file.dll
v10.0.18362.1110
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x5b60
DllGetActivationFactory
#2 · 0x57f0
DllGetClassObject
#3 · 0x5960
No function matches your filter.
Imported DLLs & functions 319
ApiSetQueryApiSetPresence
0x180170630
DebugBreak
0x180170650
IsDebuggerPresent
0x180170648
OutputDebugStringW
0x180170640
DelayLoadFailureHook
0x180170660
ResolveDelayLoadedAPI
0x180170670
GetLastError
0x180170690
RaiseException
0x180170680
SetLastError
0x180170688
SetUnhandledExceptionFilter
0x1801706a0
UnhandledExceptionFilter
0x180170698
CompareFileTime
0x1801706c0
CreateDirectoryW
0x1801706f0
CreateFileA
0x1801706d0
CreateFileW
0x180170708
DeleteFileA
0x1801706c8
DeleteFileW
0x180170700
FileTimeToLocalFileTime
0x1801706d8
FindClose
0x180170710
FindFirstFileA
0x180170718
FindFirstFileExA
0x1801706e0
FindNextFileA
0x1801706e8
GetFileInformationByHandle
0x180170720
GetFileSize
0x1801706b0
ReadFile
0x1801706f8
SetFilePointer
0x180170728
WriteFile
0x1801706b8
CloseHandle
0x180170750
GetProcessHeap
0x180170768
HeapAlloc
0x180170778
HeapFree
0x180170770
HeapReAlloc
0x180170760
GlobalFree
0x1801707a0
FileTimeToDosDateTime
0x1801707b0
DisableThreadLibraryCalls
0x1801707d0
FindResourceExW
0x180170800
FreeLibrary
0x1801707c0
FreeResource
0x1801707d8
GetModuleFileNameA
0x180170808
GetModuleHandleExW
0x180170810
GetModuleHandleW
0x1801707e8
GetProcAddress
0x1801707c8
LoadResource
0x1801707f8
LoadStringW
0x180170818
LockResource
0x1801707e0
SizeofResource
0x1801707f0
FormatMessageW
0x180170848
GetGeoInfoW
0x180170828
GetLocaleInfoEx
0x180170850
GetUserDefaultLocaleName
0x180170830
GetUserGeoID
0x180170838
LCMapStringEx
0x180170840
GetCurrencyFormatEx
0x180170860
ExpandEnvironmentStringsA
0x180170888
GetCurrentProcess
0x1801708b0
GetCurrentProcessId
0x1801708d0
GetCurrentThread
0x1801708b8
GetCurrentThreadId
0x1801708e0
GetProcessId
0x180170898
GetProcessIdOfThread
0x1801708d8
OpenProcessToken
0x1801708c8
OpenThread
0x1801708a8
OpenThreadToken
0x1801708c0
TerminateProcess
0x1801708a0
OpenProcess
0x1801708f0
QueryPerformanceCounter
0x180170900
RegCloseKey
0x180170920
RegGetValueW
0x180170928
RegOpenCurrentUser
0x180170910
RegOpenKeyExW
0x180170918
PathAppendA
0x180170958
PathCombineA
0x180170950
PathRemoveFileSpecA
0x180170960
CompareStringOrdinal
0x180170970
CompareStringW
0x180170978
MultiByteToWideChar
0x180170980
AcquireSRWLockExclusive
0x1801709c0
AcquireSRWLockShared
0x1801709b8
CreateEventExW
0x180170a08
CreateEventW
0x1801709d8
CreateMutexExW
0x180170998
CreateSemaphoreExW
0x180170a38
DeleteCriticalSection
0x180170a20
EnterCriticalSection
0x180170a30
InitializeCriticalSection
0x1801709f8
InitializeCriticalSectionEx
0x180170a18
InitializeSRWLock
0x1801709a0
LeaveCriticalSection
0x180170a28
OpenSemaphoreW
0x1801709d0
ReleaseMutex
0x1801709e0
ReleaseSemaphore
0x1801709e8
ReleaseSRWLockExclusive
0x180170990
