winrscmd.dll - Online Dependency Analysis & Download

Description

remtsvc

Authors

File size

96.0 KB

Uploaded

2025-12-01 08:07

Views

SHA-256

708ecea198d0173b486c32117277e4ea

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 31

??0?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@XZ #1 · 0x3460

??0?$SafeMap_Iterator@VKey@Locale@@K@@QAE@AAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z #2 · 0x3570

??0?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@ABV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z #3 · 0x3680

??1?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@XZ #4 · 0x33f0

??1?$SafeMap_Iterator@VKey@Locale@@K@@QAE@XZ #5 · 0x34e0

??1?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@XZ #6 · 0x3620

??1CWSManCriticalSectionWithConditionVar@@QAE@XZ #7 · 0x32b0

??_7?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@6B@ #8 · 0x154c

?Acquire@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UBEXXZ #9 · 0x32c0

?Acquire@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAEXXZ #10 · 0x36f0

?Acquired@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE_NXZ #11 · 0x3610

?AsReference@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAEAAV1@XZ #12 · 0x34c0

?Data@?$SafeMap_Iterator@VKey@Locale@@K@@IBEAAV?$STLMap@VKey@Locale@@K@@XZ #13 · 0x3790

?DeInitialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UAE_NAAVIRequestContext@@@Z #14 · 0x32d0

?GetInitError@CWSManCriticalSection@@QBEKXZ #15 · 0x32a0

?GetMap@?$SafeMap_Iterator@VKey@Locale@@K@@QBEAAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ #16 · 0x32a0

?GetMap@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QBEABV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ #17 · 0x32a0

?Initialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UAE_NAAVIRequestContext@@@Z #18 · 0x3330

?IsValid@?$SafeMap_Iterator@VKey@Locale@@K@@QBE_NXZ #19 · 0x34d0

?Release@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UBEXXZ #20 · 0x32c0

