Windows.Management.Service.dll
v10.0.19041.6456
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0xb7e0
DllGetActivationFactory
#2 · 0xb840
DllGetClassObject
#3 · 0xba20
ServiceMain
#4 · 0xb780
No function matches your filter.
Imported DLLs & functions 326
CoAddRefServerProcess
0x1800a7538
CoCreateFreeThreadedMarshaler
0x1800a74a8
CoCreateGuid
0x1800a74b0
CoCreateInstance
0x1800a74c0
CoDecrementMTAUsage
0x1800a7500
CoDisconnectContext
0x1800a74f0
CoGetInterfaceAndReleaseStream
0x1800a74d8
CoInitializeEx
0x1800a7520
CoMarshalInterface
0x1800a7508
CoRegisterClassObject
0x1800a74a0
CoReleaseMarshalData
0x1800a74e8
CoReleaseServerProcess
0x1800a7530
CoResumeClassObjects
0x1800a74f8
CoRevokeClassObject
0x1800a7528
CoTaskMemAlloc
0x1800a74e0
CoTaskMemFree
0x1800a74d0
CoTaskMemRealloc
0x1800a7518
CoWaitForMultipleHandles
0x1800a7540
CreateStreamOnHGlobal
0x1800a74c8
IIDFromString
0x1800a7510
StringFromGUID2
0x1800a74b8
RoGetAgileReference
0x1800a7550
DebugBreak
0x1800a7560
IsDebuggerPresent
0x1800a7568
OutputDebugStringW
0x1800a7570
DelayLoadFailureHook
0x1800a7580
ResolveDelayLoadedAPI
0x1800a7590
GetLastError
0x1800a75b0
RaiseException
0x1800a75c0
SetLastError
0x1800a75a8
SetUnhandledExceptionFilter
0x1800a75b8
UnhandledExceptionFilter
0x1800a75a0
CreateDirectoryW
0x1800a7610
CreateFileW
0x1800a75f0
DeleteFileW
0x1800a75e0
GetDriveTypeW
0x1800a7608
GetFileAttributesW
0x1800a7618
GetFileSizeEx
0x1800a75d0
GetLogicalDriveStringsW
0x1800a7600
ReadFile
0x1800a75d8
SetFilePointerEx
0x1800a75f8
WriteFile
0x1800a75e8
MoveFileExW
0x1800a7628
GetFirmwareEnvironmentVariableW
0x1800a7638
SetFirmwareEnvironmentVariableW
0x1800a7640
CloseHandle
0x1800a7650
GetProcessHeap
0x1800a7660
HeapAlloc
0x1800a7670
HeapFree
0x1800a7668
InitializeSListHead
0x1800a7698
WTSGetActiveConsoleSessionId
0x1800a76a8
DisableThreadLibraryCalls
0x1800a76b8
FreeLibrary
0x1800a76c8
FreeLibraryAndExitThread
0x1800a76c0
GetModuleFileNameA
0x1800a76e8
GetModuleHandleExW
0x1800a76f0
GetModuleHandleW
0x1800a76d8
GetProcAddress
0x1800a76e0
LoadLibraryExW
0x1800a76d0
LoadLibraryW
0x1800a7700
FormatMessageW
0x1800a7710
ExpandEnvironmentStringsW
0x1800a7720
CreateProcessAsUserW
0x1800a7748
CreateProcessW
0x1800a7738
CreateThread
0x1800a7750
ExitThread
0x1800a7770
GetCurrentProcess
0x1800a7768
GetCurrentProcessId
0x1800a7730
GetCurrentThreadId
0x1800a7778
GetExitCodeProcess
0x1800a7740
OpenProcessToken
0x1800a7758
TerminateProcess
0x1800a7760
IsProcessorFeaturePresent
0x1800a7788
OpenProcess
0x1800a7790
QueryPerformanceCounter
0x1800a77a0
QueryPerformanceFrequency
0x1800a77a8
RegCloseKey
0x1800a77b8
RegCopyTreeW
0x1800a77c8
RegCreateKeyExW
0x1800a77d8
RegDeleteTreeW
0x1800a77c0
RegDeleteValueW
0x1800a77f8
RegEnumValueW
0x1800a77e8
RegGetValueW
0x1800a77e0
RegOpenKeyExW
0x1800a77d0
RegSetValueExW
0x1800a77f0
RegSetKeyValueW
0x1800a7808
RegDeleteKeyW
0x1800a7818
RtlCaptureContext
0x1800a7838
RtlLookupFunctionEntry
0x1800a7828
RtlVirtualUnwind
0x1800a7830
PathFileExistsW
0x1800a7848
AcquireSRWLockExclusive
0x1800a7870
AcquireSRWLockShared
0x1800a78e0
CreateEventExW
0x1800a7880
CreateEventW
0x1800a7908
CreateMutexExW
0x1800a78d8
CreateSemaphoreExW
0x1800a78e8
DeleteCriticalSection
0x1800a78f0
EnterCriticalSection
0x1800a78d0
InitializeCriticalSectionAndSpinCount
0x1800a78b0
InitializeCriticalSectionEx
0x1800a7888
InitializeSRWLock
0x1800a78f8
LeaveCriticalSection
0x1800a7890
OpenSemaphoreW
0x1800a7900
ReleaseMutex
0x1800a78a0
ReleaseSemaphore
0x1800a78c0
ReleaseSRWLockExclusive
0x1800a78c8
ReleaseSRWLockShared
0x1800a78a8
ResetEvent
0x1800a7910
SetEvent
0x1800a78b8
TryEnterCriticalSection
0x1800a7918
WaitForSingleObject
