Faultrep.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread, VirtualAllocEx
Exported functions 18
#1 · 0xbd00
#2 · 0xbd40
BasepReportFault
#3 · 0xc490
CheckForReadOnlyResourceFilter
#4 · 0xc4d0
CheckPerUserCrossProcessThrottle
#5 · 0xb7b0
UpdatePerUserLastCrossProcessCollectionTime
#6 · 0xb840
AddERExcludedApplicationA
#7 · 0xd560
AddERExcludedApplicationW
#8 · 0xd530
CancelHangReporting
#9 · 0xbe30
DllCanUnloadNow
#10 · 0x5610
DllGetClassObject
#11 · 0x5650
ReportCoreHang
#12 · 0xbd80
ReportFault
#13 · 0xd4e0
ReportHang
#14 · 0xbcd0
WerReportHang
#15 · 0xbdc0
WerpGetDebugger
#16 · 0x18f70
WerpInitiateCrashReporting
#17 · 0xcf60
WerpLaunchAeDebug
#18 · 0x193a0
No function matches your filter.
Imported DLLs & functions 398
ApiSetQueryApiSetPresence
0x18004b560
CoCreateInstance
0x18004b598
CoImpersonateClient
0x18004b570
CoInitializeEx
0x18004b590
CoRevertToSelf
0x18004b588
CoSetProxyBlanket
0x18004b580
CoTaskMemAlloc
0x18004b5b0
CoTaskMemFree
0x18004b5a8
CoUninitialize
0x18004b5a0
CoUnmarshalInterface
0x18004b578
ObjectStublessClient3
0x18004b5d8
ObjectStublessClient4
0x18004b5c8
ObjectStublessClient5
0x18004b5c0
ObjectStublessClient6
0x18004b5d0
DebugBreak
0x18004b5f8
IsDebuggerPresent
0x18004b5e8
OutputDebugStringW
0x18004b5f0
CheckRemoteDebuggerPresent
0x18004b608
DelayLoadFailureHook
0x18004b618
ResolveDelayLoadedAPI
0x18004b628
GetLastError
0x18004b638
RaiseException
0x18004b658
SetErrorMode
0x18004b660
SetLastError
0x18004b640
SetUnhandledExceptionFilter
0x18004b648
UnhandledExceptionFilter
0x18004b650
SetThreadErrorMode
0x18004b670
CompareFileTime
0x18004b6c0
CreateDirectoryW
0x18004b6b8
CreateFileW
0x18004b690
DeleteFileW
0x18004b6e8
FindClose
0x18004b6f8
FindFirstFileW
0x18004b698
FindNextFileW
0x18004b6c8
FlushFileBuffers
0x18004b6a0
GetDriveTypeW
0x18004b700
GetFileAttributesW
0x18004b680
GetFinalPathNameByHandleW
0x18004b720
GetLogicalDriveStringsW
0x18004b6e0
GetLongPathNameW
0x18004b6d0
GetTempFileNameW
0x18004b6a8
QueryDosDeviceW
0x18004b6f0
ReadFile
0x18004b710
SetEndOfFile
0x18004b6b0
SetFileAttributesW
0x18004b688
SetFileInformationByHandle
0x18004b718
SetFilePointerEx
0x18004b708
WriteFile
0x18004b6d8
GetTempPathW
0x18004b730
MoveFileExW
0x18004b740
GetProcessHeap
0x18004b770
HeapAlloc
0x18004b768
HeapFree
0x18004b778
LocalFree
0x18004b788
DisableThreadLibraryCalls
0x18004b7b0
FreeLibrary
0x18004b7a8
FreeLibraryAndExitThread
0x18004b7d8
GetModuleFileNameA
0x18004b7c8
GetModuleFileNameW
0x18004b7b8
GetModuleHandleExW
0x18004b7e0
GetModuleHandleW
0x18004b7c0
GetProcAddress
0x18004b7a0
LoadLibraryExW
0x18004b7d0
LoadStringW
0x18004b798
LoadLibraryW
0x18004b7f0
GetUserDefaultUILanguage
0x18004b818
CreateFileMappingW
0x18004b848
MapViewOfFile
0x18004b828
ReadProcessMemory
0x18004b870
UnmapViewOfFile
0x18004b858
VirtualAlloc
0x18004b868
VirtualAllocEx
0x18004b878
VirtualFree
0x18004b840
VirtualFreeEx
0x18004b850
VirtualQuery
0x18004b838
VirtualQueryEx
0x18004b860
WriteProcessMemory
0x18004b830
ExpandEnvironmentStringsW
0x18004b890
SearchPathW
0x18004b888
SetEnvironmentVariableW
0x18004b898
PssDuplicateSnapshot
0x18004b8b0
