MalAPI.io
Contribute
FAQ
Other
Living Off Trusted Sites
Filesec.io
Security Blog
Function Name
RegOpenCurrentUser
Description
RegOpenCurrentUser is used to retrieve a handle to the HKEY_CURRENT_USER key for the user the current thread is impersonating.
Library
Advapi32.dll
Associated Attacks
Helper
Documentation
https://docs.microsoft.com/en-us/windows/win32/api/winreg/nf-winreg-regopencurrentuser
Created: 2021-10-30
Last Update: 2021-10-30
Credits: mr.d0x