newtstop.dll

Description: Famatech Radmin Server Expansion

Version: 2.3.0.0

Architecture: 32-bit

Operating System: Windows NT

SHA256: d7d35019ce0c03d97c32ab25a1453718

File Size: 30.0 KB

Uploaded At: Aug. 20, 2026, 4:59 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported Functions

accept (Ordinal: 1, Address: 0x59f4)
bind (Ordinal: 2, Address: 0x59fc)
closesocket (Ordinal: 3, Address: 0x5a04)
connect (Ordinal: 4, Address: 0x5a0c)
getpeername (Ordinal: 5, Address: 0x5a14)
getsockname (Ordinal: 6, Address: 0x5a1c)
getsockopt (Ordinal: 7, Address: 0x5a24)
htonl (Ordinal: 8, Address: 0x5a2c)
htons (Ordinal: 9, Address: 0x5a34)
inet_addr (Ordinal: 10, Address: 0x5a3c)
inet_ntoa (Ordinal: 11, Address: 0x5a44)
ioctlsocket (Ordinal: 12, Address: 0x5a4c)
listen (Ordinal: 13, Address: 0x5a54)
ntohl (Ordinal: 14, Address: 0x5a5c)
ntohs (Ordinal: 15, Address: 0x5a64)
recv (Ordinal: 16, Address: 0x5a6c)
recvfrom (Ordinal: 17, Address: 0x5a74)
select (Ordinal: 18, Address: 0x5a7c)
send (Ordinal: 19, Address: 0x5a84)
sendto (Ordinal: 20, Address: 0x5a8c)
setsockopt (Ordinal: 21, Address: 0x5a94)
shutdown (Ordinal: 22, Address: 0x5a9c)
socket (Ordinal: 23, Address: 0x5aa4)
gethostbyaddr (Ordinal: 51, Address: 0x5aac)
gethostbyname (Ordinal: 52, Address: 0x5ab4)
getprotobyname (Ordinal: 53, Address: 0x5abc)
getprotobynumber (Ordinal: 54, Address: 0x5ac4)
getservbyname (Ordinal: 55, Address: 0x5acc)
getservbyport (Ordinal: 56, Address: 0x5ad4)
gethostname (Ordinal: 57, Address: 0x5adc)
WSAAsyncSelect (Ordinal: 101, Address: 0x5ae4)
WSAAsyncGetHostByAddr (Ordinal: 102, Address: 0x5aec)
WSAAsyncGetHostByName (Ordinal: 103, Address: 0x5af4)
WSAAsyncGetProtoByNumber (Ordinal: 104, Address: 0x5afc)
WSAAsyncGetProtoByName (Ordinal: 105, Address: 0x5b04)
WSAAsyncGetServByPort (Ordinal: 106, Address: 0x5b0c)
WSAAsyncGetServByName (Ordinal: 107, Address: 0x5b14)
WSACancelAsyncRequest (Ordinal: 108, Address: 0x5b1c)
WSASetBlockingHook (Ordinal: 109, Address: 0x5b24)
WSAUnhookBlockingHook (Ordinal: 110, Address: 0x5b2c)
WSAGetLastError (Ordinal: 111, Address: 0x5b34)
WSASetLastError (Ordinal: 112, Address: 0x5b3c)
WSACancelBlockingCall (Ordinal: 113, Address: 0x5b44)
WSAIsBlocking (Ordinal: 114, Address: 0x5b4c)
WSAStartup (Ordinal: 115, Address: 0x5b54)
WSACleanup (Ordinal: 116, Address: 0x5b5c)
nts (Ordinal: 117, Address: 0x328c)
ntsclean (Ordinal: 118, Address: 0x3514)
ntskd (Ordinal: 119, Address: 0x3594)

Imported DLLs & Functions

advapi32.dll

AdjustTokenPrivileges (Address: 0x40916c)
CreateProcessAsUserW (Address: 0x409168)
GetTokenInformation (Address: 0x409164)
LookupPrivilegeValueA (Address: 0x409298)
OpenProcessToken (Address: 0x409160)
RegCloseKey (Address: 0x40915c)
RegCreateKeyExA (Address: 0x409294)
RegDeleteValueA (Address: 0x409290)
RegEnumKeyExA (Address: 0x409158)
RegOpenKeyA (Address: 0x409154)
RegOpenKeyExA (Address: 0x40928c)
RegQueryInfoKeyW (Address: 0x409150)
RegQueryValueExA (Address: 0x40914c)
RegQueryValueExA (Address: 0x409288)
RegSetValueExA (Address: 0x409284)

