WpcDesktopMonSvc.dll
v10.0.19041.6280
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllMain
#1 · 0x5230
ServiceMain
#2 · 0xb810
SvchostPushServiceGlobals
#3 · 0xb750
No function matches your filter.
Imported DLLs & functions 409
GetPackagePath
0x1801047a8
GetPackagesByPackageFamily
0x1801047b0
PackageIdFromFullName
0x1801047b8
IsTextUnicode
0x1801047c8
CLSIDFromString
0x180104838
CoCreateFreeThreadedMarshaler
0x180104808
CoCreateGuid
0x180104848
CoCreateInstance
0x1801047e8
CoDisconnectContext
0x180104818
CoImpersonateClient
0x180104828
CoInitializeEx
0x1801047f8
CoRegisterClassObject
0x1801047f0
CoResumeClassObjects
0x1801047e0
CoRevertToSelf
0x180104840
CoRevokeClassObject
0x180104800
CoTaskMemAlloc
0x180104810
CoTaskMemFree
0x1801047d8
CoUninitialize
0x180104820
StringFromCLSID
0x180104830
StringFromGUID2
0x180104850
DebugBreak
0x1801048a0
IsDebuggerPresent
0x180104890
OutputDebugStringW
0x180104898
GetLastError
0x1801048c0
RaiseException
0x1801048b8
SetLastError
0x1801048c8
SetUnhandledExceptionFilter
0x1801048b0
UnhandledExceptionFilter
0x1801048d0
ConvertFiberToThread
0x1801048e0
CompareFileTime
0x180104908
CreateDirectoryW
0x180104950
CreateFileW
0x180104938
FileTimeToLocalFileTime
0x180104918
FindCloseChangeNotification
0x1801048f8
FindFirstChangeNotificationW
0x180104940
FindNextChangeNotification
0x1801048f0
GetFileAttributesExW
0x180104948
GetFileAttributesW
0x180104958
GetFileSizeEx
0x180104928
LocalFileTimeToFileTime
0x180104910
ReadFile
0x180104900
SetFilePointerEx
0x180104930
WriteFile
0x180104920
GetTempPathW
0x180104968
GetProcessHeap
0x180104990
HeapAlloc
0x1801049a0
HeapFree
0x180104998
InitializeSListHead
0x1801049c8
UnregisterWait
0x1801049d8
DisableThreadLibraryCalls
0x1801049e8
GetModuleFileNameA
0x1801049f8
GetModuleHandleExW
0x1801049f0
GetModuleHandleW
0x180104a08
GetProcAddress
0x180104a00
GetThreadPreferredUILanguages
0x180104a20
IdnToAscii
0x180104a28
LocaleNameToLCID
0x180104a18
FormatMessageW
0x180104a38
CreatePipe
0x180104a48
ExpandEnvironmentStringsW
0x180104a58
CreateProcessAsUserW
0x180104aa0
CreateThread
0x180104a70
GetCurrentProcess
0x180104ab0
GetCurrentProcessId
0x180104a90
GetCurrentThread
0x180104ac0
GetCurrentThreadId
0x180104ac8
GetExitCodeProcess
0x180104aa8
OpenThread
0x180104a88
OpenThreadToken
0x180104ab8
QueueUserAPC
0x180104a68
TerminateProcess
0x180104a80
TlsAlloc
0x180104ad0
TlsFree
0x180104a98
TlsGetValue
0x180104ad8
TlsSetValue
0x180104a78
IsProcessorFeaturePresent
0x180104ae8
OpenProcess
0x180104af0
QueryPerformanceCounter
0x180104b00
QueryUnbiasedInterruptTime
0x180104b10
RegCloseKey
0x180104b30
RegCreateKeyExW
0x180104b28
RegDeleteTreeW
0x180104b50
RegDeleteValueW
0x180104b48
RegEnumKeyExW
0x180104b60
RegEnumValueW
0x180104b58
RegGetValueW
0x180104b68
RegOpenKeyExW
0x180104b20
RegQueryValueExW
0x180104b38
RegSetValueExW
0x180104b40
RtlCaptureContext
0x180104b80
RtlLookupFunctionEntry
0x180104b78
RtlVirtualUnwind
0x180104b88
PathCombineW
0x180104ba0
PathRemoveFileSpecW
0x180104b98
AcquireSRWLockExclusive
0x180104c58
AcquireSRWLockShared
0x180104c50
CreateEventExW
0x180104bf8
CreateEventW
0x180104bd0
CreateMutexExW
0x180104c08
CreateSemaphoreExW
0x180104c00
DeleteCriticalSection
0x180104be8
EnterCriticalSection
0x180104c48
InitializeCriticalSection
0x180104bd8
InitializeCriticalSectionAndSpinCount
0x180104c80
InitializeCriticalSectionEx
0x180104bf0
InitializeSRWLock
0x180104c18
LeaveCriticalSection
0x180104c30
OpenSemaphoreW
0x180104c38
ReleaseMutex
0x180104c68
ReleaseSemaphore
0x180104c70
ReleaseSRWLockExclusive
0x180104c20
ReleaseSRWLockShared
0x180104c28
