FlightSettings.dll
v10.0.19041.6392
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllGetActivationFactory
#1 · 0x3b900
ServiceMain
#2 · 0x3c6b0
SvchostPushServiceGlobals
#3 · 0x3c560
DllCanUnloadNow
#4 · 0x3b8d0
DllGetClassObject
#5 · 0x3b7a0
No function matches your filter.
Imported DLLs & functions 243
ApiSetQueryApiSetPresence
0x100c3000
DebugBreak
0x100c3018
IsDebuggerPresent
0x100c301c
OutputDebugStringW
0x100c3014
DelayLoadFailureHook
0x100c3024
ResolveDelayLoadedAPI
0x100c302c
GetLastError
0x100c3034
RaiseException
0x100c3044
SetLastError
0x100c303c
SetUnhandledExceptionFilter
0x100c3038
UnhandledExceptionFilter
0x100c3040
CreateDirectoryW
0x100c3060
CreateFileA
0x100c308c
CreateFileW
0x100c304c
DefineDosDeviceW
0x100c3064
DeleteFileW
0x100c3074
FindClose
0x100c3088
FindFirstFileW
0x100c305c
FindNextFileW
0x100c3078
FlushFileBuffers
0x100c3054
GetFileAttributesW
0x100c3084
GetFileSizeEx
0x100c307c
GetFullPathNameW
0x100c3080
QueryDosDeviceW
0x100c3058
ReadFile
0x100c3070
RemoveDirectoryW
0x100c306c
SetFilePointer
0x100c3068
WriteFile
0x100c3050
GetTempPathW
0x100c3094
GetFileInformationByHandleEx
0x100c309c
CloseHandle
0x100c30a4
GetProcessHeap
0x100c30b0
HeapAlloc
0x100c30ac
HeapFree
0x100c30b4
InitializeSListHead
0x100c30c8
InterlockedPushEntrySList
0x100c30cc
CopyFileW
0x100c30d4
MoveFileW
0x100c30d8
UnregisterWait
0x100c30dc
DisableThreadLibraryCalls
0x100c30f4
FindStringOrdinal
0x100c30f8
FreeLibrary
0x100c3104
GetModuleFileNameA
0x100c30f0
GetModuleFileNameW
0x100c30fc
GetModuleHandleExW
0x100c3100
GetModuleHandleW
0x100c30ec
GetProcAddress
0x100c30e4
LoadLibraryExW
0x100c30e8
FormatMessageW
0x100c3110
GetLocaleInfoW
0x100c3118
GetSystemPreferredUILanguages
0x100c311c
GetUserDefaultLocaleName
0x100c3114
GetUserPreferredUILanguages
0x100c310c
GetSystemDefaultUILanguage
0x100c3124
CreateFileMappingW
0x100c3134
MapViewOfFile
0x100c3130
UnmapViewOfFile
0x100c312c
ExpandEnvironmentStringsW
0x100c3148
CreateProcessW
0x100c3174
GetCurrentProcess
0x100c3164
GetCurrentProcessId
0x100c3154
GetCurrentThread
0x100c316c
GetCurrentThreadId
0x100c3168
GetExitCodeProcess
0x100c3158
OpenProcessToken
0x100c315c
OpenThreadToken
0x100c3170
SetThreadToken
0x100c3150
TerminateProcess
0x100c3160
GetProcessMitigationPolicy
0x100c317c
IsProcessorFeaturePresent
0x100c3180
OpenProcess
0x100c3184
QueryPerformanceCounter
0x100c318c
QueryPerformanceFrequency
0x100c3190
QueryFullProcessImageNameW
0x100c3198
RegCloseKey
0x100c31c8
RegCreateKeyExW
0x100c31c4
RegDeleteKeyExW
0x100c31ac
RegDeleteTreeW
0x100c31a8
RegDeleteValueW
0x100c31a0
RegEnumKeyExW
0x100c31c0
RegEnumValueW
0x100c31a4
RegGetValueW
0x100c31cc
RegOpenKeyExW
0x100c31bc
RegQueryInfoKeyW
0x100c31b8
RegQueryValueExW
0x100c31b0
RegSetValueExW
0x100c31b4
RegDeleteKeyValueW
0x100c31d4
CompareStringOrdinal
0x100c31e8
MultiByteToWideChar
0x100c31ec
WideCharToMultiByte
0x100c31f0
AcquireSRWLockExclusive
0x100c321c
AcquireSRWLockShared
0x100c3224
CreateEventExW
0x100c3250
CreateMutexExW
0x100c3204
CreateMutexW
0x100c3248
CreateSemaphoreExW
0x100c3234
DeleteCriticalSection
0x100c3240
EnterCriticalSection
0x100c3238
InitializeCriticalSectionEx
0x100c3244
InitializeSRWLock
0x100c3208
LeaveCriticalSection
0x100c323c
OpenSemaphoreW
0x100c3230
ReleaseMutex
0x100c320c
ReleaseSemaphore
0x100c322c
ReleaseSRWLockExclusive
0x100c3218
ReleaseSRWLockShared
0x100c3220
SetEvent
0x100c324c
TryEnterCriticalSection
0x100c3214
WaitForSingleObject
