pla.dll
v10.0.19041.1
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 15
ServiceMain
#1 · 0x7af0
SvchostPushServiceGlobals
#2 · 0x7f70
DllCanUnloadNow
#3 · 0x6e50
DllGetClassObject
#4 · 0x6e70
DllRegisterServer
#5 · 0x1240
DllUnregisterServer
#6 · 0x1240
PlaDeleteReport
#7 · 0x120970
PlaExpandTaskArguments
#8 · 0xfdd50
PlaExtractCabinet
#9 · 0x120ac0
PlaGetLegacyAlertActionsFlagsFromString
#10 · 0xd9aa0
PlaGetLegacyAlertActionsStringFromFlags
#11 · 0xd9f10
PlaGetServerCapabilities
#12 · 0x381f0
PlaHost
#13 · 0xfefc0
PlaServer
#14 · 0x7110
PlaUpgrade
#15 · 0xaeb0
No function matches your filter.
Imported DLLs & functions 286
ADVAPI32.dll
55
AccessCheck
0x18013a240
AddAccessAllowedAceEx
0x18013a278
AddAce
0x18013a280
AdjustTokenPrivileges
0x18013a318
CheckTokenMembership
0x18013a368
ControlTraceW
0x18013a1c8
CreateWellKnownSid
0x18013a370
DuplicateTokenEx
0x18013a230
EnableTraceEx
0x18013a308
EnumerateTraceGuidsEx
0x18013a300
EqualSid
0x18013a288
EventAccessQuery
0x18013a320
EventAccessRemove
0x18013a340
FlushTraceW
0x18013a2e0
GetAce
0x18013a290
GetAclInformation
0x18013a298
GetFileSecurityW
0x18013a248
GetLengthSid
0x18013a2a8
GetSecurityDescriptorDacl
0x18013a338
GetSecurityDescriptorGroup
0x18013a2b8
GetSecurityDescriptorOwner
0x18013a2c0
GetSecurityDescriptorSacl
0x18013a330
GetTokenInformation
0x18013a348
ImpersonateLoggedOnUser
0x18013a260
InitializeAcl
0x18013a2a0
InitializeSecurityDescriptor
0x18013a218
LogonUserW
0x18013a268
LookupAccountNameW
0x18013a250
MakeAbsoluteSD
0x18013a2b0
OpenProcessToken
0x18013a350
OpenThreadToken
0x18013a358
QueryAllTracesW
0x18013a2d8
QueryTraceW
0x18013a310
RegCloseKey
0x18013a1d8
RegConnectRegistryW
0x18013a360
RegCreateKeyExW
0x18013a2d0
RegDeleteKeyW
0x18013a1e8
RegDeleteValueW
0x18013a2c8
RegEnumKeyExW
0x18013a200
RegEnumKeyW
0x18013a220
RegEnumValueW
0x18013a1f8
RegFlushKey
0x18013a228
RegOpenKeyExW
0x18013a378
RegQueryInfoKeyW
0x18013a1f0
RegQueryValueExW
0x18013a1d0
RegSetValueExW
0x18013a1e0
RevertToSelf
0x18013a258
SetNamedSecurityInfoW
0x18013a328
SetSecurityDescriptorDacl
0x18013a270
SetSecurityDescriptorGroup
0x18013a208
SetSecurityDescriptorOwner
0x18013a210
SetThreadToken
0x18013a238
StartTraceW
0x18013a2f0
StopTraceW
0x18013a2e8
UpdateTraceW
0x18013a2f8
RegisterServiceCtrlHandlerExW
0x18013a820
SetServiceStatus
0x18013a828
CloseServiceHandle
0x18013a850
OpenSCManagerW
0x18013a838
OpenServiceW
0x18013a840
StartServiceW
0x18013a848
ChangeServiceConfig2W
0x18013a870
ChangeServiceConfigW
0x18013a860
QueryServiceConfigW
0x18013a868
KERNEL32.dll
105
CloseHandle
0x18013a3e8
CompareStringW
0x18013a628
CopyFileExW
0x18013a708
CopyFileW
0x18013a6f8
CreateDirectoryW
0x18013a490
CreateEventW
0x18013a3e0
CreateFileW
0x18013a570
CreateProcessW
0x18013a6d8
CreateThread
0x18013a668
CreateWaitableTimerW
0x18013a638
DebugBreak
0x18013a400
