app_hook.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 20
AllocateBuffer
#1 · 0xac00
CreateTrampolineFunction
#2 · 0x9a00
FreeBuffer
#3 · 0xae80
InitializeBuffer
#4 · 0xaba0
IsExecutableAddress
#5 · 0xaef0
MH_ApplyQueued
#6 · 0x96a0
MH_CreateHook
#7 · 0x9230
MH_CreateHookApi
#8 · 0x98a0
MH_CreateHookApiEx
#9 · 0x9830
MH_DisableHook
#10 · 0x9670
MH_EnableHook
#11 · 0x9660
MH_Initialize
#12 · 0x90c0
MH_QueueDisableHook
#13 · 0x9690
MH_QueueEnableHook
#14 · 0x9680
MH_RemoveHook
#15 · 0x94a0
MH_StatusToString
#16 · 0x9900
MH_Uninitialize
#17 · 0x9160
UninitializeBuffer
#18 · 0xabb0
hde64_disasm
#19 · 0x9f20
hde64_table
#20 · 0x130c0
No function matches your filter.
Imported DLLs & functions 117
CryptAcquireContextW
0x3773ed468
CryptCreateHash
0x3773ed470
CryptDestroyHash
0x3773ed478
CryptGetHashParam
0x3773ed480
CryptHashData
0x3773ed488
CryptReleaseContext
0x3773ed490
InitializeSecurityDescriptor
0x3773ed498
SetSecurityDescriptorDacl
0x3773ed4a0
CertCloseStore
0x3773ed4b0
CertFindCertificateInStore
0x3773ed4b8
CertFreeCertificateContext
0x3773ed4c0
CertGetCertificateContextProperty
0x3773ed4c8
CryptMsgClose
0x3773ed4d0
CryptMsgGetParam
0x3773ed4d8
CryptQueryObject
0x3773ed4e0
KERNEL32.dll
57
CloseHandle
0x3773ed508
CreateEventW
0x3773ed510
CreateFileW
0x3773ed518
CreateMutexW
0x3773ed520
CreateThread
0x3773ed528
CreateToolhelp32Snapshot
0x3773ed530
DeleteCriticalSection
0x3773ed538
DisableThreadLibraryCalls
0x3773ed540
EnterCriticalSection
0x3773ed548
FlushInstructionCache
0x3773ed550
GetCPInfo
0x3773ed558
GetCurrentProcess
0x3773ed560
GetCurrentProcessId
0x3773ed568
GetCurrentThread
0x3773ed570
GetCurrentThreadId
0x3773ed578
GetExitCodeProcess
0x3773ed580
GetLastError
0x3773ed588
GetModuleFileNameW
0x3773ed590
GetModuleHandleA
0x3773ed598
GetModuleHandleW
0x3773ed5a0
GetProcAddress
0x3773ed5a8
GetSystemInfo
0x3773ed5b0
GetThreadContext
0x3773ed5b8
HeapAlloc
0x3773ed5c0
HeapCreate
0x3773ed5c8
HeapDestroy
0x3773ed5d0
HeapFree
0x3773ed5d8
HeapReAlloc
0x3773ed5e0
InitializeCriticalSection
0x3773ed5e8
LeaveCriticalSection
0x3773ed5f0
LoadLibraryA
0x3773ed5f8
MapViewOfFile
0x3773ed600
MultiByteToWideChar
0x3773ed608
OpenEventW
0x3773ed610
OpenFileMappingW
0x3773ed618
OpenProcess
0x3773ed620
OpenThread
0x3773ed628
ProcessIdToSessionId
0x3773ed630
QueryFullProcessImageNameW
0x3773ed638
ReadFile
0x3773ed640
ReleaseMutex
0x3773ed648
ResumeThread
0x3773ed650
SetEvent
0x3773ed658
SetLastError
0x3773ed660
SetThreadContext
0x3773ed668
Sleep
0x3773ed670
SuspendThread
0x3773ed678
Thread32First
0x3773ed680
Thread32Next
0x3773ed688
TlsGetValue
0x3773ed690
UnmapViewOfFile
0x3773ed698
VirtualAlloc
0x3773ed6a0
VirtualFree
0x3773ed6a8
VirtualProtect
0x3773ed6b0
VirtualQuery
0x3773ed6b8
WaitForSingleObject
0x3773ed6c0
WideCharToMultiByte
0x3773ed6c8
msvcrt.dll
28
___lc_codepage_func
0x3773ed6d8
___mb_cur_max_func
0x3773ed6e0
__iob_func
0x3773ed6e8
_amsg_exit
0x3773ed6f0
_errno
0x3773ed6f8
_initterm
0x3773ed700
_lock
0x3773ed708
_stricmp
0x3773ed710
_unlock
0x3773ed718
_wcsicmp
0x3773ed720
abort
0x3773ed728
calloc
0x3773ed730
fprintf
0x3773ed738
fputc
0x3773ed740
free
0x3773ed748
localeconv
0x3773ed750
malloc
0x3773ed758
memcpy
0x3773ed760
memset
0x3773ed768
realloc
0x3773ed770
strcmp
0x3773ed778
strerror
0x3773ed780
strlen
0x3773ed788
strncmp
0x3773ed790
vfprintf
0x3773ed798
wcslen
0x3773ed7a0
wcsncpy
0x3773ed7a8
wcsrchr
0x3773ed7b0
USER32.dll
15
CallNextHookEx
0x3773ed7c0
FillRect
0x3773ed7c8
GetAncestor
0x3773ed7d0
GetAsyncKeyState
0x3773ed7d8
GetClassNameA
0x3773ed7e0
GetGuiResources
0x3773ed7e8
GetWindow
0x3773ed7f0
GetWindowLongPtrW
0x3773ed7f8
GetWindowRect
0x3773ed800
GetWindowThreadProcessId
0x3773ed808
IsWindow
0x3773ed810
IsWindowVisible
0x3773ed818
PtInRect
0x3773ed820
WindowFromDC
0x3773ed828
wsprintfW
0x3773ed830
No function matches your filter.