pla.dll
v10.0.19041.1
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 15
ServiceMain
#1 · 0x1d400
SvchostPushServiceGlobals
#2 · 0x1d850
DllCanUnloadNow
#3 · 0x1c8e0
DllGetClassObject
#4 · 0x1c900
DllRegisterServer
#5 · 0x1cb60
DllUnregisterServer
#6 · 0x1cb60
PlaDeleteReport
#7 · 0x139bf0
PlaExpandTaskArguments
#8 · 0x115c70
PlaExtractCabinet
#9 · 0x139d20
PlaGetLegacyAlertActionsFlagsFromString
#10 · 0xf0be0
PlaGetLegacyAlertActionsStringFromFlags
#11 · 0xf1100
PlaGetServerCapabilities
#12 · 0x4c4d0
PlaHost
#13 · 0x116ec0
PlaServer
#14 · 0x1cb70
PlaUpgrade
#15 · 0x20910
No function matches your filter.
Imported DLLs & functions 282
ADVAPI32.dll
55
AccessCheck
0x1014e020
AddAccessAllowedAceEx
0x1014e03c
AddAce
0x1014e040
AdjustTokenPrivileges
0x1014e08c
CheckTokenMembership
0x1014e0b4
ControlTraceW
0x1014e080
CreateWellKnownSid
0x1014e0b8
DuplicateTokenEx
0x1014e018
EnableTraceEx
0x1014e084
EnumerateTraceGuidsEx
0x1014e07c
EqualSid
0x1014e044
EventAccessQuery
0x1014e090
EventAccessRemove
0x1014e0a0
FlushTraceW
0x1014e070
GetAce
0x1014e048
GetAclInformation
0x1014e04c
GetFileSecurityW
0x1014e024
GetLengthSid
0x1014e054
GetSecurityDescriptorDacl
0x1014e09c
GetSecurityDescriptorGroup
0x1014e05c
GetSecurityDescriptorOwner
0x1014e060
GetSecurityDescriptorSacl
0x1014e098
GetTokenInformation
0x1014e0a4
ImpersonateLoggedOnUser
0x1014e030
InitializeAcl
0x1014e050
InitializeSecurityDescriptor
0x1014e00c
LogonUserW
0x1014e034
LookupAccountNameW
0x1014e028
MakeAbsoluteSD
0x1014e058
OpenProcessToken
0x1014e0a8
OpenThreadToken
0x1014e0ac
QueryAllTracesW
0x1014e06c
QueryTraceW
0x1014e088
RegCloseKey
0x1014e0d0
RegConnectRegistryW
0x1014e0b0
RegCreateKeyExW
0x1014e068
RegDeleteKeyW
0x1014e0c8
RegDeleteValueW
0x1014e064
RegEnumKeyExW
0x1014e0bc
RegEnumKeyW
0x1014e010
RegEnumValueW
0x1014e0c0
RegFlushKey
0x1014e014
RegOpenKeyExW
0x1014e0d8
RegQueryInfoKeyW
0x1014e0c4
RegQueryValueExW
0x1014e0d4
RegSetValueExW
0x1014e0cc
RevertToSelf
0x1014e02c
SetNamedSecurityInfoW
0x1014e094
SetSecurityDescriptorDacl
0x1014e038
SetSecurityDescriptorGroup
0x1014e004
SetSecurityDescriptorOwner
0x1014e008
SetThreadToken
0x1014e01c
StartTraceW
0x1014e000
StopTraceW
0x1014e074
UpdateTraceW
0x1014e078
RegisterServiceCtrlHandlerExW
0x1014e328
SetServiceStatus
0x1014e32c
CloseServiceHandle
0x1014e340
OpenSCManagerW
0x1014e334
OpenServiceW
0x1014e338
StartServiceW
0x1014e33c
ChangeServiceConfig2W
0x1014e350
ChangeServiceConfigW
0x1014e348
QueryServiceConfigW
0x1014e34c
KERNEL32.dll
105
CloseHandle
0x1014e110
CompareStringW
0x1014e1d8
CopyFileExW
0x1014e12c
CopyFileW
0x1014e294
CreateDirectoryW
0x1014e23c
CreateEventW
0x1014e10c
CreateFileW
0x1014e1a0
CreateProcessW
0x1014e284
CreateThread