DelayLoadFailureHook
0x18013a480
DeleteCriticalSection
0x18013a5e8
DeleteFileW
0x18013a690
DisableThreadLibraryCalls
0x18013a688
DosDateTimeToFileTime
0x18013a448
DuplicateHandle
0x18013a5b0
EnterCriticalSection
0x18013a3d8
ExpandEnvironmentStringsW
0x18013a418
FileTimeToDosDateTime
0x18013a450
FileTimeToLocalFileTime
0x18013a5e0
FileTimeToSystemTime
0x18013a5c0
FindClose
0x18013a5a8
FindFirstFileW
0x18013a598
FindNextFileW
0x18013a5a0
FindResourceW
0x18013a4c8
FormatMessageW
0x18013a4a8
FreeLibrary
0x18013a550
FreeResource
0x18013a4f8
GetCommandLineW
0x18013a660
GetComputerNameW
0x18013a4a0
GetCurrentProcess
0x18013a518
GetCurrentProcessId
0x18013a590
GetCurrentThread
0x18013a510
GetCurrentThreadId
0x18013a538
GetDateFormatW
0x18013a608
GetDiskFreeSpaceExW
0x18013a678
GetExitCodeProcess
0x18013a6d0
GetExitCodeThread
0x18013a698
GetFileAttributesW
0x18013a520
GetFileInformationByHandle
0x18013a438
GetFileMUIPath
0x18013a6c0
GetFileSizeEx
0x18013a680
GetFullPathNameW
0x18013a470
GetLastError
0x18013a5f8
GetLocaleInfoW
0x18013a420
GetLocalTime
0x18013a428
GetModuleFileNameW
0x18013a5d0
GetProcessHeap
0x18013a610
GetSystemDirectoryW
0x18013a600
GetSystemTime
0x18013a6f0
GetSystemTimeAsFileTime
0x18013a5b8
GetTempFileNameW
0x18013a6e0
GetTempPathW
0x18013a6a8
GetTickCount
0x18013a468
GetTickCount64
0x18013a658
GetTimeFormatW
0x18013a670
GetTimeZoneInformation
0x18013a488
GetUserDefaultUILanguage
0x18013a618
GetWindowsDirectoryW
0x18013a5f0
GlobalAlloc
0x18013a4e8
GlobalFree
0x18013a508
GlobalLock
0x18013a4f0
GlobalUnlock
0x18013a500
HeapAlloc
0x18013a410
HeapFree
0x18013a408
HeapReAlloc
0x18013a620
HeapSize
0x18013a630
HeapValidate
0x18013a3c8
InitializeCriticalSection
0x18013a4b0
IsDebuggerPresent
0x18013a648
IsWow64Process
0x18013a528
K32GetModuleFileNameExW
0x18013a568
LeaveCriticalSection
0x18013a3d0
LoadLibraryExW
0x18013a548
LoadLibraryW
0x18013a6b8
LoadResource
0x18013a4d0
LocalFileTimeToFileTime
0x18013a440
LocalFree
0x18013a498
LockResource
0x18013a4d8
MultiByteToWideChar
0x18013a430
OpenEventW
0x18013a650
OpenProcess
0x18013a560
QueryPerformanceCounter
0x18013a588
RemoveDirectoryW
0x18013a700
ResetEvent
0x18013a558
ResolveDelayLoadedAPI
0x18013a478
SetEvent
0x18013a3f8
SetFileAttributesW
0x18013a6a0
SetFileTime
0x18013a6b0
SetPriorityClass
0x18013a6e8
SetUnhandledExceptionFilter
0x18013a460
SetWaitableTimer
0x18013a640
SizeofResource
0x18013a4e0
Sleep
0x18013a5d8
SystemTimeToFileTime
0x18013a5c8
TerminateProcess
0x18013a6c8
UnhandledExceptionFilter
0x18013a458
UnregisterWait
0x18013a3f0
WaitForMultipleObjects
0x18013a4b8
WaitForSingleObject
0x18013a580
WideCharToMultiByte
0x18013a4c0
Wow64DisableWow64FsRedirection
0x18013a530
Wow64RevertWow64FsRedirection
0x18013a540
WriteFile
0x18013a578
msvcrt.dll
44
__C_specific_handler
0x18013a9b8
_amsg_exit
0x18013a8d0
_close
0x18013a900
