wdc.dll
v10.0.19041.1
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
WdcParseLegacyFile
#1 · 0x71f30
WdcRunTaskAsInteractiveUser
#2 · 0x72550
DllCanUnloadNow
#3 · 0x25f40
DllGetClassObject
#4 · 0x20f70
DllRegisterServer
#5 · 0x26010
DllUnregisterServer
#6 · 0x26010
No function matches your filter.
Imported DLLs & functions 439
ADVAPI32.dll
47
AdjustTokenPrivileges
0x180086fa0
AllocateAndInitializeSid
0x1800870a0
CheckTokenMembership
0x180087098
CloseServiceHandle
0x180087008
CloseThreadWaitChainSession
0x180087040
CloseTrace
0x180087078
ControlService
0x180086ff8
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x1800870c0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180087080
CreateWellKnownSid
0x1800870a8
EnableTraceEx
0x180087050
EnumServicesStatusExW
0x180086ff0
EventRegister
0x180086fd8
EventUnregister
0x180086fc8
EventWriteTransfer
0x1800870b0
FreeSid
0x180087090
GetSecurityDescriptorDacl
0x1800870e0
GetSecurityDescriptorGroup
0x180087100
GetSecurityDescriptorOwner
0x1800870f0
GetSecurityDescriptorSacl
0x1800870d0
GetThreadWaitChain
0x180087030
I_QueryTagInformation
0x180086fd0
IsValidSid
0x180086fe0
MakeAbsoluteSD
0x180087108
MapGenericMask
0x1800870b8
OpenProcessToken
0x180087088
OpenSCManagerW
0x180087020
OpenServiceW
0x180087018
OpenThreadWaitChainSession
0x180087038
OpenTraceW
0x180087060
ProcessTrace
0x180087048
QueryServiceConfigW
0x180086fe8
QueryServiceStatus
0x180087010
QueryTraceW
0x180087070
RegCloseKey
0x180086fa8
RegEnumValueW
0x180086fb8
RegGetValueW
0x180087110
RegisterWaitChainCOMCallback
0x180087028
RegOpenKeyExW
0x180086fc0
RegQueryValueExW
0x180086fb0
SetSecurityDescriptorDacl
0x1800870d8
SetSecurityDescriptorGroup
0x1800870f8
SetSecurityDescriptorOwner
0x1800870e8
SetSecurityDescriptorSacl
0x1800870c8
StartServiceW
0x180087000
StartTraceW
0x180087058
StopTraceW
0x180087068
BaseFreeAppCompatDataForProcess
0x180087b20
BaseReadAppCompatDataForProcess
0x180087b18
CredUIPromptForCredentialsW
0x180087b30
ForwardGadgetMessage
0x180087150
GDI32.dll
20
BitBlt
0x180087160
CreateCompatibleBitmap
0x180087188
CreateCompatibleDC
0x180087190
CreateDIBSection
0x1800871c8
CreateFontIndirectW
0x1800871d8
CreatePen
0x1800871b0
CreateSolidBrush
0x180087180
DeleteObject
0x1800871e8
EndDoc
0x1800871b8
EndPage
0x1800871c0
GetDeviceCaps
0x1800871e0
GetStockObject
0x1800871a0
LineTo
0x180087178
MoveToEx
0x1800871f0
Polygon
0x180087168
Polyline
0x180087198
SelectObject
0x1800871a8
SetROP2
0x180087170
StartDocW
0x1800871d0
StartPage
0x1800871f8
GetAdaptersAddresses
0x180087228
GetExtendedTcpTable
0x180087218
GetExtendedUdpTable
0x180087220
GetIfEntry2
0x180087238
GetPerTcp6ConnectionEStats
0x180087210
GetPerTcpConnectionEStats
0x180087208
NhGetInterfaceNameFromDeviceGuid
0x180087230
SetPerTcp6ConnectionEStats
0x180087240
SetPerTcpConnectionEStats
0x180087248
KERNEL32.dll
125
AcquireSRWLockExclusive
0x180087278
ActivateActCtx
0x180087458
CancelSynchronousIo
0x1800874a0
CloseHandle
0x180087440
CreateActCtxW
0x180087470
CreateEventW
0x1800874f8
CreateFileMappingW
0x180087378
CreateFileW
0x1800874c8
CreateMutexW
0x180087398
CreateThread
0x180087430
DeactivateActCtx
0x180087450
DebugBreak
0x1800873b0
