umrdp.dll - Online Dependency Analysis & Download

Description

Remote Desktop Services Device Redirector Service

Authors

File size

399.0 KB

Uploaded

2025-12-01 07:41

Views

115

SHA-256

1a35a6b108299ca5f679dd87da459df2

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 2

ServiceMain #1 · 0xc340

SvchostPushServiceGlobals #2 · 0xd080

Imported DLLs & functions 217

ADVAPI32.dll 1

TraceMessage 0x180044ba0

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x180044cf8

IsDebuggerPresent 0x180044d00

OutputDebugStringW 0x180044cf0

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x180044d10

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x180044d20

api-ms-win-core-errorhandling-l1-1-0.dll 4

GetLastError 0x180044d38

SetLastError 0x180044d48

SetUnhandledExceptionFilter 0x180044d40

UnhandledExceptionFilter 0x180044d30

api-ms-win-core-featurestaging-l1-1-0.dll 3

RecordFeatureUsage 0x180044d60

SubscribeFeatureStateChangeNotification 0x180044d68

UnsubscribeFeatureStateChangeNotification 0x180044d58

api-ms-win-core-file-l1-1-0.dll 6

CreateFileW 0x180044d80

DeleteFileW 0x180044d90

GetFileSize 0x180044d98

QueryDosDeviceW 0x180044d78

ReadFile 0x180044da0

WriteFile 0x180044d88

api-ms-win-core-file-l1-2-0.dll 1

GetTempPathW 0x180044db0

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x180044dc8

DuplicateHandle 0x180044dc0

api-ms-win-core-heap-l1-1-0.dll 3

HeapAlloc 0x180044de0

HeapFree 0x180044de8

HeapReAlloc 0x180044dd8

api-ms-win-core-heap-l2-1-0.dll 2

LocalAlloc 0x180044df8

LocalFree 0x180044e00

api-ms-win-core-io-l1-1-0.dll 2

DeviceIoControl 0x180044e18

GetOverlappedResult 0x180044e10

api-ms-win-core-io-l1-1-1.dll 1

CancelIo 0x180044e28

api-ms-win-core-kernel32-legacy-l1-1-0.dll 1

UnregisterWait 0x180044e38

api-ms-win-core-kernel32-legacy-l1-1-1.dll 1

VerifyVersionInfoW 0x180044e48

api-ms-win-core-libraryloader-l1-2-0.dll 5

FreeLibrary 0x180044e58

GetModuleFileNameA 0x180044e70

GetModuleHandleExA 0x180044e60

GetProcAddress 0x180044e78

LoadStringW 0x180044e68

api-ms-win-core-libraryloader-l1-2-1.dll 1

LoadLibraryW 0x180044e88

api-ms-win-core-localization-l1-2-0.dll 1

FormatMessageW 0x180044e98

api-ms-win-core-processthreads-l1-1-0.dll 13

CreateThread 0x180044ed0

GetCurrentProcess 0x180044ef0

GetCurrentProcessId 0x180044ed8

GetCurrentThread 0x180044f00

GetCurrentThreadId 0x180044ee0

OpenThread 0x180044ea8

OpenThreadToken 0x180044f08

SwitchToThread 0x180044ec0

TerminateProcess 0x180044ef8

TlsAlloc 0x180044ec8

TlsFree 0x180044eb0

TlsGetValue 0x180044eb8

TlsSetValue 0x180044ee8

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x180044f18

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x180044f28

api-ms-win-core-registry-l1-1-0.dll 11

RegCloseKey 0x180044f68

RegCreateKeyExW 0x180044f78

RegDeleteKeyExW 0x180044f60

RegDeleteValueW 0x180044f80

RegGetValueW 0x180044f58

RegNotifyChangeKeyValue 0x180044f70

RegOpenCurrentUser 0x180044f88

RegOpenKeyExW 0x180044f48

RegOpenUserClassesRoot 0x180044f38

RegQueryValueExW 0x180044f50

RegSetValueExW 0x180044f40

api-ms-win-core-rtlsupport-l1-1-0.dll 3

RtlCaptureContext 0x180044fa0

RtlLookupFunctionEntry 0x180044f98

RtlVirtualUnwind 0x180044fa8

api-ms-win-core-string-l1-1-0.dll 1

MultiByteToWideChar 0x180044fb8

api-ms-win-core-synch-l1-1-0.dll 17

CancelWaitableTimer 0x180045038

CreateEventW 0x180044ff8

CreateMutexExW 0x180044fc8

CreateSemaphoreExW 0x180044fd0

DeleteCriticalSection 0x180045018

EnterCriticalSection 0x180045040

InitializeCriticalSection 0x180044ff0

LeaveCriticalSection 0x180044fe0

OpenSemaphoreW 0x180044fe8

ReleaseMutex 0x180045048

ReleaseSemaphore 0x180045010

ResetEvent 0x180045028

SetEvent 0x180045000

SetWaitableTimer 0x180044fd8

SleepEx 0x180045020

WaitForMultipleObjectsEx 0x180045030

WaitForSingleObject 0x180045008

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x180045058

api-ms-win-core-synch-l1-2-1.dll 2

CreateSemaphoreW 0x180045070

CreateWaitableTimerW 0x180045068

api-ms-win-core-sysinfo-l1-1-0.dll 6

GetSystemInfo 0x180045090

GetSystemTimeAsFileTime 0x180045098

GetSystemWindowsDirectoryW 0x1800450a8