gdi32.dll

GetStockObject (Address: 0x4091c8)

kernel32.dll

CloseHandle (Address: 0x4091c0)
ConnectNamedPipe (Address: 0x4091bc)
CreateFileA (Address: 0x40927c)
CreateNamedPipeA (Address: 0x409278)
CreateProcessA (Address: 0x409274)
CreateProcessW (Address: 0x4091b8)
CreateThread (Address: 0x4091b4)
CreateToolhelp32Snapshot (Address: 0x4092a8)
ExitProcess (Address: 0x4090fc)
FreeLibrary (Address: 0x409124)
GetCurrentProcess (Address: 0x4091b0)
GetCurrentProcessId (Address: 0x4091ac)
GetCurrentThreadId (Address: 0x4090f0)
GetModuleFileNameA (Address: 0x409270)
GetModuleHandleA (Address: 0x40926c)
GetProcAddress (Address: 0x4091a8)
GetProcessHeap (Address: 0x409134)
GetSystemDirectoryA (Address: 0x409268)
GetSystemTime (Address: 0x4091a4)
GetTempPathA (Address: 0x409264)
GetWindowsDirectoryA (Address: 0x409260)
HeapAlloc (Address: 0x409130)
HeapFree (Address: 0x409128)
HeapReAlloc (Address: 0x40912c)
LoadLibraryA (Address: 0x40925c)
LocalAlloc (Address: 0x409120)
LocalFree (Address: 0x40911c)
lstrcatA (Address: 0x409258)
lstrcpyA (Address: 0x409254)
lstrlenA (Address: 0x409250)
Module32First (Address: 0x4092b8)
Module32Next (Address: 0x4092b4)
MultiByteToWideChar (Address: 0x4090f8)
OpenProcess (Address: 0x4091a0)
OpenThread (Address: 0x4092c4)
Process32First (Address: 0x4092c0)
Process32Next (Address: 0x4092bc)
RaiseException (Address: 0x409108)
ReadFile (Address: 0x40919c)
ResumeThread (Address: 0x409198)
RtlUnwind (Address: 0x409104)
SetProcessShutdownParameters (Address: 0x409194)
Sleep (Address: 0x409190)
SystemTimeToFileTime (Address: 0x40918c)
TerminateProcess (Address: 0x409188)
Thread32First (Address: 0x4092b0)
Thread32Next (Address: 0x4092ac)
TlsAlloc (Address: 0x409118)
TlsFree (Address: 0x409114)
TlsGetValue (Address: 0x409110)
TlsSetValue (Address: 0x40910c)
UnhandledExceptionFilter (Address: 0x409100)
VirtualAllocEx (Address: 0x409184)
VirtualProtect (Address: 0x409180)
WaitForSingleObject (Address: 0x40917c)
WideCharToMultiByte (Address: 0x4090f4)
WriteFile (Address: 0x409178)
WriteProcessMemory (Address: 0x409174)

ntdll.dll

NtQueueApcThread (Address: 0x4092a0)

oleaut32.dll

SysAllocStringLen (Address: 0x409144)
SysFreeString (Address: 0x40913c)
SysReAllocStringLen (Address: 0x409140)

user32.dll

AppendMenuW (Address: 0x409228)
CallWindowProcA (Address: 0x409248)
CheckMenuRadioItem (Address: 0x409224)
CreatePopupMenu (Address: 0x409220)
CreateWindowExW (Address: 0x4091d0)
DestroyMenu (Address: 0x40921c)
DestroyWindow (Address: 0x409218)
ExitWindowsEx (Address: 0x409214)
FindWindowExA (Address: 0x409244)
GetClientRect (Address: 0x409210)
GetCursorPos (Address: 0x40920c)
GetNextDlgTabItem (Address: 0x409208)
GetParent (Address: 0x409200)
GetWindow (Address: 0x409204)
GetWindowLongA (Address: 0x409240)
GetWindowRect (Address: 0x4091fc)
GetWindowTextA (Address: 0x40923c)
GetWindowTextW (Address: 0x4091f8)
keybd_event (Address: 0x4091d4)
MessageBoxW (Address: 0x4091f4)
SendMessageA (Address: 0x409238)
SendMessageW (Address: 0x4091f0)
SetFocus (Address: 0x4091ec)
SetWindowLongA (Address: 0x409234)
SetWindowLongW (Address: 0x4091e8)
SetWindowPos (Address: 0x4091e4)
SetWindowTextA (Address: 0x409230)
SetWindowTextW (Address: 0x4091e0)
TrackPopupMenu (Address: 0x4091dc)
UpdateWindow (Address: 0x4091d8)