PrintWorkflowService.dll

Description: Microsoft Windows Print Workflow Service Internal

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: fc176e751067926df06927303158789c

File Size: 374.5 KB

Uploaded At: Dec. 1, 2025, 8:03 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x16c70)
SvchostPushServiceGlobals (Ordinal: 2, Address: 0x16c40)
DllCanUnloadNow (Ordinal: 3, Address: 0x166f0)
DllGetActivationFactory (Ordinal: 4, Address: 0x16730)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackagesByPackageFamily (Address: 0x10058014)

api-ms-win-appmodel-state-l1-2-0.dll

CloseState (Address: 0x1005801c)
GetSystemAppDataKey (Address: 0x10058024)
OpenStateExplicit (Address: 0x10058020)

api-ms-win-appmodel-unlock-l1-1-0.dll

IsDeveloperModeEnabled (Address: 0x1005802c)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10058034)

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x1005803c)

api-ms-win-core-biptcltapi-l1-1-7.dll

BiPtActivateInBackground (Address: 0x10058048)
BiPtQueryWorkItemStatusStateName (Address: 0x10058044)

api-ms-win-core-com-l1-1-0.dll

CoAddRefServerProcess (Address: 0x10058088)
CoCreateFreeThreadedMarshaler (Address: 0x10058070)
CoCreateGuid (Address: 0x100580a0)
CoCreateInstance (Address: 0x10058054)
CoDecrementMTAUsage (Address: 0x10058060)
CoDisconnectContext (Address: 0x10058050)
CoGetCallContext (Address: 0x10058098)
CoGetClassObject (Address: 0x1005805c)
CoGetMalloc (Address: 0x10058074)
CoGetObjectContext (Address: 0x10058068)
CoGetStdMarshalEx (Address: 0x1005809c)
CoImpersonateClient (Address: 0x10058090)
CoIncrementMTAUsage (Address: 0x100580ac)
CoInitializeEx (Address: 0x1005808c)
CoRegisterClassObject (Address: 0x10058064)
CoReleaseServerProcess (Address: 0x10058080)
CoResumeClassObjects (Address: 0x100580a4)
CoRevertToSelf (Address: 0x10058094)
CoRevokeClassObject (Address: 0x10058084)
CoTaskMemAlloc (Address: 0x1005807c)
CoTaskMemFree (Address: 0x1005806c)
CoUninitialize (Address: 0x10058078)
CreateStreamOnHGlobal (Address: 0x10058058)
StringFromGUID2 (Address: 0x100580a8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x100580b4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100580c4)
IsDebuggerPresent (Address: 0x100580bc)
OutputDebugStringW (Address: 0x100580c0)

api-ms-win-core-debug-l1-1-1.dll

CheckRemoteDebuggerPresent (Address: 0x100580cc)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100580d4)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100580dc)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100580f0)
RaiseException (Address: 0x100580ec)
SetLastError (Address: 0x100580e4)
SetUnhandledExceptionFilter (Address: 0x100580f4)
UnhandledExceptionFilter (Address: 0x100580e8)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x10058100)
CreateFileW (Address: 0x100580fc)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x10058108)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10058114)
DuplicateHandle (Address: 0x10058110)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10058124)
HeapAlloc (Address: 0x10058120)
HeapFree (Address: 0x1005811c)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10058130)
LocalFree (Address: 0x1005812c)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1005813c)
InterlockedFlushSList (Address: 0x10058138)
InterlockedPushEntrySList (Address: 0x10058140)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

UnregisterWait (Address: 0x10058148)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1005815c)
FreeLibrary (Address: 0x10058160)
GetModuleFileNameA (Address: 0x10058154)
GetModuleHandleExW (Address: 0x10058164)
GetModuleHandleW (Address: 0x10058158)
GetProcAddress (Address: 0x10058150)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1005816c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10058174)

api-ms-win-core-path-l1-1-0.dll

PathCchCombineEx (Address: 0x1005817c)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x10058188)
GetCurrentProcess (Address: 0x100581a8)
GetCurrentProcessId (Address: 0x10058194)
GetCurrentThread (Address: 0x100581a0)
GetCurrentThreadId (Address: 0x1005818c)
GetExitCodeThread (Address: 0x10058190)
GetProcessId (Address: 0x1005819c)
OpenProcessToken (Address: 0x10058184)
OpenThreadToken (Address: 0x100581a4)
TerminateProcess (Address: 0x10058198)