0x1800a7878
WaitForSingleObjectEx
0x1800a7898
InitOnceBeginInitialize
0x1800a7938
InitOnceComplete
0x1800a7928
InitOnceExecuteOnce
0x1800a7930
Sleep
0x1800a7940
GetSystemTime
0x1800a7960
GetSystemTimeAsFileTime
0x1800a7958
GetTickCount
0x1800a7950
GetTickCount64
0x1800a7968
SetSystemTime
0x1800a7978
CloseThreadpoolTimer
0x1800a79a0
CreateThreadpoolTimer
0x1800a7988
SetThreadpoolTimer
0x1800a7990
WaitForThreadpoolTimerCallbacks
0x1800a7998
FileTimeToSystemTime
0x1800a79b0
SystemTimeToFileTime
0x1800a79b8
GetRestrictedErrorInfo
0x1800a79f8
RoOriginateError
0x1800a79f0
RoOriginateErrorW
0x1800a79e8
RoTransformError
0x1800a79e0
SetRestrictedErrorInfo
0x1800a7a00
IsErrorPropagationEnabled
0x1800a7a18
RoGetMatchingRestrictedErrorInfo
0x1800a7a10
RoReportFailedDelegate
0x1800a7a20
RoActivateInstance
0x1800a7a48
RoGetActivationFactory
0x1800a7a50
RoInitialize
0x1800a7a38
RoRegisterActivationFactories
0x1800a7a58
RoRevokeActivationFactories
0x1800a7a40
RoUninitialize
0x1800a7a30
WindowsCreateString
0x1800a7ab0
WindowsCreateStringReference
0x1800a7a98
WindowsDeleteString
0x1800a7a80
WindowsDeleteStringBuffer
0x1800a7a68
WindowsDuplicateString
0x1800a7a90
WindowsGetStringLen
0x1800a7ab8
WindowsGetStringRawBuffer
0x1800a7a78
WindowsIsStringEmpty
0x1800a7aa0
WindowsPreallocateStringBuffer
0x1800a7a88
WindowsPromoteStringBuffer
0x1800a7a70
WindowsStringHasEmbeddedNull
0x1800a7aa8
ceilf
0x1800a7ac8
__C_specific_handler
0x1800a7b60
__CxxFrameHandler3
0x1800a7b68
__CxxFrameHandler4
0x1800a7bf0
__std_terminate
0x1800a7be8
_CxxThrowException
0x1800a7b70
_o___std_exception_copy
0x1800a7be0
_o___std_exception_destroy
0x1800a7bd8
_o___std_type_info_destroy_list
0x1800a7bd0
_o___stdio_common_vsnprintf_s
0x1800a7bc8
_o___stdio_common_vsprintf_s
0x1800a7bc0
_o___stdio_common_vswprintf
0x1800a7bb8
_o___stdio_common_vswscanf
0x1800a7bb0
_o__callnewh
0x1800a7ba8
_o__cexit
0x1800a7ba0
_o__configure_narrow_argv
0x1800a7b98
_o__crt_atexit
0x1800a7b90
_o__errno
0x1800a7b88
_o__execute_onexit_table
0x1800a7b80
_o__get_errno
0x1800a7b78
_o__initialize_narrow_environment
0x1800a7ad8
_o__initialize_onexit_table
0x1800a7ae0
_o__invalid_parameter_noinfo
0x1800a7ae8
_o__invalid_parameter_noinfo_noreturn
0x1800a7af0
_o__purecall
0x1800a7af8
_o__register_onexit_function
0x1800a7b00
_o__seh_filter_dll
0x1800a7b08
_o__set_errno
0x1800a7b10
_o__wcsicmp
0x1800a7b18
_o__wcsnicmp
0x1800a7b20
_o_free
0x1800a7b30
_o_isalnum
0x1800a7b38
_o_malloc
0x1800a7b40
_o_terminate
0x1800a7b48
_o_toupper
0x1800a7b50
_o_wcstol
0x1800a7b58
memchr
0x1800a7bf8
memcmp
0x1800a7c00
memcpy
0x1800a7c08
memmove
0x1800a7b28
EventActivityIdControl
0x1800a7c68
EventProviderEnabled
0x1800a7c58
EventRegister
0x1800a7c60
EventSetInformation
0x1800a7c50
EventUnregister
0x1800a7c78
EventWriteTransfer
0x1800a7c70
DuplicateTokenEx
0x1800a7c90
GetTokenInformation
0x1800a7ca0
ImpersonateLoggedOnUser
0x1800a7c98
RevertToSelf
0x1800a7c88
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800a7cb0
RegisterServiceCtrlHandlerExW
0x1800a7cc0
SetServiceStatus
0x1800a7cc8
GetServiceDirectory
0x1800a7cd8
CloseServiceHandle
0x1800a7cf8
OpenSCManagerW
0x1800a7d00
OpenServiceW
0x1800a7ce8
StartServiceW
0x1800a7cf0
QueryServiceStatusEx
0x1800a7d10
SHTaskPoolAllowThreadReuse
0x1800a7d38
SHTaskPoolQueueTask
0x1800a7d40
0x1800a7d78
DsrBeginDeviceAndResourceAccountJoin
0x1800a7d88
DsrBeginDeviceUnjoin
0x1800a7db8
DsrBeginDiscover
0x1800a7db0
DsrBeginPreprovisionedDeviceJoin
0x1800a7da8
DsrFreeDiscoveryMetadata
0x1800a7da0
DsrFreeJoinInfo
0x1800a7d98
DsrGetJoinInfo
0x1800a7d90
_Cnd_broadcast
0x1800a7ec8
_Cnd_destroy_in_situ
0x1800a7ed0
_Cnd_init_in_situ
0x1800a7e48
_Cnd_wait
