InstallService.dll
v10.0.19041.6280
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
ServiceMain
#1 · 0x50570
DllCanUnloadNow
#2 · 0x4c620
DllGetActivationFactory
#3 · 0x4c6c0
DllGetClassObject
#4 · 0x4c650
No function matches your filter.
Imported DLLs & functions 424
GetPackageFullNameFromToken
0x101da0c4
ApiSetQueryApiSetPresence
0x101da0cc
DebugBreak
0x101da0d4
IsDebuggerPresent
0x101da0dc
OutputDebugStringW
0x101da0d8
DelayLoadFailureHook
0x101da0e4
ResolveDelayLoadedAPI
0x101da0ec
GetLastError
0x101da0f4
RaiseException
0x101da0fc
SetLastError
0x101da104
SetUnhandledExceptionFilter
0x101da100
UnhandledExceptionFilter
0x101da0f8
CompareFileTime
0x101da124
CreateDirectoryW
0x101da118
CreateFileW
0x101da12c
DeleteFileW
0x101da120
FindClose
0x101da144
FindFirstFileExW
0x101da128
FindFirstFileW
0x101da14c
FindNextFileW
0x101da148
GetFileAttributesExW
0x101da11c
GetFileAttributesW
0x101da10c
GetFileSizeEx
0x101da13c
GetFinalPathNameByHandleW
0x101da130
GetTempFileNameW
0x101da110
ReadFile
0x101da138
SetFileAttributesW
0x101da114
SetFileInformationByHandle
0x101da134
WriteFile
0x101da140
GetTempPathW
0x101da158
GetVolumeNameForVolumeMountPointW
0x101da154
GetFileInformationByHandleEx
0x101da160
CloseHandle
0x101da168
GetProcessHeap
0x101da174
HeapAlloc
0x101da170
HeapFree
0x101da178
InitializeSListHead
0x101da190
InterlockedFlushSList
0x101da198
InterlockedPushEntrySList
0x101da194
PowerClearRequest
0x101da1a0
PowerSetRequest
0x101da1a4
DisableThreadLibraryCalls
0x101da1cc
FindStringOrdinal
0x101da1b0
FreeLibrary
0x101da1b8
GetModuleFileNameA
0x101da1c8
GetModuleFileNameW
0x101da1bc
GetModuleHandleExW
0x101da1c0
GetModuleHandleW
0x101da1c4
GetProcAddress
0x101da1b4
LoadStringW
0x101da1ac
LoadLibraryW
0x101da1d4
CreateFileMappingW
0x101da1e8
FlushViewOfFile
0x101da1f4
MapViewOfFile
0x101da1f0
UnmapViewOfFile
0x101da1ec
PathCchAddExtension
0x101da200
PathCchAppend
0x101da210
PathCchCombine
0x101da20c
PathCchRemoveExtension
0x101da1fc
PathCchRemoveFileSpec
0x101da204
PathCchStripToRoot
0x101da208
GetCurrentDirectoryW
0x101da218
GetEnvironmentVariableW
0x101da21c
GetCurrentProcess
0x101da23c
GetCurrentProcessId
0x101da244
GetCurrentThread
0x101da228
GetCurrentThreadId
0x101da234
OpenProcessToken
0x101da238
OpenThreadToken
0x101da224
ProcessIdToSessionId
0x101da240
SetThreadToken
0x101da22c
TerminateProcess
0x101da230
IsProcessorFeaturePresent
0x101da250
OpenProcess
0x101da24c
QueryPerformanceCounter
0x101da258
QueryFullProcessImageNameW
0x101da260
RegCloseKey
0x101da284
RegCreateKeyExW
0x101da274
RegDeleteValueW
0x101da270
RegEnumValueW
0x101da27c
RegGetValueW
0x101da280
RegOpenCurrentUser
0x101da268
RegOpenKeyExW
0x101da278
RegSetValueExW
0x101da26c
CompareStringOrdinal
0x101da2b8
MultiByteToWideChar
0x101da2b4
WideCharToMultiByte
0x101da2b0
AcquireSRWLockExclusive
0x101da314
AcquireSRWLockShared
0x101da2cc
CreateEventExW
0x101da2f8
CreateEventW
0x101da2d4
CreateMutexExW
0x101da2dc
CreateMutexW
0x101da308
CreateSemaphoreExW
0x101da2f4
DeleteCriticalSection
0x101da2c0
EnterCriticalSection
0x101da2c4
InitializeCriticalSection
0x101da318
InitializeCriticalSectionAndSpinCount
0x101da300
InitializeCriticalSectionEx
0x101da310
InitializeSRWLock
0x101da30c
LeaveCriticalSection
0x101da2c8
OpenSemaphoreW
0x101da2e0
ReleaseMutex
0x101da2e8
ReleaseSemaphore
0x101da2f0
ReleaseSRWLockExclusive
0x101da2d8
ReleaseSRWLockShared
0x101da2d0
ResetEvent
0x101da304
SetEvent
0x101da2fc
WaitForSingleObject
0x101da2ec
WaitForSingleObjectEx
0x101da2e4
InitOnceExecuteOnce
0x101da324
Sleep
0x101da320
WaitOnAddress
0x101da32c
WakeByAddressAll
0x101da328
GetSystemTime
0x101da334
GetSystemTimeAsFileTime
0x101da33c
GetTickCount
0x101da338
GetTickCount64
0x101da344
GetVersionExA
0x101da340
