pdm.dll

Description: Process Debug Manager

Authors: © Microsoft Corporation. All rights reserved.

Version: 16.0.81.0

Architecture: 64-bit

Operating System: Windows

SHA256: 1ab9719df32a2d00bf8814512457d576

File Size: 609.6 KB

Uploaded At: Dec. 1, 2025, 7:49 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x2ef90)
  • DllGetClassObject (Ordinal: 2, Address: 0x2efd0)
  • DllRegisterServer (Ordinal: 3, Address: 0x2f110)
  • DllUnregisterServer (Ordinal: 4, Address: 0x2f120)

Imported DLLs & Functions

ADVAPI32.dll
  • AddAce (Address: 0x180062070)
  • CopySid (Address: 0x180062040)
  • EqualSid (Address: 0x180062100)
  • GetAclInformation (Address: 0x180062018)
  • GetLengthSid (Address: 0x180062088)
  • GetSecurityDescriptorControl (Address: 0x180062038)
  • GetSecurityDescriptorDacl (Address: 0x180062010)
  • GetSecurityDescriptorGroup (Address: 0x180062020)
  • GetSecurityDescriptorOwner (Address: 0x180062060)
  • GetSecurityDescriptorSacl (Address: 0x180062000)
  • GetSidIdentifierAuthority (Address: 0x1800620e0)
  • GetSidLengthRequired (Address: 0x180062030)
  • GetSidSubAuthority (Address: 0x180062028)
  • GetSidSubAuthorityCount (Address: 0x1800620f0)
  • GetTokenInformation (Address: 0x180062048)
  • InitializeAcl (Address: 0x180062080)
  • InitializeSecurityDescriptor (Address: 0x180062078)
  • InitializeSid (Address: 0x180062058)
  • IsValidSid (Address: 0x180062068)
  • MakeAbsoluteSD (Address: 0x180062090)
  • OpenProcessToken (Address: 0x1800620e8)
  • RegCloseKey (Address: 0x1800620c8)
  • RegCreateKeyExW (Address: 0x1800620a8)
  • RegDeleteKeyW (Address: 0x1800620a0)
  • RegDeleteValueW (Address: 0x1800620c0)
  • RegEnumKeyExW (Address: 0x1800620b0)
  • RegEnumKeyW (Address: 0x1800620f8)
  • RegOpenKeyExW (Address: 0x1800620d0)
  • RegQueryInfoKeyW (Address: 0x180062098)
  • RegQueryValueExW (Address: 0x1800620d8)
  • RegSetValueExW (Address: 0x1800620b8)
  • SetSecurityDescriptorDacl (Address: 0x180062008)
  • SetSecurityDescriptorSacl (Address: 0x180062050)
KERNEL32.dll
  • CloseHandle (Address: 0x180062440)
  • CreateEventW (Address: 0x1800621d8)
  • CreateFileMappingW (Address: 0x180062198)
  • CreateFileW (Address: 0x180062388)
  • CreateMutexW (Address: 0x180062110)
  • CreateSemaphoreW (Address: 0x1800623f0)
  • CreateThread (Address: 0x180062138)
  • DecodePointer (Address: 0x180062430)
  • DeleteCriticalSection (Address: 0x180062420)
  • DuplicateHandle (Address: 0x1800621c8)
  • EncodePointer (Address: 0x180062148)
  • EnterCriticalSection (Address: 0x180062478)
  • ExitProcess (Address: 0x1800622b0)
  • FindClose (Address: 0x1800622f8)
  • FindFirstFileExA (Address: 0x180062300)
  • FindNextFileA (Address: 0x180062308)
  • FindResourceExW (Address: 0x1800623c8)
  • FindResourceW (Address: 0x1800623b8)
  • FlushFileBuffers (Address: 0x180062378)
  • FormatMessageA (Address: 0x1800624a0)
  • FormatMessageW (Address: 0x1800624b0)
  • FreeEnvironmentStringsW (Address: 0x180062340)
  • FreeLibrary (Address: 0x180062348)
  • FreeLibraryAndExitThread (Address: 0x180062130)
  • GetACP (Address: 0x1800622d8)
  • GetCommandLineA (Address: 0x180062328)
  • GetCommandLineW (Address: 0x180062330)
  • GetComputerNameW (Address: 0x180062488)
  • GetConsoleCP (Address: 0x180062360)
  • GetConsoleMode (Address: 0x180062368)
  • GetCPInfo (Address: 0x180062320)
  • GetCurrentProcess (Address: 0x1800621b0)
