rgle.dll
v1.0.0.0
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
init_ipc_server
#1 · 0x72b74
No function matches your filter.
Imported DLLs & functions 254
ADVAPI32.dll
13
AdjustTokenPrivileges
0x1803ad020
CreateWellKnownSid
0x1803ad040
GetTokenInformation
0x1803ad038
GetWindowsAccountDomainSid
0x1803ad048
ImpersonateLoggedOnUser
0x1803ad060
LookupPrivilegeValueW
0x1803ad018
OpenProcessToken
0x1803ad010
OpenThreadToken
0x1803ad050
RegCloseKey
0x1803ad008
RegEnumKeyExW
0x1803ad028
RegOpenKeyExW
0x1803ad030
RegQueryValueExW
0x1803ad000
RevertToSelf
0x1803ad058
strtoull
0x1803ad600
_callnewh
0x1803ad620
calloc
0x1803ad628
free
0x1803ad618
malloc
0x1803ad610
_cexit
0x1803ad6b0
_configure_narrow_argv
0x1803ad678
_crt_atexit
0x1803ad6a8
_execute_onexit_table
0x1803ad6a0
_initialize_narrow_environment
0x1803ad680
_initialize_onexit_table
0x1803ad690
_initterm
0x1803ad658
_initterm_e
0x1803ad660
_register_onexit_function
0x1803ad698
_seh_filter_dll
0x1803ad670
abort
0x1803ad668
terminate
0x1803ad688
_stricmp
0x1803ad6d0
strcmp
0x1803ad6c8
strcpy_s
0x1803ad6c0
wcsncmp
0x1803ad6d8
bcrypt.dll
19
BCryptCloseAlgorithmProvider
0x1803ad708
BCryptCreateHash
0x1803ad760
BCryptDecrypt
0x1803ad710
BCryptDestroyHash
0x1803ad700
BCryptDestroyKey
0x1803ad6f8
BCryptEncrypt
0x1803ad758
BCryptExportKey
0x1803ad750
BCryptFinalizeKeyPair
0x1803ad748
BCryptFinishHash
0x1803ad740
BCryptGenerateKeyPair
0x1803ad738
BCryptGenRandom
0x1803ad768
BCryptGetProperty
0x1803ad730
BCryptHashData
0x1803ad728
BCryptImportKey
0x1803ad778
BCryptImportKeyPair
0x1803ad720
BCryptOpenAlgorithmProvider
0x1803ad6f0
BCryptSetProperty
0x1803ad770
BCryptSignHash
0x1803ad718
BCryptVerifySignature
0x1803ad6e8
CRYPT32.dll
19
CertCloseStore
0x1803ad070
CertDuplicateCertificateContext
0x1803ad100
CertEnumCertificatesInStore
0x1803ad0c8
CertFindCertificateInStore
0x1803ad0f8
CertFreeCertificateChain
0x1803ad0f0
CertFreeCertificateContext
0x1803ad0d0
CertGetCertificateChain
0x1803ad0e8
CertGetCertificateContextProperty
0x1803ad0e0
CertGetNameStringW
0x1803ad0d8
CertNameToStrW
0x1803ad0c0
CryptAcquireCertificatePrivateKey
0x1803ad0b8
CryptDecodeObject
0x1803ad0b0
CryptFindOIDInfo
0x1803ad080
CryptFormatObject
0x1803ad0a8
CryptImportPublicKeyInfoEx2
0x1803ad0a0
CryptMsgClose
0x1803ad098
CryptMsgGetParam
0x1803ad090
CryptQueryObject
0x1803ad088
PFXImportCertStore
0x1803ad078
KERNEL32.dll
155
AddVectoredExceptionHandler
0x1803ad4a0
CancelIoEx
0x1803ad258
CancelSynchronousIo
0x1803ad270
CancelThreadpoolIo
0x1803ad3a8
CloseHandle
0x1803ad210
CloseThreadpoolIo
0x1803ad280
CloseThreadpoolWork
0x1803ad348