CloseThreadpoolTimer
0x101da34c
CloseThreadpoolWork
0x101da368
CreateThreadpoolTimer
0x101da354
CreateThreadpoolWork
0x101da35c
FreeLibraryWhenCallbackReturns
0x101da364
SetThreadpoolTimer
0x101da350
SubmitThreadpoolWork
0x101da360
WaitForThreadpoolTimerCallbacks
0x101da358
QueueUserWorkItem
0x101da370
SystemTimeToFileTime
0x101da378
UrlEscapeW
0x101da380
IsWow64Process
0x101da394
IsWow64Process2
0x101da39c
__CxxFrameHandler3
0x101da4c0
__std_terminate
0x101da4bc
__std_type_info_compare
0x101da4d0
_CxxThrowException
0x101da478
_except_handler4_common
0x101da474
_o____lc_codepage_func
0x101da4b8
_o___std_exception_copy
0x101da4b0
_o___std_exception_destroy
0x101da4ac
_o___std_type_info_destroy_list
0x101da4a8
_o___stdio_common_vsnprintf_s
0x101da4a4
_o___stdio_common_vsnwprintf_s
0x101da4a0
_o___stdio_common_vsprintf_s
0x101da49c
_o___stdio_common_vswprintf
0x101da498
_o___stdio_common_vswprintf_s
0x101da494
_o__beginthreadex
0x101da490
_o__callnewh
0x101da48c
_o__cexit
0x101da488
_o__configure_narrow_argv
0x101da484
_o__crt_atexit
0x101da480
_o__errno
0x101da4cc
_o__execute_onexit_table
0x101da4b4
_o__fseeki64
0x101da47c
_o__initialize_narrow_environment
0x101da3a4
_o__initialize_onexit_table
0x101da3a8
_o__invalid_parameter_noinfo
0x101da3ac
_o__invalid_parameter_noinfo_noreturn
0x101da3b0
_o__localtime64_s
0x101da3b4
_o__lock_file
0x101da3b8
_o__mktime64
0x101da3bc
_o__purecall
0x101da3c0
_o__register_onexit_function
0x101da3c4
_o__seh_filter_dll
0x101da3c8
_o__set_errno
0x101da3cc
_o__ui64tow_s
0x101da3d0
_o__unlock_file
0x101da3d4
_o__wcsicmp
0x101da3d8
_o__wcstoui64
0x101da3dc
_o__wtoi
0x101da3e4
_o__wtoi64
0x101da3e8
_o_ceil
0x101da3ec
_o_fclose
0x101da3f0
_o_fflush
0x101da3f4
_o_fgetc
0x101da3f8
_o_fgetpos
0x101da3fc
_o_fgetwc
0x101da400
_o_fputwc
0x101da404
_o_free
0x101da408
_o_fsetpos
0x101da40c
_o_fwrite
0x101da410
_o_isalnum
0x101da414
_o_iswspace
0x101da418
_o_malloc
0x101da41c
_o_mbstowcs
0x101da420
_o_mbstowcs_s
0x101da424
_o_rand
0x101da428
_o_realloc
0x101da42c
_o_setvbuf
0x101da430
_o_srand
0x101da434
_o_strncpy_s
0x101da438
_o_strtol
0x101da43c
_o_terminate
0x101da440
_o_toupper
0x101da444
_o_ungetc
0x101da448
_o_ungetwc
0x101da44c
_o_wcscat_s
0x101da450
_o_wcscpy_s
0x101da454
_o_wcsftime
0x101da458
_o_wcsncpy_s
0x101da45c
_o_wcstok_s
0x101da460
_o_wcstol
0x101da464
_o_wcstombs
0x101da468
_o_wcstombs_s
0x101da46c
_o_wcstoul
0x101da470
memcmp
0x101da4c4
memcpy
0x101da4c8
memmove
0x101da3e0
strchr
0x101da4e0
strrchr
0x101da4d4
wcschr
0x101da4dc
wcsstr
0x101da4d8
_time32
0x101da504
EventActivityIdControl
0x101da510
EventProviderEnabled
0x101da518
EventRegister
0x101da50c
EventSetInformation
0x101da520
EventUnregister
0x101da514
EventWriteTransfer
0x101da51c
GetMonitorInfoW
0x101da528
CapabilityCheck
0x101da530
CryptAcquireContextW
0x101da53c
CryptCreateHash
0x101da538
CryptDestroyHash
0x101da54c
CryptGetHashParam
0x101da544
CryptHashData
0x101da540
CryptReleaseContext
0x101da548
ConvertSidToStringSidW
0x101da554
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x101da558
RegisterServiceCtrlHandlerExW
0x101da564
SetServiceStatus
0x101da560
CloseServiceHandle
0x101da578
OpenSCManagerW
0x101da56c
OpenServiceW
0x101da574
StartServiceW
0x101da570
QueryServiceStatus
0x101da580
SHTaskPoolAllowThreadReuse
0x101da58c
SHTaskPoolQueueTask
0x101da588
SHGetIDListFromObject
0x101da594
0x101da59c
GetPersistedRegistryLocationW
0x101da5a4
MPR.dll
1
WNetGetConnectionW
0x101da000
msvcp_win.dll
110
_Cnd_broadcast
0x101da6e0
_Cnd_destroy_in_situ
0x101da6f0
_Cnd_do_broadcast_at_thread_exit
0x101da638
_Cnd_init_in_situ
0x101da738
_Cnd_register_at_thread_exit
0x101da6d8
_Cnd_unregister_at_thread_exit
0x101da6f4
_Cnd_wait
0x101da6b4
_Mtx_destroy_in_situ
0x101da6ec
_Mtx_init_in_situ
