Windows.System.Launcher.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x2f40
DllGetActivationFactory
#2 · 0x2c70
DllGetClassObject
#3 · 0x2e50
No function matches your filter.
Imported DLLs & functions 235
GetPackageFullNameFromToken
0x18008e7e8
GetEffectivePackageStatusForUser
0x18008e7f8
GetExtensionProperty
0x18008e810
GetExtensionProperty2
0x18008e818
IsOnDemandRegistrationSupportedForExtensionCategory
0x18008e808
CloseState
0x18008e830
GetSystemAppDataKey
0x18008e828
OpenStateExplicit
0x18008e838
IsDeveloperModeEnabled
0x18008e848
ApiSetQueryApiSetPresence
0x18008e858
CLSIDFromString
0x18008e8a0
CoCreateFreeThreadedMarshaler
0x18008e868
CoCreateGuid
0x18008e890
CoCreateInstance
0x18008e878
CoGetCallContext
0x18008e888
CoGetInterfaceAndReleaseStream
0x18008e8a8
CoMarshalInterface
0x18008e8b0
CoReleaseMarshalData
0x18008e8c0
CoTaskMemAlloc
0x18008e870
CoTaskMemFree
0x18008e880
CoWaitForMultipleHandles
0x18008e898
CreateStreamOnHGlobal
0x18008e8b8
RoGetAgileReference
0x18008e8d0
DebugBreak
0x18008e8e8
IsDebuggerPresent
0x18008e8f0
OutputDebugStringW
0x18008e8e0
DelayLoadFailureHook
0x18008e900
ResolveDelayLoadedAPI
0x18008e910
GetLastError
0x18008e940
RaiseException
0x18008e938
SetLastError
0x18008e920
SetUnhandledExceptionFilter
0x18008e930
UnhandledExceptionFilter
0x18008e928
GetFileAttributesW
0x18008e950
CloseHandle
0x18008e960
GetProcessHeap
0x18008e970
HeapAlloc
0x18008e978
HeapFree
0x18008e980
DisableThreadLibraryCalls
0x18008e9c8
GetModuleFileNameA
0x18008e9b0
GetModuleHandleExW
0x18008e9d0
GetModuleHandleW
0x18008e9a8
GetProcAddress
0x18008e9b8
LoadStringW
0x18008e9c0
FormatMessageW
0x18008e9e0
PathCchAppend
0x18008e9f0
ExpandEnvironmentStringsW
0x18008ea00
GetCurrentProcess
0x18008ea38
GetCurrentProcessId
0x18008ea20
GetCurrentThread
0x18008ea28
GetCurrentThreadId
0x18008ea48
GetProcessId
0x18008ea10
OpenProcessToken
0x18008ea40
OpenThreadToken
0x18008ea18
TerminateProcess
0x18008ea30
OpenProcess
0x18008ea58
QueryPerformanceCounter
0x18008ea68
QueryFullProcessImageNameW
0x18008ea78
QuirkIsEnabled
0x18008ea88
RegCloseKey
0x18008ea98
RegCreateKeyExW
0x18008eaa8
RegGetValueW
0x18008eab0
RegOpenKeyExW
0x18008eab8
RegQueryValueExW
0x18008eaa0
RegCreateKeyW
0x18008eac8
RtlCaptureContext
0x18008ead8
RtlLookupFunctionEntry
0x18008eae8
RtlVirtualUnwind
0x18008eae0
PathFindExtensionW
0x18008eaf8
StrStrIW
0x18008eb08
CompareStringOrdinal
0x18008eb18
AcquireSRWLockExclusive
0x18008eb88
AcquireSRWLockShared
0x18008eba8
CreateEventExW
0x18008eb48
CreateMutexExW
0x18008eb68
CreateSemaphoreExW
0x18008eb38
DeleteCriticalSection
0x18008ebb0
EnterCriticalSection
0x18008eb30
InitializeCriticalSectionEx
0x18008eb70
InitializeSRWLock
0x18008eb90
LeaveCriticalSection
0x18008eb80
OpenSemaphoreW
0x18008eb50
ReleaseMutex
0x18008eb58
ReleaseSemaphore
0x18008eb98
ReleaseSRWLockExclusive
0x18008eba0
ReleaseSRWLockShared
0x18008eb78
SetEvent
0x18008eb28
WaitForSingleObject
0x18008eb40
WaitForSingleObjectEx
0x18008eb60
InitOnceBeginInitialize
0x18008ebc8
InitOnceComplete
0x18008ebe0
InitOnceExecuteOnce
0x18008ebd0
Sleep
0x18008ebe8
SleepConditionVariableSRW
0x18008ebc0
WakeAllConditionVariable
0x18008ebd8
GetSystemTime
0x18008ec08
GetSystemTimeAsFileTime
0x18008ebf8
GetTickCount
0x18008ec00
GetProductInfo
0x18008ec18
CloseThreadpoolTimer
0x18008ec28
CreateThreadpoolTimer
0x18008ec30
SetThreadpoolTimer
0x18008ec38
WaitForThreadpoolTimerCallbacks
0x18008ec40
SystemTimeToFileTime
0x18008ec50
UrlEscapeW
0x18008ec60
GetRestrictedErrorInfo
0x18008eca0
RoOriginateError
0x18008eca8
RoOriginateErrorW
0x18008ec88
RoTransformError
0x18008ec98
SetRestrictedErrorInfo
0x18008ec90
IsErrorPropagationEnabled
0x18008ecc0
RoGetMatchingRestrictedErrorInfo
0x18008ecb8
RoReportFailedDelegate
0x18008ecc8
RoActivateInstance
