rotkc.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 0
No exported functions.
No function matches your filter.
Imported DLLs & functions 319
ADVAPI32.dll
22
AdjustTokenPrivileges
0x14039d030
CredFree
0x14039d020
CredReadW
0x14039d018
CryptAcquireContextW
0x14039d048
CryptCreateHash
0x14039d068
CryptDecrypt
0x14039d0a8
CryptDestroyHash
0x14039d060
CryptDestroyKey
0x14039d080
CryptEnumProvidersW
0x14039d050
CryptExportKey
0x14039d0a0
CryptGenRandom
0x14039d078
CryptGetProvParam
0x14039d090
CryptGetUserKey
0x14039d098
CryptReleaseContext
0x14039d070
CryptSetHashParam
0x14039d088
CryptSignHashW
0x14039d058
DeregisterEventSource
0x14039d008
LookupPrivilegeValueW
0x14039d028
OpenProcessToken
0x14039d038
RegGetValueA
0x14039d010
RegisterEventSourceW
0x14039d000
ReportEventW
0x14039d040
atoi
0x14039d840
strtol
0x14039d838
strtoul
0x14039d850
wcstoul
0x14039d848
getenv
0x14039d860
_stat64i32
0x14039d870
_callnewh
0x14039d880
calloc
0x14039d8a0
free
0x14039d898
malloc
0x14039d888
realloc
0x14039d890
ceilf
0x14039d8b0
_beginthreadex
0x14039d8c8
_cexit
0x14039d920
_configure_narrow_argv
0x14039d8f0
_crt_atexit
0x14039d918
_errno
0x14039d948
_execute_onexit_table
0x14039d910
_exit
0x14039d940
_initialize_narrow_environment
0x14039d8f8
_initialize_onexit_table
0x14039d900
_initterm
0x14039d928
_initterm_e
0x14039d930
_register_onexit_function
0x14039d908
_seh_filter_dll
0x14039d8e8
abort
0x14039d8d0
raise
0x14039d938
signal
0x14039d8d8
strerror_s
0x14039d8e0
terminate
0x14039d8c0
__acrt_iob_func
0x14039d9e8
__stdio_common_vfprintf
0x14039d9f0
__stdio_common_vsprintf
0x14039d988
__stdio_common_vsprintf_s
0x14039d970
__stdio_common_vswprintf
0x14039d998
_fileno
0x14039d980
_get_osfhandle
0x14039d9c0
_setmode
0x14039d9c8
_wfopen
0x14039d9d8
fclose
0x14039d9e0
feof
0x14039d968
ferror
0x14039d958
fflush
0x14039d960
fgets
0x14039d978
fopen
0x14039d9d0
fputs
0x14039d9a0
fread
0x14039d990
fseek
0x14039d9a8
ftell
0x14039d9b0
fwrite
0x14039d9b8
_wcsicmp
0x14039da10
_wcsnicmp
0x14039da40
isdigit
0x14039da18
isspace
0x14039da70
strcat_s
0x14039da00
strcmp
0x14039da30
strcpy_s
0x14039da58
strcspn
0x14039da20
strlen
0x14039da48
strncmp
0x14039da78
strncpy
0x14039da68
strncpy_s
0x14039da08
strnlen
0x14039da38
strspn
0x14039da28
tolower
0x14039da60
wcslen
0x14039da50
CertCloseStore
0x14039d0c0
CertDuplicateCertificateContext
0x14039d0e8
CertEnumCertificatesInStore
0x14039d0c8
CertFindCertificateInStore
0x14039d0f0
CertFreeCertificateContext
0x14039d0b8
CertGetCertificateContextProperty
0x14039d0d8
CertOpenStore
0x14039d0e0
CertOpenSystemStoreW
0x14039d0d0
D3D11CreateDeviceAndSwapChain
0x14039dab8
GetAdaptersAddresses
0x14039d100
KERNEL32.dll
105
AcquireSRWLockExclusive
0x14039d210
AcquireSRWLockShared
0x14039d338
CheckRemoteDebuggerPresent
0x14039d260
CloseHandle
0x14039d188
CreateEventW
0x14039d200
CreateFileW
0x14039d1c0
CreateSemaphoreA
0x14039d3b0
CreateThread
0x14039d218
CreateToolhelp32Snapshot
0x14039d168
DeleteCriticalSection
0x14039d3a0
DeleteFileW
0x14039d2f8
DeviceIoControl
0x14039d1b8
EnterCriticalSection
0x14039d390
FindClose
0x14039d240
FindFirstFileW
0x14039d448
FindNextFileW
0x14039d228
FlushInstructionCache
0x14039d198
FormatMessageA
0x14039d3d0
FreeLibrary
0x14039d3c0