0x101da734
_Mtx_lock
0x101da76c
_Mtx_unlock
0x101da774
_Thrd_detach
0x101da630
_Xtime_get_ticks
0x101da600
?__ExceptionPtrAssign@@YAXPAXPBX@Z
0x101da74c
?__ExceptionPtrCopy@@YAXPAXPBX@Z
0x101da6d4
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
0x101da690
?__ExceptionPtrCreate@@YAXPAX@Z
0x101da760
?__ExceptionPtrCurrentException@@YAXPAX@Z
0x101da764
?__ExceptionPtrDestroy@@YAXPAX@Z
0x101da6e8
?__ExceptionPtrRethrow@@YAXPBX@Z
0x101da768
?__ExceptionPtrToBool@@YA_NPBX@Z
0x101da6cc
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
0x101da678
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
0x101da724
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
0x101da720
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
0x101da644
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
0x101da6a8
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
0x101da664
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x101da740
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x101da754
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x101da694
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
0x101da688
?_Incref@facet@locale@std@@UAEXXZ
0x101da654
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ
0x101da680
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
0x101da640
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
0x101da710
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x101da5cc
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
0x101da718
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
0x101da71c
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
0x101da70c
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
0x101da714
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
0x101da700
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
0x101da704
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
0x101da750
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
0x101da5c4
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
0x101da5ec
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
0x101da72c
?_ReportUnobservedException@details@Concurrency@@YAXXZ
0x101da75c
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
0x101da748
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
0x101da6d0
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
0x101da728
?_Syserror_map@std@@YAPBDH@Z
0x101da6b0
?_Throw_C_error@std@@YAXH@Z
0x101da6dc
?_Throw_Cpp_error@std@@YAXH@Z
0x101da770
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
0x101da6a4
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x101da670
?_Winerror_map@std@@YAHH@Z
0x101da620
?_Winerror_message@std@@YAKKPADK@Z
0x101da624
?_Xbad_alloc@std@@YAXXZ
0x101da674
?_Xbad_function_call@std@@YAXXZ
0x101da758
?_XGetLastError@std@@YAXXZ
0x101da73c
?_Xinvalid_argument@std@@YAXPBD@Z
0x101da628
?_Xlength_error@std@@YAXPBD@Z
0x101da6ac
?_Xout_of_range@std@@YAXPBD@Z
0x101da608
??0_Lockit@std@@QAE@H@Z
0x101da698
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
0x101da5fc
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
0x101da61c
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x101da5f8
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x101da684
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
0x101da5f4
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
0x101da650
??0task_continuation_context@Concurrency@@AAE@XZ
0x101da744
??1_Lockit@std@@QAE@XZ
0x101da69c
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
0x101da6e4
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x101da604
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x101da5f0
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x101da658
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