  • GetCurrentProcessId (Address: 0x180062128)
  • GetCurrentThread (Address: 0x1800621f8)
  • GetCurrentThreadId (Address: 0x180062118)
  • GetEnvironmentStringsW (Address: 0x180062338)
  • GetFileAttributesW (Address: 0x180062200)
  • GetFileType (Address: 0x1800622e8)
  • GetLastError (Address: 0x180062450)
  • GetModuleFileNameA (Address: 0x1800622c0)
  • GetModuleFileNameW (Address: 0x180062268)
  • GetModuleHandleExW (Address: 0x1800622b8)
  • GetModuleHandleW (Address: 0x1800623a0)
  • GetOEMCP (Address: 0x180062318)
  • GetProcAddress (Address: 0x1800623a8)
  • GetProcessHeap (Address: 0x180062418)
  • GetStartupInfoW (Address: 0x180062248)
  • GetStdHandle (Address: 0x1800622e0)
  • GetStringTypeW (Address: 0x1800622f0)
  • GetSystemInfo (Address: 0x180062290)
  • GetSystemTimeAsFileTime (Address: 0x180062258)
  • GetThreadLocale (Address: 0x180062140)
  • GetTickCount (Address: 0x1800621a8)
  • GetVersion (Address: 0x180062498)
  • GlobalAlloc (Address: 0x180062160)
  • GlobalFree (Address: 0x180062168)
  • GlobalLock (Address: 0x180062170)
  • GlobalUnlock (Address: 0x180062178)
  • HeapAlloc (Address: 0x180062438)
  • HeapDestroy (Address: 0x180062428)
  • HeapFree (Address: 0x180062480)
  • HeapReAlloc (Address: 0x180062448)
  • HeapSize (Address: 0x180062458)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180062288)
  • InitializeCriticalSectionEx (Address: 0x180062460)
  • InitializeSListHead (Address: 0x180062260)
  • InterlockedFlushSList (Address: 0x180062278)
  • IsDebuggerPresent (Address: 0x180062240)
  • IsProcessorFeaturePresent (Address: 0x180062238)
  • IsValidCodePage (Address: 0x180062310)
  • LCMapStringW (Address: 0x1800622d0)
  • LeaveCriticalSection (Address: 0x180062468)
  • LoadLibraryExA (Address: 0x1800624b8)
  • LoadLibraryExW (Address: 0x180062158)
  • LoadLibraryW (Address: 0x180062398)
  • LoadResource (Address: 0x1800623c0)
  • LocalFree (Address: 0x1800624a8)
  • LockResource (Address: 0x1800623d0)
  • lstrcmpiW (Address: 0x180062150)
  • MapViewOfFile (Address: 0x1800621a0)
  • MultiByteToWideChar (Address: 0x1800623b0)
  • OpenEventW (Address: 0x1800621c0)
  • OpenFileMappingW (Address: 0x180062180)
  • OpenProcess (Address: 0x1800621d0)
  • OutputDebugStringW (Address: 0x180062380)
  • ProcessIdToSessionId (Address: 0x180062490)
  • QueryPerformanceCounter (Address: 0x180062250)
  • RaiseException (Address: 0x1800623f8)
  • RegisterWaitForSingleObject (Address: 0x1800621b8)
  • ReleaseMutex (Address: 0x180062120)
  • ReleaseSemaphore (Address: 0x180062470)
  • RtlCaptureContext (Address: 0x180062208)
  • RtlLookupFunctionEntry (Address: 0x180062210)
  • RtlPcToFileHeader (Address: 0x180062270)
  • RtlUnwindEx (Address: 0x1800624c0)
  • RtlVirtualUnwind (Address: 0x180062218)
  • SetEvent (Address: 0x1800621e0)
  • SetFilePointerEx (Address: 0x180062370)
  • SetLastError (Address: 0x180062280)
  • SetStdHandle (Address: 0x180062350)
  • SetUnhandledExceptionFilter (Address: 0x180062228)
  • SizeofResource (Address: 0x1800623d8)
  • Sleep (Address: 0x180062190)
  • TerminateProcess (Address: 0x180062230)
  • TlsAlloc (Address: 0x180062400)
  • TlsFree (Address: 0x1800623e0)
  • TlsGetValue (Address: 0x1800623e8)
  • TlsSetValue (Address: 0x180062410)
  • UnhandledExceptionFilter (Address: 0x180062220)
  • UnmapViewOfFile (Address: 0x180062188)