PssFreeSnapshot
0x18004b8a8
PssQuerySnapshot
0x18004b8c8
PssWalkMarkerCreate
0x18004b8b8
PssWalkMarkerFree
0x18004b8c0
CreateProcessW
0x18004b938
CreateRemoteThread
0x18004b960
CreateThread
0x18004b918
DeleteProcThreadAttributeList
0x18004b910
GetCurrentProcess
0x18004b950
GetCurrentProcessId
0x18004b968
GetCurrentThread
0x18004b8f0
GetCurrentThreadId
0x18004b958
GetExitCodeProcess
0x18004b928
GetExitCodeThread
0x18004b920
GetProcessId
0x18004b970
GetProcessTimes
0x18004b908
GetThreadId
0x18004b900
GetThreadPriority
0x18004b8d8
InitializeProcThreadAttributeList
0x18004b8e0
OpenProcessToken
0x18004b940
OpenThread
0x18004b8e8
SetThreadPriority
0x18004b8f8
TerminateProcess
0x18004b948
UpdateProcThreadAttribute
0x18004b930
QueryPerformanceCounter
0x18004b9a0
QueryPerformanceFrequency
0x18004b998
K32EnumProcesses
0x18004b9b8
K32EnumProcessModules
0x18004b9d8
K32GetMappedFileNameW
0x18004b9c8
K32GetModuleFileNameExW
0x18004b9d0
K32GetProcessImageFileNameW
0x18004b9c0
QueryFullProcessImageNameW
0x18004b9b0
RegCloseKey
0x18004ba08
RegCreateKeyExW
0x18004ba30
RegDeleteValueW
0x18004ba18
RegEnumKeyExW
0x18004ba10
RegGetKeySecurity
0x18004b9f0
RegGetValueW
0x18004ba38
RegOpenKeyExW
0x18004b9e8
RegQueryInfoKeyW
0x18004b9f8
RegQueryValueExW
0x18004ba00
RegSetKeySecurity
0x18004ba20
RegSetValueExW
0x18004ba28
RegSetKeyValueW
0x18004ba48
RtlCaptureContext
0x18004ba70
RtlLookupFunctionEntry
0x18004ba80
RtlVirtualUnwind
0x18004ba78
StrStrIW
0x18004ba90
CompareStringW
0x18004bab0
MultiByteToWideChar
0x18004baa0
WideCharToMultiByte
0x18004baa8
AcquireSRWLockExclusive
0x18004bad0
AcquireSRWLockShared
0x18004bb58
CreateEventW
0x18004bad8
CreateMutexExW
0x18004bb40
CreateMutexW
0x18004bb18
CreateSemaphoreExW
0x18004bae0
DeleteCriticalSection
0x18004bb28
EnterCriticalSection
0x18004bb30
InitializeCriticalSection
0x18004bb20
InitializeCriticalSectionEx
0x18004bb50
InitializeSRWLock
0x18004baf8
LeaveCriticalSection
0x18004bb38
OpenEventW
0x18004bb68
OpenMutexW
0x18004bb08
OpenSemaphoreW
0x18004bb48
ReleaseMutex
0x18004bb10
ReleaseSemaphore
0x18004bae8
ReleaseSRWLockExclusive
0x18004bac0
ReleaseSRWLockShared
0x18004bb70
ResetEvent
0x18004bb00
SetEvent
0x18004bac8
WaitForSingleObject
0x18004baf0
WaitForSingleObjectEx
0x18004bb60
InitOnceBeginInitialize
0x18004bb88
InitOnceComplete
0x18004bb80
Sleep
0x18004bb90
WaitForMultipleObjects
0x18004bba0
GetSystemDirectoryW
0x18004bbb8
GetSystemInfo
0x18004bbd0
GetSystemTime
0x18004bbc0
GetSystemTimeAsFileTime
0x18004bbe0
GetTickCount
0x18004bbe8
GetTickCount64
0x18004bbc8
GetVersionExW
0x18004bbf0
GetWindowsDirectoryW
0x18004bbb0
GlobalMemoryStatusEx
0x18004bbd8
CloseThreadpoolTimer
0x18004bc38
CloseThreadpoolWait
0x18004bc20
CreateThreadpoolTimer
0x18004bc10
CreateThreadpoolWait
0x18004bc28
SetThreadpoolTimer
0x18004bc08
SetThreadpoolWait
0x18004bc30
WaitForThreadpoolTimerCallbacks
0x18004bc00
WaitForThreadpoolWaitCallbacks
0x18004bc18
FileTimeToSystemTime
0x18004bc50
SystemTimeToFileTime
0x18004bc48
CreateToolhelp32Snapshot
0x18004bc90
Module32FirstW
0x18004bc88
Module32NextW
0x18004bc70
Process32FirstW
0x18004bc68
Process32NextW