ConnectNamedPipe
0x1803ad250
CreateEventExW
0x1803ad468
CreateEventW
0x1803ad4c0
CreateFileW
0x1803ad390
CreateIoCompletionPort
0x1803ad388
CreateNamedPipeW
0x1803ad260
CreateThread
0x1803ad420
CreateThreadpoolIo
0x1803ad398
CreateThreadpoolTimer
0x1803ad328
CreateThreadpoolWork
0x1803ad340
DebugBreak
0x1803ad560
DecodePointer
0x1803ad5d0
DeleteCriticalSection
0x1803ad2e0
DeleteFileW
0x1803ad3b0
DeviceIoControl
0x1803ad3b8
DuplicateHandle
0x1803ad240
EncodePointer
0x1803ad5c8
EnterCriticalSection
0x1803ad2f0
ExpandEnvironmentStringsW
0x1803ad3c0
FileTimeToSystemTime
0x1803ad2a8
FindClose
0x1803ad3c8
FindFirstFileExW
0x1803ad3d0
FlsAlloc
0x1803ad4a8
FlsGetValue
0x1803ad4b0
FlsSetValue
0x1803ad4b8
FlushInstructionCache
0x1803ad4f0
FlushProcessWriteBuffers
0x1803ad478
FormatMessageW
0x1803ad1a8
FreeLibrary
0x1803ad3d8
GetConsoleMode
0x1803ad1c0
GetConsoleOutputCP
0x1803ad1f0
GetCPInfo
0x1803ad370
GetCPInfoExW
0x1803ad1b8
GetCurrentProcess
0x1803ad248
GetCurrentProcessId
0x1803ad288
GetCurrentProcessorNumberEx
0x1803ad450
GetCurrentThread
0x1803ad2c8
GetCurrentThreadId
0x1803ad278
GetDynamicTimeZoneInformation
0x1803ad440
GetEnabledXStateFeatures
0x1803ad538
GetEnvironmentVariableW
0x1803ad470
GetExitCodeProcess
0x1803ad218
GetFileAttributesExW
0x1803ad3e0
GetFileInformationByHandleEx
0x1803ad3e8
GetFileType
0x1803ad1c8
GetFullPathNameW
0x1803ad360
GetLargePageMinimum
0x1803ad590
GetLastError
0x1803ad1b0
GetLocaleInfoEx
0x1803ad2b8
GetLogicalProcessorInformation
0x1803ad580
GetLogicalProcessorInformationEx
0x1803ad588
GetLongPathNameW
0x1803ad368
GetModuleFileNameW
0x1803ad3f0
GetModuleHandleExW
0x1803ad520
GetModuleHandleW
0x1803ad518
GetNumaHighestNodeNumber
0x1803ad5b0
GetOverlappedResult
0x1803ad3f8
GetProcAddress
0x1803ad380
GetProcessAffinityMask
0x1803ad528
GetProcessGroupAffinity
0x1803ad5b8
GetProcessHeap
0x1803ad120
GetProcessId
0x1803ad238
GetProcessTimes
0x1803ad220
GetStdHandle
0x1803ad1f8
GetSystemInfo
0x1803ad578
GetSystemTime
0x1803ad2b0
GetSystemTimeAsFileTime
0x1803ad550
GetThreadContext
0x1803ad4e0
GetThreadPriority
0x1803ad430
GetTickCount64
0x1803ad2c0
GetTimeZoneInformation
0x1803ad448
GlobalMemoryStatusEx
0x1803ad570
HeapAlloc
0x1803ad110
HeapCreate
0x1803ad5d8
HeapDestroy
0x1803ad5e0
HeapFree
0x1803ad118
InitializeConditionVariable
0x1803ad320
InitializeContext
0x1803ad530
InitializeCriticalSection
0x1803ad318
InitializeCriticalSectionAndSpinCount
0x1803ad170
InitializeCriticalSectionEx
0x1803ad558
InitializeSListHead
0x1803ad148
InterlockedFlushSList
0x1803ad158
IsDebuggerPresent
0x1803ad198
IsProcessInJob
0x1803ad5a8
