wcmsvc.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
CdeGetProfileList
#1 · 0x4df90
CdeQueryParameter
#2 · 0x2350
CdeSetParameter
#3 · 0x51770
SvchostPushServiceGlobals
#4 · 0x43720
WcmSvcMain
#5 · 0x43730
No function matches your filter.
Imported DLLs & functions 313
ApiSetQueryApiSetPresence
0x1800b6d70
CLSIDFromString
0x1800b6d88
CoCreateFreeThreadedMarshaler
0x1800b6da8
CoCreateInstance
0x1800b6d90
CoDecrementMTAUsage
0x1800b6dd0
CoIncrementMTAUsage
0x1800b6dc8
CoInitializeEx
0x1800b6dd8
CoTaskMemAlloc
0x1800b6db8
CoTaskMemFree
0x1800b6d98
CoUninitialize
0x1800b6dc0
CoWaitForMultipleHandles
0x1800b6db0
StringFromCLSID
0x1800b6d80
StringFromGUID2
0x1800b6da0
DebugBreak
0x1800b6de8
IsDebuggerPresent
0x1800b6df8
OutputDebugStringW
0x1800b6df0
DelayLoadFailureHook
0x1800b6e08
ResolveDelayLoadedAPI
0x1800b6e18
GetLastError
0x1800b6e30
RaiseException
0x1800b6e28
SetLastError
0x1800b6e48
SetUnhandledExceptionFilter
0x1800b6e38
UnhandledExceptionFilter
0x1800b6e40
RaiseFailFastException
0x1800b6e58
CreateFileW
0x1800b6e68
GetProcessHeap
0x1800b6ea0
HeapAlloc
0x1800b6e98
HeapFree
0x1800b6e90
InitializeSListHead
0x1800b6ec8
FindStringOrdinal
0x1800b6ef0
FreeLibrary
0x1800b6f18
GetModuleFileNameA
0x1800b6ef8
GetModuleHandleExW
0x1800b6f08
GetModuleHandleW
0x1800b6f10
GetProcAddress
0x1800b6f00
LoadLibraryExW
0x1800b6f20
FormatMessageW
0x1800b6f30
ExpandEnvironmentStringsW
0x1800b6f40
CreateThread
0x1800b6f68
GetCurrentProcess
0x1800b6f70
GetCurrentProcessId
0x1800b6f50
GetCurrentThread
0x1800b6f58
GetCurrentThreadId
0x1800b6f60
OpenThreadToken
0x1800b6f78
TerminateProcess
0x1800b6f80
IsProcessorFeaturePresent
0x1800b6f98
OpenProcess
0x1800b6f90
QueryPerformanceCounter
0x1800b6fb0
QueryPerformanceFrequency
0x1800b6fa8
QueryFullProcessImageNameW
0x1800b6fc0
RegCloseKey
0x1800b6fd8
RegCreateKeyExW
0x1800b7000
RegEnumKeyExW
0x1800b6fe0
RegGetValueW
0x1800b7008
RegNotifyChangeKeyValue
0x1800b6ff8
RegOpenKeyExW
0x1800b6fe8
RegQueryValueExW
0x1800b6ff0
RegSetValueExW
0x1800b6fd0
RegDeleteKeyValueW
0x1800b7018
RtlCaptureContext
0x1800b7038
RtlLookupFunctionEntry
0x1800b7030
RtlVirtualUnwind
0x1800b7028
GetRegistryValueWithFallbackW
0x1800b7048
AcquireSRWLockExclusive
0x1800b7100
AcquireSRWLockShared
0x1800b7120
CreateEventExW
0x1800b70c8
CreateEventW
0x1800b7090
CreateMutexExW
0x1800b7078
CreateSemaphoreExW
0x1800b70e8
DeleteCriticalSection
0x1800b70b0
EnterCriticalSection
0x1800b70c0
InitializeCriticalSection
0x1800b70d0
InitializeCriticalSectionAndSpinCount
