werhandler.dll
v12.1.0.23542
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
OutOfProcessExceptionEventCallback
#1 · 0x1270
OutOfProcessExceptionEventDebuggerLaunchCallback
#2 · 0x1510
OutOfProcessExceptionEventSignatureCallback
#3 · 0x18d0
No function matches your filter.
Imported DLLs & functions 100
KERNEL32.dll
100
CloseHandle
0x10029018
CreateEventW
0x100290f4
CreateFileW
0x1002900c
CreateToolhelp32Snapshot
0x10029078
DecodePointer
0x10029014
DeleteCriticalSection
0x10029028
EncodePointer
0x100290d4
EnterCriticalSection
0x100290b4
EnumSystemLocalesW
0x10029154
ExitProcess
0x10029130
FindClose
0x100290c4
FindFirstFileExW
0x100290c8
FindNextFileW
0x100290cc
FlushFileBuffers
0x10029184
FreeEnvironmentStringsW
0x10029174
FreeLibrary
0x1002905c
GetACP
0x10029164
GetCommandLineA
0x1002916c
GetCommandLineW
0x10029084
GetConsoleCP
0x1002909c
GetConsoleMode
0x10029158
GetCPInfo
0x100290e4
GetCurrentProcess
0x10029034
GetCurrentProcessId
0x10029038
GetCurrentThread
0x10029090
GetCurrentThreadId
0x100290c0
GetEnvironmentStringsW
0x10029170
GetFileType
0x10029140
GetLastError
0x10029020
GetLocaleInfoW
0x10029148
GetLocalTime
0x10029040
GetModuleFileNameW
0x10029060
GetModuleHandleA
0x10029064
GetModuleHandleExW
0x1002906c
GetModuleHandleW
0x10029068
GetOEMCP
0x10029168
GetProcAddress
0x10029070
GetProcessHeap
0x10029178
GetProcessId
0x10029004
GetStartupInfoW
0x1002910c
GetStdHandle
0x1002913c
GetStringTypeW
0x100290b0
GetSystemDirectoryW
0x10029044
GetSystemInfo
0x100290a0
GetSystemTimeAsFileTime
0x100290e0
GetSystemWow64DirectoryW
0x10029058
GetTempPathW
0x10029010
GetThreadId
0x10029008
GetUserDefaultLCID
0x10029150
HeapAlloc
0x10029138
HeapFree
0x10029134
HeapReAlloc
0x1002915c
HeapSize
0x1002917c
InitializeCriticalSectionAndSpinCount
0x10029024
InitializeCriticalSectionEx
0x100290bc
InitializeSListHead
0x10029110
InterlockedFlushSList
0x10029118
IsDebuggerPresent
0x10029108
IsProcessorFeaturePresent
0x10029104
IsValidCodePage
0x10029160
IsValidLocale
0x1002914c
LCMapStringEx
0x100290d8
LCMapStringW
0x10029144
LeaveCriticalSection
0x100290b8
LoadLibraryExA
0x100290ac
LoadLibraryExW
0x1002912c
LoadLibraryW
0x10029074
MapViewOfFile
0x10029050
MultiByteToWideChar
0x10029088
OpenFileMappingW
0x1002904c
OpenMutexW
0x10029030
OpenProcess
0x1002903c
OutputDebugStringW
0x10029000
Process32FirstW
0x1002907c
Process32NextW
0x10029080
ProcessIdToSessionId
0x10029094
QueryPerformanceCounter
0x100290dc
RaiseException
0x1002901c
ReadProcessMemory
0x10029048
ReleaseMutex
0x1002902c
ResetEvent
0x100290ec
RtlUnwind
0x10029114
SetEvent
0x100290e8
SetFilePointerEx
0x100290d0
SetLastError
0x10029098
SetStdHandle
0x10029180
SetUnhandledExceptionFilter
0x100290fc
TerminateProcess
0x10029100
TlsAlloc
0x1002911c
TlsFree
0x10029128
TlsGetValue
0x10029120
TlsSetValue
0x10029124
UnhandledExceptionFilter
0x100290f8
UnmapViewOfFile
0x10029054
VirtualProtect
0x100290a4
VirtualQuery
0x100290a8
WaitForSingleObjectEx
0x100290f0
WideCharToMultiByte
0x1002908c
WriteConsoleW
0x1002918c
WriteFile
0x10029188
No function matches your filter.