FrameServer.dll
v10.0.19041.5854
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
ServiceMain
#1 · 0x2b90
SvchostPushServiceGlobals
#2 · 0x2b40
No function matches your filter.
Imported DLLs & functions 278
CLSIDFromString
0x1800ced90
CoCreateFreeThreadedMarshaler
0x1800ced70
CoCreateGuid
0x1800ced80
CoCreateInstance
0x1800cedb8
CoSetProxyBlanket
0x1800cedc0
CoTaskMemAlloc
0x1800cedb0
CoTaskMemFree
0x1800ceda0
IIDFromString
0x1800ceda8
PropVariantClear
0x1800ced78
PropVariantCopy
0x1800ced98
StringFromCLSID
0x1800ced68
StringFromGUID2
0x1800ced60
StringFromIID
0x1800ced88
DebugBreak
0x1800cede0
IsDebuggerPresent
0x1800cede8
OutputDebugStringA
0x1800cedd8
OutputDebugStringW
0x1800cedd0
DelayLoadFailureHook
0x1800cedf8
ResolveDelayLoadedAPI
0x1800cee08
GetLastError
0x1800cee38
RaiseException
0x1800cee28
SetLastError
0x1800cee20
SetUnhandledExceptionFilter
0x1800cee30
UnhandledExceptionFilter
0x1800cee18
RaiseFailFastException
0x1800cee48
GetFeatureEnabledState
0x1800cee58
RecordFeatureUsage
0x1800cee60
SubscribeFeatureStateChangeNotification
0x1800cee70
UnsubscribeFeatureStateChangeNotification
0x1800cee68
GetProcessHeap
0x1800ceeb0
HeapAlloc
0x1800ceeb8
HeapFree
0x1800ceec0
DeviceIoControl
0x1800ceee8
AddDllDirectory
0x1800cef30
DisableThreadLibraryCalls
0x1800cef38
FreeLibrary
0x1800cef08
GetModuleFileNameA
0x1800cef10
GetModuleFileNameW
0x1800cef20
GetModuleHandleExW
0x1800ceef8
GetModuleHandleW
0x1800cef18
GetProcAddress
0x1800cef00
LoadLibraryExW
0x1800cef28
RemoveDllDirectory
0x1800cef40
LoadLibraryW
0x1800cef50
FormatMessageW
0x1800cef60
CreateFileMappingW
0x1800cef78
MapViewOfFile
0x1800cef80
OpenFileMappingW
0x1800cef88
UnmapViewOfFile
0x1800cef70
ExpandEnvironmentStringsW
0x1800cef98
GetCurrentProcess
0x1800cefc8
GetCurrentProcessId
0x1800cefd8
GetCurrentThread
0x1800cefb8
GetCurrentThreadId
0x1800cefe0
OpenProcessToken
0x1800cefb0
OpenThreadToken
0x1800cefc0
TerminateProcess
0x1800cefd0
TlsGetValue
0x1800cefe8
TlsSetValue
0x1800cefa8
GetProcessMitigationPolicy
0x1800ceff8
OpenProcess
0x1800cf000
QueryPerformanceCounter
0x1800cf010
QueryPerformanceFrequency
0x1800cf018
QueryFullProcessImageNameW
0x1800cf028
RegCloseKey
0x1800cf068
RegCreateKeyExW
0x1800cf038
RegDeleteKeyExW
0x1800cf050
RegDeleteValueW
0x1800cf048
RegEnumKeyExW
0x1800cf070
RegGetValueW
0x1800cf060
RegOpenKeyExW
0x1800cf040
RegQueryValueExW
0x1800cf078
RegSetValueExW
0x1800cf058
RtlCaptureContext
0x1800cf088
RtlLookupFunctionEntry
0x1800cf098
RtlVirtualUnwind
0x1800cf090
WideCharToMultiByte
0x1800cf0a8
AcquireSRWLockExclusive
0x1800cf138
AcquireSRWLockShared
0x1800cf130
CreateEventW
0x1800cf0d0
CreateMutexExW
0x1800cf140
CreateMutexW
0x1800cf0c0
CreateSemaphoreExW
0x1800cf0d8
DeleteCriticalSection
0x1800cf150
EnterCriticalSection
0x1800cf170
InitializeCriticalSection
0x1800cf0f0
InitializeCriticalSectionEx
0x1800cf120
InitializeSRWLock
0x1800cf148