DelayLoadFailureHook
0x180087400
DeleteCriticalSection
0x180087420
DeleteFileW
0x180087528
DeviceIoControl
0x1800872f0
DuplicateHandle
0x1800873f0
EnterCriticalSection
0x1800874d8
ExpandEnvironmentStringsW
0x180087578
FileTimeToLocalFileTime
0x180087530
FileTimeToSystemTime
0x180087538
FindActCtxSectionStringW
0x180087468
FindClose
0x1800875f8
FindFirstFileW
0x1800875e8
FindNextFileW
0x1800875f0
FindResourceExW
0x1800872e8
FindResourceW
0x1800875c0
FormatMessageW
0x1800875b0
FreeLibrary
0x180087560
FreeResource
0x1800875e0
GetActiveProcessorGroupCount
0x180087308
GetCommandLineW
0x180087550
GetComputerNameW
0x180087570
GetCurrentProcess
0x180087620
GetCurrentProcessId
0x180087630
GetCurrentThread
0x1800873b8
GetCurrentThreadId
0x180087510
GetDateFormatW
0x180087540
GetDiskFreeSpaceExW
0x1800872a0
GetErrorMode
0x1800873d8
GetFileAttributesW
0x180087520
GetFileSize
0x180087618
GetLastError
0x180087438
GetLocaleInfoW
0x180087518
GetLocalTime
0x180087568
GetLogicalDriveStringsW
0x180087298
GetModuleFileNameW
0x180087478
GetModuleHandleExW
0x180087480
GetModuleHandleW
0x1800872e0
GetNumberFormatW
0x1800873c8
GetPhysicallyInstalledSystemMemory
0x1800872a8
GetProcAddress
0x180087498
GetProcessHeap
0x180087598
GetProcessorSystemCycleTime
0x180087300
GetProcessTimes
0x180087328
GetSystemTimeAsFileTime
0x1800873e8
GetSystemWindowsDirectoryW
0x180087370
GetTempFileNameW
0x180087608
GetTempPathW
0x180087600
GetTickCount
0x180087260
GetTimeFormatW
0x180087548
GetVersionExW
0x1800872f8
GlobalAlloc
0x1800874a8
GlobalFree
0x1800874c0
GlobalLock
0x1800874b0
GlobalUnlock
0x1800874b8
HeapAlloc
0x180087590
HeapFree
0x1800875a0
HeapReAlloc
0x1800875b8
HeapSetInformation
0x180087410
HeapSize
0x180087258
InitializeCriticalSection
0x180087610
IsWow64Process
0x1800872d8
K32EnumDeviceDrivers
0x180087368
K32EnumProcessModulesEx
0x180087360
K32GetDeviceDriverBaseNameW
0x180087358
K32GetDeviceDriverFileNameW
0x180087350
K32GetModuleBaseNameW
0x180087348
K32GetModuleFileNameExW
0x1800872d0
LeaveCriticalSection
0x1800874f0
LoadLibraryW
0x180087460
LoadResource
0x1800875c8
LocalAlloc
0x180087588
LocalFree
0x180087558
LockResource
0x1800875d0
lstrlenW
0x180087318
MapViewOfFile
0x180087340
MulDiv
0x1800873d0
OpenProcess
0x180087330
OutputDebugStringA
0x180087490
OutputDebugStringW
0x1800875a8
ProcessIdToSessionId
0x180087628
QueryActCtxW
0x180087488
QueryDosDeviceW
0x180087290
QueryFullProcessImageNameW
0x180087320
QueryPerformanceCounter
0x1800873e0
QueryPerformanceFrequency
0x180087408
ReadFile
0x1800874d0
ReadProcessMemory
0x180087288
ReleaseMutex
0x180087390
ReleaseSRWLockExclusive
0x180087270
ResetEvent
0x180087500
ResolveDelayLoadedAPI
0x1800872b0
SetErrorMode
0x180087638
SetEvent
0x1800874e0
SetLastError
0x180087448
SetProcessWorkingSetSize
0x180087380
SetThreadPriority
0x1800873c0
SetUnhandledExceptionFilter
0x1800872c8
SizeofResource
0x1800875d8
Sleep
0x180087268
SleepConditionVariableSRW
0x1800872b8
TerminateProcess
0x180087310
TerminateThread
0x1800873f8
TlsAlloc
0x180087418
TlsFree
0x180087428
TlsGetValue
0x1800873a0
TlsSetValue
0x180087338
TryEnterCriticalSection
0x1800873a8
UnhandledExceptionFilter
0x1800872c0
UnmapViewOfFile
0x180087388
