CmService.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
ServiceMain
#1 · 0x14740
SvchostPushServiceGlobals
#2 · 0x14730
No function matches your filter.
Imported DLLs & functions 322
AppContainerDeriveSidFromMoniker
0x1800d07c0
AppContainerRegisterSid
0x1800d07c8
DebugBreak
0x1800d0800
IsDebuggerPresent
0x1800d07f8
OutputDebugStringW
0x1800d07f0
GetLastError
0x1800d0828
RaiseException
0x1800d0820
SetLastError
0x1800d0830
SetUnhandledExceptionFilter
0x1800d0810
UnhandledExceptionFilter
0x1800d0818
CreateDirectoryW
0x1800d0848
CreateFileW
0x1800d0880
DeleteFileW
0x1800d0878
DeleteVolumeMountPointW
0x1800d0860
FindClose
0x1800d0888
FindFirstFileExW
0x1800d0858
FindNextFileW
0x1800d08b0
GetFileAttributesExW
0x1800d08b8
GetFileAttributesW
0x1800d08a0
GetFileSize
0x1800d0850
GetFileSizeEx
0x1800d0898
GetFinalPathNameByHandleW
0x1800d0890
ReadFile
0x1800d0840
RemoveDirectoryW
0x1800d08c0
SetFileAttributesW
0x1800d0870
SetFileInformationByHandle
0x1800d0868
WriteFile
0x1800d08a8
GetTempPathW
0x1800d08d0
GetVolumeNameForVolumeMountPointW
0x1800d08d8
CopyFileW
0x1800d0900
GetProcessHeap
0x1800d0930
HeapAlloc
0x1800d0938
HeapFree
0x1800d0928
InitializeSListHead
0x1800d0960
DisableThreadLibraryCalls
0x1800d09c8
FreeLibrary
0x1800d09a8
GetModuleFileNameA
0x1800d09c0
GetModuleHandleExW
0x1800d09b8
GetModuleHandleW
0x1800d09b0
GetProcAddress
0x1800d09d0
LoadLibraryExA
0x1800d09a0
FormatMessageW
0x1800d09e0
GetLargePageMinimum
0x1800d0a08
CreateProcessAsUserW
0x1800d0a40
CreateProcessW
0x1800d0a90
CreateThread
0x1800d0a38
DeleteProcThreadAttributeList
0x1800d0a30
GetCurrentProcess
0x1800d0a80
GetCurrentProcessId
0x1800d0a60
GetCurrentThread
0x1800d0a68
GetCurrentThreadId
0x1800d0a70
GetExitCodeProcess
0x1800d0a18
GetProcessId
0x1800d0a58
InitializeProcThreadAttributeList
0x1800d0a48
OpenProcessToken
0x1800d0a78
OpenThreadToken
0x1800d0a88
SetThreadToken
0x1800d0a20
TerminateProcess
0x1800d0a50
UpdateProcThreadAttribute
0x1800d0a28
IsProcessorFeaturePresent
0x1800d0aa8
OpenProcess
0x1800d0aa0
QueryPerformanceCounter
0x1800d0ab8
QueryUnbiasedInterruptTime
0x1800d0ac8
RegCloseKey
0x1800d0b10
RegCreateKeyExW
0x1800d0ae8
RegDeleteKeyExW
0x1800d0b28
RegDeleteValueW
0x1800d0b18
RegEnumKeyExW
0x1800d0b30
RegEnumValueW
0x1800d0b20
RegGetValueW
0x1800d0ae0
RegLoadKeyW
0x1800d0af8
RegNotifyChangeKeyValue
0x1800d0ad8
RegOpenKeyExW
0x1800d0b00
RegSetValueExW
0x1800d0b08
RegUnLoadKeyW
0x1800d0af0
RegCreateKeyTransactedW
0x1800d0b48
RegDeleteKeyTransactedW
0x1800d0b58
RegDeleteKeyW
0x1800d0b50
RegOpenKeyTransactedW
0x1800d0b40
StrStrW
0x1800d0b68
CompareStringOrdinal
0x1800d0b78
AcquireSRWLockExclusive
0x1800d0ba8
AcquireSRWLockShared
0x1800d0bb0
CreateEventExW
0x1800d0bd8
CreateMutexExW
0x1800d0bc8
CreateSemaphoreExW
0x1800d0ba0
DeleteCriticalSection
0x1800d0be0
EnterCriticalSection
0x1800d0b88
InitializeCriticalSectionEx
0x1800d0b98
LeaveCriticalSection
0x1800d0b90
OpenSemaphoreW
0x1800d0bd0
ReleaseMutex
0x1800d0bf8
ReleaseSemaphore
0x1800d0bf0
ReleaseSRWLockExclusive
0x1800d0c08
ReleaseSRWLockShared
0x1800d0be8
ResetEvent
0x1800d0c10
SetEvent
0x1800d0c00
WaitForSingleObject
0x1800d0bc0
WaitForSingleObjectEx
0x1800d0bb8
InitOnceBeginInitialize
0x1800d0c20
InitOnceComplete
0x1800d0c50
Sleep
0x1800d0c30
SleepConditionVariableSRW
