FileTracker.dll

Description: FileTracker

Version: 14.8.4084.0

Architecture: 64-bit

Operating System: Windows

SHA256: e78b93b2dfbc7b3deb5044053b671a3a

File Size: 292.8 KB

Uploaded At: Dec. 1, 2025, 8:29 a.m.

Views: 23

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx

Exported Functions

TrackerExportOne (Ordinal: 1, Address: 0x9180)
StartTrackingContext (Ordinal: 2, Address: 0x9190)
StartTrackingContextWithRoot (Ordinal: 3, Address: 0x9310)
EndTrackingContext (Ordinal: 4, Address: 0x9490)
StopTrackingAndCleanup (Ordinal: 5, Address: 0x9580)
SuspendTracking (Ordinal: 6, Address: 0x9610)
ResumeTracking (Ordinal: 7, Address: 0x9660)
WriteAllTLogs (Ordinal: 8, Address: 0x96c0)
WriteContextTLogs (Ordinal: 9, Address: 0x97f0)
SetThreadCount (Ordinal: 10, Address: 0x9950)

Imported DLLs & Functions

KERNEL32.dll

CloseHandle (Address: 0x18002f218)
CompareFileTime (Address: 0x18002f258)
CopyFileA (Address: 0x18002f058)
CopyFileExA (Address: 0x18002f068)
CopyFileExW (Address: 0x18002f070)
CopyFileW (Address: 0x18002f060)
CreateDirectoryA (Address: 0x18002f0d8)
CreateDirectoryW (Address: 0x18002f0d0)
CreateEventW (Address: 0x18002f210)
CreateFileA (Address: 0x18002f048)
CreateFileW (Address: 0x18002f050)
CreateHardLinkA (Address: 0x18002f078)
CreateHardLinkW (Address: 0x18002f080)
CreateProcessA (Address: 0x18002f088)
CreateProcessW (Address: 0x18002f090)
CreateThread (Address: 0x18002f098)
DeleteCriticalSection (Address: 0x18002f1f8)
DeleteFileA (Address: 0x18002f0e8)
DeleteFileW (Address: 0x18002f0e0)
DisableThreadLibraryCalls (Address: 0x18002f100)
EncodePointer (Address: 0x18002f2d8)
EnterCriticalSection (Address: 0x18002f038)
ExitProcess (Address: 0x18002f0f8)
FindClose (Address: 0x18002f358)
FindFirstFileExA (Address: 0x18002f360)
FindFirstFileW (Address: 0x18002f438)
FindNextFileA (Address: 0x18002f368)
FindNextFileW (Address: 0x18002f370)
FindResourceExW (Address: 0x18002f178)
FindResourceW (Address: 0x18002f170)
FlushFileBuffers (Address: 0x18002f328)
FlushInstructionCache (Address: 0x18002f408)
FormatMessageW (Address: 0x18002f450)
FreeEnvironmentStringsA (Address: 0x18002f1f0)
FreeEnvironmentStringsW (Address: 0x18002f1d8)
FreeLibrary (Address: 0x18002f2f8)
GetACP (Address: 0x18002f320)
GetCommandLineA (Address: 0x18002f390)
GetCommandLineW (Address: 0x18002f1b8)
GetConsoleCP (Address: 0x18002f330)
GetConsoleMode (Address: 0x18002f338)
GetConsoleOutputCP (Address: 0x18002f460)
GetCPInfo (Address: 0x18002f388)
GetCurrentProcess (Address: 0x18002f2a0)
GetCurrentProcessId (Address: 0x18002f110)
GetCurrentThread (Address: 0x18002f150)
GetCurrentThreadId (Address: 0x18002f190)
GetEnvironmentStrings (Address: 0x18002f1e8)
GetEnvironmentStringsW (Address: 0x18002f1d0)
GetEnvironmentVariableA (Address: 0x18002f1e0)
GetEnvironmentVariableW (Address: 0x18002f030)
GetFileAttributesA (Address: 0x18002f0a8)
GetFileAttributesExA (Address: 0x18002f0b8)
GetFileAttributesExW (Address: 0x18002f0b0)
GetFileAttributesW (Address: 0x18002f0a0)
GetFileType (Address: 0x18002f128)
GetFullPathNameW (Address: 0x18002f440)
GetLastError (Address: 0x18002f120)
GetLocaleInfoW (Address: 0x18002f348)
GetModuleFileNameA (Address: 0x18002f1c8)
GetModuleFileNameW (Address: 0x18002f148)
