invagent.dll
v10.0.19645.1048
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 8
GetDetailedAppInventoryReport
#1 · 0xb2f0
GetFileSigningInfoTC
#2 · 0xbe60
RunUpdate
#3 · 0xbe50
RunUpdateTC
#4 · 0xb970
DllCanUnloadNow
#5 · 0xcfb0
DllGetClassObject
#6 · 0xce80
DllRegisterServer
#7 · 0xcfe0
DllUnregisterServer
#8 · 0xcff0
No function matches your filter.
Imported DLLs & functions 358
ADVAPI32.dll
47
CloseServiceHandle
0x18005ea08
ControlServiceExW
0x18005e940
ControlTraceW
0x18005e9d8
CreateProcessAsUserW
0x18005e8f8
CryptAcquireContextW
0x18005e928
CryptCreateHash
0x18005e920
CryptDestroyHash
0x18005e908
CryptGetHashParam
0x18005e910
CryptHashData
0x18005e918
CryptReleaseContext
0x18005e900
EnableTrace
0x18005e9f0
EnableTraceEx2
0x18005e9e8
EventRegister
0x18005e8b0
EventUnregister
0x18005e8a8
EventWriteTransfer
0x18005e970
InitializeSecurityDescriptor
0x18005e958
OpenSCManagerW
0x18005e9f8
OpenServiceW
0x18005ea00
OpenThreadToken
0x18005e9d0
QueryServiceStatusEx
0x18005e948
RegCloseKey
0x18005e8c0
RegCreateKeyExW
0x18005e978
RegDeleteKeyExW
0x18005e990
RegDeleteKeyValueW
0x18005e8d8
RegDeleteKeyW
0x18005e980
RegDeleteTreeW
0x18005e9c8
RegDeleteValueW
0x18005e8c8
RegEnumKeyExW
0x18005e9a8
RegEnumValueW
0x18005e8f0
RegFlushKey
0x18005e9a0
RegGetValueW
0x18005e8e0
RegLoadAppKeyW
0x18005e998
RegLoadKeyW
0x18005e9b0
RegOpenKeyExW
0x18005e8a0
RegOpenKeyW
0x18005e8d0
RegQueryInfoKeyW
0x18005e898
RegSaveKeyExW
0x18005e968
RegSetKeySecurity
0x18005e8e8
RegSetKeyValueW
0x18005e988
RegSetValueExW
0x18005e8b8
RegUnLoadKeyW
0x18005e9b8
SetEntriesInAclW
0x18005e960
SetSecurityDescriptorDacl
0x18005e950
SetSecurityDescriptorOwner
0x18005e9c0
StartServiceW
0x18005e938
StartTraceW
0x18005e9e0
TraceEvent
0x18005e930
CreateSoftwareInventory
0x18005ea18
GetAppInventory
0x18005ea20
GetCachedAppInventory
0x18005ea30
GetDetailedAppInventory
0x18005ea28
BCryptCloseAlgorithmProvider
0x18005ef50
BCryptCreateHash
0x18005ef80
BCryptDestroyHash
0x18005ef78
BCryptFinishHash
0x18005ef58
BCryptGetProperty
0x18005ef68
BCryptHashData
0x18005ef70
BCryptOpenAlgorithmProvider
0x18005ef60
CertDuplicateCertificateContext
0x18005ea58
CertFreeCertificateContext
0x18005ea60
CertGetCertificateContextProperty
0x18005ea70
CertGetNameStringW
0x18005ea68
CreateDeviceInventory
0x18005ef90
KERNEL32.dll
116
AcquireSRWLockExclusive
0x18005eb28
AcquireSRWLockShared
0x18005edd8
CloseHandle
0x18005eb10
CloseThreadpoolTimer
0x18005eb30
CreateActCtxW
0x18005edb8
CreateEventW
0x18005eb78
CreateFileMappingW
0x18005ec80
CreateFileW
0x18005ed98
CreateMutexExW
0x18005ede0
CreateMutexW
0x18005ed70
CreateProcessW
0x18005ed40
CreateSemaphoreExW
0x18005eda8
CreateSemaphoreW
0x18005ecf0
CreateThread
0x18005ec58
CreateThreadpoolTimer
