RstrtMgr.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 12
RmAddFilter
#1 · 0x37f0
RmCancelCurrentTask
#2 · 0x3890
RmEndSession
#3 · 0x3900
RmGetFilterList
#4 · 0x3980
RmGetList
#5 · 0x3a10
RmJoinSession
#6 · 0x3aa0
RmRegisterResources
#7 · 0x3bf0
RmRemoveFilter
#8 · 0x3ca0
RmReserveHeap
#9 · 0x3d30
RmRestart
#10 · 0x3ed0
RmShutdown
#11 · 0x3f40
RmStartSession
#12 · 0x3fc0
No function matches your filter.
Imported DLLs & functions 194
ADVAPI32.dll
40
CloseServiceHandle
0x180026e90
ControlService
0x180026e30
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x180026e00
ConvertSidToStringSidW
0x180026e10
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180026e08
CopySid
0x180026e60
CreateProcessAsUserW
0x180026e40
DuplicateTokenEx
0x180026e50
EnumDependentServicesW
0x180026e80
EnumServicesStatusExW
0x180026df0
EqualSid
0x180026e58
EventRegister
0x180026eb8
EventUnregister
0x180026ea8
EventWrite
0x180026eb0
GetKernelObjectSecurity
0x180026e48
GetTokenInformation
0x180026e68
GetTraceEnableFlags
0x180026ef0
GetTraceEnableLevel
0x180026ee8
GetTraceLoggerHandle
0x180026df8
I_QueryTagInformation
0x180026e78
LookupAccountSidW
0x180026e18
OpenProcessToken
0x180026e70
OpenSCManagerW
0x180026ea0
OpenServiceW
0x180026e88
QueryServiceStatus
0x180026e38
QueryServiceStatusEx
0x180026e28
RegCloseKey
0x180026f10
RegCreateKeyExW
0x180026f00
RegDeleteKeyW
0x180026ee0
RegDeleteValueW
0x180026ec8
RegEnumValueW
0x180026ed0
RegisterTraceGuidsW
0x180026ef8
RegOpenKeyExW
0x180026f20
RegQueryInfoKeyW
0x180026ed8
RegQueryMultipleValuesW
0x180026ec0
RegQueryValueExW
0x180026f18
RegSetValueExW
0x180026f08
StartServiceW
0x180026e20
TraceMessage
0x180026e98
UnregisterTraceGuids
0x180026f28
ApiSetQueryApiSetPresence
0x180027258
KERNEL32.dll
81
AttachConsole
0x180027140
CloseHandle
0x180026fe8
CompareFileTime
0x180027070
ConnectNamedPipe
0x180027190
CreateEventW
0x180027188
CreateFileMappingW
0x180026fd0
CreateFileW
0x180026fc8
CreateMutexExW
0x180027110
CreateMutexW
0x180027050
CreateNamedPipeW
0x180027180
CreateSemaphoreExW
0x180027118
DebugBreak
0x180027098
DelayLoadFailureHook
0x180026f38
DeleteCriticalSection
0x180026f88
DisableThreadLibraryCalls
0x180026f78
DuplicateHandle
0x1800271b0
EnterCriticalSection
0x180026f68
ExpandEnvironmentStringsW
0x180026fc0
FileTimeToSystemTime
0x180027178
FormatMessageW
0x180027078
FreeConsole
0x180027138
GenerateConsoleCtrlEvent
0x180027148
GetApplicationRestartSettings
0x1800270f8
GetApplicationUserModelId
0x180027100
GetConsoleProcessList
0x180027130
GetCurrentProcess
0x180027030
GetCurrentProcessId
0x180027020
GetCurrentThreadId
0x180027080
GetFileInformationByHandle
0x180027008
GetFileType
0x180027000
GetLastError
0x180026fa0
GetModuleFileNameA
0x180027090
GetModuleFileNameW
0x180027040
GetModuleHandleExW
0x180027088
GetModuleHandleW
0x1800270a0
GetNamedPipeClientProcessId
0x1800271a0
GetOverlappedResult
0x180026f60
GetPackageId
0x180027108
GetProcAddress
0x1800270a8
GetProcessHeap
0x180026fb8
GetProcessTimes
0x180027028
GetSystemTime
0x180026f40
GetSystemTimeAsFileTime
0x180027038
GetSystemWindowsDirectoryW
0x1800270f0
GetTickCount
0x180027158
HeapAlloc
