XLWFPDownload.dll
v1.0.1.18
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
Start
#1 · 0xd500
No function matches your filter.
Imported DLLs & functions 298
ADVAPI32.dll
20
ConvertSidToStringSidW
0x10022048
CreateProcessAsUserW
0x10022018
DuplicateTokenEx
0x1002201c
GetTraceEnableLevel
0x1002202c
GetTraceLoggerHandle
0x10022024
GetUserNameW
0x10022034
ImpersonateLoggedOnUser
0x1002203c
InitializeSecurityDescriptor
0x1002204c
InitializeSid
0x10022044
LookupAccountNameW
0x10022038
OpenProcessToken
0x10022014
RegCloseKey
0x10022004
RegisterTraceGuidsW
0x10022030
RegOpenKeyExW
0x10022020
RegOpenKeyW
0x1002200c
RegQueryValueExW
0x10022010
RevertToSelf
0x10022040
SetSecurityDescriptorDacl
0x10022000
TraceEvent
0x10022008
UnregisterTraceGuids
0x10022028
FwpmGetAppIdFromFileName0
0x10022490
GetAdaptersInfo
0x10022054
KERNEL32.dll
79
CloseHandle
0x100220a8
ConnectNamedPipe
0x10022108
CreateDirectoryA
0x1002206c
CreateEventW
0x100220a4
CreateFileA
0x10022134
CreateFileW
0x10022114
CreateNamedPipeW
0x1002210c
CreateToolhelp32Snapshot
0x100220c4
DeleteCriticalSection
0x100220d0
DeviceIoControl
0x10022078
EnterCriticalSection
0x10022090
FindClose
0x100220e4
FindFirstFileW
0x100220d4
FindNextFileW
0x10022190
FlushInstructionCache
0x100220f8
GetCurrentProcess
0x100220f0
GetCurrentProcessId
0x10022150
GetCurrentThreadId
0x10022100
GetFileAttributesA
0x10022070
GetLastError
0x1002209c
GetModuleFileNameA
0x10022064
GetModuleFileNameW
0x1002208c
GetModuleHandleW
0x10022120
GetPrivateProfileStringA
0x100220a0
GetPrivateProfileStringW
0x100220ac
GetProcAddress
0x10022124
GetProcessHeap
0x10022160
GetSystemDirectoryA
0x10022060
GetSystemDirectoryW
0x100220d8
GetSystemTime
0x10022094
GetSystemTimeAsFileTime
0x10022154
GetTickCount
0x1002214c
GetVersionExA
0x1002213c
GetVolumeInformationA
0x1002205c
HeapAlloc
0x10022164
HeapDestroy
0x1002217c
HeapFree
0x1002215c
HeapReAlloc
0x10022180
HeapSize
0x10022184
InitializeCriticalSection
0x100220c8
InterlockedCompareExchange
0x10022158
InterlockedDecrement
0x10022084
InterlockedExchange
0x10022188
InterlockedIncrement
0x10022080
IsBadCodePtr
0x10022130
IsDebuggerPresent
0x10022144
IsProcessorFeaturePresent
0x1002216c
LeaveCriticalSection
0x10022088
LoadLibraryA
0x10022168
lstrcatA
0x10022068
lstrcpyA
0x10022074
MultiByteToWideChar
0x100220b8
OpenProcess
0x100220b0
Process32FirstW
0x100220bc
Process32NextW
0x100220c0
QueryPerformanceCounter
0x10022148
RaiseException
0x100220fc
ReadFile
0x1002211c
ResetEvent
0x100220ec
SetEvent
0x10022104
SetLastError
0x100220cc
SetPriorityClass
0x10022138
SetUnhandledExceptionFilter
0x10022140
Sleep
0x100220f4
SystemTimeToTzSpecificLocalTime
0x1002207c
TerminateProcess
0x1002218c
UnhandledExceptionFilter
0x10022194
VirtualAlloc
0x10022178
VirtualFree
0x10022174
VirtualQuery
0x1002212c
WaitForMultipleObjects
0x10022128
WaitForSingleObject
0x10022098
WaitNamedPipeW
0x10022110
WideCharToMultiByte
0x100220b4
Wow64DisableWow64FsRedirection
0x100220dc
Wow64RevertWow64FsRedirection
0x100220e0
WriteFile
0x10022118
WritePrivateProfileStringA
0x10022170
WTSGetActiveConsoleSessionId
0x100220e8
curl_easy_cleanup
0x100224a4
curl_easy_init
0x100224b4
curl_easy_perform
0x100224a0
curl_easy_setopt
0x1002249c
curl_formadd
0x100224a8
curl_formfree
0x100224ac
curl_slist_append
0x10022498
curl_slist_free_all
0x100224b0
0x100224bc
0x100224c0
0x100224c4
0x100224c8
0x100224cc
0x100224d0
0x100224d4
0x100224d8
MSVCP90.dll
87
?_Lock@_Mutex@std@@QAEXXZ
0x100221dc
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x100221e8
?_Unlock@_Mutex@std@@QAEXXZ
0x100221e0
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x100222b4
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
0x100221b8
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
0x100221ac
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
0x100222d8
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
0x100221c0
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
0x100221d8
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
0x10022284
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
0x100221bc
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
0x100222ec
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
0x1002219c
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
0x10022210
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
0x100221d4
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
0x100222a0
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
0x100221c8
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
0x100221b4
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
0x1002223c
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
0x10022240
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
0x10022280
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
0x10022244
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
0x10022250
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
0x10022208
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
0x10022254
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
0x10022294
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
0x10022258
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
0x10022238
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
0x1002224c
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
0x10022234
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
0x10022230
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
0x1002226c
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
0x10022248
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
0x10022200
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
0x1002227c
