radarrs.dll
v10.0.19041.1
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
WdiDiagnosticModuleMain
#1 · 0x3bb0
WdiGetDiagnosticModuleInterfaceVersion
#2 · 0x3b50
WdiHandleInstance
#3 · 0x3ca0
No function matches your filter.
Imported DLLs & functions 138
ADVAPI32.dll
20
AdjustTokenPrivileges
0x1000e034
CheckTokenMembership
0x1000e04c
CloseServiceHandle
0x1000e038
DuplicateTokenEx
0x1000e004
EnumServicesStatusExW
0x1000e028
EventWrite
0x1000e048
GetTraceEnableFlags
0x1000e010
GetTraceEnableLevel
0x1000e014
GetTraceLoggerHandle
0x1000e00c
LookupPrivilegeValueW
0x1000e030
OpenProcessToken
0x1000e02c
OpenSCManagerW
0x1000e03c
OpenServiceW
0x1000e020
QueryServiceConfigW
0x1000e024
RegCloseKey
0x1000e008
RegisterTraceGuidsW
0x1000e018
RegOpenKeyExW
0x1000e000
RegQueryValueExW
0x1000e040
TraceMessage
0x1000e044
UnregisterTraceGuids
0x1000e01c
0x1000e054
KERNEL32.dll
49
ActivateActCtx
0x1000e0b8
CloseHandle
0x1000e108
CompareStringW
0x1000e088
CreateActCtxW
0x1000e0b4
CreateDirectoryW
0x1000e084
CreateFileW
0x1000e098
CreateProcessW
0x1000e104
DeactivateActCtx
0x1000e0c0
DeleteCriticalSection
0x1000e080
DeleteFileW
0x1000e0a4
DisableThreadLibraryCalls
0x1000e074
EnterCriticalSection
0x1000e068
ExpandEnvironmentStringsW
0x1000e08c
GetCurrentProcess
0x1000e0e8
GetCurrentProcessId
0x1000e0ac
GetCurrentThreadId
0x1000e0d4
GetLastError
0x1000e090
GetModuleFileNameW
0x1000e0bc
GetModuleHandleW
0x1000e0c8
GetProcessHeap
0x1000e0a8
GetProcessId
0x1000e114
GetProcessTimes
0x1000e05c
GetSystemTimeAsFileTime
0x1000e0d8
GetTempFileNameW
0x1000e0b0
GetTempPathW
0x1000e094
GetTickCount
0x1000e0dc
GetVersionExW
0x1000e09c
HeapAlloc
0x1000e0fc
HeapCreate
0x1000e064
HeapDestroy
0x1000e07c
HeapFree
0x1000e0f8
InitializeCriticalSection
0x1000e070
IsWow64Process
0x1000e100
K32GetModuleFileNameExW
0x1000e0f4
LeaveCriticalSection
0x1000e06c
LocalAlloc
0x1000e110
LocalFree
0x1000e10c
OpenProcess
0x1000e0f0
ProcessIdToSessionId
0x1000e0a0
QueryPerformanceCounter
0x1000e0d0
QueryPerformanceFrequency
0x1000e078
ReleaseActCtx
0x1000e0cc
RemoveDirectoryW
0x1000e11c
SetLastError
0x1000e118
SetUnhandledExceptionFilter
0x1000e0e4
Sleep
0x1000e0c4
TerminateProcess
0x1000e0ec
TryEnterCriticalSection
0x1000e060
UnhandledExceptionFilter
0x1000e0e0
msvcrt.dll
10
_amsg_exit
0x1000e1dc
_except_handler4_common
0x1000e1c4
_initterm
0x1000e1c8
_vsnwprintf
0x1000e1e8
_XcptFilter
0x1000e1e0
free
0x1000e1d8
malloc
0x1000e1cc
memset
0x1000e1d4
wcsrchr
0x1000e1d0
wcstoul
0x1000e1e4
ntdll.dll
10
EtwEventRegister
0x1000e1fc
EtwEventUnregister
0x1000e200
EtwEventWrite
0x1000e1f0
NtOpenEvent
0x1000e210
NtQueryEvent
0x1000e208
RtlAllocateAndInitializeSid
0x1000e1f4
RtlEqualUnicodeString
0x1000e20c
RtlFreeSid
0x1000e1f8
RtlInitUnicodeString
0x1000e214
RtlNtStatusToDosError
0x1000e204
RmEndSession
0x1000e138
RmGetList
0x1000e134
RmRegisterResources
0x1000e144
RmReserveHeap
0x1000e13c
RmRestart
0x1000e140
RmShutdown
0x1000e130
RmStartSession
0x1000e148
Shell_NotifyIconW
0x1000e150
USER32.dll
16
DefWindowProcW
0x1000e1a0
DestroyIcon
0x1000e17c
DestroyWindow
0x1000e19c
DispatchMessageW
0x1000e198
EnumWindows
0x1000e168
GetMessageW
0x1000e1a4
GetWindow
0x1000e16c
GetWindowLongW
0x1000e174
GetWindowThreadProcessId
0x1000e170
KillTimer
0x1000e188
LoadIconW
0x1000e178
LoadStringW
0x1000e180
PeekMessageW
0x1000e190
PostQuitMessage
0x1000e184
SetTimer
0x1000e194
TranslateMessage
0x1000e18c
GetFileVersionInfoExW
0x1000e1b4
GetFileVersionInfoSizeExW
0x1000e1b0
GetFileVersionInfoSizeW
0x1000e1b8
GetFileVersionInfoW
0x1000e1ac
VerQueryValueW
0x1000e1bc
wdi.dll
4
WdiGetParameterByIndex
0x1000e234
WdiGetParameterByName
0x1000e238
WdiGetParameterCount
0x1000e22c
WdiGetParameterData
0x1000e230
wer.dll
7
WerpGetReportConsent
0x1000e258
WerpSetCallBack
0x1000e240
WerReportAddFile
0x1000e248
WerReportCloseHandle
0x1000e24c
WerReportCreate
0x1000e254
WerReportSetParameter
0x1000e244
WerReportSubmit
0x1000e250
No function matches your filter.