0x1800a7eb8
_Mtx_destroy_in_situ
0x1800a7e88
_Mtx_init_in_situ
0x1800a7eb0
_Mtx_lock
0x1800a7e98
_Mtx_unlock
0x1800a7ec0
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
0x1800a7dd0
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
0x1800a7e50
?__ExceptionPtrCreate@@YAXPEAX@Z
0x1800a7e40
?__ExceptionPtrCurrentException@@YAXPEAX@Z
0x1800a7ea0
?__ExceptionPtrDestroy@@YAXPEAX@Z
0x1800a7e90
?__ExceptionPtrRethrow@@YAXPEBX@Z
0x1800a7ea8
?__ExceptionPtrToBool@@YA_NPEBX@Z
0x1800a7e80
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
0x1800a7ef0
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
0x1800a7e28
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
0x1800a7e30
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
0x1800a7e18
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x1800a7ee8
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
0x1800a7e58
?_Incref@facet@locale@std@@UEAAXXZ
0x1800a7ee0
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
0x1800a7f28
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
0x1800a7e20
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1800a7e08
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
0x1800a7f48
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1800a7f50
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1800a7e00
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1800a7df0
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1800a7df8
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
0x1800a7f40
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
0x1800a7e10
?_ReportUnobservedException@details@Concurrency@@YAXXZ
0x1800a7de0
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
0x1800a7f38
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
0x1800a7de8
?_Throw_C_error@std@@YAXH@Z
0x1800a7e70
?_Xbad_function_call@std@@YAXXZ
0x1800a7e68
?_XGetLastError@std@@YAXXZ
0x1800a7e78
?_Xinvalid_argument@std@@YAXPEBD@Z
0x1800a7e60
?_Xlength_error@std@@YAXPEBD@Z
0x1800a7f30
?_Xout_of_range@std@@YAXPEBD@Z
0x1800a7dc8
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
0x1800a7f08
??0task_continuation_context@Concurrency@@AEAA@XZ
0x1800a7e38
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
0x1800a7f10
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
0x1800a7f18
??Bid@locale@std@@QEAA_KXZ
0x1800a7ed8
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
0x1800a7dd8
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
0x1800a7f20
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
0x1800a7ef8
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
0x1800a7f00
NCryptEnumKeys
0x1800a7f78
NCryptFreeBuffer
0x1800a7f70
NCryptFreeObject
0x1800a7f88
NCryptGetProperty
0x1800a7f60
NCryptOpenKey
0x1800a7f80
NCryptOpenStorageProvider
0x1800a7f68
NCryptSetProperty
0x1800a7f90
NtQueryWnfStateData
0x1800a7fb0
RtlAcquirePrivilege
0x1800a7fc0
RtlAdjustPrivilege
0x1800a7fc8
RtlIsStateSeparationEnabled
0x1800a7fd8
RtlPublishWnfStateData
0x1800a7fa0
RtlReleasePrivilege
0x1800a7fb8
RtlSubscribeWnfStateChangeNotification
0x1800a7fd0
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800a7fa8
0x1800a8010
CreateEnvironmentBlock
0x1800a7428
DestroyEnvironmentBlock
0x1800a7420
ExpandEnvironmentStringsForUserW
0x1800a7430
WINHTTP.dll
11
WinHttpAddRequestHeaders
0x1800a7460
WinHttpCloseHandle
0x1800a7440
WinHttpConnect
0x1800a7490
WinHttpCrackUrl
0x1800a7480
WinHttpOpen
0x1800a7458
WinHttpOpenRequest
0x1800a7478
WinHttpQueryDataAvailable
0x1800a7448
WinHttpQueryHeaders
0x1800a7468
WinHttpReadData
0x1800a7470
WinHttpReceiveResponse
0x1800a7450
WinHttpSendRequest
0x1800a7488
No function matches your filter.