0x18008ece0
RoGetActivationFactory
0x18008ecd8
RoCreatePropertySetSerializer
0x18008ecf0
WindowsCompareStringOrdinal
0x18008ed38
WindowsConcatString
0x18008ed30
WindowsCreateString
0x18008ed00
WindowsCreateStringReference
0x18008ed48
WindowsDeleteString
0x18008ed20
WindowsDuplicateString
0x18008ed10
WindowsGetStringLen
0x18008ed40
WindowsGetStringRawBuffer
0x18008ed28
WindowsIsStringEmpty
0x18008ed08
WindowsStringHasEmbeddedNull
0x18008ed18
EventActivityIdControl
0x18008ed60
EventRegister
0x18008ed70
EventSetInformation
0x18008ed58
EventUnregister
0x18008ed78
EventWriteTransfer
0x18008ed68
DuplicateTokenEx
0x18008ed88
GetSidSubAuthority
0x18008ed98
GetTokenInformation
0x18008ed90
ConvertSidToStringSidW
0x18008eda8
SHStrDupW
0x18008edb8
SHTaskPoolAllowThreadReuse
0x18008edd0
SHTaskPoolQueueTask
0x18008edc8
AssocCreate
0x18008ede0
_Wcscoll
0x18008ee28
_Wcsxfrm
0x18008ee30
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x18008eeb0
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x18008ee80
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
0x18008eee8
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
0x18008ee50
?_Incref@facet@locale@std@@UEAAXXZ
0x18008eeb8
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
0x18008ee48
?_Syserror_map@std@@YAPEBDH@Z
0x18008eef0
?_Winerror_map@std@@YAPEBDH@Z
0x18008ee60
?_Xbad_alloc@std@@YAXXZ
0x18008ee58
?_Xlength_error@std@@YAXPEBD@Z
0x18008eee0
?_Xout_of_range@std@@YAXPEBD@Z
0x18008eec8
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
0x18008ee68
??_7_Facet_base@std@@6B@
0x18008ee38
??_7facet@locale@std@@6B@
0x18008ee40
??0_Locinfo@std@@QEAA@PEBD@Z
0x18008eed8
??0_Lockit@std@@QEAA@H@Z
0x18008ee18
??0facet@locale@std@@IEAA@_K@Z
0x18008eea8
??1_Locinfo@std@@QEAA@XZ
0x18008eed0
??1_Lockit@std@@QEAA@XZ
0x18008ee20
??1facet@locale@std@@MEAA@XZ
0x18008eea0
??Bid@locale@std@@QEAA_KXZ
0x18008eec0
?id@?$collate@G@std@@2V0locale@2@A
0x18008ee78
?id@?$ctype@G@std@@2V0locale@2@A
0x18008ee70
?is@?$ctype@G@std@@QEBA_NFG@Z
0x18008ee98
?tolower@?$ctype@G@std@@QEBAGG@Z
0x18008ee90
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
0x18008ee88
msvcrt.dll
43
__C_specific_handler
0x18008eff0
__CxxFrameHandler3
0x18008efd8
__dllonexit
0x18008f030
_amsg_exit
0x18008f008
_callnewh
0x18008ef98
_CxxThrowException
0x18008f018
_initterm
0x18008f028
_lock
0x18008f020
_onexit
0x18008efe0
_purecall
0x18008efb0
_ui64tow_s
0x18008ef60
_unlock
0x18008efd0
_vsnprintf_s
0x18008ef38
_vsnwprintf
0x18008f040
_wcsicmp
0x18008ef28
_wtoi
0x18008ef58
_XcptFilter
0x18008f000
??_V@YAXPEAX@Z
0x18008efa8
??0bad_cast@@QEAA@AEBV0@@Z
0x18008ef78
??0bad_cast@@QEAA@PEBD@Z
0x18008ef70
??0exception@@QEAA@AEBV0@@Z
0x18008ef50
??0exception@@QEAA@XZ
0x18008ef48
??1bad_cast@@UEAA@XZ
0x18008ef80
??1exception@@UEAA@XZ
0x18008ef40
??1type_info@@UEAA@XZ
0x18008efa0
??3@YAXPEAX@Z
0x18008efe8
?terminate@@YAXXZ
0x18008efb8
free
0x18008f010
malloc
0x18008f048
mbstowcs
0x18008ef30
memcmp
0x18008eff8
memcpy
0x18008f038
memcpy_s
0x18008ef08
memmove
0x18008efc0
memmove_s
0x18008efc8
memset
0x18008f050
realloc
0x18008ef00
sprintf_s
0x18008ef10
strchr
0x18008ef88
wcscat_s
0x18008ef20
wcschr
0x18008ef90
wcscpy_s
0x18008ef18
wcsnlen
0x18008ef68
ntdll.dll
11
NtQueryInformationToken
0x18008f068
NtQueryWnfStateData
0x18008f090
RtlAllocateHeap
0x18008f070
RtlCompareUnicodeString
0x18008f080
RtlFreeHeap
0x18008f060
RtlGetDeviceFamilyInfoEnum
0x18008f0a8
RtlInitUnicodeString
0x18008f088
RtlIsMultiSessionSku
0x18008f0a0
RtlNtStatusToDosErrorNoTeb
0x18008f078
RtlPublishWnfStateData
0x18008f098
RtlQueryPackageClaims
0x18008f0b0
I_RpcBindingInqLocalClientPID
0x18008e7b8
0x18008e7d0
SHCreateItemFromParsingName
0x18008e7d8
STORAGE_CStorageItem_GetValidatedStorageItem
0x18008e7c8
No function matches your filter.