ReleaseSRWLockShared
0x1801709f0
ResetEvent
0x1801709a8
SetEvent
0x180170a10
WaitForMultipleObjectsEx
0x180170a00
WaitForSingleObject
0x1801709b0
WaitForSingleObjectEx
0x1801709c8
InitOnceExecuteOnce
0x180170a50
Sleep
0x180170a48
SleepConditionVariableSRW
0x180170a60
WakeAllConditionVariable
0x180170a58
GetLocalTime
0x180170a98
GetSystemTime
0x180170a80
GetSystemTimeAsFileTime
0x180170a90
GetTickCount
0x180170a78
GetTickCount64
0x180170a88
GetVersionExA
0x180170a70
CloseThreadpoolTimer
0x180170ab0
CreateThreadpoolTimer
0x180170ac0
SetThreadpoolTimer
0x180170ab8
WaitForThreadpoolTimerCallbacks
0x180170aa8
QueueUserWorkItem
0x180170ad0
FileTimeToSystemTime
0x180170ae0
SystemTimeToFileTime
0x180170ae8
UrlEscapeW
0x180170af8
EventActivityIdControl
0x180170b38
EventProviderEnabled
0x180170b50
EventRegister
0x180170b48
EventUnregister
0x180170b40
EventWriteTransfer
0x180170b58
AllocateAndInitializeSid
0x180170b90
CopySid
0x180170b80
DuplicateTokenEx
0x180170b70
FreeSid
0x180170b98
GetLengthSid
0x180170b78
GetTokenInformation
0x180170ba0
ImpersonateLoggedOnUser
0x180170b68
RevertToSelf
0x180170b88
CheckTokenMembershipEx
0x180170bb0
CapabilityCheck
0x180170bc0
ConvertSidToStringSidW
0x180170bd0
CreateRandomAccessStreamOverStream
0x180170be0
combase.dll
40
0x180170bf0
0x180170bf8
0x180170c00
0x180170c08
0x180170c18
0x180170c28
0x180170c30
0x180170c40
0x180170c50
0x180170c68
0x180170c70
0x180170c78
0x180170c80
0x180170c90
0x180170c98
0x180170cb0
0x180170cd0
0x180170ce8
0x180170cf0
0x180170cf8
0x180170d00
0x180170d10
0x180170d18
0x180170d20
0x180170d28
CStdStubBuffer_AddRef
0x180170ce0
CStdStubBuffer_Connect
0x180170c60
CStdStubBuffer_CountRefs
0x180170c10
CStdStubBuffer_DebugServerQueryInterface
0x180170cc0
CStdStubBuffer_DebugServerRelease
0x180170c38
CStdStubBuffer_Disconnect
0x180170c58
CStdStubBuffer_Invoke
0x180170ca8
CStdStubBuffer_IsIIDSupported
0x180170c48
CStdStubBuffer_QueryInterface
0x180170c20
CStdStubBuffer2_Connect
0x180170d08
CStdStubBuffer2_CountRefs
0x180170cb8
CStdStubBuffer2_Disconnect
0x180170cc8
CStdStubBuffer2_QueryInterface
0x180170cd8
NdrCStdStubBuffer_Release
0x180170ca0
NdrCStdStubBuffer2_Release
0x180170c88
CryptAcquireContextW
0x1801704d8
CryptCreateHash
0x1801704b0
CryptDestroyHash
0x1801704c8
CryptGetHashParam
0x1801704c0
CryptHashData
0x1801704b8
CryptReleaseContext
0x1801704d0
msvcrt.dll
53
__C_specific_handler
0x180170ed8
__CxxFrameHandler3
0x180170e40
__dllonexit
0x180170e50
_amsg_exit
0x180170eb0
_callnewh
0x180170d60
_errno
0x180170e38
_initterm
0x180170ea8
_itow_s
0x180170de8
_lock
0x180170ea0
_onexit
0x180170e48
_purecall
0x180170ee8
_set_errno
0x180170e68
_snwprintf_s
0x180170d90
_unlock
0x180170e98
_vsnprintf
0x180170d88
_vsnwprintf
0x180170ef8
_wcsdup
0x180170dc0
_wcsicmp
0x180170df0
_wcstoi64
0x180170db8
_wcstoui64
0x180170d98
_wcsupr
0x180170e90
_wtof
0x180170d78
_wtoi
