wdc.dll
v10.0.19041.1
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
WdcParseLegacyFile
#1 · 0x6d9e0
WdcRunTaskAsInteractiveUser
#2 · 0x6ded0
DllCanUnloadNow
#3 · 0x32280
DllGetClassObject
#4 · 0x30840
DllRegisterServer
#5 · 0x41370
DllUnregisterServer
#6 · 0x41370
No function matches your filter.
Imported DLLs & functions 436
ADVAPI32.dll
47
AdjustTokenPrivileges
0x10087070
AllocateAndInitializeSid
0x10087080
CheckTokenMembership
0x1008707c
CloseServiceHandle
0x10087034
CloseThreadWaitChainSession
0x10087050
CloseTrace
0x1008706c
ControlService
0x1008702c
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x10087090
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x10087078
CreateWellKnownSid
0x10087084
EnableTraceEx
0x10087058
EnumServicesStatusExW
0x10087028
EventRegister
0x1008701c
EventUnregister
0x10087014
EventWriteTransfer
0x10087088
FreeSid
0x10087000
GetSecurityDescriptorDacl
0x100870a0
GetSecurityDescriptorGroup
0x100870b0
GetSecurityDescriptorOwner
0x100870a8
GetSecurityDescriptorSacl
0x10087098
GetThreadWaitChain
0x10087048
I_QueryTagInformation
0x10087018
IsValidSid
0x10087020
MakeAbsoluteSD
0x100870b4
MapGenericMask
0x1008708c
OpenProcessToken
0x10087074
OpenSCManagerW
0x10087040
OpenServiceW
0x1008703c
OpenThreadWaitChainSession
0x1008704c
OpenTraceW
0x10087060
ProcessTrace
0x10087054
QueryServiceConfigW
0x10087024
QueryServiceStatus
0x10087038
QueryTraceW
0x10087068
RegCloseKey
0x10087004
RegEnumValueW
0x1008700c
RegGetValueW
0x100870b8
RegisterWaitChainCOMCallback
0x10087044
RegOpenKeyExW
0x10087010
RegQueryValueExW
0x10087008
SetSecurityDescriptorDacl
0x1008709c
SetSecurityDescriptorGroup
0x100870ac
SetSecurityDescriptorOwner
0x100870a4
SetSecurityDescriptorSacl
0x10087094
StartServiceW
0x10087030
StartTraceW
0x1008705c
StopTraceW
0x10087064
BaseFreeAppCompatDataForProcess
0x100875bc
BaseReadAppCompatDataForProcess
0x100875b8
CredUIPromptForCredentialsW
0x100875c4
ForwardGadgetMessage
0x100870d8
GDI32.dll
20
BitBlt
0x100870e0
CreateCompatibleBitmap
0x100870f4
CreateCompatibleDC
0x100870f8
CreateDIBSection
0x1008710c
CreateFontIndirectW
0x1008711c
CreatePen
0x10087108
CreateSolidBrush
0x100870f0
DeleteObject
0x10087124
EndDoc
0x1008712c
EndPage
0x10087110
GetDeviceCaps
0x10087120
GetStockObject
0x10087100
LineTo
0x100870ec
MoveToEx
0x10087128
Polygon
0x100870e4
Polyline
0x100870fc
SelectObject
0x10087104
SetROP2
0x100870e8
StartDocW
0x10087118
StartPage
0x10087114
GetAdaptersAddresses
0x10087148
GetExtendedTcpTable
0x10087138
GetExtendedUdpTable
0x10087144
GetIfEntry2
0x10087154
GetPerTcp6ConnectionEStats
0x10087134
GetPerTcpConnectionEStats
0x1008713c
NhGetInterfaceNameFromDeviceGuid
0x1008714c
SetPerTcp6ConnectionEStats
0x10087140
SetPerTcpConnectionEStats
0x10087150
KERNEL32.dll
121
AcquireSRWLockExclusive
0x10087174
CancelSynchronousIo
0x10087268
CloseHandle
0x10087244
CreateEventW
0x10087294
CreateFileMappingW
0x100871ec
CreateFileW
0x1008727c
CreateMutexW
0x100871fc
CreateThread
0x1008723c
DebugBreak
0x10087208
DelayLoadFailureHook
0x10087190