0x101da5d0
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
0x101da64c
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
0x101da668
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
0x101da618
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
0x101da614
??Bid@locale@std@@QAEIXZ
0x101da634
?always_noconv@codecvt_base@std@@QBE_NXZ
0x101da65c
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
0x101da6f8
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
0x101da5e4
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBG4@Z
0x101da6c4
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
0x101da730
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ
0x101da67c
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
0x101da6a0
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
0x101da66c
?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
0x101da708
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
0x101da68c
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
0x101da5d4
?in@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAG3AAPAG@Z
0x101da63c
?out@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBG1AAPBGPAD3AAPAD@Z
0x101da648
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x101da6bc
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
0x101da5d8
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
0x101da6c8
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x101da6c0
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
0x101da5e8
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x101da6fc
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
0x101da60c
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
0x101da610
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
0x101da5c0
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
0x101da6b8
?uncaught_exception@std@@YA_NXZ
0x101da5c8
?uncaught_exceptions@std@@YAHXZ
0x101da62c
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
0x101da660
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
0x101da5e0
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
0x101da5dc
NtQueryWnfStateData
0x101da794
RtlClearAllBits
0x101da784
RtlConvertDeviceFamilyInfoToString
0x101da78c
RtlGetDeviceFamilyInfoEnum
0x101da798
RtlInitializeBitMap
0x101da788
RtlIsMultiSessionSku
0x101da790
RtlIsMultiUsersInSessionSku
0x101da79c
RtlSetBit
0x101da780
RtlWow64IsWowGuestMachineSupported
0x101da77c
SysAllocString
0x101da008
SysAllocStringByteLen
0x101da024
SysFreeString
0x101da01c
SysStringByteLen
0x101da020
SysStringLen
0x101da00c
VarBstrCmp
0x101da010
VariantClear
0x101da014
VariantInit
0x101da028
VariantTimeToSystemTime
0x101da018
RPCRT4.dll
12
I_RpcBindingInqLocalClientPID
0x101da044
I_RpcExceptionFilter
0x101da040
NdrAsyncClientCall
0x101da03c
RpcAsyncCancelCall
0x101da034
RpcAsyncCompleteCall
0x101da030
RpcAsyncInitializeHandle
0x101da054
RpcBindingFree
0x101da05c
RpcBindingFromStringBindingW
0x101da04c
RpcBindingSetAuthInfoExW
0x101da050
RpcStringBindingComposeW
0x101da048
RpcStringFreeW
0x101da058
UuidCreate
0x101da038
ExpandEnvironmentStringsForUserW
0x101da070
WINHTTP.dll
16
WinHttpCloseHandle
0x101da078
WinHttpConnect
0x101da098
WinHttpCrackUrl
0x101da07c
WinHttpCreateUrl
0x101da09c
WinHttpGetDefaultProxyConfiguration
0x101da080
WinHttpGetIEProxyConfigForCurrentUser
0x101da084
WinHttpGetProxyForUrl
0x101da0a0
WinHttpOpen
0x101da094
WinHttpOpenRequest
0x101da088
WinHttpQueryDataAvailable
0x101da0b0
WinHttpQueryHeaders
0x101da0ac
WinHttpReadData
0x101da0b4
WinHttpReceiveResponse
0x101da090
WinHttpSendRequest
0x101da08c
WinHttpSetOption
0x101da0a4
WinHttpSetTimeouts
0x101da0a8
Wldp.dll
1
WldpIsAppApprovedByPolicy
0x101da0bc
No function matches your filter.