ResetEvent
0x180104c10
SetEvent
0x180104c78
SleepEx
0x180104be0
WaitForMultipleObjectsEx
0x180104bc8
WaitForSingleObject
0x180104c40
WaitForSingleObjectEx
0x180104c60
InitOnceBeginInitialize
0x180104ca0
InitOnceComplete
0x180104cc0
InitOnceExecuteOnce
0x180104c98
InitOnceInitialize
0x180104cb0
Sleep
0x180104cb8
SleepConditionVariableSRW
0x180104ca8
WakeAllConditionVariable
0x180104c90
WaitForMultipleObjects
0x180104cd0
GetSystemTimeAsFileTime
0x180104cf0
GetTickCount
0x180104ce0
GetTickCount64
0x180104ce8
CallbackMayRunLong
0x180104d30
CloseThreadpool
0x180104d28
CloseThreadpoolTimer
0x180104d10
CreateThreadpoolTimer
0x180104d18
IsThreadpoolTimerSet
0x180104d20
SetThreadpoolTimer
0x180104d08
TrySubmitThreadpoolCallback
0x180104d38
WaitForThreadpoolTimerCallbacks
0x180104d00
FileTimeToSystemTime
0x180104d58
GetDynamicTimeZoneInformation
0x180104d48
SystemTimeToFileTime
0x180104d50
RoOriginateError
0x180104d80
RoOriginateErrorW
0x180104d90
RoTransformError
0x180104d98
SetRestrictedErrorInfo
0x180104d88
IsErrorPropagationEnabled
0x180104db0
RoGetMatchingRestrictedErrorInfo
0x180104db8
RoReportFailedDelegate
0x180104da8
RoActivateInstance
0x180104df0
RoGetActivationFactory
0x180104dc8
RoInitialize
0x180104de8
RoRegisterActivationFactories
0x180104dd0
RoRevokeActivationFactories
0x180104de0
RoUninitialize
0x180104dd8
WindowsCreateString
0x180104e18
WindowsCreateStringReference
0x180104e20
WindowsDeleteString
0x180104e30
WindowsGetStringLen
0x180104e08
WindowsGetStringRawBuffer
0x180104e10
WindowsIsStringEmpty
0x180104e28
WindowsStringHasEmbeddedNull
0x180104e00
IsWow64Process
0x180104e40
ceilf
0x180104e50
__C_specific_handler
0x180104f80
__CxxFrameHandler3
0x180104f88
__CxxFrameHandler4
0x180105040
__std_terminate
0x180105038
__std_type_info_compare
0x180105030
_CxxThrowException
0x180104f90
_o___std_exception_copy
0x180104ff0
_o___std_exception_destroy
0x180104fd8
_o___std_type_info_destroy_list
0x180104fd0
_o___std_type_info_name
0x180104fc8
_o___stdio_common_vsnprintf_s
0x180104fc0
_o___stdio_common_vsnwprintf_s
0x180104fb8
_o___stdio_common_vsprintf_s
0x180104fb0
_o___stdio_common_vswprintf
0x180104fa8
_o__callnewh
0x180105058
_o__cexit
0x180105050
_o__configure_narrow_argv
0x180105048
_o__crt_atexit
0x180105028
_o__errno
0x180104fe8
_o__execute_onexit_table
0x180104fe0
_o__fseeki64
0x180105020
_o__i64tow_s
0x180105018
_o__initialize_narrow_environment
0x180105010
_o__initialize_onexit_table
0x180105008
_o__invalid_parameter_noinfo
0x180105000
_o__invalid_parameter_noinfo_noreturn
0x180104ff8
_o__itoa_s
0x180104e60
_o__lock_file
0x180104e68
_o__purecall
0x180104e70
_o__register_onexit_function
0x180104e78
_o__seh_filter_dll
0x180104e80
_o__ui64tow_s
0x180104e88
_o__unlock_file
0x180104e90
_o__wcsicmp
0x180104e98
_o__wcstoui64
0x180104ea0
_o_fclose
0x180104eb0
_o_fflush
0x180104eb8
_o_fgetc
0x180104ec0
_o_fgetpos
0x180104ec8
_o_fgetwc
0x180104ed0
_o_fputwc
0x180104ed8
_o_free
0x180104ee0
_o_fsetpos
0x180104ee8
_o_fwrite
0x180104ef0
_o_isspace
0x180104ef8
_o_iswascii
0x180104f00
_o_iswdigit
0x180104f08
_o_iswlower
0x180104f10
_o_iswxdigit
0x180104f18
_o_malloc
0x180104f20
_o_realloc
0x180104f28
_o_setvbuf
0x180104f30
_o_terminate
0x180104f38
_o_toupper
0x180104f40
_o_towlower
0x180104f48
_o_towupper
0x180104f50
_o_ungetc
0x180104f58
_o_ungetwc
0x180104f60
_o_wcscpy_s
0x180104f68
_o_wcsncpy_s
0x180104f70
_o_wcstol
0x180104f78
memcmp
0x180105060
memcpy
0x180105068
memmove
0x180104ea8
strchr
0x180104f98
wcschr
0x180104fa0
CloseTrace
0x1801050b8
OpenTraceW
0x1801050b0
ProcessTrace
0x1801050c0
ControlTraceW
0x1801050d0