0x1014e1f0
CreateWaitableTimerW
0x1014e1e0
DebugBreak
0x1014e1fc
DelayLoadFailureHook
0x1014e134
DeleteCriticalSection
0x1014e210
DeleteFileW
0x1014e29c
DisableThreadLibraryCalls
0x1014e24c
DosDateTimeToFileTime
0x1014e118
DuplicateHandle
0x1014e1c0
EnterCriticalSection
0x1014e108
ExpandEnvironmentStringsW
0x1014e22c
FileTimeToDosDateTime
0x1014e11c
FileTimeToLocalFileTime
0x1014e214
FileTimeToSystemTime
0x1014e1c8
FindClose
0x1014e1bc
FindFirstFileW
0x1014e1b4
FindNextFileW
0x1014e1b8
FindResourceW
0x1014e148
FormatMessageW
0x1014e13c
FreeLibrary
0x1014e190
FreeResource
0x1014e160
GetCommandLineW
0x1014e178
GetComputerNameW
0x1014e138
GetCurrentProcess
0x1014e170
GetCurrentProcessId
0x1014e1b0
GetCurrentThread
0x1014e16c
GetCurrentThreadId
0x1014e184
GetDateFormatW
0x1014e218
GetDiskFreeSpaceExW
0x1014e220
GetExitCodeProcess
0x1014e280
GetExitCodeThread
0x1014e1ec
GetFileAttributesW
0x1014e174
GetFileInformationByHandle
0x1014e260
GetFileMUIPath
0x1014e278
GetFileSizeEx
0x1014e224
GetFullPathNameW
0x1014e20c
GetLastError
0x1014e254
GetLocaleInfoW
0x1014e230
GetLocalTime
0x1014e234
GetModuleFileNameW
0x1014e204
GetProcessHeap
0x1014e228
GetSystemDirectoryW
0x1014e250
GetSystemTime
0x1014e290
GetSystemTimeAsFileTime
0x1014e1c4
GetTempFileNameW
0x1014e288
GetTempPathW
0x1014e26c
GetTickCount
0x1014e128
GetTickCount64
0x1014e248
GetTimeFormatW
0x1014e21c
GetTimeZoneInformation
0x1014e238
GetUserDefaultUILanguage
0x1014e1d0
GetWindowsDirectoryW
0x1014e258
GlobalAlloc
0x1014e158
GlobalFree
0x1014e168
GlobalLock
0x1014e15c
GlobalUnlock
0x1014e164
HeapAlloc
0x1014e1f4
HeapFree
0x1014e18c
HeapReAlloc
0x1014e1d4
HeapSize
0x1014e1dc
HeapValidate
0x1014e100
InitializeCriticalSection
0x1014e140
IsDebuggerPresent
0x1014e200
IsWow64Process
0x1014e17c
K32GetModuleFileNameExW
0x1014e19c
LeaveCriticalSection
0x1014e104
LoadLibraryExW
0x1014e240
LoadLibraryW
0x1014e274
LoadResource
0x1014e14c
LocalFileTimeToFileTime
0x1014e25c
LocalFree
0x1014e244
LockResource
0x1014e150
MultiByteToWideChar
0x1014e264
OpenEventW
0x1014e2a0
OpenProcess
0x1014e198
QueryPerformanceCounter
0x1014e1ac
RemoveDirectoryW
0x1014e298
ResetEvent
0x1014e194
ResolveDelayLoadedAPI
0x1014e130
SetEvent
0x1014e1f8
SetFileAttributesW
0x1014e268
SetFileTime
0x1014e270
SetPriorityClass
0x1014e28c
SetUnhandledExceptionFilter
0x1014e124
SetWaitableTimer
0x1014e1e4
SizeofResource
0x1014e154
Sleep
0x1014e208
SystemTimeToFileTime
0x1014e1cc
TerminateProcess
0x1014e27c
UnhandledExceptionFilter
0x1014e120
UnregisterWait
0x1014e114
WaitForMultipleObjects
0x1014e1e8
WaitForSingleObject
0x1014e1a8
WideCharToMultiByte
0x1014e144
Wow64DisableWow64FsRedirection
0x1014e180
Wow64RevertWow64FsRedirection
0x1014e188
WriteFile