DeleteCriticalSection
0x10087234
DeleteFileW
0x100872ac
DeviceIoControl
0x100871ac
DuplicateHandle
0x10087228
EnterCriticalSection
0x10087284
ExpandEnvironmentStringsW
0x100872d4
FileTimeToLocalFileTime
0x100872b0
FileTimeToSystemTime
0x100872b4
FindClose
0x10087314
FindFirstFileW
0x1008730c
FindNextFileW
0x10087310
FindResourceExW
0x100871a8
FindResourceW
0x100872f8
FormatMessageW
0x100872f0
FreeLibrary
0x100872c8
FreeResource
0x10087308
GetActiveProcessorGroupCount
0x100871cc
GetCommandLineW
0x100872c0
GetComputerNameW
0x100872d0
GetCurrentProcess
0x10087328
GetCurrentProcessId
0x10087330
GetCurrentThread
0x1008720c
GetCurrentThreadId
0x100872a0
GetDateFormatW
0x100872b8
GetDiskFreeSpaceExW
0x100871bc
GetErrorMode
0x10087338
GetFileAttributesW
0x100872a8
GetFileSize
0x10087324
GetLastError
0x10087240
GetLocaleInfoW
0x100872a4
GetLocalTime
0x100872cc
GetLogicalDriveStringsW
0x100871b4
GetModuleFileNameW
0x1008725c
GetModuleHandleA
0x1008724c
GetModuleHandleW
0x10087250
GetNumberFormatW
0x10087214
GetPhysicallyInstalledSystemMemory
0x10087218
GetProcAddress
0x10087254
GetProcessHeap
0x100872e4
GetProcessorSystemCycleTime
0x100871c8
GetProcessTimes
0x100871dc
GetSystemTimeAsFileTime
0x10087168
GetSystemWindowsDirectoryW
0x10087224
GetTempFileNameW
0x1008731c
GetTempPathW
0x10087318
GetTickCount
0x1008719c
GetTimeFormatW
0x100872bc
GetVersionExW
0x100871c4
GlobalAlloc
0x1008726c
GlobalFree
0x10087278
GlobalLock
0x10087270
GlobalUnlock
0x10087274
HeapAlloc
0x100872e0
HeapFree
0x100872e8
HeapReAlloc
0x100872f4
HeapSetInformation
0x1008722c
HeapSize
0x100871a0
InitializeCriticalSection
0x10087320
K32EnumDeviceDrivers
0x10087184
K32EnumProcessModulesEx
0x10087180
K32GetDeviceDriverBaseNameW
0x1008717c
K32GetDeviceDriverFileNameW
0x10087178
K32GetModuleBaseNameW
0x10087220
K32GetModuleFileNameExW
0x1008721c
LeaveCriticalSection
0x10087290
LoadLibraryA
0x10087264
LoadLibraryW
0x10087258
LoadResource
0x100872fc
LocalAlloc
0x100872dc
LocalFree
0x100872c4
LockResource
0x10087300
lstrlenW
0x100871d4
MapViewOfFile
0x100871e8
MulDiv
0x1008733c
MultiByteToWideChar
0x100871c0
OpenProcess
0x100871e0
OutputDebugStringA
0x10087260
OutputDebugStringW
0x100872ec
ProcessIdToSessionId
0x1008732c
QueryDosDeviceW
0x100871b0
QueryFullProcessImageNameW
0x100871d8
QueryPerformanceCounter
0x10087164
QueryPerformanceFrequency
0x100871b8
ReadFile
0x10087280
ReadProcessMemory
0x100871a4
ReleaseMutex
0x100871f8
ReleaseSRWLockExclusive
0x10087188
ResetEvent
0x10087298
ResolveDelayLoadedAPI
0x10087194
SetErrorMode
0x10087334
SetEvent
0x10087288
SetLastError
0x10087248
SetProcessWorkingSetSize
0x100871f0
SetThreadPriority
0x10087210
SetUnhandledExceptionFilter
0x10087160
SizeofResource
0x10087304
Sleep
0x10087198
SleepConditionVariableSRW
0x1008716c
TerminateProcess
0x100871d0
TerminateThread
0x1008718c
TlsAlloc
0x10087230
TlsFree
0x10087238
TlsGetValue
0x10087200
TlsSetValue
0x100871e4
TryEnterCriticalSection
0x10087204
UnhandledExceptionFilter
0x1008715c
UnmapViewOfFile
0x100871f4
WaitForMultipleObjects
0x1008729c
