windows.immersiveshell.serviceprovider.dll
v10.0.19041.6280
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x11990
DllGetClassObject
#2 · 0x139a0
No function matches your filter.
Imported DLLs & functions 273
ApiSetQueryApiSetPresence
0x180097120
GlobalGetAtomNameW
0x180097130
CLSIDFromString
0x180097188
CoCancelCall
0x1800971b0
CoCreateFreeThreadedMarshaler
0x180097208
CoCreateInstance
0x1800971e8
CoDecrementMTAUsage
0x180097158
CoDisableCallCancellation
0x1800971a8
CoEnableCallCancellation
0x180097170
CoGetApartmentType
0x1800971d8
CoGetCallContext
0x1800971e0
CoGetCallerTID
0x1800971f0
CoGetClassObject
0x180097168
CoGetInterfaceAndReleaseStream
0x180097190
CoGetMalloc
0x180097200
CoIncrementMTAUsage
0x1800971c8
CoInitializeEx
0x1800971c0
CoMarshalInterface
0x180097140
CoMarshalInterThreadInterfaceInStream
0x1800971a0
CoRegisterClassObject
0x180097180
CoReleaseMarshalData
0x180097198
CoRevokeClassObject
0x180097178
CoTaskMemAlloc
0x180097210
CoTaskMemFree
0x1800971d0
CoTaskMemRealloc
0x180097150
CoUninitialize
0x1800971b8
CoWaitForMultipleHandles
0x180097160
CreateStreamOnHGlobal
0x180097148
PropVariantClear
0x1800971f8
RoGetAgileReference
0x180097220
DebugBreak
0x180097230
IsDebuggerPresent
0x180097238
OutputDebugStringW
0x180097240
DelayLoadFailureHook
0x180097250
ResolveDelayLoadedAPI
0x180097260
GetLastError
0x180097280
RaiseException
0x180097270
SetLastError
0x180097288
SetUnhandledExceptionFilter
0x180097290
UnhandledExceptionFilter
0x180097278
RaiseFailFastException
0x1800972a0
GetProcessHeap
0x1800972d0
HeapAlloc
0x1800972c8
HeapFree
0x1800972d8
InitializeSListHead
0x180097300
MulDiv
0x180097310
VerifyVersionInfoW
0x180097320
DisableThreadLibraryCalls
0x180097350
FindResourceExW
0x180097380
FindStringOrdinal
0x180097368
FreeLibrary
0x180097360
FreeLibraryAndExitThread
0x180097388
GetModuleFileNameA
0x180097358
GetModuleFileNameW
0x180097348
GetModuleHandleExW
0x180097338
GetModuleHandleW
0x180097340
GetProcAddress
0x180097330
LoadResource
0x180097378
LockResource
0x180097370
FormatMessageW
0x180097398
PathAllocCombine
0x1800973a8
ExpandEnvironmentStringsW
0x1800973b8
CreateThread
0x180097400
GetCurrentProcess
0x1800973c8
GetCurrentProcessId
0x1800973e8
GetCurrentThread
0x1800973f0
GetCurrentThreadId
0x1800973e0
GetProcessId
0x1800973d0
OpenProcessToken
0x1800973d8
TerminateProcess
0x1800973f8
GetProcessMitigationPolicy
0x180097418
IsProcessorFeaturePresent
0x180097410
OpenProcess
0x180097420
SetThreadDescription
0x180097430
QueryPerformanceCounter
0x180097440
QueryFullProcessImageNameW
0x180097450
PsmGetKeyFromToken
0x180097460
RegCloseKey
0x180097478
RegCreateKeyExW
0x1800974a0
RegDeleteValueW
0x180097490
RegGetKeySecurity
0x180097480
RegGetValueW
0x1800974c0
RegNotifyChangeKeyValue
0x180097498
RegOpenCurrentUser
0x1800974b8
RegOpenKeyExW
0x1800974b0
RegQueryValueExW
