FlightSettings.dll
v10.0.19041.2304
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllGetActivationFactory
#1 · 0x58c0
ServiceMain
#2 · 0x6930
SvchostPushServiceGlobals
#3 · 0x66d0
DllCanUnloadNow
#4 · 0x5860
DllGetClassObject
#5 · 0x5650
No function matches your filter.
Imported DLLs & functions 237
ApiSetQueryApiSetPresence
0x1800946d0
DebugBreak
0x180094708
IsDebuggerPresent
0x1800946f8
OutputDebugStringW
0x180094700
DelayLoadFailureHook
0x180094718
ResolveDelayLoadedAPI
0x180094728
GetLastError
0x180094750
RaiseException
0x180094738
SetLastError
0x180094740
SetUnhandledExceptionFilter
0x180094748
UnhandledExceptionFilter
0x180094758
CreateDirectoryW
0x180094778
CreateFileA
0x1800947b0
CreateFileW
0x1800947e8
DefineDosDeviceW
0x180094770
DeleteFileW
0x180094768
FindClose
0x1800947c8
FindFirstFileW
0x1800947e0
FindNextFileW
0x1800947d0
FlushFileBuffers
0x180094788
GetFileAttributesW
0x1800947c0
GetFileSizeEx
0x180094780
GetFullPathNameW
0x180094798
QueryDosDeviceW
0x180094790
ReadFile
0x1800947d8
RemoveDirectoryW
0x1800947b8
SetFilePointer
0x1800947a0
WriteFile
0x1800947a8
GetTempPathW
0x1800947f8
GetFileInformationByHandleEx
0x180094808
CloseHandle
0x180094818
GetProcessHeap
0x180094838
HeapAlloc
0x180094830
HeapFree
0x180094828
CopyFileW
0x180094868
MoveFileW
0x180094870
UnregisterWait
0x180094860
DisableThreadLibraryCalls
0x180094888
FindStringOrdinal
0x180094890
FreeLibrary
0x1800948a8
GetModuleFileNameA
0x1800948a0
GetModuleFileNameW
0x180094898
GetModuleHandleExW
0x1800948b8
GetModuleHandleW
0x1800948b0
GetProcAddress
0x1800948c0
LoadLibraryExW
0x180094880
FormatMessageW
0x1800948d0
GetLocaleInfoW
0x1800948e8
GetSystemPreferredUILanguages
0x1800948e0
GetUserDefaultLocaleName
0x1800948f0
GetUserPreferredUILanguages
0x1800948d8
GetSystemDefaultUILanguage
0x180094900
CreateFileMappingW
0x180094910
MapViewOfFile
0x180094918
UnmapViewOfFile
0x180094920
ExpandEnvironmentStringsW
0x180094948
CreateProcessW
0x180094998
GetCurrentProcess
0x180094980
GetCurrentProcessId
0x180094978
GetCurrentThread
0x180094988
GetCurrentThreadId
0x180094958
GetExitCodeProcess
0x1800949a0
OpenProcessToken
0x180094970
OpenThreadToken
0x180094960
SetThreadToken
0x180094990
TerminateProcess
0x180094968
GetProcessMitigationPolicy
0x1800949b0
OpenProcess
0x1800949b8
QueryPerformanceCounter
0x1800949c8
QueryPerformanceFrequency
0x1800949d0
QueryFullProcessImageNameW
0x1800949e0
RegCloseKey
0x180094a48
RegCreateKeyExW
0x180094a08
RegDeleteKeyExW
0x180094a40
RegDeleteTreeW
0x1800949f8
RegDeleteValueW
0x180094a18
RegEnumKeyExW
0x180094a20
RegEnumValueW
0x180094a00
RegGetValueW
0x180094a30
RegOpenKeyExW
0x180094a28
RegQueryInfoKeyW
0x180094a38
RegQueryValueExW
0x1800949f0
RegSetValueExW
0x180094a10
RegDeleteKeyValueW
0x180094a58
RtlCaptureContext
0x180094a70
RtlLookupFunctionEntry
0x180094a78
RtlVirtualUnwind
0x180094a68
PathFileExistsW
0x180094a90
PathFindFileNameW
0x180094a88
CompareStringOrdinal
0x180094aa0
MultiByteToWideChar
0x180094ab0
WideCharToMultiByte
0x180094aa8
AcquireSRWLockExclusive
0x180094b50
AcquireSRWLockShared
0x180094b40
CreateEventExW
0x180094b58
CreateMutexExW
0x180094b18
CreateMutexW
0x180094b48
CreateSemaphoreExW
0x180094af8
DeleteCriticalSection
0x180094ae0
EnterCriticalSection
0x180094af0
InitializeCriticalSectionEx
0x180094b00
InitializeSRWLock
0x180094ad8
LeaveCriticalSection
0x180094b70
OpenSemaphoreW
0x180094b20
ReleaseMutex
0x180094b38