GetACP
0x14039d380
GetCommandLineW
0x14039d1e8
GetComputerNameW
0x14039d2a0
GetConsoleMode
0x14039d3e0
GetCurrentProcess
0x14039d130
GetCurrentProcessId
0x14039d190
GetCurrentThread
0x14039d288
GetCurrentThreadId
0x14039d150
GetEnvironmentVariableW
0x14039d300
GetExitCodeThread
0x14039d170
GetFileAttributesExW
0x14039d2d0
GetFileType
0x14039d310
GetLastError
0x14039d180
GetLocaleInfoEx
0x14039d110
GetModuleFileNameW
0x14039d238
GetModuleHandleExW
0x14039d1f0
GetModuleHandleW
0x14039d1d8
GetPrivateProfileIntW
0x14039d230
GetProcAddress
0x14039d1c8
GetProcessIdOfThread
0x14039d138
GetStdHandle
0x14039d308
GetSystemDirectoryA
0x14039d3b8
GetSystemFirmwareTable
0x14039d1a8
GetSystemInfo
0x14039d248
GetSystemTime
0x14039d2b8
GetSystemTimeAsFileTime
0x14039d360
GetSystemWindowsDirectoryW
0x14039d2a8
GetTempPathW
0x14039d2f0
GetThreadContext
0x14039d428
GetVolumeInformationW
0x14039d290
GetVolumePathNameW
0x14039d298
GetWindowsDirectoryW
0x14039d2e0
HeapAlloc
0x14039d430
HeapCreate
0x14039d450
HeapFree
0x14039d440
HeapReAlloc
0x14039d438
InitializeCriticalSection
0x14039d388
InitializeSListHead
0x14039d410
InitializeSRWLock
0x14039d328
InitOnceBeginInitialize
0x14039d118
InitOnceComplete
0x14039d120
IsDebuggerPresent
0x14039d420
K32EnumProcessModules
0x14039d250
LeaveCriticalSection
0x14039d398
LoadLibraryA
0x14039d3c8
LoadLibraryExW
0x14039d2e8
LoadLibraryW
0x14039d3d8
LocalFree
0x14039d220
lstrlenW
0x14039d2c0
Module32FirstW
0x14039d2d8
MultiByteToWideChar
0x14039d2c8
OpenProcess
0x14039d268
OpenThread
0x14039d1a0
Process32FirstW
0x14039d278
Process32NextW
0x14039d270
QueryFullProcessImageNameW
0x14039d280
QueryPerformanceCounter
0x14039d408
ReadConsoleA
0x14039d3f0
ReadConsoleW
0x14039d3f8
ReadProcessMemory
0x14039d1d0
ReleaseSemaphore
0x14039d3a8
ReleaseSRWLockExclusive
0x14039d208
ReleaseSRWLockShared
0x14039d330
ResumeThread
0x14039d160
RtlVirtualUnwind
0x14039d320
SetConsoleMode
0x14039d3e8
SetLastError
0x14039d1b0
SetThreadContext
0x14039d418
Sleep
0x14039d178
SleepConditionVariableSRW
0x14039d128
SuspendThread
0x14039d158
SystemTimeToFileTime
0x14039d2b0
Thread32First
0x14039d148
Thread32Next
0x14039d140
TlsAlloc
0x14039d340
TlsFree
0x14039d358
TlsGetValue
0x14039d348
TlsSetValue
0x14039d350
VirtualAlloc
0x14039d368
VirtualFree
0x14039d378
VirtualProtect
0x14039d370
VirtualQuery
0x14039d258
WaitForSingleObject
0x14039d1f8
WakeAllConditionVariable
0x14039d400
WideCharToMultiByte
0x14039d1e0
WriteFile
0x14039d318
MSVCP140.dll
39
_Cnd_broadcast
0x14039d4c0
_Cnd_do_broadcast_at_thread_exit
0x14039d498
_Cnd_register_at_thread_exit
0x14039d580
_Cnd_unregister_at_thread_exit
0x14039d540
_Cnd_wait
0x14039d588
_Mtx_lock
0x14039d490
_Mtx_unlock
0x14039d4b8
_Query_perf_counter
0x14039d4a8
_Query_perf_frequency
0x14039d470
_Thrd_id
0x14039d4a0
_Thrd_join
0x14039d4b0
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
0x14039d4c8
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
0x14039d550
?__ExceptionPtrCreate@@YAXPEAX@Z
0x14039d548
?__ExceptionPtrCurrentException@@YAXPEAX@Z
0x14039d570
?__ExceptionPtrDestroy@@YAXPEAX@Z
0x14039d568
?__ExceptionPtrRethrow@@YAXPEBX@Z
0x14039d578
?__ExceptionPtrToBool@@YA_NPEBX@Z
0x14039d560
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
