filetrace.dll
v10.0.26100.4654
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0xa160
DllGetClassObject
#2 · 0xa190
DllInstall
#3 · 0xa2e0
DllRegisterServer
#4 · 0xa3e0
DllUnregisterServer
#5 · 0xa510
No function matches your filter.
Imported DLLs & functions 182
ADVAPI32.dll
25
CloseServiceHandle
0x180020138
CloseTrace
0x180020168
ControlTraceW
0x1800201f0
EnableTraceEx
0x1800201d8
EventRegister
0x1800201b8
EventUnregister
0x1800201c0
EventWrite
0x1800201c8
FlushTraceW
0x1800201e8
OpenSCManagerW
0x180020160
OpenServiceW
0x180020158
OpenTraceW
0x1800201a8
ProcessTrace
0x180020130
QueryAllTracesW
0x1800201b0
QueryServiceStatusEx
0x180020150
RegCloseKey
0x1800201a0
RegCreateKeyExW
0x180020178
RegDeleteValueW
0x180020170
RegEnumKeyExW
0x180020190
RegOpenKeyExW
0x180020188
RegQueryInfoKeyW
0x180020198
RegSetValueExW
0x180020180
StartServiceW
0x180020140
StartTraceW
0x1800201d0
StopTraceW
0x1800201e0
TraceEvent
0x180020148
KERNEL32.dll
68
AcquireSRWLockExclusive
0x1800202c0
AssignProcessToJobObject
0x180020330
CloseHandle
0x1800203c8
CompareFileTime
0x180020248
CreateFileW
0x180020260
CreateIoCompletionPort
0x180020210
CreateJobObjectW
0x180020250
CreateProcessW
0x180020218
CreateThread
0x180020208
CreateWaitableTimerW
0x180020320
DeleteCriticalSection
0x1800203a0
EnterCriticalSection
0x180020388
ExpandEnvironmentStringsW
0x180020278
FindClose
0x180020228
FindFirstFileW
0x180020230
FindNextFileW
0x180020220
FindResourceExW
0x180020378
FreeLibrary
0x1800202f8
GetCurrentDirectoryW
0x180020240
GetCurrentProcess
0x1800202d8
GetCurrentProcessId
0x1800202a0
GetCurrentThreadId
0x180020298
GetFileAttributesW
0x1800203f0
GetLastError
0x180020300
GetLogicalDriveStringsW
0x180020418
GetModuleFileNameW
0x180020380
GetModuleHandleW
0x180020318
GetPrivateProfileStringW
0x180020238
GetProcAddress
0x180020308
GetProcessHeap
0x1800203b0
GetQueuedCompletionStatus
0x180020200
GetSystemTime
0x180020270
GetSystemTimeAsFileTime
0x180020290
GetThreadLocale
0x180020400
GetTickCount
0x180020288
GetVersion
0x180020350
HeapAlloc
0x1800203f8
HeapFree
0x1800203a8
InitializeCriticalSection
0x180020398
LeaveCriticalSection
0x180020390
LoadLibraryExW
0x180020310
LoadLibraryW
0x1800203e8
LoadResource
0x180020370
LocalAlloc
0x1800203d8
LocalFree
0x1800203e0
lstrcmpiW
0x180020338
MultiByteToWideChar
0x180020360
OpenProcess
0x1800203b8
OutputDebugStringA
0x180020280
PostQueuedCompletionStatus
0x180020348
QueryDosDeviceW
0x1800203d0
QueryFullProcessImageNameW
0x1800203c0
QueryPerformanceCounter
0x1800202a8
RaiseException
0x180020358
ReleaseSRWLockExclusive
0x1800202c8
ResumeThread
0x180020340
SetInformationJobObject
0x180020328
SetThreadLocale
0x180020408
SetUnhandledExceptionFilter