?Reset@?$SafeMap_Iterator@VKey@Locale@@K@@QAEXXZ #21 · 0x36b0

?SkipOrphans@?$SafeMap_Iterator@VKey@Locale@@K@@IAEXXZ #22 · 0x3740

WSManPluginCommand #23 · 0x3a40

WSManPluginReceive #24 · 0x3aa0

WSManPluginReleaseCommandContext #25 · 0x3af0

WSManPluginReleaseShellContext #26 · 0x3ae0

WSManPluginSend #27 · 0x3a70

WSManPluginShell #28 · 0x3a10

WSManPluginShutdown #29 · 0x39f0

WSManPluginSignal #30 · 0x3ac0

WSManPluginStartup #31 · 0x39d0

Imported DLLs & functions 141

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x100160ec

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x100160f4

api-ms-win-core-errorhandling-l1-1-0.dll 4

GetLastError 0x100160fc

SetLastError 0x10016100

SetUnhandledExceptionFilter 0x10016104

UnhandledExceptionFilter 0x10016108

api-ms-win-core-file-l1-1-0.dll 2

ReadFile 0x10016110

WriteFile 0x10016114

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x10016120

DuplicateHandle 0x1001611c

api-ms-win-core-heap-l1-1-0.dll 5

GetProcessHeap 0x10016138

HeapAlloc 0x10016128

HeapCreate 0x10016134

HeapDestroy 0x10016130

HeapFree 0x1001612c

api-ms-win-core-heap-obsolete-l1-1-0.dll 1

LocalFree 0x10016140

api-ms-win-core-io-l1-1-0.dll 1

CancelIoEx 0x10016148

api-ms-win-core-job-l2-1-0.dll 4

AssignProcessToJobObject 0x10016154

CreateJobObjectW 0x10016158

SetInformationJobObject 0x10016150

TerminateJobObject 0x1001615c

api-ms-win-core-kernel32-legacy-l1-1-0.dll 1

RegisterWaitForSingleObject 0x10016164

api-ms-win-core-libraryloader-l1-1-0.dll 1

DisableThreadLibraryCalls 0x1001616c

api-ms-win-core-namedpipe-l1-1-0.dll 1

CreatePipe 0x10016174

api-ms-win-core-processthreads-l1-1-0.dll 10

CreateThread 0x100161a0

GetCurrentProcess 0x1001619c

GetCurrentProcessId 0x1001618c

GetCurrentThread 0x10016190

GetCurrentThreadId 0x1001617c

GetExitCodeProcess 0x10016180

OpenProcessToken 0x10016184

OpenThreadToken 0x10016194

ResumeThread 0x10016188

TerminateProcess 0x10016198

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x100161a8

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x100161b0

api-ms-win-core-synch-l1-1-0.dll 7

CreateEventW 0x100161c8

DeleteCriticalSection 0x100161bc

EnterCriticalSection 0x100161c0

InitializeCriticalSection 0x100161cc

LeaveCriticalSection 0x100161b8

SetEvent 0x100161d0

WaitForMultipleObjectsEx 0x100161c4

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x100161d8

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemTimeAsFileTime 0x100161e8

GetTickCount 0x100161e0

GetVersionExW 0x100161e4

api-ms-win-core-threadpool-legacy-l1-1-0.dll 2

QueueUserWorkItem 0x100161f0

UnregisterWaitEx 0x100161f4

api-ms-win-eventing-classicprovider-l1-1-0.dll 6

GetTraceEnableFlags 0x10016210

GetTraceEnableLevel 0x10016208

GetTraceLoggerHandle 0x1001620c

RegisterTraceGuidsW 0x10016204

TraceMessage 0x100161fc

UnregisterTraceGuids 0x10016200

api-ms-win-security-base-l1-1-0.dll 3

CopySid 0x1001621c

GetLengthSid 0x10016218

GetTokenInformation 0x10016220

msvcrt.dll 25

__CxxFrameHandler3 0x10016228

__dllonexit 0x10016278

_amsg_exit 0x10016250

_CxxThrowException 0x10016244

_except_handler4_common 0x10016280

_initterm 0x10016264

_lock 0x10016270

_onexit 0x1001627c

_purecall 0x1001625c

_unlock 0x10016274

_wcsicmp 0x10016230

_wcsnicmp 0x1001622c

_XcptFilter 0x10016284

??0exception@@QAE@ABQBD@Z 0x10016234

??0exception@@QAE@ABQBDH@Z 0x10016258

??0exception@@QAE@ABV0@@Z 0x10016238

??1exception@@UAE@XZ 0x1001623c

??1type_info@@UAE@XZ 0x1001626c

?terminate@@YAXXZ 0x10016268

?what@exception@@UBEPBDXZ 0x10016240

free 0x10016254

malloc 0x10016260

memcpy 0x10016248

memmove 0x1001624c

memset 0x10016288

ntdll.dll 1

RtlInitUnicodeString 0x10016290

RPCRT4.dll 3

RpcStringFreeW 0x10016004

UuidCreate 0x10016008

UuidToStringW 0x10016000

WsmSvc.DLL 54

??0?$AutoDeleteVector@G@@QAE@PAG@Z 0x10016060

??0?$AutoDeleteVector@G@@QAE@XZ 0x100160e0

??0?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QAE@XZ 0x10016058

??0?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QAE@XZ 0x100160e4

??0?$AutoRelease@VCWinRSPluginConfigCache@@@@QAE@XZ 0x10016028

??0?$AutoRelease@VCWinRSPluginConfigSettings@@@@QAE@PAVCWinRSPluginConfigSettings@@@Z 0x10016020

