winrscmd.dll - Online Dependency Analysis & Download

Description

remtsvc

Authors

File size

119.5 KB

Uploaded

2025-12-01 07:44

Views

SHA-256

e4df05a42e1b7ce5d9090b5e872b5d19

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 31

??0?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@XZ #1 · 0x13b0

??0?$SafeMap_Iterator@VKey@Locale@@K@@QEAA@AEAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z #2 · 0x1590

??0?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@AEBV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z #3 · 0x16f0

??1?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@XZ #4 · 0x1350

??1?$SafeMap_Iterator@VKey@Locale@@K@@QEAA@XZ #5 · 0x14f0

??1?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA@XZ #6 · 0x16c0

??1CWSManCriticalSectionWithConditionVar@@QEAA@XZ #7 · 0x11c0

??_7?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@6B@ #8 · 0x16a98

?Acquire@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEBAXXZ #9 · 0x11e0

?Acquire@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAAXXZ #10 · 0x17b0

?Acquired@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAA_NXZ #11 · 0x16b0

?AsReference@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEAAAEAV1@XZ #12 · 0x14d0

?Data@?$SafeMap_Iterator@VKey@Locale@@K@@IEBAAEAV?$STLMap@VKey@Locale@@K@@XZ #13 · 0x18c0

?DeInitialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEAA_NAEAVIRequestContext@@@Z #14 · 0x11f0

?GetInitError@CWSManCriticalSection@@QEBAKXZ #15 · 0x11b0

?GetMap@?$SafeMap_Iterator@VKey@Locale@@K@@QEBAAEAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ #16 · 0x17a0

?GetMap@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QEBAAEBV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ #17 · 0x17a0

?Initialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEAA_NAEAVIRequestContext@@@Z #18 · 0x1270

?IsValid@?$SafeMap_Iterator@VKey@Locale@@K@@QEBA_NXZ #19 · 0x14e0

?Release@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UEBAXXZ #20 · 0x11e0