0x1800202e0
SetWaitableTimer
0x1800202d0
SizeofResource
0x180020368
Sleep
0x1800202f0
SleepConditionVariableSRW
0x1800202b0
SystemTimeToTzSpecificLocalTime
0x180020268
TerminateProcess
0x180020410
UnhandledExceptionFilter
0x1800202e8
WakeAllConditionVariable
0x1800202b8
WriteFile
0x180020258
msvcrt.dll
45
__C_specific_handler
0x1800206a0
__CxxFrameHandler3
0x1800206d0
__dllonexit
0x1800205e0
_amsg_exit
0x1800205a0
_callnewh
0x1800205b8
_CxxThrowException
0x1800205b0
_errno
0x180020580
_initterm
0x180020598
_lock
0x180020640
_onexit
0x180020650
_purecall
0x180020608
_resetstkoflw
0x1800205d0
_unlock
0x1800205d8
_vsnprintf
0x180020660
_vsnwprintf
0x180020658
_wcsdup
0x180020688
_wcsicmp
0x180020610
_wcsnicmp
0x180020698
_XcptFilter
0x1800205a8
??_V@YAXPEAX@Z
0x1800206c8
??0exception@@QEAA@AEBQEBD@Z
0x1800206b0
??0exception@@QEAA@AEBQEBDH@Z
0x1800205c0
??0exception@@QEAA@AEBV0@@Z
0x1800206a8
??1exception@@UEAA@XZ
0x1800206b8
??1type_info@@UEAA@XZ
0x180020588
??3@YAXPEAX@Z
0x180020630
?terminate@@YAXXZ
0x180020590
?what@exception@@UEBAPEBDXZ
0x1800206c0
calloc
0x1800205c8
free
0x180020620
malloc
0x180020628
memcmp
0x180020638
memcpy
0x1800205f0
memcpy_s
0x180020618
memmove
0x1800205e8
memset
0x1800206e0
realloc
0x1800206d8
towlower
0x180020690
wcscat_s
0x1800205f8
wcscpy_s
0x180020600
wcsncmp
0x180020668
wcsncpy_s
0x180020648
wcsrchr
0x180020678
wcsstr
0x180020680
wcstok_s
0x180020670
RtlCaptureContext
0x180020700
RtlCompareMemory
0x1800206f0
RtlFreeHeap
0x1800206f8
RtlLookupFunctionEntry
0x180020710
RtlVirtualUnwind
0x180020708
CoCreateGuid
0x180020440
CoCreateInstance
0x180020428
CoTaskMemAlloc
0x180020458
CoTaskMemFree
0x180020448
CoTaskMemRealloc
0x180020450
IIDFromString
0x180020430
StringFromGUID2
0x180020438
OLEAUT32.dll
20
LoadRegTypeLib
0x1800204c0
LoadTypeLib
0x1800204b8
RegisterTypeLib
0x180020480
SafeArrayCopy
0x1800204b0
SafeArrayCreate
0x1800204a8
SafeArrayGetLBound
0x1800204c8
SafeArrayGetUBound
0x1800204d0
SafeArrayLock
0x1800204a0
SysAllocString
0x180020478
SysAllocStringByteLen
0x180020470
SysAllocStringLen
0x1800204f0
SysFreeString
0x180020488
SysStringByteLen
0x180020500
SysStringLen
0x1800204f8
UnRegisterTypeLib
0x180020498
VarBstrCat
0x180020468
VariantClear
0x1800204e0
VariantCopyInd
0x1800204d8
VariantInit
0x1800204e8
VarUI4FromStr
0x180020490
FindExecutableW
0x180020510
PathAppendW
0x180020528
PathCombineW
0x180020538
PathFindExtensionW
0x180020530
PathFindFileNameW
0x180020520
tdh.dll
1
TdhGetProperty
0x180020720
CharNextW
0x180020548
DispatchMessageW
0x180020550
MsgWaitForMultipleObjects
0x180020570
PeekMessageW
0x180020568
TranslateMessage
0x180020558
UnregisterClassA
0x180020560
No function matches your filter.