0x14039d530
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
0x14039d460
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x14039d508
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
0x14039d510
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x14039d500
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x14039d4f8
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x14039d4e8
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x14039d4f0
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
0x14039d518
?_ReportUnobservedException@details@Concurrency@@YAXXZ
0x14039d4d8
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
0x14039d528
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
0x14039d4e0
?_Syserror_map@std@@YAPEBDH@Z
0x14039d488
?_Throw_Cpp_error@std@@YAXH@Z
0x14039d478
?_Winerror_map@std@@YAHH@Z
0x14039d590
?_Xbad_function_call@std@@YAXXZ
0x14039d558
?_Xlength_error@std@@YAXPEBD@Z
0x14039d468
?_Xout_of_range@std@@YAXPEBD@Z
0x14039d480
??0task_continuation_context@Concurrency@@AEAA@XZ
0x14039d538
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
0x14039d4d0
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
0x14039d520
SetupDiDestroyDeviceInfoList
0x14039d5b8
SetupDiEnumDeviceInterfaces
0x14039d5a0
SetupDiGetClassDevsW
0x14039d5b0
SetupDiGetDeviceInterfaceDetailW
0x14039d5a8
CommandLineToArgvW
0x14039d5c8
CreateWindowExW
0x14039d5e0
DestroyWindow
0x14039d5d8
EnumWindows
0x14039d5f0
GetProcessWindowStation
0x14039d608
GetUserObjectInformationW
0x14039d5f8
GetWindowThreadProcessId
0x14039d600
IsWindowVisible
0x14039d610
MessageBoxW
0x14039d5e8
__CxxFrameHandler4
0x14039d6c0
__C_specific_handler
0x14039d6a0
__C_specific_handler_noexcept
0x14039d638
__current_exception
0x14039d650
__current_exception_context
0x14039d628
__std_exception_copy
0x14039d688
__std_exception_destroy
0x14039d680
__std_terminate
0x14039d690
__std_type_info_destroy_list
0x14039d648
_CxxThrowException
0x14039d630
_purecall
0x14039d698
memchr
0x14039d640
memcmp
0x14039d678
memcpy
0x14039d6a8
memmove
0x14039d668
memset
0x14039d658
strchr
0x14039d670
strrchr
0x14039d660
strstr
0x14039d620
wcsstr
0x14039d6b0
WINHTTP.dll
13
WinHttpCloseHandle
0x14039d720
WinHttpConnect
0x14039d740
WinHttpCrackUrl
0x14039d748
WinHttpOpen
0x14039d6f8
WinHttpOpenRequest
0x14039d718
WinHttpQueryHeaders
0x14039d6f0
WinHttpReadData
0x14039d710
WinHttpReceiveResponse
0x14039d700
WinHttpSendRequest
0x14039d728
WinHttpSetOption
0x14039d6e8
WinHttpSetStatusCallback
0x14039d738
WinHttpSetTimeouts
0x14039d730
WinHttpTimeToSystemTime
0x14039d708
WS2_32.dll
27
closesocket
0x14039d758
connect
0x14039d7d0
gethostbyaddr
0x14039d818
gethostbyname
0x14039d7d8
getpeername
0x14039d778
getservbyname
0x14039d828
getservbyport
0x14039d820
getsockname
0x14039d7b0
getsockopt
0x14039d7b8
htonl
0x14039d7f8
htons
0x14039d800
inet_addr
0x14039d790
inet_ntoa
0x14039d810
ioctlsocket
0x14039d7a0
ntohs
0x14039d7c0
recv
0x14039d7a8
recvfrom
0x14039d770
select
0x14039d7c8
send
0x14039d760
sendto
0x14039d768
setsockopt
0x14039d798
shutdown
0x14039d780
socket
0x14039d788
WSACleanup
0x14039d7e8
WSAGetLastError
0x14039d7f0
WSASetLastError
0x14039d808
WSAStartup
0x14039d7e0
No function matches your filter.