winmde.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 7
DllCanUnloadNow
#1 · 0x28500
DllGetClassObject
#2 · 0x28540
DllRegisterServer
#3 · 0xb830
DllUnregisterServer
#4 · 0xb830
MFCreateNetVRoot
#5 · 0x2de50
MFCreateWMPMDEOpCenter
#6 · 0xf420
MFCreateWinMDEOpCenter
#7 · 0x285f0
No function matches your filter.
Imported DLLs & functions 192
ApiSetQueryApiSetPresence
0x180165798
DebugBreak
0x1801657b8
IsDebuggerPresent
0x1801657b0
OutputDebugStringA
0x1801657c0
OutputDebugStringW
0x1801657a8
DelayLoadFailureHook
0x1801657d0
ResolveDelayLoadedAPI
0x1801657e0
GetLastError
0x1801657f0
RaiseException
0x180165800
SetLastError
0x1801657f8
SetUnhandledExceptionFilter
0x180165808
UnhandledExceptionFilter
0x180165810
CreateFileW
0x180165820
GetFileAttributesExW
0x180165838
GetFileSize
0x180165828
WriteFile
0x180165830
CloseHandle
0x180165848
GetProcessHeap
0x180165858
HeapAlloc
0x180165860
HeapFree
0x180165868
DisableThreadLibraryCalls
0x1801658c8
FindResourceExW
0x1801658f8
FreeLibrary
0x1801658e8
GetModuleFileNameA
0x1801658b8
GetModuleFileNameW
0x1801658e0
GetModuleHandleExW
0x1801658c0
GetModuleHandleW
0x1801658a8
GetProcAddress
0x1801658d8
LoadLibraryExW
0x1801658b0
LoadResource
0x1801658f0
SizeofResource
0x1801658d0
FormatMessageW
0x180165908
CreateFileMappingW
0x180165930
MapViewOfFileEx
0x180165938
OpenFileMappingW
0x180165918
UnmapViewOfFile
0x180165928
VirtualQueryEx
0x180165920
CreateThread
0x180165980
GetCurrentProcess
0x180165978
GetCurrentProcessId
0x180165968
GetCurrentThreadId
0x180165948
GetProcessTimes
0x180165950
TerminateProcess
0x180165970
TlsGetValue
0x180165958
TlsSetValue
0x180165960
OpenProcess
0x180165990
QueryPerformanceCounter
0x1801659a0
RegCloseKey
0x1801659e0
RegCreateKeyExW
0x1801659f8
RegDeleteValueW
0x1801659d8
RegEnumKeyExW
0x1801659b0
RegEnumValueW
0x1801659e8
RegGetValueW
0x1801659d0
RegNotifyChangeKeyValue
0x1801659b8
RegOpenKeyExW
0x1801659f0
RegQueryInfoKeyW
0x1801659c0
RegSetValueExW
0x1801659c8
RtlCaptureContext
0x180165a10
RtlLookupFunctionEntry
0x180165a18
RtlVirtualUnwind
0x180165a08
CompareStringOrdinal
0x180165a30
MultiByteToWideChar
0x180165a38
WideCharToMultiByte
0x180165a28
CharNextW
0x180165a48
lstrcmpiW
0x180165a58
AcquireSRWLockExclusive
0x180165aa8
AcquireSRWLockShared
0x180165b08
CreateEventA
0x180165ac0
CreateEventExW
0x180165ad0
CreateEventW
0x180165b10
CreateSemaphoreExW
0x180165ae8
CreateWaitableTimerExW
0x180165a68
DeleteCriticalSection
0x180165a80
EnterCriticalSection
0x180165a78
InitializeCriticalSection
0x180165a88
InitializeSRWLock
0x180165ae0
LeaveCriticalSection
0x180165a90
OpenEventW
0x180165ac8
OpenSemaphoreW
0x180165ad8
ReleaseSemaphore
0x180165b00
ReleaseSRWLockExclusive
