reguwpapi.dll

  • File Path: C:\Windows\SysWOW64\reguwpapi.dll
  • Description: UWP Registry API

Hashes

Type Hash
MD5 FFEAF199FD5AF9E619D624B9D71FEC4F
SHA1 A21795DF111121D3747D4DFB2AF16FF01D789C52
SHA256 22586D11BB0910DFB3DFAA4AFF5DDFD6E026CC8B0249C4DD68BE9B59C45AF52E
SHA384 9BBC939DD81A00EAA3EB4F362854D4D9F98A27CE5BA4C769EE4F88801302571FBEF364EA83CDAF6EDE54B895FEBA446F
SHA512 BFAE27BA35170F032221E0C064E1DE17CF909C7230C85F51A604FD1A262E69F64C5A422E8471CFE128CED58119267EC6D4C001A8D98C6B574B0EAA427B62F086
SSDEEP 384:Hg24AlVIaMlOzdKI2TCrAR+NvUg9RulqTkZJiFjFlmeMqCx+cIWpTWNV9D1IDBRa:A68OfARMvRus4Z4hme5Cgcv+VDI1PIwu
IMP 089DA3448C7D6D57E63B81090DAAEE81
PESHA1 FD2B524C95D01A98AEFBD16B2B192E467A2FB138
PE256 C36C9326F405BEA242135332485512EDF6C87F454DB3845232598FF9DD3E789E

DLL Exports:

Function Name Ordinal Type
RegOpenKeyFromApp 10 Exported Function
RegLoadAppKeyFromApp 9 Exported Function
RegGetValueFromApp 8 Exported Function
RegQueryInfoKeyFromApp 11 Exported Function
RegSetValueFromApp 14 Exported Function
RegQueryValueFromApp 13 Exported Function
RegQueryMultipleValuesFromApp 12 Exported Function
RegDeleteKeyFromApp 3 Exported Function
RegCreateKeyFromApp 2 Exported Function
RegCopyTreeFromApp 1 Exported Function
RegDeleteTreeFromApp 4 Exported Function
RegEnumValueFromApp 7 Exported Function
RegEnumKeyFromApp 6 Exported Function
RegDeleteValueFromApp 5 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: reguwpapi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/22586d11bb0910dfb3dfaa4aff5ddfd6e026cc8b0249c4dd68be9b59c45af52e/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll 25
C:\Windows\system32\downlevel\api-ms-win-service-private-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\API-MS-Win-security-provider-L1-1-0.dll 25

MIT License. Copyright (c) 2020-2021 Strontic.