0x180026fa8
HeapCreate
0x180026f98
HeapDestroy
0x180026f90
HeapFree
0x180026fb0
InitializeCriticalSection
0x180027010
InitializeCriticalSectionAndSpinCount
0x180026f80
IsDebuggerPresent
0x1800270b0
LeaveCriticalSection
0x180026f70
LocalFree
0x1800270e0
MapViewOfFile
0x180026fd8
OpenMutexW
0x180027058
OpenProcess
0x180027068
OpenSemaphoreW
0x1800270d8
OutputDebugStringW
0x1800270b8
ProcessIdToSessionId
0x180027018
QueryFullProcessImageNameW
0x1800270e8
QueryPerformanceCounter
0x180026ff8
QueryPerformanceFrequency
0x180026ff0
ReadFile
0x180027168
ReleaseMutex
0x180027048
ReleaseSemaphore
0x1800270c8
ResetEvent
0x1800271b8
ResolveDelayLoadedAPI
0x180026f48
SetConsoleCtrlHandler
0x180027120
SetEvent
0x180027198
SetLastError
0x1800270c0
SetUnhandledExceptionFilter
0x180026f50
Sleep
0x180027160
SystemTimeToFileTime
0x180027170
TerminateProcess
0x180027150
UnhandledExceptionFilter
0x180026f58
UnmapViewOfFile
0x180026fe0
WaitForMultipleObjects
0x180027128
WaitForSingleObject
0x180027060
WaitForSingleObjectEx
0x1800270d0
WriteFile
0x1800271a8
WTSGetServiceSessionId
0x1800271c8
msvcrt.dll
32
__C_specific_handler
0x180027300
__CxxFrameHandler3
0x180027358
__dllonexit
0x180027328
_amsg_exit
0x180027270
_CxxThrowException
0x180027290
_initterm
0x180027268
_lock
0x180027318
_onexit
0x180027330
_purecall
0x1800272a0
_unlock
0x180027320
_vsnprintf_s
0x180027348
_vsnwprintf
0x1800272c8
_wcsicmp
0x1800272e8
_XcptFilter
0x180027278
??0exception@@QEAA@AEBQEBD@Z
0x180027298
??0exception@@QEAA@AEBQEBDH@Z
0x1800272d8
??0exception@@QEAA@AEBV0@@Z
0x1800272d0
??0exception@@QEAA@XZ
0x1800272b8
??1exception@@UEAA@XZ
0x1800272f8
??1type_info@@UEAA@XZ
0x180027310
?terminate@@YAXXZ
0x1800272a8
?what@exception@@UEBAPEBDXZ
0x1800272e0
free
0x180027350
malloc
0x180027340
memcmp
0x180027338
memcpy
0x180027288
memcpy_s
0x1800272b0
memmove
0x180027280
memset
0x180027360
towlower
0x1800272f0
wcschr
0x1800272c0
wcstoul
0x180027308
BCryptCloseAlgorithmProvider
0x180027380
BCryptCreateHash
0x1800273a0
BCryptDestroyHash
0x180027378
BCryptFinishHash
0x180027398
BCryptGetProperty
0x180027390
BCryptHashData
0x180027370
BCryptOpenAlgorithmProvider
0x180027388
ntdll.dll
15
NtQueryInformationFile
0x1800273b8
NtQueryInformationProcess
0x1800273b0
NtQueryInformationToken
0x180027400
NtQuerySystemInformation
0x180027408
RtlCaptureContext
0x1800273e8
RtlCreateUnicodeString
0x1800273f8
RtlFreeUnicodeString
0x1800273c0
RtlLookupFunctionEntry
0x1800273e0
RtlQueryPackageClaims
0x180027410
RtlVirtualUnwind
0x1800273d8
WinSqmAddToStreamEx
0x1800273f0
WinSqmEndSession
0x1800273d0
WinSqmSetDWORD
0x180027420
WinSqmSetString
0x180027418
WinSqmStartSession
0x1800273c8
CoCreateInstance
0x180027440
CoInitializeEx
0x180027430
CoInitializeSecurity
0x180027438
CoTaskMemFree
0x180027448
CoUninitialize
0x180027450
SysAllocString
0x1800271f0
SysFreeString
0x1800271e8
VariantClear
0x1800271e0
VariantInit
0x1800271d8
UuidCreate
0x180027200
0x180027210
EnumWindows
0x180027230
GetSystemMetrics
0x180027220
GetWindow
0x180027248
GetWindowLongW
0x180027238
GetWindowThreadProcessId
0x180027240
SendMessageTimeoutW
0x180027228
No function matches your filter.