EnableTraceEx2
0x1801050e0
StartTraceW
0x1801050d8
EventActivityIdControl
0x180105108
EventProviderEnabled
0x1801050f8
EventRegister
0x180105118
EventSetInformation
0x180105100
EventUnregister
0x1801050f0
EventWriteTransfer
0x180105110
TdhGetEventInformation
0x180105138
TdhGetProperty
0x180105130
TdhGetPropertySize
0x180105128
MsgWaitForMultipleObjectsEx
0x180105148
DispatchMessageW
0x180105170
PeekMessageW
0x180105160
PostQuitMessage
0x180105158
PostThreadMessageW
0x180105168
TranslateMessage
0x180105178
CopySid
0x180105198
CreateWellKnownSid
0x180105190
GetTokenInformation
0x180105188
LookupAccountNameW
0x1801051a8
ConvertSidToStringSidW
0x1801051c0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1801051b8
ConvertStringSidToSidW
0x1801051c8
RegisterServiceCtrlHandlerExW
0x1801051d8
SetServiceStatus
0x1801051e0
SHCreateStreamOnFileEx
0x1801051f0
SHGetFolderPathW
0x180105208
SHGetKnownFolderPath
0x180105200
GetUserLanguagesForUser
0x1801046f0
CoGetObject
0x180105258
QueryUserToken
0x180105268
WTSEnumerateSessionsW
0x180105288
WTSFreeMemory
0x180105278
WTSQuerySessionInformationW
0x180105280
ResourceManagerQueueGetString
0x180104700
ResourceManagerQueueSetGlobalFlags
0x180104708
_Cnd_broadcast
0x1801054f8
_Cnd_destroy_in_situ
0x180105508
_Cnd_init_in_situ
0x180105510
_Cnd_wait
0x1801054f0
_Mtx_destroy_in_situ
0x180105528
_Mtx_init_in_situ
0x180105530
_Mtx_lock
0x180105520
_Mtx_unlock
0x180105518
_Wcscoll
0x180105408
_Wcsxfrm
0x180105400
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
0x1801052b8
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
0x1801053d8
?__ExceptionPtrCreate@@YAXPEAX@Z
0x1801053d0
?__ExceptionPtrCurrentException@@YAXPEAX@Z
0x1801054a8
?__ExceptionPtrDestroy@@YAXPEAX@Z
0x180105548
?__ExceptionPtrRethrow@@YAXPEBX@Z
0x1801054c8
?__ExceptionPtrToBool@@YA_NPEBX@Z
0x1801052a8
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
0x180105560
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
0x180105500
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
0x180105498
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x180105428
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
0x1801054e8
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
0x180105378
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x1801053a8
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x180105418
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
0x180105460
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
0x180105390
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
0x1801053e8
?_Incref@facet@locale@std@@UEAAXXZ
0x180105410
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ
0x180105540
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
0x180105448
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
0x1801052f0
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1801052a0
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
0x180105298
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1801052c8
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1801052c0
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1801054b0
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x1801054b8
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
0x1801052e8
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
0x180105350
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
0x1801054e0
?_ReportUnobservedException@details@Concurrency@@YAXXZ
0x1801054d0
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
0x180105490
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
0x1801054d8
