srmscan.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 10
SrmIsNameInExpression
#1 · 0x20070
SrmCalculateCrcHash
#2 · 0x1d2d0
SrmEnsureSystemVolumeInformationFolder
#3 · 0x1d2f0
SrmIsInCluster
#4 · 0x1d310
SrmValidateNamespaceRoots
#5 · 0x1d450
SrmCreateOrDeleteNotificationScheduledTask
#6 · 0x1d5c0
SrmUtcFileTimeToLocalFileTime
#7 · 0x1d860
SrmLocalFileTimeToUtcFileTime
#8 · 0x1d8a0
DllCanUnloadNow
#9 · 0x1d280
DllGetClassObject
#10 · 0x1d2a0
No function matches your filter.
Imported DLLs & functions 236
CLSIDFromString
0x1006b0dc
CoCreateGuid
0x1006b0c8
CoCreateInstance
0x1006b0e4
CoGetInterfaceAndReleaseStream
0x1006b0e0
CoInitializeEx
0x1006b0b8
CoMarshalInterThreadInterfaceInStream
0x1006b0c0
CoRevertToSelf
0x1006b0d4
CoTaskMemAlloc
0x1006b0c4
CoTaskMemFree
0x1006b0d8
CoTaskMemRealloc
0x1006b0b4
CoUninitialize
0x1006b0d0
PropVariantClear
0x1006b0cc
StringFromGUID2
0x1006b0bc
CheckRemoteDebuggerPresent
0x1006b0f8
GetLastError
0x1006b108
SetUnhandledExceptionFilter
0x1006b104
UnhandledExceptionFilter
0x1006b100
CompareFileTime
0x1006b118
CreateDirectoryW
0x1006b124
CreateFileW
0x1006b15c
DeleteFileW
0x1006b12c
FileTimeToLocalFileTime
0x1006b150
FlushFileBuffers
0x1006b140
GetDriveTypeW
0x1006b134
GetFileAttributesW
0x1006b110
GetFileInformationByHandle
0x1006b114
GetFileSizeEx
0x1006b11c
GetFileTime
0x1006b130
GetVolumeInformationW
0x1006b158
GetVolumePathNameW
0x1006b154
LocalFileTimeToFileTime
0x1006b128
ReadFile
0x1006b138
SetFileAttributesW
0x1006b148
SetFileInformationByHandle
0x1006b144
SetFilePointer
0x1006b13c
SetFileTime
0x1006b120
WriteFile
0x1006b14c
GetVolumeNameForVolumeMountPointW
0x1006b164
GetVolumePathNamesForVolumeNameW
0x1006b168
PrivCopyFileExW
0x1006b1a0
DisableThreadLibraryCalls
0x1006b1b4
FreeLibrary
0x1006b1b8
GetProcAddress
0x1006b1ac
LoadLibraryExW
0x1006b1b0
LoadStringW
0x1006b1a8
LoadLibraryW
0x1006b1c0
ExpandEnvironmentStringsW
0x1006b1d8
GetCommandLineW
0x1006b1d4
ExitProcess
0x1006b204
GetCurrentProcess
0x1006b1f0
GetCurrentProcessId
0x1006b1e0
GetCurrentThread
0x1006b1e4
GetCurrentThreadId
0x1006b1e8
OpenProcessToken
0x1006b1fc
OpenThreadToken
0x1006b1f4
SetThreadPriority
0x1006b1f8
SetThreadToken
0x1006b200
TerminateProcess
0x1006b1ec
OpenProcess
0x1006b20c
QueryPerformanceCounter
0x1006b214
RegCloseKey
0x1006b21c
RegOpenKeyExW
0x1006b224
RegQueryValueExW
0x1006b220
RtlCompareMemory
0x1006b22c
PathFindExtensionW
0x1006b234
CreateEventW
0x1006b244
CreateMutexW
0x1006b25c
DeleteCriticalSection
0x1006b23c
EnterCriticalSection
0x1006b250
InitializeCriticalSection
0x1006b248
InitializeCriticalSectionAndSpinCount
0x1006b240
LeaveCriticalSection
0x1006b258
ReleaseMutex
0x1006b24c
SetEvent
0x1006b254
WaitForSingleObject
0x1006b260
Sleep
0x1006b268
WaitForMultipleObjects
0x1006b270
GetLocalTime
0x1006b27c
GetSystemTimeAsFileTime
0x1006b280
GetTickCount
0x1006b278
CloseThreadpoolTimer
0x1006b2a4
CloseThreadpoolWait
0x1006b2a0
CreateThreadpoolTimer
0x1006b294
CreateThreadpoolWait
0x1006b288
SetThreadpoolTimer
0x1006b298
SetThreadpoolWait
0x1006b290
WaitForThreadpoolTimerCallbacks
0x1006b28c
WaitForThreadpoolWaitCallbacks
0x1006b29c
DeregisterEventSource
0x1006b2b4
RegisterEventSourceW
0x1006b2ac
ReportEventW
0x1006b2b0
AddAccessAllowedAceEx