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcessorNumber (Address: 0x100581b8)
IsProcessorFeaturePresent (Address: 0x100581b4)
OpenProcess (Address: 0x100581b0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100581c0)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x100581c8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100581d8)
RegCreateKeyExW (Address: 0x100581e0)
RegGetValueW (Address: 0x100581d0)
RegOpenCurrentUser (Address: 0x100581d4)
RegOpenKeyExW (Address: 0x100581dc)
RegQueryValueExW (Address: 0x100581e4)

api-ms-win-core-registry-l2-1-0.dll

RegOpenKeyW (Address: 0x100581ec)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x100581f4)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10058204)
MultiByteToWideChar (Address: 0x10058200)
WideCharToMultiByte (Address: 0x100581fc)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10058240)
AcquireSRWLockShared (Address: 0x10058258)
CreateEventExW (Address: 0x10058210)
CreateEventW (Address: 0x1005821c)
CreateMutexExW (Address: 0x10058254)
CreateSemaphoreExW (Address: 0x10058220)
DeleteCriticalSection (Address: 0x1005825c)
EnterCriticalSection (Address: 0x10058214)
InitializeCriticalSectionAndSpinCount (Address: 0x10058230)
InitializeCriticalSectionEx (Address: 0x10058224)
InitializeSRWLock (Address: 0x10058234)
LeaveCriticalSection (Address: 0x10058244)
OpenSemaphoreW (Address: 0x1005824c)
ReleaseMutex (Address: 0x1005822c)
ReleaseSemaphore (Address: 0x10058218)
ReleaseSRWLockExclusive (Address: 0x10058238)
ReleaseSRWLockShared (Address: 0x10058250)
ResetEvent (Address: 0x1005820c)
SetEvent (Address: 0x1005823c)
WaitForSingleObject (Address: 0x10058228)
WaitForSingleObjectEx (Address: 0x10058248)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x10058270)
InitOnceComplete (Address: 0x10058268)
InitOnceExecuteOnce (Address: 0x10058264)
Sleep (Address: 0x1005826c)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x10058278)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x10058280)
GetTickCount (Address: 0x10058284)
GetTickCount64 (Address: 0x10058288)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100582a4)
CloseThreadpoolWait (Address: 0x10058298)
CreateThreadpoolTimer (Address: 0x100582ac)
CreateThreadpoolWait (Address: 0x100582a8)
SetThreadpoolTimer (Address: 0x10058294)
SetThreadpoolWait (Address: 0x10058290)
TrySubmitThreadpoolCallback (Address: 0x1005829c)
WaitForThreadpoolTimerCallbacks (Address: 0x100582a0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100582b4)
EncodePointer (Address: 0x100582b8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x100582cc)
RoFailFastWithErrorContext (Address: 0x100582c4)
RoOriginateError (Address: 0x100582d4)
RoOriginateErrorW (Address: 0x100582d0)
RoTransformError (Address: 0x100582c0)
SetRestrictedErrorInfo (Address: 0x100582c8)

api-ms-win-core-winrt-error-l1-1-1.dll

RoGetMatchingRestrictedErrorInfo (Address: 0x100582e0)
RoOriginateLanguageException (Address: 0x100582dc)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x100582ec)
RoGetActivationFactory (Address: 0x100582e8)
RoInitialize (Address: 0x100582f4)
RoRegisterActivationFactories (Address: 0x100582fc)
RoRevokeActivationFactories (Address: 0x100582f0)
RoUninitialize (Address: 0x100582f8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x10058328)
WindowsCreateStringReference (Address: 0x10058308)
WindowsDeleteString (Address: 0x10058314)
WindowsDeleteStringBuffer (Address: 0x10058304)
WindowsDuplicateString (Address: 0x10058318)
WindowsGetStringRawBuffer (Address: 0x10058310)
WindowsIsStringEmpty (Address: 0x10058320)
WindowsPreallocateStringBuffer (Address: 0x1005830c)
WindowsPromoteStringBuffer (Address: 0x1005831c)
WindowsStringHasEmbeddedNull (Address: 0x10058324)
WindowsSubstringWithSpecifiedLength (Address: 0x1005832c)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x100583b4)
__std_terminate (Address: 0x100583b0)
_CxxThrowException (Address: 0x10058378)
_except_handler4_common (Address: 0x10058374)
_o___std_exception_copy (Address: 0x100583a8)
_o___std_exception_destroy (Address: 0x100583a4)
_o___std_type_info_destroy_list (Address: 0x100583a0)
_o___stdio_common_vsnprintf_s (Address: 0x1005839c)
_o___stdio_common_vswprintf (Address: 0x10058398)
_o___stdio_common_vswprintf_s (Address: 0x10058394)
_o__callnewh (Address: 0x10058388)
_o__cexit (Address: 0x10058380)
_o__configure_narrow_argv (Address: 0x1005837c)
_o__crt_atexit (Address: 0x10058354)
_o__errno (Address: 0x1005838c)
_o__execute_onexit_table (Address: 0x10058384)
_o__initialize_narrow_environment (Address: 0x10058334)
_o__initialize_onexit_table (Address: 0x10058338)
_o__invalid_parameter_noinfo (Address: 0x1005833c)
_o__invalid_parameter_noinfo_noreturn (Address: 0x10058340)
_o__itow_s (Address: 0x10058344)
_o__purecall (Address: 0x10058348)
_o__register_onexit_function (Address: 0x1005834c)
_o__seh_filter_dll (Address: 0x10058350)
_o__wcsicmp (Address: 0x1005835c)
_o_free (Address: 0x10058360)
_o_iswspace (Address: 0x10058364)
_o_malloc (Address: 0x10058368)
_o_terminate (Address: 0x1005836c)
_o_toupper (Address: 0x10058370)
memcmp (Address: 0x100583b8)
memcpy (Address: 0x100583bc)
memmove (Address: 0x10058358)
wcschr (Address: 0x100583ac)
wcsrchr (Address: 0x10058390)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100583c4)
_initterm_e (Address: 0x100583c8)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100583d4)
wcscspn (Address: 0x100583d0)

