FlightSettings.dll
v10.0.19041.6392
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllGetActivationFactory
#1 · 0x6b90
ServiceMain
#2 · 0x7c50
SvchostPushServiceGlobals
#3 · 0x79f0
DllCanUnloadNow
#4 · 0x6b30
DllGetClassObject
#5 · 0x68f0
No function matches your filter.
Imported DLLs & functions 248
ApiSetQueryApiSetPresence
0x1800a4af0
DebugBreak
0x1800a4b28
IsDebuggerPresent
0x1800a4b18
OutputDebugStringW
0x1800a4b20
DelayLoadFailureHook
0x1800a4b38
ResolveDelayLoadedAPI
0x1800a4b48
GetLastError
0x1800a4b68
RaiseException
0x1800a4b58
SetLastError
0x1800a4b60
SetUnhandledExceptionFilter
0x1800a4b70
UnhandledExceptionFilter
0x1800a4b78
CreateDirectoryW
0x1800a4bb0
CreateFileA
0x1800a4be0
CreateFileW
0x1800a4bf0
DefineDosDeviceW
0x1800a4ba0
DeleteFileW
0x1800a4bd0
FindClose
0x1800a4c00
FindFirstFileW
0x1800a4bd8
FindNextFileW
0x1800a4bc0
FlushFileBuffers
0x1800a4be8
GetFileAttributesW
0x1800a4bb8
GetFileSizeEx
0x1800a4b90
GetFullPathNameW
0x1800a4bc8
QueryDosDeviceW
0x1800a4b98
ReadFile
0x1800a4b88
RemoveDirectoryW
0x1800a4ba8
SetFilePointer
0x1800a4bf8
WriteFile
0x1800a4c08
GetTempPathW
0x1800a4c18
GetFileInformationByHandleEx
0x1800a4c28
CloseHandle
0x1800a4c38
GetProcessHeap
0x1800a4c50
HeapAlloc
0x1800a4c58
HeapFree
0x1800a4c48
InitializeSListHead
0x1800a4c80
InterlockedPushEntrySList
0x1800a4c88
CopyFileW
0x1800a4c98
MoveFileW
0x1800a4ca0
UnregisterWait
0x1800a4ca8
DisableThreadLibraryCalls
0x1800a4ce0
FindStringOrdinal
0x1800a4cf0
FreeLibrary
0x1800a4cf8
GetModuleFileNameA
0x1800a4cb8
GetModuleFileNameW
0x1800a4cd8
GetModuleHandleExW
0x1800a4ce8
GetModuleHandleW
0x1800a4cd0
GetProcAddress
0x1800a4cc8
LoadLibraryExW
0x1800a4cc0
FormatMessageW
0x1800a4d10
GetLocaleInfoW
0x1800a4d18
GetSystemPreferredUILanguages
0x1800a4d20
GetUserDefaultLocaleName
0x1800a4d08
GetUserPreferredUILanguages
0x1800a4d28
GetSystemDefaultUILanguage
0x1800a4d38
CreateFileMappingW
0x1800a4d48
MapViewOfFile
0x1800a4d58
UnmapViewOfFile
0x1800a4d50
ExpandEnvironmentStringsW
0x1800a4d80
CreateProcessW
0x1800a4da0
GetCurrentProcess
0x1800a4dd0
GetCurrentProcessId
0x1800a4d90
GetCurrentThread
0x1800a4db0
GetCurrentThreadId
0x1800a4dc8
GetExitCodeProcess
0x1800a4d98
OpenProcessToken
0x1800a4dd8
OpenThreadToken
0x1800a4da8
SetThreadToken
0x1800a4db8
TerminateProcess
0x1800a4dc0
GetProcessMitigationPolicy
0x1800a4df0
IsProcessorFeaturePresent
0x1800a4de8
OpenProcess
0x1800a4df8
QueryPerformanceCounter
0x1800a4e10
QueryPerformanceFrequency
