rundll32.exe

v10.0.26100.8328 64-bit Windows NT Analyzed
Download
Description
Windows host process (Rundll32)
Authors
© Microsoft Corporation. All rights reserved.
File size
96.0 KB
Uploaded
2026-05-17 10:55
Views
111
SHA-256
4d90fff3e33bf3cb2bea5e08e6487325

Exported functions 0

No exported functions.

Imported DLLs & functions 154

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x14000e428
api-ms-win-core-com-l1-1-0.dll 11
CLSIDFromString 0x14000e488
CoAddRefServerProcess 0x14000e460
CoCreateInstance 0x14000e448
CoInitializeEx 0x14000e440
CoInitializeSecurity 0x14000e450
CoRegisterClassObject 0x14000e458
CoReleaseServerProcess 0x14000e478
CoResumeClassObjects 0x14000e468
CoRevokeClassObject 0x14000e438
CoUninitialize 0x14000e470
CoWaitForMultipleHandles 0x14000e480
api-ms-win-core-console-l1-1-0.dll 1
WriteConsoleW 0x14000e498
api-ms-win-core-console-l1-2-0.dll 2
AttachConsole 0x14000e4a8
FreeConsole 0x14000e4b0
api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x14000e4c0
IsDebuggerPresent 0x14000e4d0
OutputDebugStringW 0x14000e4c8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x14000e4e0
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x14000e4f0
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x14000e520
SetErrorMode 0x14000e500
SetLastError 0x14000e518
SetUnhandledExceptionFilter 0x14000e508
UnhandledExceptionFilter 0x14000e510
api-ms-win-core-file-l1-1-0.dll 4
CreateFileW 0x14000e548
GetFileAttributesW 0x14000e540
ReadFile 0x14000e530
SetFilePointer 0x14000e538
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x14000e558
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x14000e580
HeapAlloc 0x14000e570
HeapFree 0x14000e568
HeapSetInformation 0x14000e578
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x14000e590
LocalFree 0x14000e598
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x14000e5a8
api-ms-win-core-libraryloader-l1-2-0.dll 7
FreeLibrary 0x14000e5c0
GetModuleFileNameA 0x14000e5d0
GetModuleHandleExW 0x14000e5d8
GetModuleHandleW 0x14000e5e0
GetProcAddress 0x14000e5b8
LoadLibraryExW 0x14000e5e8
LoadStringW 0x14000e5c8
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x14000e5f8
api-ms-win-core-path-l1-1-0.dll 1
PathCchAppend 0x14000e608
api-ms-win-core-processenvironment-l1-1-0.dll 2
GetCommandLineW 0x14000e618
SearchPathW 0x14000e620
api-ms-win-core-processthreads-l1-1-0.dll 10
CreateProcessW 0x14000e658
DeleteProcThreadAttributeList 0x14000e678
ExitProcess 0x14000e668
GetCurrentProcess 0x14000e630
GetCurrentProcessId 0x14000e640
GetCurrentThreadId 0x14000e638
GetStartupInfoW 0x14000e648
InitializeProcThreadAttributeList 0x14000e670
TerminateProcess 0x14000e660
UpdateProcThreadAttribute 0x14000e650
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x14000e688
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x14000e698
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x14000e6b0
RtlLookupFunctionEntry 0x14000e6b8
RtlVirtualUnwind 0x14000e6a8
api-ms-win-core-sidebyside-l1-1-0.dll 5
ActivateActCtx 0x14000e6c8
CreateActCtxW 0x14000e6e8
DeactivateActCtx 0x14000e6d0
QueryActCtxW 0x14000e6e0
ReleaseActCtx 0x14000e6d8
api-ms-win-core-string-l1-1-0.dll 2
CompareStringW 0x14000e6f8
