rdpencom.dll

Description: RDPSRAPI COM Objects

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 808533e880fc524dc1236732ffc8811c

File Size: 423.5 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x7850)
DllGetClassObject (Ordinal: 2, Address: 0x7870)
DllRegisterServer (Ordinal: 3, Address: 0x79a0)
DllUnregisterServer (Ordinal: 4, Address: 0x7aa0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180050220)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromProgID (Address: 0x180050248)
CLSIDFromString (Address: 0x180050250)
CoCreateInstance (Address: 0x180050270)
CoGetClassObject (Address: 0x180050238)
CoTaskMemAlloc (Address: 0x180050268)
CoTaskMemFree (Address: 0x180050260)
CoTaskMemRealloc (Address: 0x180050258)
CreateStreamOnHGlobal (Address: 0x180050230)
StringFromGUID2 (Address: 0x180050240)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x180050280)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180050290)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800502a0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800502b8)
RaiseException (Address: 0x1800502b0)
SetLastError (Address: 0x1800502d0)
SetUnhandledExceptionFilter (Address: 0x1800502c0)
UnhandledExceptionFilter (Address: 0x1800502c8)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800502e0)
WriteFile (Address: 0x1800502e8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800502f8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180050308)
HeapAlloc (Address: 0x180050310)
HeapFree (Address: 0x180050318)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x180050328)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x180050340)
GlobalUnlock (Address: 0x180050338)

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedPopEntrySList (Address: 0x180050350)
InterlockedPushEntrySList (Address: 0x180050358)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MulDiv (Address: 0x180050368)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800503a0)
FindResourceExW (Address: 0x180050380)
FreeLibrary (Address: 0x1800503c8)
GetModuleFileNameW (Address: 0x1800503d0)
GetModuleHandleExA (Address: 0x180050398)
GetModuleHandleExW (Address: 0x180050378)
GetModuleHandleW (Address: 0x1800503b0)
GetProcAddress (Address: 0x180050388)
LoadLibraryExA (Address: 0x1800503a8)
LoadLibraryExW (Address: 0x1800503b8)
LoadResource (Address: 0x180050390)
SizeofResource (Address: 0x1800503c0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1800503e0)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x1800503f8)
VirtualFree (Address: 0x180050400)
VirtualQuery (Address: 0x1800503f0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180050418)
GetCurrentProcessId (Address: 0x180050428)
GetCurrentThread (Address: 0x180050420)
GetCurrentThreadId (Address: 0x180050438)
OpenProcessToken (Address: 0x180050410)
OpenThreadToken (Address: 0x180050430)
TerminateProcess (Address: 0x180050440)

api-ms-win-core-processthreads-l1-1-1.dll

FlushInstructionCache (Address: 0x180050450)
OpenProcess (Address: 0x180050458)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180050468)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcessModules (Address: 0x180050488)
K32GetModuleBaseNameW (Address: 0x180050478)
K32GetModuleFileNameExW (Address: 0x180050480)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800504a0)
RegCreateKeyExW (Address: 0x1800504a8)
RegDeleteValueW (Address: 0x1800504b8)
RegEnumKeyExW (Address: 0x1800504d0)
RegOpenKeyExW (Address: 0x1800504c0)
RegQueryInfoKeyW (Address: 0x1800504c8)
RegQueryValueExW (Address: 0x180050498)
RegSetValueExW (Address: 0x1800504b0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800504e8)
RtlLookupFunctionEntry (Address: 0x1800504e0)
RtlVirtualUnwind (Address: 0x1800504f0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x180050500)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180050510)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180050520)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180050538)
lstrcmpW (Address: 0x180050530)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180050560)
DeleteCriticalSection (Address: 0x180050568)
EnterCriticalSection (Address: 0x180050570)
InitializeCriticalSection (Address: 0x180050578)
LeaveCriticalSection (Address: 0x180050548)
OpenEventW (Address: 0x180050550)
ReleaseSRWLockExclusive (Address: 0x180050558)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180050598)
SleepConditionVariableSRW (Address: 0x180050590)
WakeAllConditionVariable (Address: 0x180050588)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800505b0)
GetTickCount (Address: 0x1800505a8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800505c8)
EncodePointer (Address: 0x1800505c0)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x1800505d8)
GetFileVersionInfoSizeExW (Address: 0x1800505e0)
VerQueryValueW (Address: 0x1800505e8)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180050610)
GetTraceEnableLevel (Address: 0x180050618)
GetTraceLoggerHandle (Address: 0x180050620)
RegisterTraceGuidsW (Address: 0x180050608)
TraceMessage (Address: 0x1800505f8)
UnregisterTraceGuids (Address: 0x180050600)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180050630)
EventRegister (Address: 0x180050640)
EventUnregister (Address: 0x180050638)
EventWriteTransfer (Address: 0x180050648)

api-ms-win-ntuser-rectangle-l1-1-0.dll

CopyRect (Address: 0x180050658)
EqualRect (Address: 0x180050670)
IntersectRect (Address: 0x180050690)
IsRectEmpty (Address: 0x180050698)
OffsetRect (Address: 0x180050680)
PtInRect (Address: 0x180050688)
SetRect (Address: 0x180050660)
SetRectEmpty (Address: 0x180050668)
UnionRect (Address: 0x180050678)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1800506a8)