LeaveCriticalSection
0x1800cf0f8
OpenEventW
0x1800cf0b8
OpenMutexW
0x1800cf0c8
OpenSemaphoreW
0x1800cf118
ReleaseMutex
0x1800cf0e8
ReleaseSemaphore
0x1800cf158
ReleaseSRWLockExclusive
0x1800cf128
ReleaseSRWLockShared
0x1800cf100
ResetEvent
0x1800cf160
SetEvent
0x1800cf0e0
TryEnterCriticalSection
0x1800cf108
WaitForSingleObject
0x1800cf168
WaitForSingleObjectEx
0x1800cf110
Sleep
0x1800cf1a0
SleepConditionVariableSRW
0x1800cf198
WaitOnAddress
0x1800cf190
WakeAllConditionVariable
0x1800cf180
WakeByAddressAll
0x1800cf188
GetSystemDirectoryW
0x1800cf1c8
GetSystemInfo
0x1800cf1c0
GetSystemTimeAsFileTime
0x1800cf1b8
GetTickCount
0x1800cf1b0
GetSystemTimePreciseAsFileTime
0x1800cf1d8
CloseThreadpoolTimer
0x1800cf200
CreateThreadpoolTimer
0x1800cf1f8
SetThreadpoolTimer
0x1800cf1e8
WaitForThreadpoolTimerCallbacks
0x1800cf1f0
UnregisterWaitEx
0x1800cf210
VerQueryValueW
0x1800cf220
GetFileVersionInfoSizeW
0x1800cf230
GetFileVersionInfoW
0x1800cf238
RoOriginateError
0x1800cf248
RoOriginateErrorW
0x1800cf250
RoTransformError
0x1800cf258
RoActivateInstance
0x1800cf270
RoGetActivationFactory
0x1800cf268
RoCreatePropertySetSerializer
0x1800cf280
RoGetBufferMarshaler
0x1800cf290
WindowsCompareStringOrdinal
0x1800cf2a8
WindowsCreateString
0x1800cf2e8
WindowsCreateStringReference
0x1800cf2d8
WindowsDeleteString
0x1800cf2c8
WindowsDeleteStringBuffer
0x1800cf2b0
WindowsDuplicateString
0x1800cf2e0
WindowsGetStringRawBuffer
0x1800cf2a0
WindowsIsStringEmpty
0x1800cf2d0
WindowsPreallocateStringBuffer
0x1800cf2c0
WindowsPromoteStringBuffer
0x1800cf2b8
CM_Get_Device_Interface_List_SizeW
0x1800cf2f8
CM_Get_Device_Interface_ListW
0x1800cf308
CM_Get_Device_Interface_PropertyW
0x1800cf338
CM_Get_DevNode_PropertyW
0x1800cf320
CM_Get_Parent
0x1800cf310
CM_Locate_DevNodeW
0x1800cf340
CM_MapCrToWin32Err
0x1800cf330
CM_Open_Device_Interface_KeyW
0x1800cf300
CM_Register_Notification
0x1800cf328
CM_Unregister_Notification
0x1800cf318
GetTraceEnableFlags
0x1800cf360
GetTraceEnableLevel
0x1800cf368
GetTraceLoggerHandle
0x1800cf370
RegisterTraceGuidsW
0x1800cf350
TraceMessage
0x1800cf378
UnregisterTraceGuids
0x1800cf358
EventRegister
0x1800cf390
EventSetInformation
0x1800cf3a0
EventUnregister
0x1800cf388
EventWriteTransfer
0x1800cf398
PowerRegisterSuspendResumeNotification
0x1800cf3b8
PowerUnregisterSuspendResumeNotification
0x1800cf3b0
PowerSettingRegisterNotification
0x1800cf3c8
PowerSettingUnregisterNotification
0x1800cf3d0
CheckTokenMembership
0x1800cf3f0
EqualSid
0x1800cf3f8
GetLengthSid
0x1800cf408
GetTokenInformation
0x1800cf400
ImpersonateLoggedOnUser
0x1800cf3e0
RevertToSelf
0x1800cf3e8
ConvertSidToStringSidW
0x1800cf420
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800cf418
ConvertStringSidToSidW
0x1800cf428
RegisterServiceCtrlHandlerExW
0x1800cf438
SetServiceStatus
0x1800cf440
CM_Get_Device_Interface_AliasW
0x1800cebe0
MFCheckProcessCapabilities
0x1800cec08
MFCloneSensorProfile