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
0x100221f8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
0x100221fc
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
0x10022218
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
0x100221a0
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
0x10022264
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
0x10022260
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
0x100222e8
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
0x10022268
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
0x100222b8
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
0x10022220
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
0x100222b0
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
0x100222c0
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
0x100222a8
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
0x100222ac
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
0x100222d0
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
0x100222f0
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
0x100222c8
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
0x10022274
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
0x100222e0
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
0x1002222c
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
0x1002221c
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
0x100221a8
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x10022298
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
0x10022270
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
0x100222e4
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
0x100222cc
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
0x100222dc
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
0x100222c4
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
0x10022278
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
0x100222f4
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
0x1002225c
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
0x10022290
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x100221e4
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
0x1002220c
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
0x10022288
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
0x1002229c
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
0x10022204
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
0x100222bc
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
0x100221a4
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
0x10022228
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
0x100221cc
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x100221f0
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x100221f4
?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
0x100221c4
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
0x100221b0
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
0x10022224
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
0x1002228c
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
0x10022214
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
0x100221d0
?uncaught_exception@std@@YA_NXZ
0x100221ec
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x100222d4
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
0x100222a4
MSVCR90.dll
66
__clean_type_info_names_internal
0x100223a8
__CppXcptFilter
0x10022398
__CxxFrameHandler3
0x10022360
__dllonexit
0x1002236c
_adjust_fdiv
0x10022394
_amsg_exit
0x10022390
_beginthreadex
0x10022338
_crt_debugger_hook
0x100223a0
_CxxThrowException
0x100223ec
_decode_pointer
0x1002237c
_encode_pointer
0x10022370
_encoded_null
0x10022384
_endthreadex
0x10022334
_except_handler4_common
0x1002239c
_initterm
0x10022388
_initterm_e
0x1002238c
_invalid_parameter_noinfo
0x10022318
_itoa
0x100223cc
_lock
0x10022374
_ltow_s
0x10022350
_malloc_crt
0x10022380
_onexit
0x10022378
_purecall
0x10022324
_recalloc
0x10022348
_time64
0x100223d4
_unlock
0x10022368
_vscwprintf
0x100223b8
_vswprintf_c_l
0x10022314
_wcsicmp
0x10022344
_wcsupr_s
0x1002233c
_wfopen
0x10022308
?_type_info_dtor_internal_method@type_info@@QAEXXZ
0x100223a4
??_V@YAXPAX@Z
0x1002231c
??0exception@std@@QAE@ABQBD@Z
0x10022400
??0exception@std@@QAE@ABV01@@Z
0x100222fc
??0exception@std@@QAE@XZ
0x100223ac
??1exception@std@@UAE@XZ
0x100223b0
??2@YAPAXI@Z
0x10022330
??3@YAXPAX@Z
0x100223c8
?terminate@@YAXXZ
0x10022364
?what@exception@std@@UBEPBDXZ
0x100223b4
fclose
0x1002232c
feof
0x100223bc
fread
0x10022320
free
0x10022300
isalnum
0x100223fc
isprint
0x100223f0
isspace
0x100223f4
malloc
0x10022304
memcmp
0x100223e8
memcpy
0x100223d0
memcpy_s
0x1002234c
memmove_s
0x100223c0
memset
0x1002235c
printf
0x10022358
rand
0x100223dc
sprintf
0x100223d8
srand
0x100223e0
strlen
0x100223e4
strncpy
0x100223f8
strstr
0x10022354
swprintf_s
0x100223c4
tolower
0x10022340
vswprintf_s
0x1002230c
wcscpy_s
0x10022328
wprintf
0x10022310
SHGetSpecialFolderPathA
0x10022408
PathAppendW
0x10022414
PathCombineW
0x10022420
PathFileExistsW
0x10022410
PathRemoveFileSpecW
0x1002241c
SHGetValueW
0x10022418
USER32.dll
19
CallWindowProcW
0x10022440
CreateWindowExW
0x10022428
DefWindowProcW
0x1002242c
DestroyWindow
0x10022450
DispatchMessageW
0x1002243c
GetClassInfoExW
0x1002245c
GetDesktopWindow
0x1002246c
GetMessageW
0x10022430
GetWindowLongW
0x10022464
IsWindow
0x10022444
LoadCursorW
0x10022458
PeekMessageW
0x10022448
PostMessageW
0x10022454
PostThreadMessageW
0x1002244c
RegisterClassExW
0x10022460
SetWindowLongW
0x10022468
ShowWindow
0x10022470
TranslateMessage
0x10022434
UnregisterClassA
0x10022438
WTSQueryUserToken
0x10022488
No function matches your filter.