invagent.dll
v10.0.19041.6392
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 8
GetDetailedAppInventoryReport
#1 · 0xc220
GetFileSigningInfoTC
#2 · 0xde50
RunUpdate
#3 · 0xd890
RunUpdateTC
#4 · 0xce00
DllCanUnloadNow
#5 · 0x169a0
DllGetClassObject
#6 · 0x16420
DllRegisterServer
#7 · 0x16f10
DllUnregisterServer
#8 · 0x17470
No function matches your filter.
Imported DLLs & functions 372
ADVAPI32.dll
48
CloseServiceHandle
0x18006b108
ControlServiceExW
0x18006b0f8
ControlTraceW
0x18006b138
CreateProcessAsUserW
0x18006b0b0
CryptAcquireContextW
0x18006b0d8
CryptCreateHash
0x18006b0d0
CryptDestroyHash
0x18006b0c0
CryptGetHashParam
0x18006b0a0
CryptHashData
0x18006b0c8
CryptReleaseContext
0x18006b0b8
EnableTrace
0x18006b120
EnableTraceEx2
0x18006b128
EventRegister
0x18006b1c8
EventSetInformation
0x18006b0a8
EventUnregister
0x18006b1c0
EventWriteTransfer
0x18006b1a8
InitializeSecurityDescriptor
0x18006b210
OpenSCManagerW
0x18006b118
OpenServiceW
0x18006b110
OpenThreadToken
0x18006b140
QueryServiceStatusEx
0x18006b100
RegCloseKey
0x18006b1d8
RegCreateKeyExW
0x18006b188
RegDeleteKeyExW
0x18006b170
RegDeleteKeyValueW
0x18006b1f0
RegDeleteKeyW
0x18006b180
RegDeleteTreeW
0x18006b1a0
RegDeleteValueW
0x18006b1e0
RegEnumKeyExW
0x18006b198
RegEnumValueW
0x18006b0e0
RegFlushKey
0x18006b160
RegGetValueW
0x18006b1f8
RegLoadAppKeyW
0x18006b168
RegLoadKeyW
0x18006b158
RegOpenKeyExW
0x18006b1b8
RegOpenKeyW
0x18006b1e8
RegQueryInfoKeyW
0x18006b1b0
RegSaveKeyExW
0x18006b190
RegSetKeySecurity
0x18006b200
RegSetKeyValueW
0x18006b178
RegSetValueExW
0x18006b1d0
RegUnLoadKeyW
0x18006b150
SetEntriesInAclW
0x18006b218
SetSecurityDescriptorDacl
0x18006b208
SetSecurityDescriptorOwner
0x18006b148
StartServiceW
0x18006b0f0
StartTraceW
0x18006b130
TraceEvent
0x18006b0e8
CreateSoftwareInventory
0x18006b238
GetAppInventory
0x18006b240
GetCachedAppInventory
0x18006b230
GetDetailedAppInventory
0x18006b228
GetFeatureEnabledState
0x18006b7a8
RecordFeatureUsage
0x18006b7a0
SubscribeFeatureStateChangeNotification
0x18006b790
UnsubscribeFeatureStateChangeNotification
0x18006b798
BCryptCloseAlgorithmProvider
0x18006b7e0
BCryptCreateHash
0x18006b7c8
BCryptDestroyHash
0x18006b7d8
BCryptFinishHash
0x18006b7b8
BCryptGetProperty
0x18006b7e8
BCryptHashData
0x18006b7c0
BCryptOpenAlgorithmProvider
0x18006b7d0
CertDuplicateCertificateContext
0x18006b280
CertFreeCertificateContext
0x18006b268
CertGetCertificateContextProperty
0x18006b278
CertGetNameStringW
0x18006b270
CreateDeviceInventory
0x18006b7f8
KERNEL32.dll
122
AcquireSRWLockExclusive
0x18006b4c8
AcquireSRWLockShared
0x18006b478
CloseHandle
0x18006b4b0
CloseThreadpoolTimer
0x18006b4d0
CreateActCtxW
0x18006b298
CreateEventW
0x18006b440
CreateFileMappingW
0x18006b368
CreateFileW
0x18006b628
CreateMutexExW
0x18006b480
CreateMutexW
0x18006b648
CreateProcessW
0x18006b5a0
CreateSemaphoreExW
0x18006b550
CreateSemaphoreW
0x18006b3c8
CreateThread
0x18006b348
CreateThreadpoolTimer
0x18006b498
CreateWaitableTimerW
0x18006b560
DebugBreak
0x18006b450
DecodePointer
0x18006b300
DelayLoadFailureHook
0x18006b328
DeleteCriticalSection
0x18006b470
DeleteFileW
0x18006b3f8
DeviceIoControl
0x18006b3c0
EncodePointer
0x18006b308
EnterCriticalSection
0x18006b538
ExitProcess
0x18006b350
ExpandEnvironmentStringsW
0x18006b400