0x1014e1a4
msvcrt.dll
44
_amsg_exit
0x1014e384
_close
0x1014e39c
_errno
0x1014e394
_except_handler4_common
0x1014e370
_get_osfhandle
0x1014e3b0
_initterm
0x1014e378
_lseek
0x1014e38c
_purecall
0x1014e3f8
_read
0x1014e3a0
_vsnwprintf
0x1014e400
_wcsicmp
0x1014e408
_wcsnicmp
0x1014e3f4
_wfopen
0x1014e3b8
_wgetenv
0x1014e3dc
_wopen
0x1014e3ac
_wremove
0x1014e3a4
_write
0x1014e398
_wsplitpath_s
0x1014e3d8
_wtof
0x1014e3cc
_wtoi
0x1014e3bc
_wtol
0x1014e3d4
_XcptFilter
0x1014e388
??1type_info@@UAE@XZ
0x1014e374
?name@type_info@@QBEPBDXZ
0x1014e3fc
fclose
0x1014e3b4
free
0x1014e380
fwprintf
0x1014e3c4
iswspace
0x1014e3d0
malloc
0x1014e40c
memcmp
0x1014e364
memcpy
0x1014e368
memmove
0x1014e36c
memset
0x1014e410
qsort
0x1014e3c8
rand
0x1014e3e8
srand
0x1014e3a8
swscanf_s
0x1014e3ec
time
0x1014e390
vfwprintf
0x1014e3c0
wcschr
0x1014e404
wcscspn
0x1014e3e4
wcsncmp
0x1014e3f0
wcsrchr
0x1014e37c
wcsstr
0x1014e3e0
ntdll.dll
10
EtwEventRegister
0x1014e43c
EtwEventUnregister
0x1014e434
EtwEventWrite
0x1014e438
EtwNotificationRegister
0x1014e420
EtwNotificationUnregister
0x1014e424
NtQuerySystemInformation
0x1014e41c
NtQuerySystemTime
0x1014e430
RtlFreeUnicodeString
0x1014e42c
RtlNtStatusToDosError
0x1014e418
RtlStringFromGUID
0x1014e428
pdh.dll
11
PdhAddCounterW
0x1014e454
PdhCloseLog
0x1014e464
PdhCloseQuery
0x1014e46c
PdhCollectQueryData
0x1014e450
PdhExpandWildCardPathW
0x1014e458
PdhGetFormattedCounterValue
0x1014e44c
PdhOpenLogW
0x1014e468
PdhOpenQueryW
0x1014e45c
PdhTranslate009CounterW
0x1014e448
PdhTranslateLocaleCounterW
0x1014e444
PdhUpdateLogW
0x1014e460
RPCRT4.dll
17
NdrClientCall4
0x1014e2cc
NdrServerCall2
0x1014e2f0
RpcBindingFree
0x1014e2dc
RpcBindingFromStringBindingW
0x1014e2e4
RpcBindingInqAuthClientW
0x1014e2d4
RpcBindingSetAuthInfoW
0x1014e2e0
RpcBindingToStringBindingW
0x1014e2d0
RpcImpersonateClient
0x1014e2c8
RpcRevertToSelf
0x1014e2c4
RpcServerInqCallAttributesW
0x1014e2b4
RpcServerRegisterIf3
0x1014e2bc
RpcServerUnregisterIfEx
0x1014e2b8
RpcServerUseProtseqEpW
0x1014e2c0
RpcStringBindingComposeW
0x1014e2e8
RpcStringBindingParseW
0x1014e2f4
RpcStringFreeW
0x1014e2d8
UuidCreate
0x1014e2ec
tdh.dll
4
TdhEnumerateProviderFieldInformation
0x1014e478
TdhEnumerateProviders
0x1014e480
TdhEnumerateRemoteWBEMProviderFieldInformation
0x1014e47c
TdhEnumerateRemoteWBEMProviders
0x1014e474
CreateWindowExW
0x1014e320
DestroyWindow
0x1014e30c
DispatchMessageW
0x1014e318
LoadStringW
0x1014e310
MsgWaitForMultipleObjects
0x1014e314
PeekMessageW
0x1014e31c
EvtClose
0x1014e490
EvtCreateRenderContext
0x1014e48c
EvtGetChannelConfigProperty
0x1014e498
EvtNext
0x1014e4a0
EvtOpenChannelConfig
0x1014e494
EvtRender
0x1014e488
EvtSubscribe
0x1014e49c
No function matches your filter.