c87a0
WSAWaitForMultipleEvents
0x1800c8778
No function matches your filter.