0x1800b70d8
InitializeCriticalSectionEx
0x1800b70f8
InitializeSRWLock
0x1800b7118
LeaveCriticalSection
0x1800b70b8
OpenSemaphoreW
0x1800b7070
ReleaseMutex
0x1800b7098
ReleaseSemaphore
0x1800b70e0
ReleaseSRWLockExclusive
0x1800b7108
ReleaseSRWLockShared
0x1800b7128
ResetEvent
0x1800b70f0
SetEvent
0x1800b70a0
TryAcquireSRWLockExclusive
0x1800b7080
TryEnterCriticalSection
0x1800b7110
WaitForSingleObject
0x1800b70a8
WaitForSingleObjectEx
0x1800b7088
InitOnceBeginInitialize
0x1800b7150
InitOnceComplete
0x1800b7138
InitOnceExecuteOnce
0x1800b7148
Sleep
0x1800b7140
GetSystemInfo
0x1800b7188
GetSystemTime
0x1800b7170
GetSystemTimeAsFileTime
0x1800b7180
GetTickCount
0x1800b7168
GetTickCount64
0x1800b7160
GetVersionExW
0x1800b7178
GetOsSafeBootMode
0x1800b7198
CancelThreadpoolIo
0x1800b71f0
CloseThreadpool
0x1800b7228
CloseThreadpoolIo
0x1800b7238
CloseThreadpoolTimer
0x1800b71d8
CloseThreadpoolWait
0x1800b7258
CloseThreadpoolWork
0x1800b7200
CreateThreadpool
0x1800b7218
CreateThreadpoolIo
0x1800b71c0
CreateThreadpoolTimer
0x1800b7230
CreateThreadpoolWait
0x1800b71a8
CreateThreadpoolWork
0x1800b7220
DisassociateCurrentThreadFromCallback
0x1800b7240
SetThreadpoolThreadMaximum
0x1800b7250
SetThreadpoolThreadMinimum
0x1800b71e8
SetThreadpoolTimer
0x1800b71e0
SetThreadpoolTimerEx
0x1800b7248
SetThreadpoolWait
0x1800b71f8
StartThreadpoolIo
0x1800b71b0
SubmitThreadpoolWork
0x1800b71c8
WaitForThreadpoolIoCallbacks
0x1800b71b8
WaitForThreadpoolTimerCallbacks
0x1800b71d0
WaitForThreadpoolWaitCallbacks
0x1800b7208
WaitForThreadpoolWorkCallbacks
0x1800b7210
ChangeTimerQueueTimer
0x1800b7270
CreateTimerQueue
0x1800b7268
CreateTimerQueueTimer
0x1800b7278
DeleteTimerQueueEx
0x1800b7288
DeleteTimerQueueTimer
0x1800b7280
UnregisterWaitEx
0x1800b7290
RoActivateInstance
0x1800b72a8
RoGetActivationFactory
0x1800b72b0
RoInitialize
0x1800b72b8
RoUninitialize
0x1800b72a0
WindowsCreateStringReference
0x1800b72c8
ceilf
0x1800b72d8
__C_specific_handler
0x1800b7400
__CxxFrameHandler3
0x1800b7398
__CxxFrameHandler4
0x1800b7410
__std_terminate
0x1800b7408
__std_type_info_compare
0x1800b73f8
_CxxThrowException
0x1800b73a0
_o___std_exception_copy
0x1800b73d0
_o___std_exception_destroy
0x1800b73c8
_o___std_type_info_destroy_list
0x1800b73c0
_o___stdio_common_vsnprintf_s
0x1800b73b8
_o___stdio_common_vswprintf
0x1800b73b0
_o___stdio_common_vswprintf_s
0x1800b73a8
_o__callnewh
0x1800b7420
_o__cexit
0x1800b7418
_o__configure_narrow_argv
0x1800b73f0
_o__crt_atexit
0x1800b73e8