GetTickCount 0x180045088

GetTickCount64 0x1800450a0

GetVersionExW 0x180045080

api-ms-win-core-sysinfo-l1-2-0.dll 1

VerSetConditionMask 0x1800450b8

api-ms-win-devices-config-l1-1-1.dll 1

CM_Get_DevNode_Status 0x1800450c8

api-ms-win-eventing-provider-l1-1-0.dll 4

EventActivityIdControl 0x1800450e8

EventRegister 0x1800450e0

EventUnregister 0x1800450d8

EventWriteTransfer 0x1800450f0

api-ms-win-security-base-l1-1-0.dll 20

AddAccessAllowedAce 0x180045160

AddAccessAllowedAceEx 0x180045168

AllocateAndInitializeSid 0x180045118

CheckTokenMembership 0x180045130

CopySid 0x180045140

CreateWellKnownSid 0x180045148

EqualSid 0x180045190

FreeSid 0x180045198

GetLengthSid 0x180045120

GetSidIdentifierAuthority 0x180045128

GetSidSubAuthority 0x180045108

GetSidSubAuthorityCount 0x180045110

GetTokenInformation 0x180045100

ImpersonateLoggedOnUser 0x180045180

InitializeAcl 0x180045138

InitializeSecurityDescriptor 0x180045170

IsValidAcl 0x180045158

IsValidSid 0x180045150

RevertToSelf 0x180045178

SetSecurityDescriptorDacl 0x180045188

api-ms-win-security-sddl-l1-1-0.dll 1

ConvertStringSecurityDescriptorToSecurityDescriptorW 0x1800451a8

api-ms-win-shcore-registry-l1-1-0.dll 1

SHDeleteKeyW 0x1800451b8

KERNEL32.dll 25

CancelIoEx 0x180044bf0

CloseThreadpool 0x180044be0

CloseThreadpoolCleanupGroup 0x180044be8

CloseThreadpoolCleanupGroupMembers 0x180044c70

CloseThreadpoolWork 0x180044c08

CreateThreadpool 0x180044bd8

CreateThreadpoolCleanupGroup 0x180044bc8

CreateThreadpoolWork 0x180044bb0

CreateTimerQueueTimer 0x180044c48

DeleteTimerQueueTimer 0x180044c40

FreeLibraryAndExitThread 0x180044c50

GetModuleHandleExW 0x180044c60

GetModuleHandleW 0x180044c20

GetProcessHeap 0x180044c58

GetThreadId 0x180044c00

InitializeCriticalSectionEx 0x180044bb8

lstrcmpiW 0x180044c38

ProcessIdToSessionId 0x180044c10

QueueUserAPC 0x180044c28

ReadFileEx 0x180044c18

ResumeThread 0x180044c68

SetThreadpoolThreadMaximum 0x180044bd0

SubmitThreadpoolWork 0x180044bc0

WaitForMultipleObjects 0x180044bf8

WaitForSingleObjectEx 0x180044c30

msvcrt.dll 25

__C_specific_handler 0x180045268

__CxxFrameHandler3 0x180045240

__dllonexit 0x180045228

_amsg_exit 0x180045210

_callnewh 0x1800451f8

_initterm 0x180045218

_lock 0x180045270

_onexit 0x180045230

_purecall 0x180045258

_unlock 0x180045220

_vsnwprintf 0x180045278

_wcsicmp 0x1800451c8

_XcptFilter 0x180045208

free 0x180045200

malloc 0x1800451f0

memcpy 0x180045260

memcpy_s 0x180045248

memmove 0x180045238

memset 0x180045288

rand 0x1800451d8

srand 0x180045280

time 0x1800451d0

wcschr 0x1800451e0

wcsrchr 0x1800451e8

wcsstr 0x180045250

ntdll.dll 31

DbgPrint 0x180045308

EtwEventActivityIdControl 0x180045300

EtwEventRegister 0x180045340

EtwEventUnregister 0x180045350

EtwEventWrite 0x1800452a8

EtwEventWriteFull 0x180045298

EtwGetTraceEnableFlags 0x180045368

EtwGetTraceEnableLevel 0x180045370

EtwGetTraceLoggerHandle 0x180045378

EtwRegisterTraceGuidsW 0x180045360

EtwTraceMessage 0x180045380

EtwUnregisterTraceGuids 0x180045358

NtClose 0x1800452d0

NtCreateFile 0x1800452a0

NtCreateSymbolicLinkObject 0x1800452e8

NtMakePermanentObject 0x1800452c0

NtMakeTemporaryObject 0x1800452c8

NtOpenSymbolicLinkObject 0x1800452e0

NtQueryInformationProcess 0x1800452f8

NtQuerySymbolicLinkObject 0x1800452d8

RtlDeleteElementGenericTable 0x180045328

RtlEnumerateGenericTable 0x180045318

RtlEnumerateGenericTableWithoutSplaying 0x180045338

RtlGetSuiteMask 0x180045348

RtlInitializeGenericTable 0x180045310

RtlInitUnicodeString 0x1800452f0

RtlInsertElementGenericTable 0x180045320

RtlLookupElementGenericTable 0x180045330

RtlMultiByteToUnicodeN 0x180045388

RtlNtStatusToDosError 0x1800452b8

RtlOpenCurrentUser 0x1800452b0

USER32.dll 13

CreateWindowExW 0x180044c98

DefWindowProcW 0x180044c88

DestroyWindow 0x180044c80

DispatchMessageW 0x180044cc0

GetClassInfoExW 0x180044c90

MsgWaitForMultipleObjectsEx 0x180044cb0

PeekMessageW 0x180044cb8

PostMessageW 0x180044cc8

PostThreadMessageW 0x180044ca8

RegisterClassExW 0x180044cd8

RegisterDeviceNotificationW 0x180044ce0

UnregisterClassW 0x180044ca0

UnregisterDeviceNotification 0x180044cd0