0x1800974a8
RegSetKeySecurity
0x180097470
RegSetValueExW
0x180097488
RegSetKeyValueW
0x1800974d0
RtlCaptureContext
0x1800974f0
RtlLookupFunctionEntry
0x1800974e8
RtlVirtualUnwind
0x1800974e0
SHExpandEnvironmentStringsW
0x180097500
StrCmpIW
0x180097510
CompareStringOrdinal
0x180097520
SHLoadIndirectString
0x180097530
lstrlenW
0x180097540
AcquireSRWLockExclusive
0x1800975a8
AcquireSRWLockShared
0x180097598
CreateEventExW
0x180097550
CreateEventW
0x180097570
CreateMutexExW
0x1800975e8
CreateSemaphoreExW
0x180097560
DeleteCriticalSection
0x1800975c8
EnterCriticalSection
0x1800975c0
InitializeCriticalSection
0x180097558
InitializeCriticalSectionEx
0x1800975e0
InitializeSRWLock
0x1800975b0
LeaveCriticalSection
0x180097578
OpenSemaphoreW
0x1800975d8
ReleaseMutex
0x180097590
ReleaseSemaphore
0x180097568
ReleaseSRWLockExclusive
0x1800975f0
ReleaseSRWLockShared
0x1800975a0
SetEvent
0x1800975d0
WaitForMultipleObjectsEx
0x180097580
WaitForSingleObject
0x180097588
WaitForSingleObjectEx
0x1800975b8
InitOnceBeginInitialize
0x180097608
InitOnceComplete
0x180097600
InitOnceExecuteOnce
0x180097610
Sleep
0x180097618
WaitForMultipleObjects
0x180097628
GetSystemTime
0x180097640
GetSystemTimeAsFileTime
0x180097648
GetTickCount
0x180097638
GetTickCount64
0x180097650
CloseThreadpoolTimer
0x180097680
CloseThreadpoolWait
0x180097688
CreateThreadpoolTimer
0x180097678
CreateThreadpoolWait
0x180097670
SetThreadpoolTimer
0x180097690
SetThreadpoolWait
0x180097698
WaitForThreadpoolTimerCallbacks
0x180097660
WaitForThreadpoolWaitCallbacks
0x180097668
CreateTimerQueueTimer
0x1800976b0
DeleteTimerQueueTimer
0x1800976a8
HashData
0x1800976c0
GetRestrictedErrorInfo
0x1800976f0
RoOriginateError
0x180097708
RoOriginateErrorW
0x1800976e8
RoTransformError
0x1800976f8
SetRestrictedErrorInfo
0x180097700
IsErrorPropagationEnabled
0x180097720
RoGetMatchingRestrictedErrorInfo
0x180097728
RoReportFailedDelegate
0x180097718
RoActivateInstance
0x180097748
RoGetActivationFactory
0x180097738
RoInitialize
0x180097740
RoUninitialize
0x180097750
RoCreatePropertySetSerializer
0x180097760
WindowsCompareStringOrdinal
0x180097778
WindowsCreateString
0x1800977a0
WindowsCreateStringReference
0x180097790
WindowsDeleteString
0x1800977a8
WindowsDuplicateString
0x180097780
WindowsGetStringRawBuffer
0x180097798
WindowsIsStringEmpty
0x180097770
WindowsSubstringWithSpecifiedLength
0x180097788
__C_specific_handler
0x180097840
__CxxFrameHandler3
0x180097848
__CxxFrameHandler4
0x1800978b0
__std_terminate
0x1800978a0
_CxxThrowException
0x180097850
_o___std_exception_copy
0x180097880
_o___std_exception_destroy
0x180097878
_o___std_type_info_destroy_list
0x180097870
_o___stdio_common_vsnprintf_s
0x180097860
_o___stdio_common_vswprintf
0x180097858
_o__callnewh
0x1800978d0
_o__cexit
0x1800978c0
_o__configure_narrow_argv
0x1800978b8
_o__crt_atexit