0x180165a70
ReleaseSRWLockShared
0x180165a98
ResetEvent
0x180165af0
SetEvent
0x180165aa0
SetWaitableTimer
0x180165af8
WaitForMultipleObjectsEx
0x180165ab0
WaitForSingleObject
0x180165ab8
InitOnceExecuteOnce
0x180165b30
Sleep
0x180165b38
SleepConditionVariableSRW
0x180165b20
WakeAllConditionVariable
0x180165b28
GetSystemInfo
0x180165b58
GetSystemTime
0x180165b48
GetSystemTimeAsFileTime
0x180165b50
GetTickCount
0x180165b60
GetTickCount64
0x180165b68
CloseThreadpoolWait
0x180165b78
CreateThreadpoolWait
0x180165b90
SetThreadpoolWait
0x180165b80
WaitForThreadpoolWaitCallbacks
0x180165b88
FileTimeToSystemTime
0x180165ba8
SystemTimeToFileTime
0x180165ba0
CreateToolhelp32Snapshot
0x180165bc8
Process32FirstW
0x180165bb8
Process32NextW
0x180165bc0
VerQueryValueW
0x180165bf0
GetFileVersionInfoW
0x180165c00
RoOriginateError
0x180165c10
GetTraceEnableFlags
0x180165c48
GetTraceEnableLevel
0x180165c20
GetTraceLoggerHandle
0x180165c40
RegisterTraceGuidsW
0x180165c38
TraceMessage
0x180165c28
UnregisterTraceGuids
0x180165c30
EventEnabled
0x180165c68
EventRegister
0x180165c60
EventSetInformation
0x180165c58
EventUnregister
0x180165c70
EventWriteTransfer
0x180165c78
D3D11CreateDevice
0x180165c88
msvcrt.dll
55
__C_specific_handler
0x180165da8
__CxxFrameHandler3
0x180165d10
__dllonexit
0x180165de8
_amsg_exit
0x180165d00
_callnewh
0x180165ca0
_errno
0x180165d88
_gcvt_s
0x180165dd0
_i64toa_s
0x180165cf8
_i64tow_s
0x180165ce0
_initterm
0x180165d20
_lock
0x180165d90
_ltoa_s
0x180165cf0
_ltow_s
0x180165db8
_onexit
0x180165cc8
_purecall
0x180165e20
_ui64toa_s
0x180165d28
_ui64tow_s
0x180165cd0
_ultoa_s
0x180165d30
_ultow_s
0x180165d68
_unlock
0x180165d98
_vsnprintf
0x180165ce8
_vsnwprintf
0x180165d78
_wcsicmp
0x180165db0
_wcsnicmp
0x180165dd8
_wtol
0x180165d38
_XcptFilter
0x180165c98
bsearch
0x180165d80
free
0x180165e30
isalpha
0x180165d58
isdigit
0x180165d60
islower
0x180165dc8
iswalpha
0x180165d48
iswdigit
0x180165d50
iswxdigit
0x180165cb8
malloc
0x180165e38
memchr
0x180165e00
memcmp
0x180165df8
memcpy
0x180165da0
memcpy_s
0x180165e28
memmove
0x180165cc0
memset
0x180165d18
qsort
0x180165e18
rand
0x180165ca8
realloc
0x180165d08
strncmp
0x180165e10
strncpy_s
0x180165e08
strnlen
0x180165df0
toupper
0x180165dc0
towlower
0x180165cb0
towupper
0x180165d40
wcschr
0x180165d70
wcscmp
0x180165e48
wcsncmp
0x180165de0
wcsncpy_s
0x180165e40
wcsstr
0x180165cd8
NtClose
0x180165e70
NtCreateFile
0x180165e78
NtDeviceIoControlFile
0x180165e60
NtQuerySystemInformation
0x180165e68
RtlInitUnicodeString
0x180165e58
RtwqCancelDeadline
0x180165758
RtwqCreateAsyncResult
0x180165768
RtwqInvokeCallback
0x180165770
RtwqSetLongRunning
0x180165760
No function matches your filter.