WideCharToMultiByte 0x14000e700
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x14000e710
api-ms-win-core-synch-l1-1-0.dll 17
AcquireSRWLockExclusive 0x14000e788
AcquireSRWLockShared 0x14000e780
CreateEventW 0x14000e770
CreateMutexExW 0x14000e720
CreateSemaphoreExW 0x14000e728
DeleteCriticalSection 0x14000e738
EnterCriticalSection 0x14000e740
InitializeCriticalSectionEx 0x14000e730
LeaveCriticalSection 0x14000e748
OpenSemaphoreW 0x14000e798
ReleaseMutex 0x14000e760
ReleaseSemaphore 0x14000e750
ReleaseSRWLockExclusive 0x14000e778
ReleaseSRWLockShared 0x14000e790
SetEvent 0x14000e768
WaitForSingleObject 0x14000e758
WaitForSingleObjectEx 0x14000e7a0
api-ms-win-core-synch-l1-2-0.dll 1
InitOnceExecuteOnce 0x14000e7b0
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemDirectoryW 0x14000e7c0
GetSystemTimeAsFileTime 0x14000e7c8
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x14000e7e8
CreateThreadpoolTimer 0x14000e7d8
SetThreadpoolTimer 0x14000e7f0
WaitForThreadpoolTimerCallbacks 0x14000e7e0
api-ms-win-core-util-l1-1-0.dll 2
DecodePointer 0x14000e800
EncodePointer 0x14000e808
api-ms-win-core-winrt-error-l1-1-0.dll 2
RoOriginateError 0x14000e820
RoOriginateErrorW 0x14000e818
api-ms-win-core-wow64-l1-1-0.dll 1
Wow64EnableWow64FsRedirection 0x14000e830
api-ms-win-core-wow64-l1-1-1.dll 2
GetSystemWow64Directory2W 0x14000e848
IsWow64Process2 0x14000e840
api-ms-win-crt-private-l1-1-0.dll 34
__C_specific_handler 0x14000e8f8
__current_exception 0x14000e908
__current_exception_context 0x14000e910
__CxxFrameHandler3 0x14000e900
_CxxThrowException 0x14000e918
_o___p__commode 0x14000e958
_o___std_exception_copy 0x14000e940
_o___std_exception_destroy 0x14000e938
_o___stdio_common_vswprintf 0x14000e930
_o__callnewh 0x14000e920
_o__cexit 0x14000e8b8
_o__configthreadlocale 0x14000e950
_o__configure_wide_argv 0x14000e948
_o__crt_atexit 0x14000e928
_o__errno 0x14000e858
_o__exit 0x14000e860
_o__get_wide_winmain_command_line 0x14000e868
_o__initialize_onexit_table 0x14000e870
_o__initialize_wide_environment 0x14000e878
_o__invalid_parameter_noinfo 0x14000e880
_o__purecall 0x14000e888
_o__register_onexit_function 0x14000e890
_o__seh_filter_exe 0x14000e898
_o__set_app_type 0x14000e8a0
_o__set_fmode 0x14000e8a8
_o__set_new_mode 0x14000e8b0
_o__wtoi 0x14000e8c8
_o_exit 0x14000e8d0
_o_free 0x14000e8d8
_o_malloc 0x14000e8e0
_o_memcpy_s 0x14000e8e8
_o_terminate 0x14000e8f0
memcmp 0x14000e960
memcpy 0x14000e8c0
api-ms-win-crt-runtime-l1-1-0.dll 4
_c_exit 0x14000e970
_initterm 0x14000e988
_initterm_e 0x14000e980
_register_thread_local_exe_atexit_callback 0x14000e978
api-ms-win-crt-string-l1-1-0.dll 2
memmove_s 0x14000e998
memset 0x14000e9a0
api-ms-win-downlevel-shlwapi-l1-1-0.dll 1
PathIsRelativeW 0x14000e9b0
api-ms-win-downlevel-shlwapi-l2-1-0.dll 1
SHSetThreadRef 0x14000e9c0
imagehlp.dll 1
ImageDirectoryEntryToData 0x14000e9d0
ntdll.dll 9
NtClose 0x14000ea20
NtOpenProcessToken 0x14000e9e0
NtQueryInformationToken 0x14000ea00
NtQuerySystemInformation 0x14000e9f0
NtSetInformationToken 0x14000ea08
RtlImageNtHeader 0x14000e9e8
RtlNtStatusToDosError 0x14000ea18
RtlSetSearchPathMode 0x14000e9f8
RtlWow64IsWowGuestMachineSupported 0x14000ea10