GetModuleHandleA (Address: 0x18002f430)
GetModuleHandleExW (Address: 0x18002f310)
GetModuleHandleW (Address: 0x18002f270)
GetOEMCP (Address: 0x18002f380)
GetProcAddress (Address: 0x18002f208)
GetProcessHeap (Address: 0x18002f028)
GetProcessId (Address: 0x18002f138)
GetStartupInfoW (Address: 0x18002f2c0)
GetStdHandle (Address: 0x18002f350)
GetStringTypeW (Address: 0x18002f398)
GetSystemTimeAsFileTime (Address: 0x18002f238)
GetThreadContext (Address: 0x18002f3f8)
GetTickCount (Address: 0x18002f410)
GetUserDefaultUILanguage (Address: 0x18002f458)
HeapAlloc (Address: 0x18002f020)
HeapDestroy (Address: 0x18002f000)
HeapFree (Address: 0x18002f018)
HeapReAlloc (Address: 0x18002f010)
HeapSize (Address: 0x18002f008)
InitializeCriticalSection (Address: 0x18002f1b0)
InitializeCriticalSectionAndSpinCount (Address: 0x18002f2e8)
InitializeCriticalSectionEx (Address: 0x18002f260)
InitializeSListHead (Address: 0x18002f2b0)
InterlockedFlushSList (Address: 0x18002f308)
IsDebuggerPresent (Address: 0x18002f2b8)
IsProcessorFeaturePresent (Address: 0x18002f2a8)
IsValidCodePage (Address: 0x18002f378)
IsWow64Process (Address: 0x18002f3e8)
LCMapStringW (Address: 0x18002f340)
LeaveCriticalSection (Address: 0x18002f040)
LoadLibraryExW (Address: 0x18002f300)
LoadLibraryW (Address: 0x18002f140)
LoadResource (Address: 0x18002f168)
LocalFree (Address: 0x18002f448)
LockResource (Address: 0x18002f160)
MultiByteToWideChar (Address: 0x18002f200)
OutputDebugStringW (Address: 0x18002f3b8)
QueryPerformanceCounter (Address: 0x18002f198)
QueryPerformanceFrequency (Address: 0x18002f1a0)
RaiseException (Address: 0x18002f2e0)
ReadConsoleW (Address: 0x18002f468)
ReadFile (Address: 0x18002f248)
ReadProcessMemory (Address: 0x18002f3d8)
RemoveDirectoryA (Address: 0x18002f0c8)
RemoveDirectoryW (Address: 0x18002f0c0)
ResetEvent (Address: 0x18002f228)
ResumeThread (Address: 0x18002f118)
RtlCaptureContext (Address: 0x18002f278)
RtlLookupFunctionEntry (Address: 0x18002f280)
RtlPcToFileHeader (Address: 0x18002f2d0)
RtlUnwindEx (Address: 0x18002f2c8)
RtlVirtualUnwind (Address: 0x18002f288)
SetDllDirectoryW (Address: 0x18002f1c0)
SetEndOfFile (Address: 0x18002f470)
SetEnvironmentVariableW (Address: 0x18002f108)
SetEvent (Address: 0x18002f230)
SetFilePointer (Address: 0x18002f250)
SetFilePointerEx (Address: 0x18002f3a8)
SetLastError (Address: 0x18002f130)
SetStdHandle (Address: 0x18002f3a0)
SetThreadContext (Address: 0x18002f400)
SetUnhandledExceptionFilter (Address: 0x18002f298)
SizeofResource (Address: 0x18002f158)
SuspendThread (Address: 0x18002f3f0)
TerminateProcess (Address: 0x18002f0f0)
TlsAlloc (Address: 0x18002f1a8)
TlsFree (Address: 0x18002f2f0)
TlsGetValue (Address: 0x18002f180)
TlsSetValue (Address: 0x18002f188)
UnhandledExceptionFilter (Address: 0x18002f290)
VirtualAlloc (Address: 0x18002f418)
VirtualAllocEx (Address: 0x18002f3c0)
VirtualProtect (Address: 0x18002f420)
VirtualProtectEx (Address: 0x18002f3c8)
VirtualQuery (Address: 0x18002f428)
VirtualQueryEx (Address: 0x18002f3d0)
WaitForSingleObject (Address: 0x18002f220)
WaitForSingleObjectEx (Address: 0x18002f268)
WideCharToMultiByte (Address: 0x18002f318)
WriteConsoleW (Address: 0x18002f3b0)
WriteFile (Address: 0x18002f240)
WriteProcessMemory (Address: 0x18002f3e0)