_errno
0x18013a8f0
_get_osfhandle
0x18013a928
_initterm
0x18013a8b8
_lseek
0x18013a8e0
_purecall
0x18013a9c0
_read
0x18013a908
_vsnwprintf
0x18013a9d0
_wcsicmp
0x18013a9e0
_wcsnicmp
0x18013a9b0
_wfopen
0x18013a938
_wgetenv
0x18013a980
_wopen
0x18013a920
_wremove
0x18013a910
_write
0x18013a8f8
_wsplitpath_s
0x18013a978
_wtof
0x18013a960
_wtoi
0x18013a940
_wtol
0x18013a970
_XcptFilter
0x18013a8d8
??1type_info@@UEAA@XZ
0x18013a8b0
?name@type_info@@QEBAPEBDXZ
0x18013a9c8
fclose
0x18013a930
free
0x18013a9e8
fwprintf
0x18013a950
iswspace
0x18013a968
malloc
0x18013a8c0
memcpy
0x18013a898
memmove
0x18013a8a0
memset
0x18013a8a8
qsort
0x18013a958
rand
0x18013a998
srand
0x18013a918
swscanf_s
0x18013a9a0
time
0x18013a8e8
vfwprintf
0x18013a948
wcschr
0x18013a9d8
wcscmp
0x18013a9f0
wcscspn
0x18013a990
wcsncmp
0x18013a9a8
wcsrchr
0x18013a8c8
wcsstr
0x18013a988
ntdll.dll
13
EtwEventRegister
0x18013aa48
EtwEventUnregister
0x18013aa38
EtwEventWrite
0x18013aa40
EtwNotificationRegister
0x18013aa10
EtwNotificationUnregister
0x18013aa18
NtQuerySystemInformation
0x18013aa08
NtQuerySystemTime
0x18013aa30
RtlCaptureContext
0x18013aa50
RtlFreeUnicodeString
0x18013aa28
RtlLookupFunctionEntry
0x18013aa58
RtlNtStatusToDosError
0x18013aa00
RtlStringFromGUID
0x18013aa20
RtlVirtualUnwind
0x18013aa60
pdh.dll
11
PdhAddCounterW
0x18013aa78
PdhCloseLog
0x18013aa98
PdhCloseQuery
0x18013aaa8
PdhCollectQueryData
0x18013aa70
PdhExpandWildCardPathW
0x18013aa80
PdhGetFormattedCounterValue
0x18013aac0
PdhOpenLogW
0x18013aaa0
PdhOpenQueryW
0x18013aa88
PdhTranslate009CounterW
0x18013aab0
PdhTranslateLocaleCounterW
0x18013aab8
PdhUpdateLogW
0x18013aa90
RPCRT4.dll
18
NdrClientCall3
0x18013a7b8
NdrServerCall2
0x18013a7a8
NdrServerCallAll
0x18013a760
RpcBindingFree
0x18013a780
RpcBindingFromStringBindingW
0x18013a790
RpcBindingInqAuthClientW
0x18013a770
RpcBindingSetAuthInfoW
0x18013a788
RpcBindingToStringBindingW
0x18013a768
RpcImpersonateClient
0x18013a758
RpcRevertToSelf
0x18013a750
RpcServerInqCallAttributesW
0x18013a738
RpcServerRegisterIf3
0x18013a740
RpcServerUnregisterIfEx
0x18013a730
RpcServerUseProtseqEpW
0x18013a748
RpcStringBindingComposeW
0x18013a798
RpcStringBindingParseW
0x18013a7b0
RpcStringFreeW
0x18013a778
UuidCreate
0x18013a7a0
tdh.dll
4
TdhEnumerateProviderFieldInformation
0x18013aad8
TdhEnumerateProviders
0x18013aae8
TdhEnumerateRemoteWBEMProviderFieldInformation
0x18013aae0
TdhEnumerateRemoteWBEMProviders
0x18013aad0
CreateWindowExW
0x18013a810
DestroyWindow
0x18013a7f8
DispatchMessageW
0x18013a808
LoadStringW
0x18013a7f0
MsgWaitForMultipleObjects
0x18013a800
PeekMessageW
0x18013a7e8
EvtClose
0x18013ab08
EvtCreateRenderContext
0x18013ab00
EvtGetChannelConfigProperty
0x18013ab18
EvtNext
0x18013ab28
EvtOpenChannelConfig
0x18013ab10
EvtRender
0x18013aaf8
EvtSubscribe
0x18013ab20
No function matches your filter.