IsProcessorFeaturePresent
0x1803ad140
K32EnumProcesses
0x1803ad230
K32GetProcessMemoryInfo
0x1803ad5c0
LeaveCriticalSection
0x1803ad300
LoadLibraryExW
0x1803ad400
LocalAlloc
0x1803ad378
LocalFree
0x1803ad2e8
MultiByteToWideChar
0x1803ad200
OpenProcess
0x1803ad228
OpenThread
0x1803ad268
QueryInformationJobObject
0x1803ad510
QueryPerformanceCounter
0x1803ad310
QueryPerformanceFrequency
0x1803ad358
QueryUnbiasedInterruptTime
0x1803ad408
RaiseException
0x1803ad168
RaiseFailFastException
0x1803ad290
ReadConsoleW
0x1803ad1d8
ReadFile
0x1803ad1d0
ResetEvent
0x1803ad460
ResumeThread
0x1803ad428
RtlCaptureContext
0x1803ad490
RtlLookupFunctionEntry
0x1803ad128
RtlPcToFileHeader
0x1803ad160
RtlRestoreContext
0x1803ad498
RtlUnwindEx
0x1803ad150
RtlVirtualUnwind
0x1803ad488
SetEvent
0x1803ad458
SetFileInformationByHandle
0x1803ad410
SetLastError
0x1803ad1a0
SetThreadContext
0x1803ad4e8
SetThreadErrorMode
0x1803ad418
SetThreadpoolTimer
0x1803ad330
SetThreadPriority
0x1803ad438
SetUnhandledExceptionFilter
0x1803ad138
SetXStateFeaturesMask
0x1803ad540
Sleep
0x1803ad2d8
SleepConditionVariableCS
0x1803ad2f8
SleepEx
0x1803ad568
StartThreadpoolIo
0x1803ad3a0
SubmitThreadpoolWork
0x1803ad350
SuspendThread
0x1803ad4d8
SwitchToThread
0x1803ad4d0
SystemTimeToFileTime
0x1803ad2a0
TerminateProcess
0x1803ad4c8
TlsAlloc
0x1803ad178
TlsFree
0x1803ad190
TlsGetValue
0x1803ad180
TlsSetValue
0x1803ad188
TzSpecificLocalTimeToSystemTime
0x1803ad298
UnhandledExceptionFilter
0x1803ad130
VirtualAlloc
0x1803ad4f8
VirtualAllocExNuma
0x1803ad5a0
VirtualFree
0x1803ad508
VirtualProtect
0x1803ad500
VirtualQuery
0x1803ad548
VirtualUnlock
0x1803ad598
WaitForMultipleObjectsEx
0x1803ad338
WaitForSingleObject
0x1803ad2d0
WaitForSingleObjectEx
0x1803ad480
WakeConditionVariable
0x1803ad308
WideCharToMultiByte
0x1803ad208
WriteConsoleW
0x1803ad1e8
WriteFile
0x1803ad1e0
ncrypt.dll
16
NCryptCreatePersistedKey
0x1803ad7e8
NCryptDecrypt
0x1803ad790
NCryptDeleteKey
0x1803ad7b0
NCryptDeriveKey
0x1803ad7f0
NCryptEncrypt
0x1803ad800
NCryptExportKey
0x1803ad7a8
NCryptFinalizeKey
0x1803ad7f8
NCryptFreeObject
0x1803ad7b8
NCryptGetProperty
0x1803ad7d8
NCryptImportKey
0x1803ad7a0
NCryptOpenKey
0x1803ad798
NCryptOpenStorageProvider
0x1803ad7e0
NCryptSecretAgreement
0x1803ad788
NCryptSetProperty
0x1803ad7d0
NCryptSignHash
0x1803ad7c8
NCryptVerifySignature
0x1803ad7c0
CoCreateGuid
0x1803ad838
CoGetApartmentType
0x1803ad818
CoInitializeEx
0x1803ad828
CoTaskMemAlloc
0x1803ad820
CoTaskMemFree
0x1803ad830
CoUninitialize
0x1803ad810
CoWaitForMultipleHandles
0x1803ad840
GetUserNameExW
0x1803ad5f0
No function matches your filter.