0x180170d68
_wtol
0x180170dc8
_XcptFilter
0x180170eb8
??_V@YAXPEAX@Z
0x180170ed0
floor
0x180170de0
free
0x180170ee0
malloc
0x180170ec0
mbstowcs_s
0x180170e18
memcmp
0x180170df8
memcpy
0x180170e00
memcpy_s
0x180170ef0
memmove
0x180170e08
memmove_s
0x180170e20
memset
0x180170e10
realloc
0x180170e30
sprintf_s
0x180170e88
strchr
0x180170e58
strcmp
0x180170e28
strncpy_s
0x180170e78
strrchr
0x180170e60
strtol
0x180170e70
toupper
0x180170dd0
wcschr
0x180170da0
wcscmp
0x180170f00
wcscpy_s
0x180170ec8
wcscspn
0x180170d70
wcsrchr
0x180170da8
wcsstr
0x180170dd8
wcstod
0x180170db0
wcstombs
0x180170e80
wcstoul
0x180170d80
ntdll.dll
16
EtwEventRegister
0x180170f50
EtwEventSetInformation
0x180170f60
EtwEventUnregister
0x180170f58
EtwEventWriteTransfer
0x180170f70
NtQueryInformationProcess
0x180170f18
NtQueryWnfStateData
0x180170f20
RtlCaptureContext
0x180170f78
RtlGetDeviceFamilyInfoEnum
0x180170f28
RtlLookupFunctionEntry
0x180170f80
RtlNtStatusToDosError
0x180170f48
RtlPublishWnfStateData
0x180170f30
RtlQueryWnfStateData
0x180170f40
RtlSubscribeWnfStateChangeNotification
0x180170f38
RtlUnsubscribeWnfStateChangeNotification
0x180170f68
RtlUpcaseUnicodeChar
0x180170f10
RtlVirtualUnwind
0x180170f88
RPCRT4.dll
18
I_RpcBindingInqLocalClientPID
0x180170510
IUnknown_AddRef_Proxy
0x180170570
IUnknown_QueryInterface_Proxy
0x180170588
IUnknown_Release_Proxy
0x180170590
NdrClientCall3
0x180170550
NdrDllCanUnloadNow
0x180170560
NdrDllGetClassObject
0x180170558
NdrOleAllocate
0x180170598
NdrOleFree
0x180170578
NdrStubCall3
0x180170580
NdrStubForwardingFunction
0x180170568
RpcBindingFromStringBindingW
0x180170520
RpcBindingSetAuthInfoExW
0x180170538
RpcServerInqCallAttributesW
0x180170518
RpcStringBindingComposeW
0x180170530
RpcStringFreeW
0x180170548
UuidCreate
0x180170540
UuidFromStringW
0x180170528
WsCreateError
0x180170fd8
WsCreateHeap
0x180170fe0
WsCreateReader
0x180170f98
WsFindAttribute
0x180171010
WsFreeError
0x180170ff8
WsFreeHeap
0x180170ff0
WsFreeReader
0x180170fe8
WsGetReaderPosition
0x180170fc0
WsMoveReader
0x180170fb0
WsReadBytes
0x180170fc8
WsReadChars
0x180171018
WsReadEndAttribute
0x180171000
WsReadStartAttribute
0x180171008
WsReadStartElement
0x180170fd0
WsReadToStartElement
0x180170fb8
WsReadXmlBufferFromBytes
0x180170fa0
WsSetInputToBuffer
0x180170fa8
WINHTTP.dll
16
WinHttpAddRequestHeaders
0x1801705d0
WinHttpCloseHandle
0x1801705b8
WinHttpConnect
0x1801705b0
WinHttpCrackUrl
0x1801705a8
WinHttpGetDefaultProxyConfiguration
0x1801705c0
WinHttpGetIEProxyConfigForCurrentUser
0x1801705c8
WinHttpGetProxyForUrl
0x1801705d8
WinHttpOpen
0x180170620
WinHttpOpenRequest
0x1801705f8
WinHttpQueryHeaders
0x180170618
WinHttpReadData
0x180170608
WinHttpReceiveResponse
0x180170610
WinHttpSendRequest
0x1801705f0
WinHttpSetOption
0x1801705e0
WinHttpSetStatusCallback
0x180170600
WinHttpSetTimeouts
0x1801705e8
No function matches your filter.