0x1800d0c40
WaitOnAddress
0x1800d0c48
WakeByAddressAll
0x1800d0c28
WakeConditionVariable
0x1800d0c38
WaitForMultipleObjects
0x1800d0c60
GetComputerNameExW
0x1800d0c80
GetSystemDirectoryW
0x1800d0ca0
GetSystemInfo
0x1800d0c88
GetSystemTimeAsFileTime
0x1800d0c70
GetSystemWindowsDirectoryW
0x1800d0c90
GetTickCount
0x1800d0c98
GetVersionExW
0x1800d0c78
DnsHostnameToComputerNameExW
0x1800d0cb0
CallbackMayRunLong
0x1800d0d08
CloseThreadpoolTimer
0x1800d0d10
CloseThreadpoolWait
0x1800d0cd0
CloseThreadpoolWork
0x1800d0ce0
CreateThreadpoolTimer
0x1800d0cf8
CreateThreadpoolWait
0x1800d0d28
CreateThreadpoolWork
0x1800d0cc8
IsThreadpoolTimerSet
0x1800d0d00
SetThreadpoolTimer
0x1800d0cf0
SetThreadpoolWait
0x1800d0d20
SubmitThreadpoolWork
0x1800d0cc0
WaitForThreadpoolTimerCallbacks
0x1800d0ce8
WaitForThreadpoolWaitCallbacks
0x1800d0d18
WaitForThreadpoolWorkCallbacks
0x1800d0cd8
ceilf
0x1800d0d38
__C_specific_handler
0x1800d0e08
__CxxFrameHandler3
0x1800d0e10
__CxxFrameHandler4
0x1800d0e90
__std_terminate
0x1800d0e88
_CxxThrowException
0x1800d0e18
_o___std_exception_copy
0x1800d0e78
_o___std_exception_destroy
0x1800d0e70
_o___std_type_info_destroy_list
0x1800d0e68
_o___stdio_common_vsnprintf_s
0x1800d0e60
_o___stdio_common_vsnwprintf_s
0x1800d0e58
_o___stdio_common_vswprintf
0x1800d0e50
_o___stdio_common_vswprintf_s
0x1800d0e48
_o__callnewh
0x1800d0e38
_o__cexit
0x1800d0e30
_o__configure_narrow_argv
0x1800d0e28
_o__crt_atexit
0x1800d0e20
_o__errno
0x1800d0e80
_o__execute_onexit_table
0x1800d0e40
_o__initialize_narrow_environment
0x1800d0d48
_o__initialize_onexit_table
0x1800d0d50
_o__invalid_parameter_noinfo
0x1800d0d58
_o__invalid_parameter_noinfo_noreturn
0x1800d0d60
_o__purecall
0x1800d0d68
_o__register_onexit_function
0x1800d0d70
_o__seh_filter_dll
0x1800d0d78
_o__set_errno
0x1800d0d80
_o__wcstoi64
0x1800d0d88
_o__wtoi
0x1800d0d98
_o_abort
0x1800d0da0
_o_calloc
0x1800d0da8
_o_free
0x1800d0db0
_o_iswxdigit
0x1800d0db8
_o_malloc
0x1800d0dc0
_o_srand
0x1800d0dc8
_o_terminate
0x1800d0dd0
_o_toupper
0x1800d0dd8
_o_wcscpy_s
0x1800d0de0
_o_wcsncat_s
0x1800d0de8
_o_wcsncpy_s
0x1800d0df0
_o_wcstod
0x1800d0df8
_o_wcstoull
0x1800d0e00
memcmp
0x1800d0e98
memcpy
0x1800d0ea0
memmove
0x1800d0d90
EventActivityIdControl
0x1800d0ef0
EventProviderEnabled
0x1800d0ee8
EventRegister
0x1800d0f08
EventSetInformation
0x1800d0f10
EventUnregister
0x1800d0f00
EventWriteTransfer
0x1800d0ef8
AccessCheck
0x1800d0f20
AdjustTokenPrivileges
0x1800d0f50
AllocateAndInitializeSid
0x1800d0f70
DestroyPrivateObjectSecurity
0x1800d0f40
FreeSid
0x1800d0f48
GetSecurityDescriptorDacl
0x1800d0f58
GetSidLengthRequired
0x1800d0f78
GetSidSubAuthority
0x1800d0f68
GetTokenInformation
0x1800d0f28
InitializeSid
0x1800d0f60
MapGenericMask
0x1800d0f80
PrivilegeCheck
0x1800d0f38
RevertToSelf
0x1800d0f30
LookupPrivilegeValueW
0x1800d0f90
GetNamedSecurityInfoW
0x1800d0fa8
GetSecurityInfo
0x1800d0fb0
SetEntriesInAclW
0x1800d0fa0
SetNamedSecurityInfoW
0x1800d0fc0
SetSecurityInfo
0x1800d0fb8
ConvertSidToStringSidW
0x1800d0fe0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800d0fd0
ConvertStringSidToSidW
0x1800d0fd8
BuildTrusteeWithSidW
0x1800d0ff0
RegisterServiceCtrlHandlerExW
0x1800d1008
SetServiceStatus
0x1800d1000
CloseServiceHandle
0x1800d1028