CRYPT32.dll

CryptBinaryToStringW (Address: 0x180050020)

CRYPTSP.dll

CryptAcquireContextW (Address: 0x180050058)
CryptCreateHash (Address: 0x180050030)
CryptDestroyHash (Address: 0x180050048)
CryptGenRandom (Address: 0x180050038)
CryptGetHashParam (Address: 0x180050040)
CryptHashData (Address: 0x180050050)
CryptReleaseContext (Address: 0x180050060)

msvcrt.dll

__C_specific_handler (Address: 0x1800506d0)
__dllonexit (Address: 0x1800506b8)
_aligned_free (Address: 0x180050788)
_aligned_malloc (Address: 0x180050780)
_amsg_exit (Address: 0x180050728)
_callnewh (Address: 0x180050740)
_errno (Address: 0x180050718)
_initterm (Address: 0x180050720)
_lock (Address: 0x180050708)
_onexit (Address: 0x1800506e0)
_purecall (Address: 0x180050768)
_resetstkoflw (Address: 0x180050790)
_unlock (Address: 0x1800506f8)
_vsnwprintf (Address: 0x180050700)
_wcsicmp (Address: 0x1800506d8)
_wcsicoll (Address: 0x1800506c8)
_XcptFilter (Address: 0x180050730)
calloc (Address: 0x180050778)
free (Address: 0x180050758)
malloc (Address: 0x180050750)
mbstowcs (Address: 0x1800506c0)
memcmp (Address: 0x1800507a0)
memcpy (Address: 0x1800507a8)
memcpy_s (Address: 0x180050770)
memmove (Address: 0x1800506e8)
memset (Address: 0x1800507b0)
realloc (Address: 0x180050710)
swprintf_s (Address: 0x180050760)
wcscat_s (Address: 0x180050798)
wcscpy_s (Address: 0x180050738)
wcsncpy_s (Address: 0x180050748)
wcsrchr (Address: 0x1800506f0)

OLEAUT32.dll

DispCallFunc (Address: 0x180050070)
LoadRegTypeLib (Address: 0x180050090)
LoadTypeLib (Address: 0x180050080)
OleCreateFontIndirect (Address: 0x1800500d0)
OleCreatePropertyFrame (Address: 0x180050138)
RegisterTypeLib (Address: 0x180050120)
SafeArrayAccessData (Address: 0x1800500b8)
SafeArrayCreate (Address: 0x1800500f8)
SafeArrayDestroy (Address: 0x180050108)
SafeArrayLock (Address: 0x1800500e8)
SafeArrayUnaccessData (Address: 0x1800500c0)
SafeArrayUnlock (Address: 0x180050128)
SysAllocString (Address: 0x180050110)
SysAllocStringByteLen (Address: 0x180050100)
SysAllocStringLen (Address: 0x180050098)
SysFreeString (Address: 0x180050130)
SysStringByteLen (Address: 0x1800500a0)
SysStringLen (Address: 0x180050118)
UnRegisterTypeLib (Address: 0x1800500f0)
VarBstrCat (Address: 0x180050088)
VarBstrCmp (Address: 0x1800500a8)
VariantChangeType (Address: 0x1800500e0)
VariantClear (Address: 0x1800500d8)
VariantCopy (Address: 0x1800500b0)
VariantInit (Address: 0x180050078)
VarUI4FromStr (Address: 0x1800500c8)

RDPBASE.dll

GetSupportedSSELevel_SSE (Address: 0x1800501a0)
MemCopyAligned_SSE (Address: 0x180050178)
MemMoveReverseAligned_SSE (Address: 0x180050180)
PAL_System_AtomicDecrement (Address: 0x180050160)
PAL_System_AtomicIncrement (Address: 0x180050188)
PAL_System_CritSecEnter (Address: 0x180050150)
PAL_System_CritSecInit (Address: 0x180050158)
PAL_System_CritSecLeave (Address: 0x1800501d8)
PAL_System_CritSecTerminate (Address: 0x180050168)
RDPBASE_CreateInstance (Address: 0x180050170)
RDPENCHLPREG_ReadValueDWORD (Address: 0x180050148)
TsAddRectsToRegion (Address: 0x1800501c0)
TSAlloc (Address: 0x180050198)
TsCreateRegion (Address: 0x180050190)
TsDestroyRegion (Address: 0x1800501a8)
TSFree (Address: 0x1800501b0)
TsGetRegionRectCount (Address: 0x1800501c8)
TsGetRegionRects (Address: 0x1800501d0)
TsSetRegionFromRects (Address: 0x1800501b8)

RDPCORE.dll

RDPAPI_CreateInstance (Address: 0x1800501e8)

RDPSERVERBASE.dll

RDPSERVERBASE_CreateInstance (Address: 0x1800501f8)

WS2_32.dll

closesocket (Address: 0x180050208)
GetHostNameW (Address: 0x180050210)