ReleaseSemaphore
0x180094b68
ReleaseSRWLockExclusive
0x180094b10
ReleaseSRWLockShared
0x180094ae8
SetEvent
0x180094b28
TryEnterCriticalSection
0x180094b08
WaitForSingleObject
0x180094b60
WaitForSingleObjectEx
0x180094b30
InitOnceBeginInitialize
0x180094b98
InitOnceComplete
0x180094b80
InitOnceExecuteOnce
0x180094b90
Sleep
0x180094b88
GetComputerNameExW
0x180094bb8
GetSystemTimeAsFileTime
0x180094ba8
GetSystemWindowsDirectoryW
0x180094bb0
GetTickCount
0x180094bc0
GetProductInfo
0x180094bd0
CloseThreadpoolTimer
0x180094bf0
CreateThreadpoolTimer
0x180094be8
IsThreadpoolTimerSet
0x180094c00
SetThreadpoolTimer
0x180094bf8
WaitForThreadpoolTimerCallbacks
0x180094be0
CreateTimerQueueTimer
0x180094c10
DeleteTimerQueueTimer
0x180094c18
FileTimeToSystemTime
0x180094c30
SystemTimeToFileTime
0x180094c28
UrlEscapeW
0x180094c40
GetFileVersionInfoExW
0x180094c68
GetFileVersionInfoSizeExW
0x180094c70
VerQueryValueW
0x180094c78
EventActivityIdControl
0x180094c88
EventProviderEnabled
0x180094ca8
EventRegister
0x180094c90
EventSetInformation
0x180094cb0
EventUnregister
0x180094c98
EventWriteTransfer
0x180094ca0
AdjustTokenPrivileges
0x180094ce0
AllocateAndInitializeSid
0x180094d00
CheckTokenMembership
0x180094d20
CopySid
0x180094ce8
CreateWellKnownSid
0x180094cd0
DuplicateToken
0x180094cd8
DuplicateTokenEx
0x180094d08
FreeSid
0x180094cf8
GetLengthSid
0x180094d10
GetTokenInformation
0x180094cc0
ImpersonateLoggedOnUser
0x180094cf0
IsValidSid
0x180094cc8
RevertToSelf
0x180094d18
CheckTokenMembershipEx
0x180094d30
ConvertSidToStringSidW
0x180094d40
CloseServiceHandle
0x180094d50
OpenSCManagerW
0x180094d60
OpenServiceW
0x180094d68
StartServiceW
0x180094d58
GetPersistedRegistryLocationW
0x180094d78
GetPersistedRegistryValueW
0x180094d80
msvcrt.dll
46
__C_specific_handler
0x180094ee8
__CxxFrameHandler3
0x180094eb0
__dllonexit
0x180094ec0
_amsg_exit
0x180094f00
_callnewh
0x180094e68
_CxxThrowException
0x180094e60
_get_errno
0x180094e48
_initterm
0x180094ef0
_lock
0x180094ee0
_onexit
0x180094eb8
_purecall
0x180094f18
_set_errno
0x180094e50
_unlock
0x180094ed8
_vsnprintf_s
0x180094e10
_vsnwprintf
0x180094ec8
_wcsicmp
0x180094e00
_wcstoui64
0x180094e38
_wcsupr
0x180094e28
_wtoi
0x180094de0
_wtol
0x180094de8
_XcptFilter
0x180094f08
??0exception@@QEAA@AEBV0@@Z
0x180094e70
??0exception@@QEAA@XZ
0x180094dc8
??1exception@@UEAA@XZ
0x180094dd0
??1type_info@@UEAA@XZ
0x180094e78
?terminate@@YAXXZ
0x180094e88
free
0x180094f10
malloc
0x180094ef8
memcmp
0x180094e58
memcpy
0x180094e90
memcpy_s
0x180094f20
memmove
0x180094ea0
memmove_s
0x180094df8
memset
0x180094ea8
realloc
0x180094dd8
swprintf_s
0x180094e80
swscanf_s
0x180094e20
toupper
0x180094e98
wcschr
0x180094e40
wcscmp
0x180094f30
wcsncmp
0x180094f28
wcsnlen
0x180094e18
wcsrchr
0x180094ed0
wcsstr
0x180094e08
wcstok_s
0x180094df0
wcstoul
0x180094e30
ntdll.dll
14
EtwTraceMessage
0x180094f40
NtQueryInformationToken
0x180094f48
NtQueryLicenseValue
0x180094f60
NtQuerySystemInformation
0x180094f50
NtQueryWnfStateData
0x180094f98
RtlConvertDeviceFamilyInfoToString
0x180094f68
RtlGetDeviceFamilyInfoEnum
0x180094fa0
RtlGetVersion
0x180094f58
RtlIsMultiUsersInSessionSku
0x180094fa8
RtlIsStateSeparationEnabled
0x180094f70
RtlNtStatusToDosError
0x180094f88
RtlPublishWnfStateData
0x180094f78
RtlSubscribeWnfStateChangeNotification
0x180094f90
RtlUnsubscribeWnfNotificationWaitForCompletion
0x180094f80
No function matches your filter.