_o__errno
0x1800b73e0
_o__execute_onexit_table
0x1800b73d8
_o__initialize_narrow_environment
0x1800b72e8
_o__initialize_onexit_table
0x1800b72f0
_o__invalid_parameter_noinfo
0x1800b72f8
_o__invalid_parameter_noinfo_noreturn
0x1800b7300
_o__itow_s
0x1800b7308
_o__purecall
0x1800b7310
_o__register_onexit_function
0x1800b7318
_o__seh_filter_dll
0x1800b7320
_o__wcsicmp
0x1800b7328
_o__wcsnicmp
0x1800b7330
_o__wtoi
0x1800b7340
_o__wtol
0x1800b7348
_o_calloc
0x1800b7350
_o_free
0x1800b7358
_o_malloc
0x1800b7360
_o_mbtowc
0x1800b7368
_o_memcpy_s
0x1800b7370
_o_strcpy_s
0x1800b7378
_o_terminate
0x1800b7380
_o_toupper
0x1800b7388
_o_wcscpy_s
0x1800b7390
memcmp
0x1800b7428
memcpy
0x1800b7430
memmove
0x1800b7338
TraceMessage
0x1800b7478
EventProviderEnabled
0x1800b74a8
EventRegister
0x1800b74a0
EventSetInformation
0x1800b7498
EventUnregister
0x1800b7488
EventWriteTransfer
0x1800b7490
PowerSettingRegisterNotification
0x1800b74c0
PowerSettingUnregisterNotification
0x1800b74b8
CheckTokenMembership
0x1800b7500
CreateWellKnownSid
0x1800b74f0
FreeSid
0x1800b74e0
GetLengthSid
0x1800b74d8
GetTokenInformation
0x1800b74f8
ImpersonateSelf
0x1800b74d0
RevertToSelf
0x1800b74e8
RegisterGPNotificationInternal
0x1800b7510
UnregisterGPNotificationInternal
0x1800b7518
ConvertSidToStringSidW
0x1800b7538
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800b7530
ConvertStringSidToSidW
0x1800b7528
RegisterServiceCtrlHandlerExW
0x1800b7548
SetServiceStatus
0x1800b7550
CloseServiceHandle
0x1800b7570
OpenSCManagerW
0x1800b7568
OpenServiceW
0x1800b7560
QueryServiceStatusEx
0x1800b7580
SubscribeServiceChangeNotifications
0x1800b7590
UnsubscribeServiceChangeNotifications
0x1800b7598
GetPersistedRegistryLocationW
0x1800b75a8
IPHLPAPI.DLL
13
CancelMibChangeNotify2
0x1800b6b48
ConvertInterfaceGuidToLuid
0x1800b6b70
ConvertInterfaceIndexToLuid
0x1800b6b30
ConvertInterfaceLuidToGuid
0x1800b6b38
ConvertInterfaceLuidToIndex
0x1800b6b28
FreeMibTable
0x1800b6b40
GetIfEntry2
0x1800b6b78
GetIfStackTable
0x1800b6b20
GetIfTable2
0x1800b6b68
GetIpForwardTable2
0x1800b6b58
GetIpInterfaceTable
0x1800b6b60
GetUnicastIpAddressTable
0x1800b6b50
NotifyUnicastIpAddressChange
0x1800b6b18
GetPersistentRegPath
0x1800b6b88
?_Xbad_function_call@std@@YAXXZ
0x1800b75b8
?_Xlength_error@std@@YAXPEBD@Z
0x1800b75c8
?_Xout_of_range@std@@YAXPEBD@Z
0x1800b75c0
NlaIndicateReprobe
0x1800b75d8
NSI.dll
5
NsiAllocateAndGetTable
0x1800b6ba0
NsiFreeTable
0x1800b6ba8
NsiGetAllParameters
0x1800b6bb8
NsiGetParameter
