rld.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 2
#1 · 0xa3a0
#2 · 0x8700
No function matches your filter.
Imported DLLs & functions 81
OpenProcessToken
0x1000d000
KERNEL32.dll
64
CloseHandle
0x1000d024
CompareFileTime
0x1000d0b0
CreateDirectoryA
0x1000d09c
CreateEventA
0x1000d04c
CreateFileA
0x1000d104
CreateFileW
0x1000d0d4
CreateThread
0x1000d0f4
ExitProcess
0x1000d058
ExitThread
0x1000d0d8
FlushFileBuffers
0x1000d0dc
FreeLibrary
0x1000d08c
GetCurrentProcess
0x1000d034
GetCurrentProcessId
0x1000d048
GetCurrentThreadId
0x1000d0ec
GetFileAttributesA
0x1000d0cc
GetFileAttributesW
0x1000d0d0
GetFileSize
0x1000d0a8
GetFileTime
0x1000d0e8
GetLastError
0x1000d07c
GetModuleFileNameA
0x1000d0a0
GetModuleHandleA
0x1000d040
GetProcAddress
0x1000d050
GetProcessTimes
0x1000d0c0
GetTempPathA
0x1000d0a4
GetThreadContext
0x1000d068
GetTickCount
0x1000d0b8
GetVersionExA
0x1000d084
HeapAlloc
0x1000d090
HeapCreate
0x1000d100
HeapFree
0x1000d0f8
LoadLibraryA
0x1000d054
lstrcatA
0x1000d098
lstrcmpA
0x1000d06c
lstrcmpiA
0x1000d05c
lstrcmpiW
0x1000d060
lstrcpyA
0x1000d028
lstrcpynA
0x1000d030
lstrcpynW
0x1000d074
lstrcpyW
0x1000d064
lstrlenA
0x1000d008
lstrlenW
0x1000d018
MultiByteToWideChar
0x1000d014
OpenEventA
0x1000d0e0
QueryPerformanceCounter
0x1000d038
QueryPerformanceFrequency
0x1000d044
ReadFile
0x1000d0fc
ReadProcessMemory
0x1000d0c8
ResumeThread
0x1000d088
SetEndOfFile
0x1000d0ac
SetEnvironmentVariableA
0x1000d03c
SetEvent
0x1000d0b4
SetFilePointer
0x1000d094
SetLastError
0x1000d01c
SetThreadContext
0x1000d070
TerminateProcess
0x1000d078
VirtualAlloc
0x1000d020
VirtualAllocEx
0x1000d080
VirtualFree
0x1000d00c
VirtualFreeEx
0x1000d0c4
VirtualProtect
0x1000d02c
WaitForMultipleObjects
0x1000d0e4
WideCharToMultiByte
0x1000d010
WriteFile
0x1000d0bc
WriteProcessMemory
0x1000d0f0
USER32.dll
15
CharLowerA
0x1000d124
CreateWindowExA
0x1000d134
DefWindowProcA
0x1000d138
DispatchMessageA
0x1000d13c
GetMessageA
0x1000d118
GetWindowLongA
0x1000d130
KillTimer
0x1000d128
MessageBoxA
0x1000d140
PostQuitMessage
0x1000d10c
RegisterClassExA
0x1000d110
SendMessageA
0x1000d11c
SetTimer
0x1000d114
SetWindowLongA
0x1000d120
UnregisterClassA
0x1000d12c
wsprintfA
0x1000d144
GetUserProfileDirectoryA
0x1000d14c
No function matches your filter.