??0AutoHandle@@QAE@PAX@Z 0x10016090

??0AutoHandle@@QAE@XZ 0x1001608c

??0CErrorContext@@QAE@_N@Z 0x10016048

??0CRequestContext@@QAE@PBG@Z 0x100160d8

??0CRequestContext@@QAE@XZ 0x100160c4

??0CWSManCriticalSection@@QAE@XZ 0x10016014

??1?$AutoDeleteVector@G@@QAE@XZ 0x10016094

??1?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QAE@XZ 0x1001604c

??1?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QAE@XZ 0x10016098

??1?$AutoRelease@VCWinRSPluginConfigCache@@@@QAE@XZ 0x10016018

??1?$AutoRelease@VCWinRSPluginConfigSettings@@@@QAE@XZ 0x1001601c

??1AutoHandle@@QAE@XZ 0x10016068

??1CErrorContext@@UAE@XZ 0x10016044

??1CRequestContext@@UAE@XZ 0x100160c8

??1CWSManCriticalSection@@QAE@XZ 0x100160a4

??4?$AutoDeleteVector@G@@QAEAAV0@PAG@Z 0x1001605c

??4?$AutoDeleteVector@U_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@@QAEAAV0@PAU_WINRS_CREATE_SHELL_ENVIRONMENT_VARIABLE@@@Z 0x10016054

??4?$AutoDeleteVector@U_WINRS_RUN_COMMAND_ARG@@@@QAEAAV0@PAU_WINRS_RUN_COMMAND_ARG@@@Z 0x10016050

??4?$AutoRelease@VCWinRSPluginConfigCache@@@@QAEAAV0@PAVCWinRSPluginConfigCache@@@Z 0x10016024

??4AutoHandle@@QAEAAV0@PAX@Z 0x10016080

?Acquire@CWSManCriticalSection@@QAEXXZ 0x1001607c

?Alloc@WSManMemory@@SGPAXIHW4_NitsFaultMode@@@Z 0x100160a0

?CreateActivityId@EventHandler@WSMan@@SGXAAU_GUID@@@Z 0x1001602c

?EnsureActivityIdOnThread@EventHandler@WSMan@@SGXXZ 0x10016084

?Free@WSManMemory@@SGXPAXH@Z 0x1001609c

?GenerateTransferId@EventHandler@WSMan@@SGXABU_EVENT_DESCRIPTOR@@PBU_GUID@@1@Z 0x10016070

?GetConfigCache@CWinRSPluginConfigCache@@SGPAV1@PAVIRequestContext@@W4ErrorLogging@@H@Z 0x10016030

?GetCurrentSettings@CWinRSPluginConfigCache@@QAEPAVCWinRSPluginConfigSettings@@PAVIRequestContext@@@Z 0x10016040

?GetErrorCode@CErrorContext@@UBEKXZ 0x1001603c

?IsEventEnabled@EventHandler@WSMan@@SG_NABU_EVENT_DESCRIPTOR@@@Z 0x10016074

?IsEventProviderEnabled@EventHandler@WSMan@@SG_NXZ 0x10016088

?IsValid@CWSManCriticalSection@@QBEHXZ 0x1001606c

?ProcessContext@CRequestContext@@UAEHHPAU_WSMAN_ERROR@@@Z 0x100160cc

?ProviderShutdownCleanup@CWinRSPluginConfigCache@@SGXXZ 0x100160ac

?RecordFailure@CRequestContext@@UAAXKKZZ 0x100160dc

?Release@CWSManCriticalSection@@QAEXXZ 0x10016078

?Shutdown@CConfigManager@@SGHXZ 0x100160b8

?Shutdown@CWSManGroupPolicyManager@@SGHXZ 0x100160b4

?ShutdownLocaleMap@Locale@@SGXXZ 0x100160b0

?StringToDword@@YGHPBGPAK@Z 0x10016064

StringCchEqualsCI 0x10016034

WrapperCoSetProxyBlanket 0x10016038

WSManError 0x100160a8

WSManPluginFreeRequestDetails 0x100160d4

WSManPluginGetOperationParameters 0x100160c0

WSManPluginOperationComplete 0x100160bc

WSManPluginReceiveResult 0x10016010

WSManPluginReportContext 0x100160d0