api-ms-win-devices-query-l1-1-0.dll

DevFreeObjectProperties (Address: 0x100583dc)
DevGetObjectProperties (Address: 0x100583e0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100583fc)
EventProviderEnabled (Address: 0x100583f8)
EventRegister (Address: 0x100583ec)
EventSetInformation (Address: 0x100583f4)
EventUnregister (Address: 0x100583f0)
EventWriteTransfer (Address: 0x100583e8)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x10058408)
PowerSettingUnregisterNotification (Address: 0x10058404)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DispatchMessageW (Address: 0x10058410)
PeekMessageW (Address: 0x10058418)
PostMessageW (Address: 0x1005841c)
RegisterClassExW (Address: 0x10058420)
TranslateMessage (Address: 0x10058414)

api-ms-win-security-base-l1-1-0.dll

GetSecurityDescriptorSacl (Address: 0x10058428)
GetSidSubAuthority (Address: 0x10058430)
GetSidSubAuthorityCount (Address: 0x1005842c)
GetTokenInformation (Address: 0x10058434)

api-ms-win-security-provider-l1-1-0.dll

SetNamedSecurityInfoW (Address: 0x1005843c)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10058444)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x1005844c)
SetServiceStatus (Address: 0x10058450)

api-ms-win-shcore-comhelpers-l1-1-0.dll

IUnknown_QueryService (Address: 0x10058458)

api-ms-win-shcore-stream-l1-1-0.dll

IStream_Write (Address: 0x10058464)
SHCreateMemStream (Address: 0x10058468)
SHCreateStreamOnFileEx (Address: 0x10058460)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOverStream (Address: 0x10058474)
CreateStreamOverRandomAccessStream (Address: 0x10058470)

combase.dll

(Address: 0x1005847c)
(Address: 0x10058480)
(Address: 0x10058484)
(Address: 0x10058488)
(Address: 0x1005848c)

msvcp_win.dll

_Xtime_get_ticks (Address: 0x100584a4)
?__ExceptionPtrAssign@@YAXPAXPBX@Z (Address: 0x100584b0)
?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x100584a8)
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z (Address: 0x10058498)
?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x100584a0)
?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x100584bc)
?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x100584ac)
?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x1005849c)
?_Xbad_function_call@std@@YAXXZ (Address: 0x10058494)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x100584b8)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100584b4)

ntdll.dll

NtQueryInformationToken (Address: 0x100584d0)
NtQueryWnfStateData (Address: 0x100584c8)
RtlAllocateHeap (Address: 0x100584dc)
RtlCompareUnicodeString (Address: 0x100584e4)
RtlFreeHeap (Address: 0x100584cc)
RtlGetDeviceFamilyInfoEnum (Address: 0x100584d8)
RtlInitUnicodeString (Address: 0x100584e8)
RtlNtStatusToDosErrorNoTeb (Address: 0x100584e0)
RtlSubscribeWnfStateChangeNotification (Address: 0x100584d4)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100584c4)

OLEAUT32.dll

SysFreeString (Address: 0x10058000)
SysStringLen (Address: 0x10058004)

OnDemandBrokerClient.dll

CreateOnDemandBrokerClient (Address: 0x1005800c)