WaitForMultipleObjects
0x180087508
WaitForSingleObject
0x1800874e8
WakeAllConditionVariable
0x180087280
WriteFile
0x180087580
msvcrt.dll
33
__C_specific_handler
0x180087c28
__CxxFrameHandler3
0x180087ba0
__dllonexit
0x180087b80
_amsg_exit
0x180087bf0
_callnewh
0x180087c18
_initterm
0x180087bc0
_lock
0x180087bb0
_onexit
0x180087b40
_purecall
0x180087c10
_unlock
0x180087ba8
_vsnwprintf
0x180087c00
_wcsicmp
0x180087b70
_wcsnicmp
0x180087c08
_wtoi
0x180087c20
_XcptFilter
0x180087be8
??1type_info@@UEAA@XZ
0x180087bb8
ceil
0x180087b98
floor
0x180087b60
free
0x180087bf8
iswdigit
0x180087c38
malloc
0x180087c30
mbstowcs
0x180087bc8
memcpy
0x180087b58
memmove
0x180087b50
memset
0x180087b48
towlower
0x180087bd0
wcschr
0x180087b90
wcscmp
0x180087c40
wcsrchr
0x180087be0
wcsstr
0x180087bd8
wcstok
0x180087b78
wcstombs
0x180087b68
wcstoul
0x180087b88
ntdll.dll
21
NtOpenFile
0x180087ce8
NtQueryInformationProcess
0x180087c70
NtQueryInformationThread
0x180087ca0
NtQueryInformationToken
0x180087ce0
NtQueryObject
0x180087ca8
NtQuerySystemInformation
0x180087cf0
NtQuerySystemInformationEx
0x180087c50
NtQuerySystemTime
0x180087c58
NtResumeProcess
0x180087c98
NtSuspendProcess
0x180087c90
RtlCaptureContext
0x180087cc8
RtlInitUnicodeString
0x180087cc0
RtlIpv4AddressToStringW
0x180087cb0
RtlIpv6AddressToStringExW
0x180087c88
RtlIpv6AddressToStringW
0x180087cb8
RtlLookupFunctionEntry
0x180087cd0
RtlNtStatusToDosError
0x180087c60
RtlVirtualUnwind
0x180087cd8
WinSqmAddToAverageDWORD
0x180087c80
WinSqmAddToStream
0x180087c78
WinSqmIncrementDWORD
0x180087c68
ole32.dll
18
CoCreateInstance
0x180087d20
CoCreateInstanceEx
0x180087d00
CoGetActivationState
0x180087d28
CoGetCallState
0x180087d30
CoInitialize
0x180087d88
CoInitializeEx
0x180087d78
CoSetProxyBlanket
0x180087d68
CoTaskMemAlloc
0x180087d58
CoTaskMemFree
0x180087d80
CoTaskMemRealloc
0x180087d10
CoUninitialize
0x180087d18
CreateOleAdviseHolder
0x180087d70
CreateStreamOnHGlobal
0x180087d08
GetHGlobalFromStream
0x180087d38
ReadClassStm
0x180087d48
StringFromCLSID
0x180087d40
StringFromGUID2
0x180087d60
WriteClassStm
0x180087d50
OLEAUT32.dll
14
SafeArrayAccessData
0x180087690
SafeArrayCreate
0x180087678
SafeArrayDestroy
0x180087670
SafeArrayUnaccessData
0x180087698
SysAllocString
0x1800876c8
SysAllocStringLen
0x1800876a8
SysFreeString
0x1800876c0
SysStringByteLen
0x1800876a0
SystemTimeToVariantTime
0x1800876d0
VariantChangeType
0x1800876b0
VariantClear
0x180087688
VariantCopy
0x1800876d8
VariantInit
0x1800876b8
VariantTimeToSystemTime
0x180087680
pdh.dll
7
PdhAddEnglishCounterW
0x180087dc0
PdhCloseQuery
0x180087db8
PdhCollectQueryData
0x180087db0
PdhExpandWildCardPathW
0x180087d98
PdhGetFormattedCounterArrayW
0x180087da0
PdhGetFormattedCounterValue
0x180087dc8
PdhOpenQueryW
0x180087da8
PdhUiBrowseCountersExHW
0x180087dd8
PLA.dll
5
PlaDeleteReport
0x180087708
PlaExpandTaskArguments
0x180087700
PlaGetLegacyAlertActionsFlagsFromString
0x1800876e8
PlaGetLegacyAlertActionsStringFromFlags
0x1800876f0
PlaGetServerCapabilities
0x1800876f8
GetUserNameExW
0x180087780
0x180087720
CommandLineToArgvW
0x180087728
DragQueryFileW
0x180087758
SHBrowseForFolderW
0x180087748
ShellExecuteExW
0x180087730