0x1800cec38
MFCreatePackageFamilyNameTag
0x1800cec18
MFCreatePassthroughTranslatedMediaType
0x1800cec50
MFCreateSensorGroup
0x1800cec78
MFCreateSensorGroupById
0x1800cec80
MFCreateSensorGroupIdManager
0x1800cec70
MFCreateSensorProfileCollection
0x1800cec98
MFCreateSensorProfileWithFlags
0x1800cec30
MFCreateSensorStream
0x1800cec28
MFCreateTranslatedMediaType
0x1800cec90
MFDeleteSensorGroupById
0x1800cec20
MFGetSensorDeviceProperty
0x1800cec68
MFGetSensorDeviceRegistryProperty
0x1800cec60
MFGetSensorGroupAttributesFromId
0x1800cec48
MFGetSensorOrientation
0x1800cec40
MFGetSGCH
0x1800cec88
MFInitializeSensorGroupStore
0x1800cec58
MFIsStreamAvailableToAppPackage
0x1800cec10
msvcrt.dll
44
__C_specific_handler
0x1800cf550
__CxxFrameHandler3
0x1800cf528
__dllonexit
0x1800cf538
_amsg_exit
0x1800cf560
_callnewh
0x1800cf570
_errno
0x1800cf4f8
_gcvt_s
0x1800cf460
_i64toa_s
0x1800cf5a0
_initterm
0x1800cf558
_lock
0x1800cf548
_ltoa_s
0x1800cf458
_onexit
0x1800cf530
_purecall
0x1800cf588
_ultoa_s
0x1800cf4e8
_unlock
0x1800cf540
_vscprintf
0x1800cf510
_vsnprintf
0x1800cf468
_vsnwprintf
0x1800cf4c0
_wcsicmp
0x1800cf480
_wcslwr_s
0x1800cf4d8
_wcsnicmp
0x1800cf470
_wcsupr_s
0x1800cf590
_XcptFilter
0x1800cf568
free
0x1800cf580
malloc
0x1800cf578
memcmp
0x1800cf518
memcpy
0x1800cf4c8
memcpy_s
0x1800cf478
memmove
0x1800cf4b0
memmove_s
0x1800cf4e0
memset
0x1800cf4a8
qsort
0x1800cf450
realloc
0x1800cf4f0
sqrt
0x1800cf520
strncpy_s
0x1800cf500
strnlen
0x1800cf508
swprintf_s
0x1800cf490
wcschr
0x1800cf488
wcscmp
0x1800cf5a8
wcscpy_s
0x1800cf4b8
wcsncmp
0x1800cf498
wcsncpy_s
0x1800cf4d0
wcsstr
0x1800cf4a0
wcstol
0x1800cf598
ntdll.dll
14
NtAcquireCrossVmMutant
0x1800cf5f8
NtClose
0x1800cf5c0
NtCreateCrossVmEvent
0x1800cf608
NtCreateCrossVmMutant
0x1800cf600
NtCreateFile
0x1800cf5d8
NtCreateSection
0x1800cf5e0
NtQueryInformationProcess
0x1800cf620
NtReleaseMutant
0x1800cf5f0
RtlAppendUnicodeStringToString
0x1800cf5d0
RtlAppendUnicodeToString
0x1800cf5e8
RtlFreeUnicodeString
0x1800cf5c8
RtlStringFromGUIDEx
0x1800cf5b8
RtlSubscribeWnfStateChangeNotification
0x1800cf618
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800cf610
PropVariantCompareEx
0x1800ceca8
RPCRT4.dll
20
NdrServerCall2
0x1800cecc0
NdrServerCallAll
0x1800cecb8
RpcBindingToStringBindingW
0x1800ced08
RpcBindingVectorFree
0x1800ced10
RpcEpRegisterW
0x1800ced20
RpcEpUnregister
0x1800ced18
RpcImpersonateClient
0x1800cece8
RpcRevertToSelfEx
0x1800cece0
RpcServerInqBindingHandle
0x1800cecd0
RpcServerInqBindings
0x1800ced40
RpcServerInqCallAttributesW
0x1800cecf0
RpcServerInqDefaultPrincNameW
0x1800ced38
RpcServerRegisterAuthInfoW
0x1800ced30
RpcServerRegisterIf3
0x1800ced28
RpcServerUnregisterIfEx
0x1800ced50
RpcServerUseProtseqEpW
0x1800cecc8
RpcServerUseProtseqW
0x1800ced48
RpcStringBindingParseW
0x1800ced00
RpcStringFreeW
0x1800cecf8
UuidCreate
0x1800cecd8
No function matches your filter.