xwreg.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x4080
DllGetClassObject
#2 · 0x40a0
No function matches your filter.
Imported DLLs & functions 113
CLSIDFromString
0x180014740
CoCreateInstance
0x180014750
CoTaskMemAlloc
0x180014748
CoTaskMemFree
0x180014758
CoTaskMemRealloc
0x180014738
StringFromGUID2
0x180014730
OutputDebugStringA
0x180014768
DelayLoadFailureHook
0x180014778
ResolveDelayLoadedAPI
0x180014788
GetLastError
0x1800147a0
RaiseException
0x1800147a8
SetUnhandledExceptionFilter
0x180014798
UnhandledExceptionFilter
0x1800147b0
DeleteFileW
0x1800147e8
FlushFileBuffers
0x1800147c0
GetFullPathNameW
0x1800147d8
GetTempFileNameW
0x1800147e0
ReadFile
0x1800147f0
SetFilePointer
0x1800147c8
WriteFile
0x1800147d0
GetTempPathW
0x180014800
DisableThreadLibraryCalls
0x180014838
FindResourceExW
0x180014848
FreeLibrary
0x180014830
GetModuleFileNameW
0x180014858
GetModuleHandleW
0x180014840
GetProcAddress
0x180014860
LoadLibraryExW
0x180014828
LoadResource
0x180014850
SizeofResource
0x180014868
GetCurrentProcess
0x180014880
GetCurrentProcessId
0x180014890
GetCurrentThreadId
0x180014898
OpenProcessToken
0x180014888
TerminateProcess
0x180014878
OpenProcess
0x1800148a8
QueryPerformanceCounter
0x1800148b8
RegCloseKey
0x1800148e0
RegCreateKeyExW
0x1800148c8
RegDeleteValueW
0x1800148d8
RegEnumKeyExW
0x1800148d0
RegOpenKeyExW
0x180014908
RegQueryInfoKeyW
0x1800148f8
RegQueryValueExW
0x1800148e8
RegRestoreKeyW
0x1800148f0
RegSetValueExW
0x180014900
RtlCaptureContext
0x180014938
RtlLookupFunctionEntry
0x180014940
RtlVirtualUnwind
0x180014930
PathFileExistsW
0x180014958
PathUnExpandEnvStringsW
0x180014950
MultiByteToWideChar
0x180014968
CharNextW
0x180014978
lstrcmpiW
0x180014988
CreateMutexW
0x1800149c8
DeleteCriticalSection
0x180014998
EnterCriticalSection
0x1800149d0
InitializeCriticalSection
0x1800149a8
LeaveCriticalSection
0x1800149c0
OpenMutexW
0x1800149b8
ReleaseMutex
0x1800149a0
ReleaseSemaphore
0x1800149b0
Sleep
0x1800149e0
CreateSemaphoreW
0x1800149f0
GetTraceEnableFlags
0x180014a30
GetTraceEnableLevel
0x180014a38
GetTraceLoggerHandle
0x180014a28
RegisterTraceGuidsW
0x180014a40
TraceMessage
0x180014a18
UnregisterTraceGuids
0x180014a20
AdjustTokenPrivileges
0x180014a68
AllocateAndInitializeSid
0x180014a50
CheckTokenMembership
0x180014a60
FreeSid
0x180014a58
msvcrt.dll
29
__C_specific_handler
0x180014b48
__CxxFrameHandler3
0x180014b18
__dllonexit
0x180014a88
_amsg_exit
0x180014ab0
_callnewh
0x180014ad8
_CxxThrowException
0x180014ad0
_errno
0x180014aa0
_initterm
0x180014aa8
_lock
0x180014a98
_onexit
0x180014a80
_purecall
0x180014b38
_unlock
0x180014a90
_vsnprintf
0x180014ac8
_vsnwprintf
0x180014b00
_XcptFilter
0x180014ab8
??0exception@@QEAA@AEBQEBDH@Z
0x180014b08
??0exception@@QEAA@AEBV0@@Z
0x180014af0
??1exception@@UEAA@XZ
0x180014ae8
??1type_info@@UEAA@XZ
0x180014a78
?what@exception@@UEBAPEBDXZ
0x180014ae0
free
0x180014b30
iswxdigit
0x180014b10
malloc
0x180014b28
memcpy_s
0x180014b40
memset
0x180014b58
realloc
0x180014b50
tolower
0x180014ac0
towlower
0x180014af8
wcsncpy_s
0x180014b20
DispatchMessageW
0x180014718
MsgWaitForMultipleObjectsEx
0x180014720
PeekMessageW
0x180014710
TranslateMessage
0x180014708
No function matches your filter.