0x18004bc60
Thread32First
0x18004bc80
Thread32Next
0x18004bc78
GetFileVersionInfoExW
0x18004bca8
GetFileVersionInfoSizeExW
0x18004bca0
VerQueryValueW
0x18004bcb0
GetApplicationRecoveryCallback
0x18004bcc0
WerGetFlags
0x18004bcc8
RoGetActivationFactory
0x18004bce0
RoInitialize
0x18004bce8
RoUninitialize
0x18004bcd8
WindowsCreateStringReference
0x18004bcf8
IsWow64Process
0x18004bd08
GetSystemWow64Directory2W
0x18004bd28
GetSystemWow64DirectoryW
0x18004bd18
IsWow64Process2
0x18004bd20
EventProviderEnabled
0x18004bd58
EventRegister
0x18004bd38
EventSetInformation
0x18004bd40
EventUnregister
0x18004bd60
EventWrite
0x18004bd50
EventWriteTransfer
0x18004bd48
DeregisterEventSource
0x18004bd78
RegisterEventSourceW
0x18004bd80
ReportEventW
0x18004bd70
AdjustTokenGroups
0x18004bde8
AdjustTokenPrivileges
0x18004bd90
AllocateAndInitializeSid
0x18004bda8
CheckTokenMembership
0x18004bda0
CopySid
0x18004be00
CreateWellKnownSid
0x18004bdf8
DuplicateToken
0x18004bdc0
FreeSid
0x18004bd98
GetLengthSid
0x18004bdb0
GetSidSubAuthority
0x18004bdc8
GetSidSubAuthorityCount
0x18004bdd0
GetTokenInformation
0x18004bdb8
ImpersonateLoggedOnUser
0x18004bde0
IsValidSid
0x18004bdf0
RevertToSelf
0x18004bdd8
LookupAccountSidW
0x18004be18
LookupPrivilegeValueW
0x18004be10
ConvertSidToStringSidW
0x18004be30
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18004be28
BuildSecurityDescriptorW
0x18004be40
CloseServiceHandle
0x18004be58
OpenSCManagerW
0x18004be60
OpenServiceW
0x18004be68
StartServiceW
0x18004be50
I_QueryTagInformation
0x18004be78
CommandLineToArgvW
0x18004be88
MiniDumpWriteDump
0x18004bec0
StackWalk64
0x18004beb8
SymCleanup
0x18004bea8
SymFunctionTableAccess64
0x18004bec8
SymGetModuleBase64
0x18004bea0
SymGetModuleInfoW64
0x18004be98
SymInitialize
0x18004beb0
msvcrt.dll
32
__C_specific_handler
0x18004bf18
__CxxFrameHandler3
0x18004bf98
__dllonexit
0x18004bfc0
_amsg_exit
0x18004bef8
_callnewh
0x18004bf40
_CxxThrowException
0x18004bf28
_initterm
0x18004bf10
_local_unwind
0x18004bf48
_lock
0x18004bf88
_onexit
0x18004bfb8
_purecall
0x18004bf38
_unlock
0x18004bfa0
_vsnprintf_s
0x18004bed8
_vsnwprintf
0x18004bf30
_XcptFilter
0x18004bf70
??0exception@@QEAA@AEBV0@@Z
0x18004bfc8
??0exception@@QEAA@XZ
0x18004bf60
??1exception@@UEAA@XZ
0x18004bef0
??1type_info@@UEAA@XZ
0x18004bfa8
?terminate@@YAXXZ
0x18004bfb0
free
0x18004bf08
malloc
0x18004bf00
memcmp
0x18004bf50
memcpy
0x18004bf78
memcpy_s
0x18004bee8
memmove
0x18004bf80
memset
0x18004bf90
rand
0x18004bf58
realloc
0x18004bf20
srand
0x18004bf68
time
0x18004bee0
wcscmp
0x18004bfd0
ntdll.dll
96
_errno
0x18004c258
_vscwprintf
0x18004c298
_wcsicmp
0x18004c288
_wcsnicmp
0x18004c290
_wcstoui64
0x18004c028
_wtoi
0x18004c270
DbgPrint
0x18004c030
DbgPrintEx
0x18004c2a0
EtwCheckCoverage
0x18004c0f8
EtwEventWriteNoRegistration
0x18004c168
EtwGetTraceEnableFlags
0x18004c2b8
EtwGetTraceEnableLevel
0x18004c2c0
EtwGetTraceLoggerHandle
0x18004c2c8
EtwRegisterTraceGuidsW
0x18004c2b0
EtwTraceMessage
0x18004c2d0
EtwUnregisterTraceGuids
0x18004c2a8
isspace
0x18004c038
iswspace
0x18004c280
memmove_s
0x18004c068
NtAllocateVirtualMemory
0x18004c008