OpenSCManagerW
0x1800d1030
OpenServiceW
0x1800d1020
StartServiceW
0x1800d1018
QueryServiceStatus
0x1800d1040
SHCreateMemStream
0x1800d1058
SHCreateStreamOnFileW
0x1800d1050
GetPersistedRegistryLocationW
0x1800d1068
BCryptCloseAlgorithmProvider
0x1800d1088
BCryptCreateHash
0x1800d10a0
BCryptDestroyHash
0x1800d1098
BCryptFinishHash
0x1800d1078
BCryptGetProperty
0x1800d1090
BCryptHashData
0x1800d10a8
BCryptOpenAlgorithmProvider
0x1800d1080
HcnCloseGuestNetworkService
0x1800d10d8
HcnCreateGuestNetworkService
0x1800d10c8
HcnDeleteGuestNetworkService
0x1800d10b8
HcnModifyGuestNetworkService
0x1800d10c0
HcnOpenGuestNetworkService
0x1800d10d0
CryptBinaryToStringW
0x1800d0690
?_Xinvalid_argument@std@@YAXPEBD@Z
0x1800d10f8
?_Xlength_error@std@@YAXPEBD@Z
0x1800d10f0
?_Xout_of_range@std@@YAXPEBD@Z
0x1800d10e8
ntdll.dll
43
NtClose
0x1800d1138
NtCommitRegistryTransaction
0x1800d11d8
NtCreateRegistryTransaction
0x1800d11c8
NtCreateWnfStateName
0x1800d11e8
NtDeleteWnfStateName
0x1800d1128
NtManagePartition
0x1800d1258
NtOpenFile
0x1800d1110
NtQueryInformationProcess
0x1800d1180
NtQuerySystemInformation
0x1800d1160
NtQueryVirtualMemory
0x1800d1250
NtQueryWnfStateData
0x1800d1130
NtRollbackRegistryTransaction
0x1800d11a8
NtSetInformationFile
0x1800d1140
NtSetInformationJobObject
0x1800d1198
NtSetInformationVirtualMemory
0x1800d1200
NtSetSystemInformation
0x1800d11c0
NtTerminateProcess
0x1800d11e0
RtlAcquirePrivilege
0x1800d11d0
RtlCaptureContext
0x1800d1220
RtlClearAllBits
0x1800d1238
RtlClearBit
0x1800d11f8
RtlDoesFileExists_U
0x1800d1168
RtlDosPathNameToNtPathName_U_WithStatus
0x1800d1150
RtlEqualUnicodeString
0x1800d1188
RtlFindClearBitsAndSet
0x1800d1230
RtlFreeUnicodeString
0x1800d1148
RtlGetNtSystemRoot
0x1800d11b8
RtlInitializeBitMap
0x1800d1208
RtlInitUnicodeString
0x1800d1190
RtlIpv4StringToAddressW
0x1800d11a0
RtlLookupFunctionEntry
0x1800d1218
RtlNtStatusToDosError
0x1800d1108
RtlPublishWnfStateData
0x1800d1118
RtlQueryAllFeatureConfigurations
0x1800d11b0
RtlQueryUnbiasedInterruptTime
0x1800d1178
RtlReleasePrivilege
0x1800d11f0
RtlSetBits
0x1800d1228
RtlSubscribeWnfStateChangeNotification
0x1800d1170
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800d1158
RtlVirtualUnwind
0x1800d1210
RtlWaitForWnfMetaNotification
0x1800d1120
RtlWaitOnAddress
0x1800d1248
RtlWakeAddressAll
0x1800d1240
RPCRT4.dll
21
NdrClientCall3
0x1800d0718
NdrServerCall2
0x1800d06f8
NdrServerCallAll
0x1800d0708
RpcBindingFree
0x1800d0748
RpcBindingFromStringBindingW
0x1800d0728
RpcBindingSetAuthInfoExW
0x1800d0740
RpcBindingVectorFree
0x1800d06c0
RpcEpRegisterW
0x1800d0750
RpcEpUnregister
0x1800d0758
RpcImpersonateClient
0x1800d0760
RpcRevertToSelfEx
0x1800d06c8
RpcServerInqBindings
0x1800d0710
RpcServerRegisterIf3
0x1800d06d8
RpcServerUnregisterIfEx
0x1800d06e8
RpcServerUseProtseqW
0x1800d06f0
RpcStringBindingComposeW
0x1800d0730
RpcStringFreeW
0x1800d0738
UuidCompare
0x1800d06e0
UuidCreate
0x1800d06d0
UuidFromStringW
0x1800d0700
UuidToStringW
0x1800d0720
CreateAppContainerProfile
0x1800d0788
CreateEnvironmentBlock
0x1800d0770
DeleteAppContainerProfile
0x1800d0780
DestroyEnvironmentBlock
0x1800d0778
GetAllUsersProfileDirectoryW
0x1800d0790
CreateVirtualDisk
0x1800d07a0
CreateXmlReader
0x1800d07b0
No function matches your filter.