0x1006b2cc
AddAce
0x1006b2d8
CopySid
0x1006b2e0
CreateWellKnownSid
0x1006b2e4
GetAce
0x1006b2e8
GetAclInformation
0x1006b2dc
GetLengthSid
0x1006b2c8
GetTokenInformation
0x1006b2c4
InitializeAcl
0x1006b2bc
InitializeSecurityDescriptor
0x1006b2d4
MapGenericMask
0x1006b2c0
SetSecurityDescriptorDacl
0x1006b2d0
AddResourceAttributeAce
0x1006b2f0
LookupAccountSidW
0x1006b2f8
ConvertSidToStringSidW
0x1006b30c
GetNodeClusterState
0x1006b028
DsGetDcNameW
0x1006b314
msdrm.dll
26
DRMAcquireIssuanceLicenseTemplate
0x1006b37c
DRMAcquireLicense
0x1006b35c
DRMActivate
0x1006b354
DRMAddRightWithUser
0x1006b348
DRMCloseEnvironmentHandle
0x1006b338
DRMCloseHandle
0x1006b374
DRMClosePubHandle
0x1006b328
DRMCloseSession
0x1006b320
DRMCreateClientSession
0x1006b334
DRMCreateIssuanceLicense
0x1006b32c
DRMCreateRight
0x1006b344
DRMCreateUser
0x1006b31c
DRMEnumerateLicense
0x1006b34c
DRMGetIssuanceLicenseTemplate
0x1006b370
DRMGetNameAndDescription
0x1006b324
DRMGetSecurityProvider
0x1006b380
DRMGetServiceLocation
0x1006b36c
DRMInitEnvironment
0x1006b364
DRMIsActivated
0x1006b340
DRMpCloseFile
0x1006b33c
DRMpFileInitialize
0x1006b368
DRMpFileIsProtected
0x1006b358
DRMpFileProtect
0x1006b378
DRMRepair
0x1006b330
DRMSetGlobalOptions
0x1006b350
DRMSetMetaData
0x1006b360
msvcrt.dll
42
__CxxFrameHandler3
0x1006b388
__dllonexit
0x1006b3a4
_amsg_exit
0x1006b3e0
_callnewh
0x1006b3fc
_CxxThrowException
0x1006b3e8
_errno
0x1006b3bc
_except_handler4_common
0x1006b38c
_i64tow_s
0x1006b3c0
_initterm
0x1006b3b4
_lock
0x1006b3ac
_onexit
0x1006b3a0
_purecall
0x1006b424
_snwscanf_s
0x1006b3dc
_unlock
0x1006b3a8
_vsnprintf
0x1006b3d8
_vsnwprintf
0x1006b40c
_wcsicmp
0x1006b408
_wcsnicmp
0x1006b3f4
_wcstoui64
0x1006b3c4
_wtoi64
0x1006b428
_XcptFilter
0x1006b3e4
??0exception@@QAE@ABQBD@Z
0x1006b418
??0exception@@QAE@ABV0@@Z
0x1006b414
??0exception@@QAE@XZ
0x1006b3ec
??1exception@@UAE@XZ
0x1006b41c
??1type_info@@UAE@XZ
0x1006b390
?terminate@@YAXXZ
0x1006b3b0
?what@exception@@UBEPBDXZ
0x1006b420
free
0x1006b3f8
iswalpha
0x1006b3d0
iswdigit
0x1006b3d4
malloc
0x1006b3f0
memcmp
0x1006b394
memcpy
0x1006b398
memmove
0x1006b39c
memset
0x1006b42c
towlower
0x1006b410
wcschr
0x1006b404
wcsncmp
0x1006b3cc
wcsrchr
0x1006b400
wcstol
0x1006b3c8
wcstoul
0x1006b3b8
NetApiBufferFree
0x1006b434
NtCreateFile
0x1006b44c
RtlCreateSystemVolumeInformationFolder
0x1006b444
RtlDosPathNameToRelativeNtPathName_U
0x1006b448
RtlFreeHeap
0x1006b43c
RtlInitializeSid
0x1006b458
RtlInitUnicodeString
0x1006b454
RtlNtStatusToDosError
0x1006b450
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
0x1006b440
OLEAUT32.dll
17
GetErrorInfo
0x1006b03c
LoadRegTypeLib
0x1006b05c
SafeArrayCopy
0x1006b048
SafeArrayCreateVector
0x1006b06c
SafeArrayDestroy
0x1006b064
SafeArrayGetElement
0x1006b050
SafeArrayGetLBound
0x1006b04c
SafeArrayGetUBound
0x1006b058
SafeArrayGetVartype
0x1006b040
SafeArrayPutElement
0x1006b068
SysAllocString
0x1006b038
SysAllocStringLen
0x1006b070
SysFreeString
0x1006b044
SysStringLen
0x1006b030
VariantClear
0x1006b034
VariantCopy
0x1006b060
VariantInit
0x1006b054
PropVariantToStringAlloc
0x1006b078
0x1006b080
0x1006b084
0x1006b088
0x1006b08c
0x1006b090
0x1006b094
0x1006b098
0x1006b09c
0x1006b0a0
No function matches your filter.