0x1800978a8
_o__errno
0x180097890
_o__execute_onexit_table
0x180097888
_o__get_errno
0x180097808
_o__initialize_narrow_environment
0x1800977b8
_o__initialize_onexit_table
0x1800977c0
_o__invalid_parameter_noinfo
0x1800977c8
_o__invalid_parameter_noinfo_noreturn
0x1800977d0
_o__purecall
0x1800977d8
_o__register_onexit_function
0x1800977e0
_o__seh_filter_dll
0x1800977e8
_o__set_errno
0x1800977f0
_o__wcsicmp
0x1800977f8
_o__wcstoui64
0x180097810
_o_free
0x180097818
_o_malloc
0x180097820
_o_realloc
0x180097828
_o_terminate
0x180097830
_o_toupper
0x180097838
memcmp
0x1800978c8
memcpy
0x1800978d8
memmove
0x180097800
wcschr
0x180097898
wcsrchr
0x180097868
_wcsrev
0x180097900
memmove_s
0x180097930
memset
0x180097920
wcscmp
0x180097918
wcscspn
0x180097928
wcsncpy
0x180097910
wcsspn
0x180097908
EventActivityIdControl
0x180097940
EventProviderEnabled
0x180097958
EventRegister
0x180097968
EventSetInformation
0x180097950
EventUnregister
0x180097948
EventWriteTransfer
0x180097960
CopySid
0x180097998
CreateWellKnownSid
0x180097980
DuplicateTokenEx
0x180097988
EqualSid
0x1800979a0
FreeSid
0x1800979c0
GetLengthSid
0x180097978
GetSecurityDescriptorDacl
0x1800979a8
GetTokenInformation
0x1800979b0
MakeAbsoluteSD
0x1800979b8
SetSecurityDescriptorDacl
0x180097990
EnumerateIdentityProviders
0x1800979e8
GetDefaultIdentityProvider
0x1800979e0
GetIdentityProviderInfoByGUID
0x1800979d8
ReleaseIdentityProviderEnumContext
0x1800979d0
GetExplicitEntriesFromAclW
0x180097a10
GetSecurityInfo
0x1800979f8
SetEntriesInAclW
0x180097a08
SetSecurityInfo
0x180097a00
ConvertStringSidToSidW
0x180097a20
?_Xlength_error@std@@YAXPEBD@Z
0x180097a30
?_Xout_of_range@std@@YAXPEBD@Z
0x180097a38
ntdll.dll
15
NtQueryInformationToken
0x180097a60
NtQueryWnfStateData
0x180097a90
RtlAllocateHeap
0x180097a70
RtlCompareUnicodeString
0x180097ab0
RtlEqualSid
0x180097a50
RtlFreeHeap
0x180097a58
RtlGetAppContainerSidType
0x180097aa8
RtlInitUnicodeString
0x180097a68
RtlNtStatusToDosError
0x180097ab8
RtlNtStatusToDosErrorNoTeb
0x180097a78
RtlPublishWnfStateData
0x180097a88
RtlQueryWnfStateData
0x180097aa0
RtlSubscribeWnfStateChangeNotification
0x180097a80
RtlUnsubscribeWnfNotificationWaitForCompletion
0x180097a98
VerSetConditionMask
0x180097a48
SafeArrayGetDim
0x180097078
SysAllocString
0x180097088
SysFreeString
0x180097070
SysStringLen
0x180097090
VariantClear
0x180097080
SHCORE.dll
15
0x1800970d8
0x1800970e8
CreateRandomAccessStreamOnFile
0x1800970e0
CreateStreamOverRandomAccessStream
0x1800970d0
GetDpiForMonitor
0x1800970f0
IStream_Read
0x1800970a0
IStream_Size
0x1800970c0
IUnknown_QueryService
0x1800970b0
SHCreateThread
0x1800970b8
SHGetThreadRef
0x180097108
SHSetValueW
0x180097110
SHStrDupW
0x1800970f8
SHTaskPoolAllowThreadReuse
0x1800970c8
SHTaskPoolGetUniqueContext
0x1800970a8
SHTaskPoolQueueTask
0x180097100
No function matches your filter.