WaitForSingleObject
0x1008728c
WakeAllConditionVariable
0x10087170
WriteFile
0x100872d8
msvcrt.dll
35
__CxxFrameHandler3
0x100875fc
__dllonexit
0x100875cc
_amsg_exit
0x10087614
_callnewh
0x10087628
_except_handler4_common
0x100875e0
_ftol2
0x100875f8
_ftol2_sse
0x10087600
_initterm
0x10087610
_lock
0x10087644
_onexit
0x10087638
_purecall
0x100875ec
_unlock
0x10087634
_vsnwprintf
0x100875f0
_wcsicmp
0x10087640
_wcsnicmp
0x100875e8
_wtoi
0x1008763c
_XcptFilter
0x10087618
??1type_info@@UAE@XZ
0x1008760c
ceil
0x10087604
floor
0x10087608
free
0x10087624
iswdigit
0x10087648
malloc
0x10087630
mbstowcs
0x100875d8
memcmp
0x1008761c
memcpy
0x10087620
memmove
0x1008762c
memset
0x10087654
towlower
0x100875dc
wcschr
0x10087650
wcsrchr
0x100875e4
wcsstr
0x1008764c
wcstok
0x100875f4
wcstombs
0x100875d4
wcstoul
0x100875d0
ntdll.dll
18
NtOpenFile
0x10087694
NtQueryInformationProcess
0x10087668
NtQueryInformationThread
0x10087680
NtQueryInformationToken
0x100876a0
NtQueryObject
0x10087684
NtQuerySystemInformation
0x10087698
NtQuerySystemInformationEx
0x1008769c
NtQuerySystemTime
0x1008765c
NtResumeProcess
0x1008767c
NtSuspendProcess
0x10087678
RtlInitUnicodeString
0x10087690
RtlIpv4AddressToStringW
0x10087688
RtlIpv6AddressToStringExW
0x10087674
RtlIpv6AddressToStringW
0x1008768c
RtlNtStatusToDosError
0x10087660
WinSqmAddToAverageDWORD
0x10087670
WinSqmAddToStream
0x1008766c
WinSqmIncrementDWORD
0x10087664
ole32.dll
18
CoCreateInstance
0x100876cc
CoCreateInstanceEx
0x100876ac
CoGetActivationState
0x100876b8
CoGetCallState
0x100876bc
CoInitialize
0x100876ec
CoInitializeEx
0x100876e0
CoSetProxyBlanket
0x100876d8
CoTaskMemAlloc
0x100876d0
CoTaskMemFree
0x100876e4
CoTaskMemRealloc
0x100876e8
CoUninitialize
0x100876a8
CreateOleAdviseHolder
0x100876dc
CreateStreamOnHGlobal
0x100876b0
GetHGlobalFromStream
0x100876b4
ReadClassStm
0x100876c4
StringFromCLSID
0x100876c0
StringFromGUID2
0x100876d4
WriteClassStm
0x100876c8
OLEAUT32.dll
14
SafeArrayAccessData
0x10087374
SafeArrayCreate
0x1008735c
SafeArrayDestroy
0x10087358
SafeArrayUnaccessData
0x1008736c
SysAllocString
0x1008738c
SysAllocStringLen
0x1008737c
SysFreeString
0x10087388
SysStringByteLen
0x10087370
SystemTimeToVariantTime
0x10087364
VariantChangeType
0x10087384
VariantClear
0x10087368
VariantCopy
0x10087380
VariantInit
0x10087378
VariantTimeToSystemTime
0x10087360
pdh.dll
7
PdhAddEnglishCounterW
0x10087708
PdhCloseQuery
0x10087704
PdhCollectQueryData
0x10087700
PdhExpandWildCardPathW
0x100876f4
PdhGetFormattedCounterArrayW
0x100876f8
PdhGetFormattedCounterValue
0x1008770c
PdhOpenQueryW
0x100876fc
PdhUiBrowseCountersExHW
0x10087714
PLA.dll
5
PlaDeleteReport
0x100873a4
PlaExpandTaskArguments
0x10087394
PlaGetLegacyAlertActionsFlagsFromString
0x10087398
PlaGetLegacyAlertActionsStringFromFlags
0x1008739c
PlaGetServerCapabilities
0x100873a0
GetUserNameExW
0x100873e0
0x100873b4
CommandLineToArgvW
0x100873b8
DragQueryFileW
0x100873c0
SHBrowseForFolderW
0x100873cc
ShellExecuteExW
0x100873ac
ShellExecuteW
0x100873b0
SHGetMalloc
0x100873c8
SHGetPathFromIDListW
0x100873c4