0x18005eaf0
CreateWaitableTimerW
0x18005ed10
DebugBreak
0x18005eb88
DecodePointer
0x18005ec10
DelayLoadFailureHook
0x18005ec38
DeleteCriticalSection
0x18005edc0
DeleteFileW
0x18005ea88
DeviceIoControl
0x18005ece8
EncodePointer
0x18005ec18
EnterCriticalSection
0x18005ebf0
ExitProcess
0x18005ec60
ExpandEnvironmentStringsW
0x18005ea80
FileTimeToLocalFileTime
0x18005ecc0
FileTimeToSystemTime
0x18005ecc8
FindClose
0x18005ed78
FindFirstFileW
0x18005ed88
FindNextFileW
0x18005ed80
FormatMessageW
0x18005eb50
FreeLibrary
0x18005ea90
GetCommandLineW
0x18005ed68
GetCurrentProcess
0x18005eaa0
GetCurrentProcessId
0x18005ebf8
GetCurrentThread
0x18005eb68
GetCurrentThreadId
0x18005ebb8
GetExitCodeProcess
0x18005ed38
GetFileAttributesW
0x18005ee00
GetFileSize
0x18005ec88
GetLastError
0x18005eb48
GetModuleFileNameA
0x18005edb0
GetModuleFileNameW
0x18005ed60
GetModuleHandleExA
0x18005ed20
GetModuleHandleExW
0x18005ebe0
GetModuleHandleW
0x18005eb90
GetProcAddress
0x18005ede8
GetProcessHeap
0x18005eb98
GetStringTypeW
0x18005ec30
GetSystemDirectoryW
0x18005ec98
GetSystemFirmwareTable
0x18005ec90
GetSystemTime
0x18005ec50
GetSystemTimeAsFileTime
0x18005eae8
GetSystemWindowsDirectoryW
0x18005ec08
GetTempFileNameW
0x18005ee10
GetTempPathW
0x18005ee08
GetTickCount
0x18005eb60
GetVolumeInformationByHandleW
0x18005ece0
HeapAlloc
0x18005edf8
HeapFree
0x18005ed90
HeapReAlloc
0x18005ecd8
HeapSize
0x18005ec48
InitializeCriticalSection
0x18005ec68
InitializeCriticalSectionEx
0x18005ebd0
InitOnceExecuteOnce
0x18005eaf8
IsDebuggerPresent
0x18005eb80
K32EnumProcesses
0x18005ecb8
K32EnumProcessModules
0x18005eca8
K32GetModuleFileNameExW
0x18005eca0
LeaveCriticalSection
0x18005ebd8
LoadLibraryExA
0x18005ec40
LoadLibraryExW
0x18005ed50
LoadLibraryW
0x18005edd0
LocalAlloc
0x18005ed48
LocaleNameToLCID
0x18005ecd0
LocalFree
0x18005eaa8
MapViewOfFile
0x18005ec78
MoveFileExW
0x18005ed58
MultiByteToWideChar
0x18005ec20
OpenProcess
0x18005ecb0
OpenSemaphoreW
0x18005eb18
OpenWaitableTimerW
0x18005ed00
OutputDebugStringA
0x18005ed28
OutputDebugStringW
0x18005eb38
QueryActCtxW
0x18005eba0
QueryPerformanceCounter
0x18005eae0
QueryThreadCycleTime
0x18005eb70
ReleaseActCtx
0x18005eba8
ReleaseMutex
0x18005eb58
ReleaseSemaphore
0x18005ebe8
ReleaseSRWLockExclusive
0x18005eb40
ReleaseSRWLockShared
0x18005eb00
RtlCaptureContext
0x18005eab8
RtlCompareMemory
0x18005ebb0
RtlLookupFunctionEntry
0x18005eac0
RtlVirtualUnwind
0x18005eac8
SetEvent
0x18005ecf8
SetLastError
0x18005edf0
SetThreadpoolTimer
0x18005eb08
SetUnhandledExceptionFilter
0x18005ead8
SetWaitableTimer
0x18005ed18
Sleep
0x18005eab0
SleepConditionVariableSRW
0x18005ec00
TerminateProcess
0x18005ea98
UnhandledExceptionFilter
0x18005ead0
UnmapViewOfFile
0x18005ec70
VerifyVersionInfoW