0x100c3210
WaitForSingleObjectEx
0x100c3228
InitOnceBeginInitialize
0x100c3258
InitOnceComplete
0x100c325c
InitOnceExecuteOnce
0x100c3260
Sleep
0x100c3264
GetComputerNameExW
0x100c3274
GetSystemTimeAsFileTime
0x100c326c
GetSystemWindowsDirectoryW
0x100c3270
GetTickCount
0x100c3278
GetProductInfo
0x100c3280
CloseThreadpoolTimer
0x100c328c
CreateThreadpoolTimer
0x100c3294
IsThreadpoolTimerSet
0x100c3298
SetThreadpoolTimer
0x100c3288
WaitForThreadpoolTimerCallbacks
0x100c3290
CreateTimerQueueTimer
0x100c32a4
DeleteTimerQueueTimer
0x100c32a0
FileTimeToSystemTime
0x100c32b0
SystemTimeToFileTime
0x100c32ac
UrlEscapeW
0x100c32b8
GetFileVersionInfoExW
0x100c32d4
GetFileVersionInfoSizeExW
0x100c32d0
VerQueryValueW
0x100c32cc
__CxxFrameHandler3
0x100c338c
__std_terminate
0x100c3388
_CxxThrowException
0x100c3350
_except_handler4_common
0x100c334c
_o___std_exception_copy
0x100c3380
_o___std_exception_destroy
0x100c3370
_o___std_type_info_destroy_list
0x100c336c
_o___stdio_common_vsnprintf_s
0x100c3364
_o___stdio_common_vswprintf
0x100c3360
_o___stdio_common_vswprintf_s
0x100c335c
_o___stdio_common_vswscanf
0x100c3358
_o__callnewh
0x100c337c
_o__cexit
0x100c3378
_o__configure_narrow_argv
0x100c3374
_o__crt_atexit
0x100c3368
_o__errno
0x100c3308
_o__execute_onexit_table
0x100c3384
_o__get_errno
0x100c32dc
_o__initialize_narrow_environment
0x100c32e0
_o__initialize_onexit_table
0x100c32e4
_o__invalid_parameter_noinfo
0x100c32e8
_o__invalid_parameter_noinfo_noreturn
0x100c32ec
_o__itow_s
0x100c32f0
_o__purecall
0x100c32f4
_o__register_onexit_function
0x100c32f8
_o__seh_filter_dll
0x100c32fc
_o__set_errno
0x100c3300
_o__wcsicmp
0x100c330c
_o__wcstoui64
0x100c3310
_o__wcsupr
0x100c3314
_o__wtoi
0x100c3318
_o__wtol
0x100c331c
_o_ceil
0x100c3320
_o_free
0x100c3324
_o_iswspace
0x100c3328
_o_malloc
0x100c332c
_o_realloc
0x100c3330
_o_terminate
0x100c3334
_o_toupper
0x100c3338
_o_towlower
0x100c333c
_o_wcstok_s
0x100c3340
_o_wcstoul
0x100c3344
_o_wctomb_s
0x100c3348
memcmp
0x100c3398
memcpy
0x100c339c
memmove
0x100c3304
wcschr
0x100c3390
wcsrchr
0x100c3354
wcsstr
0x100c3394
EventActivityIdControl
0x100c33c4
EventProviderEnabled
0x100c33d4
EventRegister
0x100c33d0
EventSetInformation
0x100c33c8
EventUnregister
0x100c33cc
EventWriteTransfer
0x100c33c0
AdjustTokenPrivileges
0x100c33dc
AllocateAndInitializeSid
0x100c3404
CheckTokenMembership
0x100c3408
CopySid
0x100c33fc
CreateWellKnownSid
0x100c33f0
DuplicateToken
0x100c33ec
DuplicateTokenEx
0x100c340c
FreeSid
0x100c3400
GetLengthSid
0x100c33f8
GetTokenInformation
0x100c33e8
ImpersonateLoggedOnUser
0x100c33e0
IsValidSid
0x100c33f4
RevertToSelf
0x100c33e4
CheckTokenMembershipEx
0x100c3414
GetPersistedRegistryLocationW
0x100c3420
GetPersistedRegistryValueW
0x100c341c
?_Xinvalid_argument@std@@YAXPBD@Z
0x100c3448
?_Xlength_error@std@@YAXPBD@Z
0x100c344c
?_Xout_of_range@std@@YAXPBD@Z
0x100c3444
ntdll.dll
14
EtwTraceMessage
0x100c3458
NtQueryInformationToken
0x100c3488
NtQueryLicenseValue
0x100c3480
NtQuerySystemInformation
0x100c3478
NtQueryWnfStateData
0x100c3468
RtlConvertDeviceFamilyInfoToString
0x100c345c
RtlGetDeviceFamilyInfoEnum
0x100c346c
RtlGetVersion
0x100c347c
RtlIsMultiUsersInSessionSku
0x100c3470
RtlIsStateSeparationEnabled
0x100c3484
RtlNtStatusToDosError
0x100c3460
RtlPublishWnfStateData
0x100c3454
RtlSubscribeWnfStateChangeNotification
0x100c3464
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100c3474
No function matches your filter.