EtwRundown.dll - Online Dependency Analysis & Download

Description

Etw Rundown Helper Library

Authors

File size

50.0 KB

Uploaded

2025-12-01 07:27

Views

SHA-256

1eb48fa0044186d59a6525d0a7d841d7

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 2

EtwLogHeapRundown #1 · 0x3270

EtwLogSysConfigRundown #2 · 0x1200

Imported DLLs & functions 97

api-ms-win-core-apiquery-l1-1-0.dll 1

ApiSetQueryApiSetPresence 0x18000a1f0

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x18000a200

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x18000a210

api-ms-win-core-errorhandling-l1-1-0.dll 3

GetLastError 0x18000a230

SetUnhandledExceptionFilter 0x18000a228

UnhandledExceptionFilter 0x18000a220

api-ms-win-core-file-l1-1-0.dll 5

CreateFileW 0x18000a260

GetDriveTypeW 0x18000a240

GetLogicalDriveStringsW 0x18000a248

GetVolumeInformationW 0x18000a258

LocalFileTimeToFileTime 0x18000a250

api-ms-win-core-file-l1-2-0.dll 1

GetVolumePathNamesForVolumeNameW 0x18000a270

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x18000a280

api-ms-win-core-heap-l2-1-0.dll 1

LocalFree 0x18000a290

api-ms-win-core-io-l1-1-0.dll 2

DeviceIoControl 0x18000a2a8

GetOverlappedResult 0x18000a2a0

api-ms-win-core-libraryloader-l1-2-0.dll 1

DisableThreadLibraryCalls 0x18000a2b8

api-ms-win-core-processthreads-l1-1-0.dll 4

GetCurrentProcess 0x18000a2e0

GetCurrentProcessId 0x18000a2d0

GetCurrentThreadId 0x18000a2c8

TerminateProcess 0x18000a2d8

api-ms-win-core-processthreads-l1-1-1.dll 2

IsProcessorFeaturePresent 0x18000a2f0

OpenProcess 0x18000a2f8

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x18000a308

api-ms-win-core-registry-l1-1-0.dll 6

RegCloseKey 0x18000a340

RegEnumKeyExW 0x18000a318

RegEnumValueW 0x18000a330

RegOpenKeyExW 0x18000a320

RegQueryInfoKeyW 0x18000a338

RegQueryValueExW 0x18000a328

api-ms-win-core-synch-l1-1-0.dll 1

CreateEventW 0x18000a350

api-ms-win-core-sysinfo-l1-1-0.dll 5

GetComputerNameExW 0x18000a368

GetSystemTimeAsFileTime 0x18000a378

GetSystemWindowsDirectoryW 0x18000a360

GetTickCount 0x18000a370

GlobalMemoryStatusEx 0x18000a380

api-ms-win-core-sysinfo-l1-2-0.dll 2

GetNativeSystemInfo 0x18000a398

GetSystemFirmwareTable 0x18000a390

api-ms-win-core-timezone-l1-1-0.dll 1

SystemTimeToFileTime 0x18000a3a8

api-ms-win-service-core-l1-1-1.dll 1

EnumServicesStatusExW 0x18000a3b8

api-ms-win-service-management-l1-1-0.dll 2

CloseServiceHandle 0x18000a3c8

OpenSCManagerW 0x18000a3d0

api-ms-win-service-private-l1-1-0.dll 1

I_QueryTagInformation 0x18000a3e0

CFGMGR32.dll 7

CM_Free_Log_Conf_Handle 0x18000a168

CM_Free_Res_Des_Handle 0x18000a148

CM_Get_DevNode_Status_Ex 0x18000a178

CM_Get_First_Log_Conf_Ex 0x18000a158

CM_Get_Next_Res_Des_Ex 0x18000a170

CM_Get_Res_Des_Data_Ex 0x18000a150

CM_Get_Res_Des_Data_Size_Ex 0x18000a160

DEVOBJ.dll 10

DevObjCreateDeviceInfoList 0x18000a1d0

DevObjDestroyDeviceInfoList 0x18000a1a8

DevObjEnumDeviceInfo 0x18000a1c0

DevObjEnumDeviceInterfaces 0x18000a190

DevObjGetClassDevs 0x18000a198

DevObjGetDeviceInfoListDetail 0x18000a1b0

DevObjGetDeviceInstanceId 0x18000a188

DevObjGetDeviceInterfaceDetail 0x18000a1a0

DevObjGetDeviceRegistryProperty 0x18000a1b8

DevObjOpenDevRegKey 0x18000a1c8

IPHLPAPI.DLL 1

GetAdaptersAddresses 0x18000a1e0

ntdll.dll 36

_vsnwprintf 0x18000a488

_wcsicmp 0x18000a4b8

EtwpGetCpuSpeed 0x18000a408

memcpy 0x18000a478

memset 0x18000a508

NtClose 0x18000a498

NtEnumerateKey 0x18000a400

NtOpenFile 0x18000a410

NtOpenKey 0x18000a480

NtPowerInformation 0x18000a500

NtQuerySystemInformation 0x18000a490

NtQueryValueKey 0x18000a4e0

NtQueryVolumeInformationFile 0x18000a4a8

NtSetInformationThread 0x18000a458

NtTraceEvent 0x18000a4d8

RtlAdjustPrivilege 0x18000a450

RtlAllocateHeap 0x18000a4f0

RtlCaptureContext 0x18000a428

RtlCreateQueryDebugBuffer 0x18000a448

RtlDestroyQueryDebugBuffer 0x18000a468

RtlFreeHeap 0x18000a4e8

RtlGetDeviceFamilyInfoEnum 0x18000a3f8

RtlGUIDFromString 0x18000a418

RtlImpersonateSelf 0x18000a438

RtlInitUnicodeString 0x18000a4f8

RtlIpv4AddressToStringW 0x18000a430

RtlIpv6AddressToStringW 0x18000a420

RtlLookupFunctionEntry 0x18000a4c0

RtlNtStatusToDosError 0x18000a4b0

RtlQueryHeapInformation 0x18000a440

RtlQueryProcessDebugInformation 0x18000a460

RtlReAllocateHeap 0x18000a4d0

RtlVirtualUnwind 0x18000a470

wcsncmp 0x18000a4a0

wcsrchr 0x18000a3f0

wcsstr 0x18000a4c8