0x18005edc8
VerSetConditionMask
0x18005eda0
WaitForMultipleObjects
0x18005ed08
WaitForSingleObject
0x18005ebc0
WaitForSingleObjectEx
0x18005eb20
WaitForThreadpoolTimerCallbacks
0x18005ebc8
WakeAllConditionVariable
0x18005ee18
WideCharToMultiByte
0x18005ec28
WriteFile
0x18005ed30
msvcrt.dll
80
___lc_codepage_func
0x18005eff8
___lc_collate_cp_func
0x18005f010
___lc_handle_func
0x18005f000
___mb_cur_max_func
0x18005f008
__C_specific_handler
0x18005f1c0
__crtCompareStringW
0x18005efb0
__crtLCMapStringW
0x18005efa8
__CxxFrameHandler3
0x18005f040
__dllonexit
0x18005f138
__pctype_func
0x18005efe8
__uncaught_exception
0x18005efd0
_amsg_exit
0x18005f180
_CxxThrowException
0x18005f1a0
_errno
0x18005f100
_initterm
0x18005f168
_ismbblead
0x18005eff0
_lock
0x18005f158
_mktime64
0x18005f048
_onexit
0x18005f130
_purecall
0x18005f200
_snwscanf_s
0x18005f028
_unlock
0x18005f140
_vscwprintf
0x18005f068
_vsnprintf
0x18005f0d0
_vsnprintf_s
0x18005f1e0
_vsnwprintf
0x18005f210
_vsnwprintf_s
0x18005f1c8
_wcsdup
0x18005efb8
_wcsicmp
0x18005f108
_wcslwr
0x18005f0b0
_wcsnicmp
0x18005f0c0
_wctime64
0x18005f050
_wmkdir
0x18005f150
_wsetlocale
0x18005efa0
_wsplitpath_s
0x18005f148
_wtoi
0x18005f0a0
_wtoi64
0x18005f058
_XcptFilter
0x18005f188
??0bad_cast@@QEAA@AEBV0@@Z
0x18005f088
??0bad_cast@@QEAA@PEBD@Z
0x18005f078
??0exception@@QEAA@AEBQEBD@Z
0x18005f1b8
??0exception@@QEAA@AEBQEBDH@Z
0x18005f1b0
??0exception@@QEAA@AEBV0@@Z
0x18005f1e8
??0exception@@QEAA@XZ
0x18005f1f0
??1bad_cast@@UEAA@XZ
0x18005f080
??1exception@@UEAA@XZ
0x18005f1f8
??1type_info@@UEAA@XZ
0x18005f128
?terminate@@YAXXZ
0x18005f160
?what@exception@@UEBAPEBDXZ
0x18005f1a8
abort
0x18005efc8
calloc
0x18005efe0
free
0x18005f178
iswalpha
0x18005f0e0
malloc
0x18005f170
memcmp
0x18005efd8
memcpy
0x18005f198
memcpy_s
0x18005f208
memmove
0x18005f190
memmove_s
0x18005f1d8
memset
0x18005efc0
realloc
0x18005f090
setlocale
0x18005f018
sprintf_s
0x18005f110
strchr
0x18005f0f8
strcmp
0x18005f120
strcpy_s
0x18005f0c8
strncmp
0x18005f0a8
strnlen
0x18005f038
tolower
0x18005f070
towlower
0x18005f060
wcscat_s
0x18005f118
wcschr
0x18005f0d8
wcscmp
0x18005f218
wcscpy_s
0x18005f0e8
wcsncmp
0x18005f1d0
wcsrchr
0x18005f0f0
wcsstr
0x18005f0b8
wcstombs
0x18005f098
wcstoul
0x18005f030
wprintf
0x18005f020
ntdll.dll
55
EtwEventRegister
0x18005f2a0
EtwEventUnregister
0x18005f2b0
EtwEventWrite
0x18005f2a8
EtwTraceMessage
0x18005f268
LdrResSearchResource
0x18005f248
NtLoadKeyEx
0x18005f348
NtQueryInformationProcess
0x18005f270
NtQueryInformationToken
0x18005f358
NtQueryKey
0x18005f398
NtQueryLicenseValue
0x18005f260
RtlAdjustPrivilege
0x18005f3c0
RtlAllocateAndInitializeSid
0x18005f3b0
RtlAllocateHeap
0x18005f3d8
RtlAnsiStringToUnicodeString
0x18005f288
