w3logsvc.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
ServiceMain
#1 · 0x15d0
No function matches your filter.
Imported DLLs & functions 200
CoCreateInstance
0x180011358
CoInitializeEx
0x180011350
CoUninitialize
0x180011348
GetDateFormatW
0x180011368
GetTimeFormatEx
0x180011378
OutputDebugStringA
0x180011388
GetLastError
0x180011398
SetUnhandledExceptionFilter
0x1800113a8
UnhandledExceptionFilter
0x1800113a0
CreateDirectoryW
0x1800113d8
CreateFileW
0x1800113c0
GetFileAttributesExW
0x1800113e0
GetFileAttributesW
0x1800113e8
GetFileSizeEx
0x1800113d0
GetFileTime
0x1800113c8
WriteFile
0x1800113b8
GetProcessHeap
0x180011418
HeapAlloc
0x180011420
HeapFree
0x180011410
DisableThreadLibraryCalls
0x180011448
PathAllocCombine
0x180011458
CreateThread
0x180011490
GetCurrentProcess
0x180011468
GetCurrentProcessId
0x180011488
GetCurrentThreadId
0x180011478
GetExitCodeThread
0x180011498
SetThreadPriority
0x180011470
TerminateProcess
0x180011480
OpenProcess
0x1800114a8
QueryPerformanceCounter
0x1800114b8
AcquireSRWLockExclusive
0x1800114e8
AcquireSRWLockShared
0x180011518
CreateEventW
0x1800114f8
DeleteCriticalSection
0x180011500
EnterCriticalSection
0x180011510
InitializeCriticalSectionAndSpinCount
0x1800114d0
InitializeSRWLock
0x1800114f0
LeaveCriticalSection
0x180011508
ReleaseSRWLockExclusive
0x1800114c8
ReleaseSRWLockShared
0x180011520
SetEvent
0x1800114e0
WaitForSingleObject
0x1800114d8
Sleep
0x180011530
GetComputerNameExW
0x180011548
GetLocalTime
0x180011560
GetSystemTime
0x180011558
GetSystemTimeAsFileTime
0x180011550
GetTickCount
0x180011540
GetTickCount64
0x180011568
CloseThreadpool
0x180011598
CloseThreadpoolCleanupGroup
0x180011590
CloseThreadpoolCleanupGroupMembers
0x1800115a0
CloseThreadpoolTimer
0x1800115d8
CloseThreadpoolWait
0x1800115c0
CreateThreadpool
0x180011588
CreateThreadpoolCleanupGroup
0x180011580
CreateThreadpoolTimer
0x1800115f0
CreateThreadpoolWait
0x1800115b8
SetThreadpoolThreadMaximum
0x180011578
SetThreadpoolThreadMinimum
0x1800115a8
SetThreadpoolTimer
0x1800115e8
SetThreadpoolWait
0x1800115d0
TrySubmitThreadpoolCallback
0x1800115b0
WaitForThreadpoolTimerCallbacks
0x1800115e0
WaitForThreadpoolWaitCallbacks
0x1800115c8
FileTimeToSystemTime
0x180011600
SystemTimeToTzSpecificLocalTime
0x180011608
CloseTrace
0x180011628
OpenTraceW
0x180011618
ProcessTrace
0x180011620
ControlTraceW
0x180011638
EnableTraceEx2
0x180011640
StartTraceW
0x180011648
StopTraceW
0x180011650
QueryTraceW
0x180011660
EventRegister
0x180011670
EventUnregister
0x180011678
EventWriteTransfer
0x180011680
AllocateAndInitializeSid
0x180011690
FreeSid
0x1800116b0
InitializeSecurityDescriptor
0x180011698
SetSecurityDescriptorDacl
0x1800116a0
SetSecurityDescriptorOwner
0x1800116a8
LsaClose
0x1800116c8
LsaFreeMemory
0x1800116d0
LsaLookupNames2
0x1800116d8
LsaOpenPolicy
0x1800116c0
GetNamedSecurityInfoW
0x1800116f0
SetEntriesInAclW
0x1800116e8
SetServiceStatus
0x180011700
RegisterServiceCtrlHandlerW
0x180011710
iisutil.dll
63
??0ALLOC_CACHE_HANDLER@@QEAA@PEBDPEBUALLOC_CACHE_CONFIGURATION@@H@Z
0x180011798
??0EVENT_LOG@@QEAA@PEBG@Z
0x180011738
??0MULTISZ@@QEAA@PEBG@Z
0x180011750
??0MULTISZ@@QEAA@XZ
0x180011888
??0STRA@@QEAA@PEADK@Z
0x180011840
??0STRA@@QEAA@XZ
0x180011830
??0STRU@@QEAA@PEAGK@Z
0x180011848
??0STRU@@QEAA@XZ
0x180011820
??1ALLOC_CACHE_HANDLER@@QEAA@XZ
0x180011778
??1BUFFER@@QEAA@XZ
0x1800117c8
??1MULTISZ@@QEAA@XZ