ShellExecuteW
0x180087718
SHGetMalloc
0x180087738
SHGetPathFromIDListW
0x180087750
SHGetSpecialFolderLocation
0x180087740
USER32.dll
99
AppendMenuW
0x180087a00
BeginPaint
0x1800879d0
CallWindowProcW
0x180087890
CharLowerW
0x1800877a8
CheckDlgButton
0x180087840
CheckMenuItem
0x180087918
CheckMenuRadioItem
0x1800879e8
CheckRadioButton
0x180087888
CloseClipboard
0x180087970
CloseDesktop
0x180087940
CloseWindowStation
0x1800877b8
CreateWindowExW
0x1800879b0
DefWindowProcW
0x1800878d0
DeleteMenu
0x180087a08
DestroyIcon
0x180087978
DestroyMenu
0x180087930
DestroyWindow
0x1800879a8
DialogBoxParamW
0x180087848
EmptyClipboard
0x180087a48
EnableMenuItem
0x180087920
EnableWindow
0x180087818
EndDialog
0x180087830
EndPaint
0x1800879d8
EnumDesktopsW
0x1800877c0
EnumDesktopWindows
0x180087aa0
EnumWindowStationsW
0x1800877b0
FillRect
0x1800879b8
FlashWindow
0x1800878d8
GetClassNameW
0x180087980
GetClientRect
0x180087810
GetClipboardData
0x180087968
GetDC
0x180087898
GetDlgItem
0x1800877f8
GetDlgItemTextW
0x180087860
GetFocus
0x180087a60
GetKeyState
0x1800878f8
GetMenu
0x1800879f0
GetMenuItemCount
0x180087938
GetMenuItemID
0x1800879f8
GetMenuStringW
0x180087948
GetMessagePos
0x180087a40
GetParent
0x180087880
GetProcessWindowStation
0x1800877d0
GetScrollPos
0x180087a38
GetSubMenu
0x180087910
GetSysColor
0x180087a58
GetSystemMetrics
0x180087998
GetThreadDesktop
0x180087a90
GetWindow
0x180087988
GetWindowLongPtrW
0x180087828
GetWindowLongW
0x180087a68
GetWindowRect
0x180087900
GetWindowTextW
0x180087858
GetWindowThreadProcessId
0x180087a80
GhostWindowFromHungWindow
0x180087798
HungWindowFromGhostWindow
0x1800877a0
InvalidateRect
0x1800879c8
IsClipboardFormatAvailable
0x180087960
IsDlgButtonChecked
0x180087838
IsHungAppWindow
0x180087a78
IsWindowEnabled
0x1800878e0
IsWindowVisible
0x180087a70
KillTimer
0x1800878b8
LoadBitmapW
0x1800878a0
LoadCursorW
0x1800878f0
LoadIconW
0x1800877e8
LoadImageW
0x1800877e0
LoadMenuW
0x180087908
LoadStringW
0x1800877f0
MapWindowPoints
0x180087790
MessageBeep
0x180087990
OpenClipboard
0x180087958
OpenDesktopW
0x180087a88
OpenWindowStationW
0x1800877d8
PostMessageW
0x180087878
PostThreadMessageW
0x1800878b0
PtInRect
0x180087a30
RegisterClassW
0x1800879c0
RegisterClipboardFormatW
0x1800878c8
ReleaseDC
0x180087a20
RemoveMenu
0x180087a28
SendDlgItemMessageW
0x180087870
SendMessageTimeoutW
0x1800878a8
SendMessageW
0x180087800
SetActiveWindow
0x180087950
SetClipboardData
0x180087a50
SetCursor
0x1800878e8
SetDlgItemTextW
0x180087868
SetFocus
0x180087850
SetProcessWindowStation
0x1800877c8
SetRect
0x180087a10
SetThreadDesktop
0x180087a98
SetTimer
0x1800878c0
SetWindowLongPtrW
0x180087820
SetWindowPos
0x180087a18
SetWindowTextW
0x180087808
ShowWindow
0x1800879a0
TrackPopupMenuEx
0x180087928
UpdateWindow
0x1800879e0
CachedGetUserFromSid
0x180087ab0
SetWindowTheme
0x180087ac0
GetFileVersionInfoSizeW
0x180087ae0
GetFileVersionInfoW
0x180087ad8
VerQueryValueW
0x180087ad0
EvtClose
0x180087e18
EvtCreateRenderContext
0x180087de8
EvtNext
0x180087e10
EvtOpenPublisherMetadata
0x180087df0
EvtOpenSession
0x180087df8
EvtRender
0x180087e08
EvtSubscribe
0x180087e00
WinStationGetProcessSid
0x180087af0
No function matches your filter.