?_Throw_C_error@std@@YAXH@Z
0x180105538
?_Xbad_alloc@std@@YAXXZ
0x180105450
?_Xbad_function_call@std@@YAXXZ
0x180105568
?_XGetLastError@std@@YAXXZ
0x1801052b0
?_Xlength_error@std@@YAXPEBD@Z
0x180105570
?_Xout_of_range@std@@YAXPEBD@Z
0x1801052d0
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
0x180105468
??0_Locinfo@std@@QEAA@PEBD@Z
0x180105438
??0_Lockit@std@@QEAA@H@Z
0x180105388
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x1801053c8
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x1801053e0
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x1801053b8
??0facet@locale@std@@IEAA@_K@Z
0x1801053f0
??0task_continuation_context@Concurrency@@AEAA@XZ
0x1801054c0
??1_Locinfo@std@@QEAA@XZ
0x180105430
??1_Lockit@std@@QEAA@XZ
0x180105380
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x180105328
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x180105330
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x180105360
??1facet@locale@std@@MEAA@XZ
0x1801053f8
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z
0x180105558
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
0x180105550
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
0x180105488
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
0x180105320
??Bid@locale@std@@QEAA_KXZ
0x180105398
?always_noconv@codecvt_base@std@@QEBA_NXZ
0x180105368
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
0x1801052d8
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
0x1801054a0
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ
0x1801053c0
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
0x1801053a0
?id@?$collate@G@std@@2V0locale@2@A
0x180105458
?id@?$ctype@G@std@@2V0locale@2@A
0x180105440
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
0x180105348
?is@?$ctype@G@std@@QEBA_NFG@Z
0x180105420
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
0x180105358
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
0x180105318
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
0x1801052e0
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
0x1801053b0
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
0x180105300
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
0x180105310
?swap@?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
0x180105480
?tolower@?$ctype@G@std@@QEBAGG@Z
0x180105470
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
0x180105478
?uncaught_exception@std@@YA_NXZ
0x1801052f8
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
0x180105370
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z
0x180105308
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
0x180105340
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
0x180105338
ntdll.dll
10
EtwGetTraceEnableFlags
0x180105580
EtwGetTraceEnableLevel
0x180105598
EtwGetTraceLoggerHandle
0x1801055c8
EtwRegisterTraceGuidsW
0x180105588
EtwTraceMessage
0x1801055c0
EtwUnregisterTraceGuids
0x180105590
RtlGetDeviceFamilyInfoEnum
0x1801055b8
RtlPublishWnfStateData
0x1801055a0
RtlSubscribeWnfStateChangeNotification
0x1801055a8
RtlUnsubscribeWnfStateChangeNotification
0x1801055b0
SysAllocString
0x180104720
SysFreeString
0x180104728
VariantClear
0x180104718
VariantInit
0x180104730
UuidCreate
0x180104740
WINHTTP.dll
10
WinHttpAddRequestHeaders
0x180104788
WinHttpCloseHandle
0x180104760
WinHttpConnect
0x180104790
WinHttpCrackUrl
0x180104758
WinHttpOpen
0x180104778
WinHttpOpenRequest
0x180104780
WinHttpQueryHeaders
0x180104798
WinHttpReadData
0x180104750
WinHttpReceiveResponse
0x180104768
WinHttpSendRequest
0x180104770
No function matches your filter.