SHGetSpecialFolderLocation
0x100873bc
USER32.dll
98
AppendMenuW
0x10087518
BeginPaint
0x10087500
CallWindowProcW
0x10087460
CharLowerW
0x100873ec
CheckDlgButton
0x10087438
CheckMenuItem
0x100874a4
CheckMenuRadioItem
0x100874b8
CheckRadioButton
0x1008745c
CloseClipboard
0x100874d0
CloseDesktop
0x10087568
CloseWindowStation
0x100873f4
CreateWindowExW
0x100874f0
DefWindowProcW
0x10087480
DeleteMenu
0x1008751c
DestroyIcon
0x100874d4
DestroyMenu
0x100874b0
DestroyWindow
0x100874ec
DialogBoxParamW
0x1008743c
EmptyClipboard
0x1008753c
EnableMenuItem
0x100874a8
EnableWindow
0x10087424
EndDialog
0x10087430
EndPaint
0x10087504
EnumDesktopsW
0x100873f8
EnumDesktopWindows
0x10087564
EnumWindowStationsW
0x100873f0
FillRect
0x100874f4
FlashWindow
0x10087484
GetClassNameW
0x100874d8
GetClientRect
0x10087420
GetClipboardData
0x100874cc
GetDC
0x10087464
GetDlgItem
0x10087414
GetDlgItemTextW
0x10087448
GetFocus
0x10087548
GetKeyState
0x10087494
GetMenu
0x10087510
GetMenuItemCount
0x100874b4
GetMenuItemID
0x10087514
GetMenuStringW
0x100874bc
GetMessagePos
0x10087538
GetParent
0x10087458
GetProcessWindowStation
0x10087400
GetScrollPos
0x10087534
GetSubMenu
0x100874a0
GetSysColor
0x10087544
GetSystemMetrics
0x100874e4
GetThreadDesktop
0x1008755c
GetWindow
0x100874dc
GetWindowLongW
0x1008742c
GetWindowRect
0x10087498
GetWindowTextW
0x10087444
GetWindowThreadProcessId
0x10087554
GhostWindowFromHungWindow
0x100873e8
HungWindowFromGhostWindow
0x10087404
InvalidateRect
0x100874fc
IsClipboardFormatAvailable
0x100874c8
IsDlgButtonChecked
0x10087434
IsHungAppWindow
0x10087550
IsWindowEnabled
0x10087488
IsWindowVisible
0x1008754c
KillTimer
0x10087474
LoadBitmapW
0x10087468
LoadCursorW
0x10087490
LoadIconW
0x1008740c
LoadImageW
0x10087408
LoadMenuW
0x1008749c
LoadStringW
0x10087410
MapWindowPoints
0x1008750c
MessageBeep
0x100874e0
OpenClipboard
0x100874c4
OpenDesktopW
0x10087558
OpenWindowStationW
0x1008756c
PostMessageW
0x10087454
PostThreadMessageW
0x10087470
PtInRect
0x10087530
RegisterClassW
0x100874f8
RegisterClipboardFormatW
0x1008747c
ReleaseDC
0x10087528
RemoveMenu
0x1008752c
SendDlgItemMessageW
0x10087450
SendMessageTimeoutW
0x1008746c
SendMessageW
0x10087418
SetActiveWindow
0x100874c0
SetClipboardData
0x10087540
SetCursor
0x1008748c
SetDlgItemTextW
0x1008744c
SetFocus
0x10087440
SetProcessWindowStation
0x100873fc
SetRect
0x10087520
SetThreadDesktop
0x10087560
SetTimer
0x10087478
SetWindowLongW
0x10087428
SetWindowPos
0x10087524
SetWindowTextW
0x1008741c
ShowWindow
0x100874e8
TrackPopupMenuEx
0x100874ac
UpdateWindow
0x10087508
CachedGetUserFromSid
0x10087574
SetWindowTheme
0x1008757c
VDMEnumProcessWOW
0x10087588
VDMEnumTaskWOWEx
0x1008758c
VDMTerminateTaskWOW
0x10087584
GetFileVersionInfoSizeW
0x10087594
GetFileVersionInfoW
0x1008759c
VerQueryValueW
0x10087598
EvtClose
0x1008771c
EvtCreateRenderContext
0x10087730
EvtNext
0x10087720
EvtOpenPublisherMetadata
0x10087734
EvtOpenSession
0x10087728
EvtRender
0x10087724
EvtSubscribe
0x1008772c
WinStationGetProcessSid
0x100875a4
No function matches your filter.