FileTimeToLocalFileTime
0x18006b3a0
FileTimeToSystemTime
0x18006b3a8
FindClose
0x18006b640
FindFirstFileW
0x18006b630
FindNextFileW
0x18006b638
FormatMessageW
0x18006b4f0
FreeLibrary
0x18006b420
GetCommandLineW
0x18006b650
GetCurrentProcess
0x18006b290
GetCurrentProcessId
0x18006b468
GetCurrentThread
0x18006b410
GetCurrentThreadId
0x18006b500
GetExitCodeProcess
0x18006b598
GetFileAttributesW
0x18006b5e0
GetFileSize
0x18006b370
GetLastError
0x18006b4e8
GetModuleFileNameA
0x18006b558
GetModuleFileNameW
0x18006b658
GetModuleHandleExA
0x18006b438
GetModuleHandleExW
0x18006b528
GetModuleHandleW
0x18006b458
GetProcAddress
0x18006b488
GetProcessHeap
0x18006b460
GetStringTypeW
0x18006b320
GetSystemDirectoryA
0x18006b430
GetSystemDirectoryW
0x18006b620
GetSystemFirmwareTable
0x18006b378
GetSystemTime
0x18006b340
GetSystemTimeAsFileTime
0x18006b2c0
GetSystemWindowsDirectoryW
0x18006b5f8
GetTempFileNameW
0x18006b5f0
GetTempPathW
0x18006b5e8
GetTickCount
0x18006b408
GetVolumeInformationByHandleW
0x18006b3b8
HeapAlloc
0x18006b490
HeapFree
0x18006b548
HeapReAlloc
0x18006b618
HeapSize
0x18006b338
InitializeCriticalSection
0x18006b3f0
InitializeCriticalSectionEx
0x18006b518
InitOnceBeginInitialize
0x18006b2e0
InitOnceComplete
0x18006b2e8
InitOnceExecuteOnce
0x18006b2b8
IsDebuggerPresent
0x18006b448
K32EnumProcesses
0x18006b398
K32EnumProcessModules
0x18006b388
K32GetModuleFileNameExW
0x18006b380
LeaveCriticalSection
0x18006b520
LoadLibraryA
0x18006b428
LoadLibraryExW
0x18006b5b0
LoadLibraryW
0x18006b610
LocalAlloc
0x18006b5a8
LocaleNameToLCID
0x18006b3b0
LocalFree
0x18006b5d0
MapViewOfFile
0x18006b5d8
MoveFileExW
0x18006b5b8
MultiByteToWideChar
0x18006b310
OpenProcess
0x18006b390
OpenSemaphoreW
0x18006b4b8
OpenWaitableTimerW
0x18006b3d8
OutputDebugStringA
0x18006b580
OutputDebugStringW
0x18006b4d8
QueryActCtxW
0x18006b2a0
QueryPerformanceCounter
0x18006b2c8
QueryThreadCycleTime
0x18006b418
ReleaseActCtx
0x18006b2a8
ReleaseMutex
0x18006b4f8
ReleaseSemaphore
0x18006b530
ReleaseSRWLockExclusive
0x18006b4e0
ReleaseSRWLockShared
0x18006b4a0
ResolveDelayLoadedAPI
0x18006b330
RtlCaptureContext
0x18006b5c0
RtlCompareMemory
0x18006b2b0
RtlLookupFunctionEntry
0x18006b578
RtlVirtualUnwind
0x18006b360
SetEvent
0x18006b3d0
SetLastError
0x18006b540
SetNamedPipeHandleState
0x18006b590
SetThreadpoolTimer
0x18006b4a8
SetUnhandledExceptionFilter
0x18006b2d0
SetWaitableTimer
0x18006b568
Sleep
0x18006b5c8
SleepConditionVariableSRW
0x18006b2f0
TerminateProcess
0x18006b3e8
UnhandledExceptionFilter
0x18006b2d8
UnmapViewOfFile
0x18006b358
VerifyVersionInfoW
0x18006b600
VerSetConditionMask
0x18006b608
WaitForMultipleObjects
0x18006b3e0
WaitForSingleObject
0x18006b508
WaitForSingleObjectEx
0x18006b4c0
WaitForThreadpoolTimerCallbacks
0x18006b510
WaitNamedPipeW
0x18006b570
WakeAllConditionVariable
0x18006b2f8
WideCharToMultiByte
0x18006b318
WriteFile
0x18006b588
msvcrt.dll
80
___lc_codepage_func
0x18006b930
___lc_collate_cp_func
0x18006b918
___lc_handle_func
0x18006b910
___mb_cur_max_func
0x18006b928
__C_specific_handler
0x18006b9f8
__crtCompareStringW
0x18006b920
__crtLCMapStringW
0x18006b908
__CxxFrameHandler3
0x18006b8d8
__dllonexit
0x18006b9a8
__pctype_func
0x18006b938
__uncaught_exception
0x18006b9a0
_amsg_exit
0x18006b9e0
_CxxThrowException