0x1800a4e08
QueryFullProcessImageNameW
0x1800a4e20
RegCloseKey
0x1800a4e38
RegCreateKeyExW
0x1800a4e40
RegDeleteKeyExW
0x1800a4e78
RegDeleteTreeW
0x1800a4e80
RegDeleteValueW
0x1800a4e88
RegEnumKeyExW
0x1800a4e48
RegEnumValueW
0x1800a4e60
RegGetValueW
0x1800a4e30
RegOpenKeyExW
0x1800a4e50
RegQueryInfoKeyW
0x1800a4e58
RegQueryValueExW
0x1800a4e70
RegSetValueExW
0x1800a4e68
RegDeleteKeyValueW
0x1800a4e98
RtlCaptureContext
0x1800a4eb8
RtlLookupFunctionEntry
0x1800a4ea8
RtlVirtualUnwind
0x1800a4eb0
PathFileExistsW
0x1800a4ec8
PathFindFileNameW
0x1800a4ed0
CompareStringOrdinal
0x1800a4ee0
MultiByteToWideChar
0x1800a4ee8
WideCharToMultiByte
0x1800a4ef0
AcquireSRWLockExclusive
0x1800a4f18
AcquireSRWLockShared
0x1800a4f48
CreateEventExW
0x1800a4fa0
CreateMutexExW
0x1800a4f38
CreateMutexW
0x1800a4f60
CreateSemaphoreExW
0x1800a4f68
DeleteCriticalSection
0x1800a4f50
EnterCriticalSection
0x1800a4f98
InitializeCriticalSectionEx
0x1800a4f58
InitializeSRWLock
0x1800a4f30
LeaveCriticalSection
0x1800a4f78
OpenSemaphoreW
0x1800a4fb0
ReleaseMutex
0x1800a4f88
ReleaseSemaphore
0x1800a4f70
ReleaseSRWLockExclusive
0x1800a4f28
ReleaseSRWLockShared
0x1800a4f40
SetEvent
0x1800a4fa8
TryEnterCriticalSection
0x1800a4f20
WaitForSingleObject
0x1800a4f80
WaitForSingleObjectEx
0x1800a4f90
InitOnceBeginInitialize
0x1800a4fd0
InitOnceComplete
0x1800a4fc8
InitOnceExecuteOnce
0x1800a4fc0
Sleep
0x1800a4fd8
GetComputerNameExW
0x1800a4ff0
GetSystemTimeAsFileTime
0x1800a4ff8
GetSystemWindowsDirectoryW
0x1800a4fe8
GetTickCount
0x1800a5000
GetProductInfo
0x1800a5010
CloseThreadpoolTimer
0x1800a5028
CreateThreadpoolTimer
0x1800a5040
IsThreadpoolTimerSet
0x1800a5020
SetThreadpoolTimer
0x1800a5030
WaitForThreadpoolTimerCallbacks
0x1800a5038
CreateTimerQueueTimer
0x1800a5050
DeleteTimerQueueTimer
0x1800a5058
FileTimeToSystemTime
0x1800a5070
SystemTimeToFileTime
0x1800a5068
UrlEscapeW
0x1800a5080
GetFileVersionInfoExW
0x1800a50a8
GetFileVersionInfoSizeExW
0x1800a50b8
VerQueryValueW
0x1800a50b0
ceilf
0x1800a50c8
__C_specific_handler
0x1800a51a8
__CxxFrameHandler3
0x1800a51b0
__CxxFrameHandler4
0x1800a5248
__std_terminate
0x1800a5230
_CxxThrowException
0x1800a51b8
_o___std_exception_copy
0x1800a5220
_o___std_exception_destroy
0x1800a5218
_o___std_type_info_destroy_list
0x1800a5210
_o___stdio_common_vsnprintf_s
0x1800a5208
_o___stdio_common_vswprintf
0x1800a5200
_o___stdio_common_vswprintf_s
0x1800a51f0
_o___stdio_common_vswscanf
0x1800a51e0