  • UnregisterWaitEx (Address: 0x1800621e8)
  • VirtualAlloc (Address: 0x180062298)
  • VirtualProtect (Address: 0x1800622a0)
  • VirtualQuery (Address: 0x1800622a8)
  • WaitForMultipleObjects (Address: 0x1800621f0)
  • WaitForSingleObject (Address: 0x180062408)
  • WideCharToMultiByte (Address: 0x1800622c8)
  • WriteConsoleW (Address: 0x180062390)
  • WriteFile (Address: 0x180062358)
ole32.dll
  • CLSIDFromString (Address: 0x1800626d8)
  • CoCreateInstance (Address: 0x180062668)
  • CoGetObjectContext (Address: 0x180062660)
  • CoInitializeEx (Address: 0x1800626a0)
  • CoMarshalInterface (Address: 0x1800626c8)
  • CoQueryProxyBlanket (Address: 0x180062680)
  • CoRegisterClassObject (Address: 0x180062650)
  • CoRegisterMessageFilter (Address: 0x180062690)
  • CoRegisterPSClsid (Address: 0x180062688)
  • CoReleaseMarshalData (Address: 0x1800626d0)
  • CoSetProxyBlanket (Address: 0x180062658)
  • CoTaskMemAlloc (Address: 0x180062678)
  • CoTaskMemFree (Address: 0x1800626a8)
  • CoTaskMemRealloc (Address: 0x1800626b0)
  • CoUninitialize (Address: 0x180062698)
  • CoUnmarshalInterface (Address: 0x1800626c0)
  • CoWaitForMultipleHandles (Address: 0x1800626e0)
  • CreateStreamOnHGlobal (Address: 0x1800626b8)
  • StringFromGUID2 (Address: 0x180062670)
OLEAUT32.dll
  • SafeArrayGetDim (Address: 0x1800624f0)
  • SafeArrayGetLBound (Address: 0x180062508)
  • SafeArrayGetUBound (Address: 0x180062500)
  • SafeArrayPtrOfIndex (Address: 0x180062538)
  • SysAllocString (Address: 0x180062520)
  • SysAllocStringByteLen (Address: 0x1800624e8)
  • SysAllocStringLen (Address: 0x1800624d8)
  • SysFreeString (Address: 0x180062528)
  • SysStringByteLen (Address: 0x1800624e0)
  • SysStringLen (Address: 0x1800624d0)
  • VarBstrCat (Address: 0x180062540)
  • VariantChangeType (Address: 0x180062550)
  • VariantClear (Address: 0x180062518)
  • VariantCopy (Address: 0x180062510)
  • VariantCopyInd (Address: 0x180062530)
  • VariantInit (Address: 0x1800624f8)
  • VarUI4FromStr (Address: 0x180062548)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x180062578)
  • CStdStubBuffer_Connect (Address: 0x1800625c0)
  • CStdStubBuffer_CountRefs (Address: 0x180062588)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x180062568)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1800625a0)
  • CStdStubBuffer_Disconnect (Address: 0x1800625a8)
  • CStdStubBuffer_Invoke (Address: 0x1800625d8)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1800625b8)
  • CStdStubBuffer_QueryInterface (Address: 0x180062590)
  • IUnknown_AddRef_Proxy (Address: 0x180062560)
  • IUnknown_QueryInterface_Proxy (Address: 0x1800625b0)
  • IUnknown_Release_Proxy (Address: 0x180062580)
  • NdrCStdStubBuffer_Release (Address: 0x1800625d0)
  • NdrDllGetClassObject (Address: 0x1800625c8)
  • NdrOleAllocate (Address: 0x180062598)
  • NdrOleFree (Address: 0x180062570)
USER32.dll
  • CharNextW (Address: 0x1800625e8)
  • CreateWindowExW (Address: 0x180062610)
  • DefWindowProcW (Address: 0x180062630)
  • DestroyWindow (Address: 0x180062620)
  • GetWindowLongPtrW (Address: 0x1800625f8)
  • IsWindow (Address: 0x180062640)
  • MsgWaitForMultipleObjects (Address: 0x180062638)
  • PostMessageW (Address: 0x180062628)
  • RegisterClassW (Address: 0x1800625f0)
  • SendMessageW (Address: 0x180062608)
  • SetWindowLongPtrW (Address: 0x180062618)
  • UnregisterClassW (Address: 0x180062600)