?Reset@?$SafeMap_Iterator@VKey@Locale@@K@@QEAAXXZ #21 · 0x1730

?SkipOrphans@?$SafeMap_Iterator@VKey@Locale@@K@@IEAAXXZ #22 · 0x1810

WSManPluginCommand #23 · 0x1eb0

WSManPluginReceive #24 · 0x1ed0

WSManPluginReleaseCommandContext #25 · 0x11e0

WSManPluginReleaseShellContext #26 · 0x11e0

WSManPluginSend #27 · 0x1ec0

WSManPluginShell #28 · 0x1ea0

WSManPluginShutdown #29 · 0x1d50

WSManPluginSignal #30 · 0x1ee0

WSManPluginStartup #31 · 0x1b90

Imported DLLs & functions 145

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x180016e10

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x180016e20

api-ms-win-core-errorhandling-l1-1-0.dll 4

GetLastError 0x180016e30

SetLastError 0x180016e40

SetUnhandledExceptionFilter 0x180016e48

UnhandledExceptionFilter 0x180016e38

api-ms-win-core-file-l1-1-0.dll 2

ReadFile 0x180016e58

WriteFile 0x180016e60

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x180016e78

DuplicateHandle 0x180016e70

api-ms-win-core-heap-l1-1-0.dll 5

GetProcessHeap 0x180016ea8

HeapAlloc 0x180016e98

HeapCreate 0x180016e88

HeapDestroy 0x180016ea0

HeapFree 0x180016e90

api-ms-win-core-heap-obsolete-l1-1-0.dll 1

LocalFree 0x180016eb8

api-ms-win-core-io-l1-1-0.dll 1

CancelIoEx 0x180016ec8

api-ms-win-core-job-l2-1-0.dll 4

AssignProcessToJobObject 0x180016ee0

CreateJobObjectW 0x180016ee8

SetInformationJobObject 0x180016ed8

TerminateJobObject 0x180016ef0

api-ms-win-core-kernel32-legacy-l1-1-0.dll 1

RegisterWaitForSingleObject 0x180016f00

api-ms-win-core-libraryloader-l1-1-0.dll 1

DisableThreadLibraryCalls 0x180016f10

api-ms-win-core-namedpipe-l1-1-0.dll 1

CreatePipe 0x180016f20

api-ms-win-core-processthreads-l1-1-0.dll 10

CreateThread 0x180016f50

GetCurrentProcess 0x180016f70

GetCurrentProcessId 0x180016f60

GetCurrentThread 0x180016f38

GetCurrentThreadId 0x180016f58

GetExitCodeProcess 0x180016f48

OpenProcessToken 0x180016f30

OpenThreadToken 0x180016f40

ResumeThread 0x180016f78

TerminateProcess 0x180016f68

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x180016f88

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x180016f98

api-ms-win-core-rtlsupport-l1-1-0.dll 3

RtlCaptureContext 0x180016fb0

RtlLookupFunctionEntry 0x180016fb8

RtlVirtualUnwind 0x180016fa8

api-ms-win-core-synch-l1-1-0.dll 7

CreateEventW 0x180016ff0

DeleteCriticalSection 0x180016fe0

EnterCriticalSection 0x180016fc8

InitializeCriticalSection 0x180016fd8

LeaveCriticalSection 0x180016fd0

SetEvent 0x180016ff8

WaitForMultipleObjectsEx 0x180016fe8

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x180017008

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemTimeAsFileTime 0x180017018

GetTickCount 0x180017020

GetVersionExW 0x180017028

api-ms-win-core-threadpool-legacy-l1-1-0.dll 2

QueueUserWorkItem 0x180017040

UnregisterWaitEx 0x180017038

api-ms-win-eventing-classicprovider-l1-1-0.dll 6

GetTraceEnableFlags 0x180017070

GetTraceEnableLevel 0x180017068

GetTraceLoggerHandle 0x180017050

RegisterTraceGuidsW 0x180017058

TraceMessage 0x180017060

UnregisterTraceGuids 0x180017078

api-ms-win-security-base-l1-1-0.dll 3

CopySid 0x180017098

GetLengthSid 0x180017090

GetTokenInformation 0x180017088

msvcrt.dll 26

__C_specific_handler 0x1800170b0

__CxxFrameHandler3 0x180017150

__dllonexit 0x1800170f0

_amsg_exit 0x180017128

_CxxThrowException 0x180017120

_initterm 0x1800170a8

_lock 0x1800170e0

_onexit 0x180017100

_purecall 0x180017118

_unlock 0x180017148

_wcsicmp 0x180017158

_wcsnicmp 0x180017160

_XcptFilter 0x180017168

??0exception@@QEAA@AEBQEBD@Z 0x1800170c8

??0exception@@QEAA@AEBQEBDH@Z 0x1800170d0

??0exception@@QEAA@AEBV0@@Z 0x180017140

??1exception@@UEAA@XZ 0x180017138

??1type_info@@UEAA@XZ 0x1800170c0

?terminate@@YAXXZ 0x1800170b8

?what@exception@@UEBAPEBDXZ 0x180017130

free 0x1800170e8

malloc 0x180017110

memcpy 0x1800170f8

memmove 0x1800170d8

memset 0x180017108

wcscmp 0x180017170

ntdll.dll 1

RtlInitUnicodeString 0x180017180

RPCRT4.dll 3

RpcStringFreeW 0x180016c40

UuidCreate 0x180016c48

UuidToStringW 0x180016c38

WsmSvc.DLL 54

??0?$AutoDeleteVector@G@@QEAA@PEAG@Z 0x180016cf8

??0?$AutoDeleteVector@G@@QEAA@XZ 0x180016d78

??0?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAA@XZ 0x180016ce8

??0?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAA@XZ 0x180016d70

??0?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAA@XZ 0x180016c88

??0?$AutoRelease@VCWinRSPluginConfigSettings@@@@QEAA@PEAVCWinRSPluginConfigSettings@@@Z 0x180016c78