0x1800b6b98
NsiSetAllParameters
0x1800b6bb0
ntdll.dll
26
EtwEventRegister
0x1800b7618
EtwEventSetInformation
0x1800b7610
EtwEventUnregister
0x1800b7608
EtwEventWrite
0x1800b75f0
EtwEventWriteTransfer
0x1800b75f8
EtwGetTraceEnableFlags
0x1800b76b0
EtwGetTraceEnableLevel
0x1800b7648
EtwGetTraceLoggerHandle
0x1800b7650
EtwRegisterTraceGuidsW
0x1800b7628
EtwTraceMessage
0x1800b7658
EtwUnregisterTraceGuids
0x1800b7620
NtCreateWnfStateName
0x1800b76a0
NtDeleteWnfStateName
0x1800b7670
NtPowerInformation
0x1800b7660
NtQueryWnfStateData
0x1800b7638
RtlGetDeviceFamilyInfoEnum
0x1800b7668
RtlIpv4StringToAddressExW
0x1800b7680
RtlIpv6StringToAddressExW
0x1800b7688
RtlIsStateSeparationEnabled
0x1800b7678
RtlNtStatusToDosError
0x1800b7630
RtlPublishWnfStateData
0x1800b7600
RtlQueryPackageIdentity
0x1800b7690
RtlQueryWnfStateData
0x1800b7698
RtlReportException
0x1800b7640
RtlSubscribeWnfStateChangeNotification
0x1800b75e8
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800b76a8
RPCRT4.dll
31
I_RpcExceptionFilter
0x1800b6c40
Ndr64AsyncServerCallAll
0x1800b6c50
NdrAsyncServerCall
0x1800b6c60
NdrClientCall3
0x1800b6c78
NdrServerCall2
0x1800b6c48
NdrServerCallAll
0x1800b6c58
RpcAsyncAbortCall
0x1800b6cb0
RpcAsyncCompleteCall
0x1800b6ca0
RpcBindingBind
0x1800b6c28
RpcBindingCreateW
0x1800b6ca8
RpcBindingFree
0x1800b6c80
RpcBindingToStringBindingW
0x1800b6c90
RpcBindingVectorFree
0x1800b6c08
RpcEpRegisterW
0x1800b6be0
RpcEpUnregister
0x1800b6bd0
RpcImpersonateClient
0x1800b6c98
RpcRaiseException
0x1800b6c70
RpcRevertToSelf
0x1800b6c30
RpcRevertToSelfEx
0x1800b6c10
RpcServerInqBindings
0x1800b6c00
RpcServerInqCallAttributesW
0x1800b6c18
RpcServerRegisterIf3
0x1800b6bf0
RpcServerTestCancel
0x1800b6cb8
RpcServerUnregisterIfEx
0x1800b6bc8
RpcServerUseProtseqW
0x1800b6bf8
RpcSsContextLockExclusive
0x1800b6c38
RpcStringBindingParseW
0x1800b6c88
RpcStringFreeW
0x1800b6c20
UuidCreate
0x1800b6c68
UuidFromStringW
0x1800b6bd8
UuidToStringW
0x1800b6be8
DeriveAppContainerSidFromAppContainerName
0x1800b6ce0
WinHttpCloseHandle
0x1800b6cf8
WinHttpConnectionDeletePolicyEntries
0x1800b6d08
WinHttpConnectionDeleteProxyInfo
0x1800b6d00
WinHttpConnectionSetPolicyEntries
0x1800b6d18
WinHttpConnectionSetProxyInfo
0x1800b6cf0
WinHttpConnectionUpdateIfIndexTable
0x1800b6d20
WinHttpOpen
0x1800b6d10
NsiConnectToServer
0x1800b6d38
NsiDisconnectFromServer
0x1800b6d40
NsiRpcDeregisterChangeNotification
0x1800b6d48
NsiRpcRegisterChangeNotification
0x1800b6d30
No function matches your filter.