wksServicePlugin.dll
v32.0.15.6094
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
NvPluginGetInfo
#1 · 0x1310
No function matches your filter.
Imported DLLs & functions 125
GetTokenInformation
0x18002c038
InitializeSecurityDescriptor
0x18002c030
OpenProcessToken
0x18002c040
RegCloseKey
0x18002c020
RegCreateKeyExW
0x18002c018
RegOpenKeyExW
0x18002c010
RegQueryValueExW
0x18002c008
RegSetValueExW
0x18002c000
SetSecurityDescriptorDacl
0x18002c028
KERNEL32.dll
99
CloseHandle
0x18002c100
ConnectNamedPipe
0x18002c070
CreateEventW
0x18002c0e0
CreateFileW
0x18002c110
CreateNamedPipeW
0x18002c080
CreateThread
0x18002c0f0
DeleteCriticalSection
0x18002c0c0
DisconnectNamedPipe
0x18002c078
DuplicateHandle
0x18002c068
EncodePointer
0x18002c298
EnterCriticalSection
0x18002c168
ExitProcess
0x18002c2c8
FindClose
0x18002c2f0
FindFirstFileExW
0x18002c2f8
FindNextFileW
0x18002c300
FlushFileBuffers
0x18002c050
FormatMessageW
0x18002c158
FreeEnvironmentStringsW
0x18002c350
FreeLibrary
0x18002c208
GetACP
0x18002c310
GetCommandLineA
0x18002c328
GetCommandLineW
0x18002c330
GetConsoleMode
0x18002c1e0
GetConsoleOutputCP
0x18002c1e8
GetCPInfo
0x18002c320
GetCurrentProcess
0x18002c0e8
GetCurrentProcessId
0x18002c1f0
GetCurrentThreadId
0x18002c0f8
GetEnvironmentStringsW
0x18002c348
GetFileAttributesW
0x18002c220
GetFileType
0x18002c2e0
GetFullPathNameW
0x18002c228
GetLastError
0x18002c0b0
GetModuleFileNameA
0x18002c240
GetModuleFileNameW
0x18002c248
GetModuleHandleExW
0x18002c2d0
GetModuleHandleW
0x18002c1d8
GetNamedPipeClientProcessId
0x18002c128
GetNamedPipeInfo
0x18002c088
GetOEMCP
0x18002c318
GetProcAddress
0x18002c210
GetProcessHeap
0x18002c0a0
GetStartupInfoW
0x18002c1d0
GetStdHandle
0x18002c2d8
GetStringTypeW
0x18002c360
GetSystemDirectoryW
0x18002c238
GetSystemTimeAsFileTime
0x18002c1b8
HeapAlloc
0x18002c090
HeapFree
0x18002c098
HeapReAlloc
0x18002c140
HeapSize
0x18002c148
InitializeCriticalSection
0x18002c0a8
InitializeCriticalSectionAndSpinCount
0x18002c2a0
InitializeSListHead
0x18002c1c0
InterlockedFlushSList
0x18002c290
InterlockedPushEntrySList
0x18002c288
IsDebuggerPresent
0x18002c1c8
IsProcessorFeaturePresent
0x18002c1a8
IsValidCodePage
0x18002c308
LCMapStringW
0x18002c2e8
LeaveCriticalSection
0x18002c0b8
LoadLibraryExW
0x18002c250
LoadLibraryW
0x18002c150
LocalAlloc
0x18002c258
LocalFree
0x18002c260
MultiByteToWideChar
0x18002c338
OpenProcess
0x18002c108
OutputDebugStringW
0x18002c200
ProcessIdToSessionId
0x18002c160
QueryPerformanceCounter
0x18002c1b0
RaiseException
0x18002c280
ReadFile
0x18002c058
ResetEvent
0x18002c0d0
RtlCaptureContext
0x18002c178
RtlLookupFunctionEntry
0x18002c180
RtlPcToFileHeader
0x18002c278
RtlUnwindEx
0x18002c270
RtlVirtualUnwind
0x18002c188
SetEvent
0x18002c0c8
SetFilePointerEx
0x18002c358
SetLastError
0x18002c230
SetStdHandle
0x18002c1f8
SetUnhandledExceptionFilter
0x18002c198
Sleep
0x18002c118
TerminateProcess
0x18002c1a0
TlsAlloc
0x18002c2a8
TlsFree
0x18002c2c0
TlsGetValue
0x18002c2b0
TlsSetValue
0x18002c2b8
UnhandledExceptionFilter
0x18002c190
VerifyVersionInfoW
0x18002c268
VerSetConditionMask
0x18002c218
WaitForMultipleObjects
0x18002c170
WaitForSingleObject
0x18002c0d8
WaitForSingleObjectEx
0x18002c120
WideCharToMultiByte
0x18002c340
WriteConsoleW
0x18002c138
WriteFile
0x18002c060
WTSGetActiveConsoleSessionId
0x18002c130
CoCreateFreeThreadedMarshaler
0x18002c3f8
CoInitializeEx
0x18002c3e8
CoTaskMemAlloc
0x18002c400
CoTaskMemFree
0x18002c3f0
GetErrorInfo
0x18002c378
SetErrorInfo
0x18002c388
SysAllocString
0x18002c390
SysFreeString
0x18002c370
SysStringLen
0x18002c380
CloseDesktop
0x18002c3a8
GetThreadDesktop
0x18002c3b8
GetUserObjectInformationW
0x18002c3c8
OpenInputDesktop
0x18002c3d0
RegisterDeviceNotificationW
0x18002c3c0
SetWinEventHook
0x18002c3d8
UnhookWinEvent
0x18002c3a0
UnregisterDeviceNotification
0x18002c3b0
No function matches your filter.