NtAlpcConnectPort
0x18004c198
NtAlpcSendWaitReceivePort
0x18004c1a0
NtClearEvent
0x18004c088
NtClose
0x18004c240
NtCreateFile
0x18004bff8
NtDeviceIoControlFile
0x18004c000
NtFreeVirtualMemory
0x18004c010
NtOpenEvent
0x18004c178
NtOpenKey
0x18004c0c8
NtOpenProcess
0x18004c1f0
NtQueryEvent
0x18004c1d8
NtQueryInformationProcess
0x18004c248
NtQueryInformationThread
0x18004c020
NtQueryInformationToken
0x18004c1c0
NtQueryLicenseValue
0x18004c1c8
NtQuerySystemInformation
0x18004c170
NtQueryValueKey
0x18004c0b8
NtResumeProcess
0x18004c110
NtResumeThread
0x18004c120
NtSetInformationFile
0x18004c1e0
NtSetInformationProcess
0x18004c100
NtSetSystemInformation
0x18004c140
NtSuspendProcess
0x18004c128
NtSuspendThread
0x18004c118
NtSystemDebugControl
0x18004c228
NtWaitForMultipleObjects
0x18004c090
NtWaitForSingleObject
0x18004c180
PssNtCaptureSnapshot
0x18004c1f8
PssNtFreeSnapshot
0x18004c150
RtlAcquireSRWLockExclusive
0x18004bfe0
RtlAdjustPrivilege
0x18004c018
RtlAllocateAndInitializeSid
0x18004c188
RtlAllocateHeap
0x18004c050
RtlCompareMemory
0x18004c220
RtlCompareUnicodeString
0x18004c1b0
RtlCreateProcessReflection
0x18004c238
RtlDecodeSystemPointer
0x18004c080
RtlDetermineDosPathNameType_U
0x18004c0b0
RtlFreeHeap
0x18004c048
RtlFreeSid
0x18004c1a8
RtlGetCurrentTransaction
0x18004c0a0
RtlGetNtSystemRoot
0x18004c0a8
RtlGetUnloadEventTraceEx
0x18004c0f0
RtlIdentifierAuthoritySid
0x18004c138
RtlImageNtHeaderEx
0x18004c1d0
RtlInitUnicodeString
0x18004c190
RtlInitUnicodeStringEx
0x18004c0c0
RtlNtStatusToDosError
0x18004c078
RtlNtStatusToDosErrorNoTeb
0x18004c1b8
RtlQueryResourcePolicy
0x18004c1e8
RtlQueryWnfStateData
0x18004c060
RtlReleasePebLock
0x18004c0d8
RtlReleaseSRWLockExclusive
0x18004bfe8
RtlSecondsSince1970ToTime
0x18004c200
RtlSetCurrentTransaction
0x18004c098
RtlSetThreadErrorMode
0x18004c040
RtlSleepConditionVariableSRW
0x18004c2d8
RtlSubAuthorityCountSid
0x18004c130
RtlTryAcquirePebLock
0x18004c0e8
RtlWakeAllConditionVariable
0x18004c148
RtlWerpReportException
0x18004c230
swprintf_s
0x18004c208
tolower
0x18004c058
toupper
0x18004c268
towlower
0x18004c108
wcscat_s
0x18004c210
wcschr
0x18004c278
wcscpy_s
0x18004bff0
wcsncmp
0x18004c0e0
wcsncpy_s
0x18004c218
wcsrchr
0x18004c260
wcsstr
0x18004c0d0
wcstoul
0x18004c250
ZwQueryInformationThread
0x18004c070
ZwQueryWnfStateNameInformation
0x18004c158
ZwUpdateWnfStateData
0x18004c160
RPCRT4.dll
20
CStdStubBuffer_AddRef
0x18004b530
CStdStubBuffer_Connect
0x18004b508
CStdStubBuffer_CountRefs
0x18004b548
CStdStubBuffer_DebugServerQueryInterface
0x18004b4f0
CStdStubBuffer_DebugServerRelease
0x18004b528
CStdStubBuffer_Disconnect
0x18004b520
CStdStubBuffer_Invoke
0x18004b4c0
CStdStubBuffer_IsIIDSupported
0x18004b510
CStdStubBuffer_QueryInterface
0x18004b540
IUnknown_AddRef_Proxy
0x18004b4c8
IUnknown_QueryInterface_Proxy
0x18004b518
IUnknown_Release_Proxy
0x18004b550
NdrCStdStubBuffer_Release
0x18004b500
NdrDllCanUnloadNow
0x18004b4b8
NdrDllGetClassObject
0x18004b4d0
NdrOleAllocate
0x18004b538
NdrOleFree
0x18004b4f8
RpcStringFreeW
0x18004b4e8
UuidCreate
0x18004b4e0
UuidToStringW
0x18004b4d8
No function matches your filter.