??0AutoHandle@@QEAA@PEAX@Z 0x180016d58

??0AutoHandle@@QEAA@XZ 0x180016d50

??0CErrorContext@@QEAA@_N@Z 0x180016cc8

??0CRequestContext@@QEAA@PEBG@Z 0x180016df8

??0CRequestContext@@QEAA@XZ 0x180016dd0

??0CWSManCriticalSection@@QEAA@XZ 0x180016c60

??1?$AutoDeleteVector@G@@QEAA@XZ 0x180016d60

??1?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAA@XZ 0x180016cd0

??1?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAA@XZ 0x180016d68

??1?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAA@XZ 0x180016c68

??1?$AutoRelease@VCWinRSPluginConfigSettings@@@@QEAA@XZ 0x180016c70

??1AutoHandle@@QEAA@XZ 0x180016d08

??1CErrorContext@@UEAA@XZ 0x180016cc0

??1CRequestContext@@UEAA@XZ 0x180016dd8

??1CWSManCriticalSection@@QEAA@XZ 0x180016d90

??4?$AutoDeleteVector@G@@QEAAAEAV0@PEAG@Z 0x180016cf0

??4?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QEAAAEAV0@PEAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z 0x180016ce0

??4?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QEAAAEAV0@PEAU_WINRS_RUN_COMMAND_ARG@@@Z 0x180016cd8

??4?$AutoRelease@VCWinRSPluginConfigCache@@@@QEAAAEAV0@PEAVCWinRSPluginConfigCache@@@Z 0x180016c80

??4AutoHandle@@QEAAAEAV0@PEAX@Z 0x180016d38

?Acquire@CWSManCriticalSection@@QEAAXXZ 0x180016d30

?Alloc@WSManMemory@@SAPEAX_KHW4_NitsFaultMode@@@Z 0x180016d88

?CreateActivityId@EventHandler@WSMan@@SAXAEAU_GUID@@@Z 0x180016c90

?EnsureActivityIdOnThread@EventHandler@WSMan@@SAXXZ 0x180016d40

?Free@WSManMemory@@SAXPEAXH@Z 0x180016d80

?GenerateTransferId@EventHandler@WSMan@@SAXAEBU_EVENT_DESCRIPTOR@@PEBU_GUID@@1@Z 0x180016d18

?GetConfigCache@CWinRSPluginConfigCache@@SAPEAV1@PEAVIRequestContext@@W4ErrorLogging@@H@Z 0x180016c98

?GetCurrentSettings@CWinRSPluginConfigCache@@QEAAPEAVCWinRSPluginConfigSettings@@PEAVIRequestContext@@@Z 0x180016cb8

?GetErrorCode@CErrorContext@@UEBAKXZ 0x180016cb0

?IsEventEnabled@EventHandler@WSMan@@SA_NAEBU_EVENT_DESCRIPTOR@@@Z 0x180016d20

?IsEventProviderEnabled@EventHandler@WSMan@@SA_NXZ 0x180016d48

?IsValid@CWSManCriticalSection@@QEBAHXZ 0x180016d10

?ProcessContext@CRequestContext@@UEAAHHPEAU_WSMAN_ERROR@@@Z 0x180016de0

?ProviderShutdownCleanup@CWinRSPluginConfigCache@@SAXXZ 0x180016da0

?RecordFailure@CRequestContext@@UEAAXKKZZ 0x180016e00

?Release@CWSManCriticalSection@@QEAAXXZ 0x180016d28

?Shutdown@CConfigManager@@SAHXZ 0x180016db8

?Shutdown@CWSManGroupPolicyManager@@SAHXZ 0x180016db0

?ShutdownLocaleMap@Locale@@SAXXZ 0x180016da8

?StringToDword@@YAHPEBGPEAK@Z 0x180016d00

StringCchEqualsCI 0x180016ca0

WrapperCoSetProxyBlanket 0x180016ca8

WSManError 0x180016d98

WSManPluginFreeRequestDetails 0x180016df0

WSManPluginGetOperationParameters 0x180016dc8

WSManPluginOperationComplete 0x180016dc0

WSManPluginReceiveResult 0x180016c58

WSManPluginReportContext 0x180016de8