0x180011868
??1STRA@@QEAA@XZ
0x180011838
??1STRU@@QEAA@XZ
0x180011828
?Alloc@ALLOC_CACHE_HANDLER@@QEAAPEAXXZ
0x180011770
?Append@MULTISZ@@QEAAHAEAVSTRU@@@Z
0x1800117e8
?Append@MULTISZ@@QEAAHPEBG@Z
0x1800117b8
?Append@STRA@@QEAAJAEBV1@@Z
0x1800118c8
?Append@STRA@@QEAAJPEBD@Z
0x180011900
?Append@STRA@@QEAAJPEBDK@Z
0x1800118f8
?Append@STRU@@QEAAJAEBV1@@Z
0x1800118a8
?Append@STRU@@QEAAJG@Z
0x1800118a0
?Append@STRU@@QEAAJPEBG@Z
0x180011898
?Append@STRU@@QEAAJPEBGK@Z
0x1800118d0
?AppendA@STRU@@QEAAJPEBDK@Z
0x180011908
?AppendWSimple@STRA@@QEAAJPEBGK@Z
0x1800118b8
?CleanupLookaside@ALLOC_CACHE_HANDLER@@QEAAXH@Z
0x180011788
?Copy@MULTISZ@@QEAAHAEBV1@@Z
0x180011870
?Copy@STRA@@QEAAJAEBV1@@Z
0x1800118c0
?Copy@STRA@@QEAAJPEBD@Z
0x180011858
?Copy@STRA@@QEAAJPEBDK@Z
0x180011758
?Copy@STRU@@QEAAJAEBV1@@Z
0x180011878
?Copy@STRU@@QEAAJPEBG@Z
0x180011860
?Copy@STRU@@QEAAJPEBGK@Z
0x1800118f0
?CopyA@STRU@@QEAAJPEBD@Z
0x1800117c0
?CopyA@STRU@@QEAAJPEBDK@Z
0x180011760
?CopyWToUTF8Unescaped@STRA@@QEAAJAEBVSTRU@@@Z
0x1800118e0
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBGK@Z
0x1800118b0
?CreateIpmMessagePipe@IPM2_MESSAGE_PIPE@@SAJPEAVIPM2_MESSAGE_ACCEPTOR@@PEBGHPEAU_SECURITY_ATTRIBUTES@@PEAPEAV1@@Z
0x1800117a8
?DestroyIpmMessagePipe@IPM2_MESSAGE_PIPE@@QEAAXXZ
0x1800117b0
?Equals@MULTISZ@@QEAAHPEAV1@@Z
0x1800117e0
?EqualsNoCase@STRU@@QEBA_NAEBV1@@Z
0x1800117d8
?EqualsNoCase@STRU@@QEBA_NPEBG@Z
0x1800118d8
?ExpandEnvironmentVariables@STRU@@SAJPEBGPEAV1@@Z
0x180011890
?Free@ALLOC_CACHE_HANDLER@@QEAAHPEAX@Z
0x180011768
?LogEvent@EVENT_LOG@@QEAAXKGQEAPEBGK@Z
0x1800117f0
?QueryOutstandingAllocationCount@ALLOC_CACHE_HANDLER@@QEBAKXZ
0x180011790
?Resize@BUFFER@@QEAA_NK@Z
0x180011748
?Resize@STRA@@QEAAJK@Z
0x180011850
?Resize@STRU@@QEAAJK@Z
0x180011910
?SetLen@STRU@@QEAA_NK@Z
0x1800118e8
?WriteMessage@IPM2_MESSAGE_PIPE@@QEAAJW4IPM2_OPCODE@@HKKPEAXK1@Z
0x1800117a0
DestroyRefTraceLog
0x180011780
IISInitializeCriticalSection
0x1800117d0
InitializeIISUtil
0x180011728
IsStringEqualOrdinalIgnoreCase
0x180011740
PuCreateDebugPrintsObject
0x1800117f8
PuDbgPrint
0x180011808
PuDbgPrintError
0x180011810
PuDeleteDebugPrintsObject
0x180011818
PuLoadDebugFlagsFromRegStr
0x180011800
ReadDwordParameterValueFromAnyService
0x180011730
TerminateIISUtil
0x180011720
WriteRefTraceLog
0x180011880
msvcrt.dll
27
__C_specific_handler
0x180011938
__CxxFrameHandler3
0x1800119e8
_amsg_exit
0x180011948
_callnewh
0x180011960
_initterm
0x180011940
_itow_s
0x180011988
_strnicmp
0x1800119b0
_ui64tow_s
0x180011998
_ultow
0x1800119b8
_ultow_s
0x1800119e0
_vsnwprintf_s
0x1800119d0
_wcsicmp
0x180011950
_wcsupr_s
0x1800119a0
_XcptFilter
0x180011958
?terminate@@YAXXZ
0x180011930
free
0x180011978
malloc
0x180011970
memchr
0x180011920
memcpy
0x180011928
memcpy_s
0x180011980
memset
0x1800119f0
strncpy_s
0x1800119c8
strtoul
0x1800119c0
swprintf_s
0x1800119d8
wcscpy_s
0x1800119a8
wcsnlen
0x180011990
wcsstr
0x180011968
RtlCaptureContext
0x180011a08
RtlCreateTimer
0x180011a20
RtlCreateTimerQueue
0x180011a28
RtlDeleteTimer
0x180011a40
RtlDeleteTimerQueueEx
0x180011a10
RtlIpv4AddressToStringExW
0x180011a38
RtlIpv6AddressToStringExW
0x180011a30
RtlLookupFunctionEntry
0x180011a00
RtlVirtualUnwind
0x180011a18
SysAllocString
0x180011318
SysFreeString
0x180011328
VariantChangeType
0x180011310
VariantClear
0x180011308
VariantInit
0x180011320
ntohs
0x180011338
No function matches your filter.