_o__callnewh
0x1800a51d8
_o__cexit
0x1800a51d0
_o__configure_narrow_argv
0x1800a51c0
_o__crt_atexit
0x1800a5228
_o__errno
0x1800a51f8
_o__execute_onexit_table
0x1800a51e8
_o__get_errno
0x1800a50d8
_o__initialize_narrow_environment
0x1800a50e0
_o__initialize_onexit_table
0x1800a50e8
_o__invalid_parameter_noinfo
0x1800a50f0
_o__invalid_parameter_noinfo_noreturn
0x1800a50f8
_o__itow_s
0x1800a5100
_o__purecall
0x1800a5108
_o__register_onexit_function
0x1800a5110
_o__seh_filter_dll
0x1800a5118
_o__set_errno
0x1800a5120
_o__wcsicmp
0x1800a5130
_o__wcstoui64
0x1800a5138
_o__wcsupr
0x1800a5140
_o__wtoi
0x1800a5148
_o__wtol
0x1800a5150
_o_free
0x1800a5158
_o_iswspace
0x1800a5160
_o_malloc
0x1800a5168
_o_realloc
0x1800a5170
_o_terminate
0x1800a5178
_o_toupper
0x1800a5180
_o_towlower
0x1800a5188
_o_wcstok_s
0x1800a5190
_o_wcstoul
0x1800a5198
_o_wctomb_s
0x1800a51a0
memcmp
0x1800a5250
memcpy
0x1800a5258
memmove
0x1800a5128
wcschr
0x1800a5238
wcsrchr
0x1800a51c8
wcsstr
0x1800a5240
memset
0x1800a5280
wcscmp
0x1800a5288
wcsncmp
0x1800a5298
wcsnlen
0x1800a5290
EventActivityIdControl
0x1800a52c8
EventProviderEnabled
0x1800a52a8
EventRegister
0x1800a52c0
EventSetInformation
0x1800a52d0
EventUnregister
0x1800a52b0
EventWriteTransfer
0x1800a52b8
AdjustTokenPrivileges
0x1800a52f0
AllocateAndInitializeSid
0x1800a5330
CheckTokenMembership
0x1800a5338
CopySid
0x1800a5320
CreateWellKnownSid
0x1800a52e8
DuplicateToken
0x1800a52e0
DuplicateTokenEx
0x1800a5340
FreeSid
0x1800a5328
GetLengthSid
0x1800a5318
GetTokenInformation
0x1800a5308
ImpersonateLoggedOnUser
0x1800a5300
IsValidSid
0x1800a5310
RevertToSelf
0x1800a52f8
CheckTokenMembershipEx
0x1800a5350
GetPersistedRegistryLocationW
0x1800a5368
GetPersistedRegistryValueW
0x1800a5360
?_Xinvalid_argument@std@@YAXPEBD@Z
0x1800a53c0
?_Xlength_error@std@@YAXPEBD@Z
0x1800a53b8
?_Xout_of_range@std@@YAXPEBD@Z
0x1800a53b0
ntdll.dll
14
EtwTraceMessage
0x1800a5420
NtQueryInformationToken
0x1800a5438
NtQueryLicenseValue
0x1800a5428
NtQuerySystemInformation
0x1800a5410
NtQueryWnfStateData
0x1800a53e8
RtlConvertDeviceFamilyInfoToString
0x1800a5400
RtlGetDeviceFamilyInfoEnum
0x1800a53f0
RtlGetVersion
0x1800a5418
RtlIsMultiUsersInSessionSku
0x1800a53f8
RtlIsStateSeparationEnabled
0x1800a53d0
RtlNtStatusToDosError
0x1800a53d8
RtlPublishWnfStateData
0x1800a5430
RtlSubscribeWnfStateChangeNotification
0x1800a53e0
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800a5408
No function matches your filter.