RtlAppendUnicodeStringToString
0x18005f378
RtlAppendUnicodeToString
0x18005f380
RtlComputeCrc32
0x18005f350
RtlDeleteCriticalSection
0x18005f338
RtlDosPathNameToNtPathName_U_WithStatus
0x18005f2f8
RtlDosPathNameToRelativeNtPathName_U
0x18005f360
RtlEnterCriticalSection
0x18005f328
RtlEqualString
0x18005f330
RtlFreeHeap
0x18005f3c8
RtlFreeSid
0x18005f3a8
RtlFreeUnicodeString
0x18005f370
RtlGetNativeSystemInformation
0x18005f228
RtlImageDirectoryEntryToData
0x18005f258
RtlInitAnsiString
0x18005f320
RtlInitializeCriticalSection
0x18005f310
RtlInitString
0x18005f298
RtlInitUnicodeString
0x18005f2f0
RtlInitUnicodeStringEx
0x18005f368
RtlLeaveCriticalSection
0x18005f308
RtlMultiByteToUnicodeN
0x18005f318
RtlNtStatusToDosError
0x18005f3b8
RtlRandomEx
0x18005f390
RtlReAllocateHeap
0x18005f3d0
RtlReleaseRelativeName
0x18005f340
RtlSecondsSince1970ToTime
0x18005f2b8
RtlStringFromGUID
0x18005f388
RtlTimeToTimeFields
0x18005f278
RtlUpcaseUnicodeChar
0x18005f280
RtlVerifyVersionInfo
0x18005f250
RtlxAnsiStringToUnicodeSize
0x18005f290
WinSqmIsOptedInEx
0x18005f3a0
ZwClose
0x18005f300
ZwCreateFile
0x18005f2d0
ZwCreateSection
0x18005f2c0
ZwEnumerateKey
0x18005f2e0
ZwMapViewOfSection
0x18005f240
ZwOpenKey
0x18005f2e8
ZwQueryInformationFile
0x18005f2c8
ZwQuerySystemInformation
0x18005f230
ZwQueryValueKey
0x18005f2d8
ZwUnmapViewOfSection
0x18005f238
CoCreateInstance
0x18005f410
CoImpersonateClient
0x18005f3f0
CoInitializeEx
0x18005f408
CoRevertToSelf
0x18005f400
CoTaskMemFree
0x18005f3f8
CoUninitialize
0x18005f3e8
SysAllocString
0x18005ee30
SysFreeString
0x18005ee40
SysStringByteLen
0x18005ee28
SysStringLen
0x18005ee38
VariantChangeType
0x18005ee58
VariantClear
0x18005ee50
VariantInit
0x18005ee48
UuidCreate
0x18005ee68
CommandLineToArgvW
0x18005ee88
SHFileOperationW
0x18005ee80
SHGetKnownFolderPath
0x18005ee78
PathFileExistsW
0x18005eea0
PathFindFileNameW
0x18005ee98
PathUnExpandEnvStringsW
0x18005eea8
wer.dll
5
WerReportAddFile
0x18005f428
WerReportCloseHandle
0x18005f438
WerReportCreate
0x18005f420
WerReportSetParameter
0x18005f440
WerReportSubmit
0x18005f430
WinHttpCloseHandle
0x18005eed0
WinHttpConnect
0x18005eef0
WinHttpOpen
0x18005eeb8
WinHttpOpenRequest
0x18005eec0
WinHttpQueryDataAvailable
0x18005eee8
WinHttpReadData
0x18005eed8
WinHttpReceiveResponse
0x18005eee0
WinHttpSendRequest
0x18005eec8
CryptCATAdminAcquireContext
0x18005ef10
CryptCATAdminCalcHashFromFileHandle
0x18005ef38
CryptCATAdminEnumCatalogFromHash
0x18005ef18
CryptCATAdminReleaseCatalogContext
0x18005ef08
CryptCATAdminReleaseContext
0x18005ef00
CryptCATCatalogInfoFromContext
0x18005ef40
WinVerifyTrust
0x18005ef20
WTHelperGetProvSignerFromChain
0x18005ef30
WTHelperProvDataFromStateData
0x18005ef28
No function matches your filter.