0x18006b9f0
_errno
0x18006b820
_initterm
0x18006b9c8
_lock
0x18006b9b8
_mktime64
0x18006b988
_onexit
0x18006b980
_purecall
0x18006ba60
_snwscanf_s
0x18006b8e0
_strnicmp
0x18006ba28
_unlock
0x18006b9b0
_vscwprintf
0x18006b898
_vsnprintf
0x18006ba08
_vsnprintf_s
0x18006ba40
_vsnwprintf
0x18006ba70
_vsnwprintf_s
0x18006ba00
_wcsicmp
0x18006b828
_wcslwr
0x18006b858
_wcsnicmp
0x18006b838
_wctime64
0x18006b8b0
_wmkdir
0x18006b8c0
_wsplitpath_s
0x18006b998
_wtoi
0x18006b860
_wtoi64
0x18006b8a8
_XcptFilter
0x18006b9e8
??0bad_cast@@QEAA@AEBV0@@Z
0x18006b878
??0bad_cast@@QEAA@PEBD@Z
0x18006b888
??0exception@@QEAA@AEBQEBD@Z
0x18006ba18
??0exception@@QEAA@AEBQEBDH@Z
0x18006b900
??0exception@@QEAA@AEBV0@@Z
0x18006ba48
??0exception@@QEAA@XZ
0x18006ba50
??1bad_cast@@UEAA@XZ
0x18006b880
??1exception@@UEAA@XZ
0x18006ba58
??1type_info@@UEAA@XZ
0x18006b978
?terminate@@YAXXZ
0x18006b9c0
?what@exception@@UEBAPEBDXZ
0x18006ba20
abort
0x18006b968
calloc
0x18006b948
free
0x18006b9d8
iswalpha
0x18006b8b8
malloc
0x18006b9d0
memcmp
0x18006b950
memcpy
0x18006b8f8
memcpy_s
0x18006ba68
memmove
0x18006b960
memmove_s
0x18006ba38
memset
0x18006b940
realloc
0x18006b870
setlocale
0x18006b8f0
sprintf_s
0x18006b830
strchr
0x18006b818
strcmp
0x18006b970
strcpy_s
0x18006b840
strerror
0x18006b958
strncmp
0x18006b850
strnlen
0x18006b8c8
strrchr
0x18006ba30
tolower
0x18006b890
towlower
0x18006b8a0
wcscat_s
0x18006ba78
wcschr
0x18006b990
wcscmp
0x18006ba80
wcscpy_s
0x18006b808
wcsncmp
0x18006ba10
wcsrchr
0x18006b810
wcsstr
0x18006b848
wcstombs
0x18006b868
wcstoul
0x18006b8d0
wprintf
0x18006b8e8
ntdll.dll
56
EtwEventRegister
0x18006bb10
EtwEventUnregister
0x18006bb20
EtwEventWrite
0x18006bb18
EtwTraceMessage
0x18006baa0
LdrResSearchResource
0x18006bac0
NtLoadKeyEx
0x18006bbc8
NtQueryInformationProcess
0x18006ba98
NtQueryInformationToken
0x18006bb70
NtQueryKey
0x18006bc08
NtQueryLicenseValue
0x18006baa8
RtlAdjustPrivilege
0x18006bc30
RtlAllocateAndInitializeSid
0x18006bc20
RtlAllocateHeap
0x18006bc48
RtlAnsiStringToUnicodeString
0x18006baf8
RtlAppendUnicodeStringToString
0x18006bbe8
RtlAppendUnicodeToString
0x18006bbf0
RtlComputeCrc32
0x18006bb68
RtlDeleteCriticalSection
0x18006bb58
RtlDosPathNameToNtPathName_U_WithStatus
0x18006bbb0
RtlDosPathNameToRelativeNtPathName_U
0x18006bbd0
RtlEnterCriticalSection
0x18006bb48
RtlEqualString
0x18006bb50
RtlFreeHeap
0x18006bc38
RtlFreeSid
0x18006bc18
RtlFreeUnicodeString
0x18006bbe0
RtlGetNativeSystemInformation
0x18006bae8
RtlGetVersion
0x18006ba90
RtlImageDirectoryEntryToData
0x18006bab0
RtlInitAnsiString
0x18006bb40
RtlInitializeCriticalSection
0x18006bb30
RtlInitString
0x18006bb08
RtlInitUnicodeString
0x18006bba8
RtlInitUnicodeStringEx
0x18006bbd8
RtlLeaveCriticalSection
0x18006bb28
RtlMultiByteToUnicodeN
0x18006bb38
RtlNtStatusToDosError
0x18006bc28
RtlRandomEx
0x18006bc00
RtlReAllocateHeap
0x18006bc40
RtlReleaseRelativeName
0x18006bbc0
RtlSecondsSince1970ToTime
0x18006bb60
RtlStringFromGUID
0x18006bbf8
RtlTimeToTimeFields
0x18006bac8
RtlUpcaseUnicodeChar
0x18006baf0
RtlVerifyVersionInfo
0x18006bab8
RtlxAnsiStringToUnicodeSize
0x18006bb00
WinSqmIsOptedInEx
0x18006bc10
ZwClose
0x18006bbb8
ZwCreateFile
0x18006bb88
ZwCreateSection
0x18006bb78
ZwEnumerateKey
0x18006bb98
ZwMapViewOfSection
0x18006bad0
ZwOpenKey
0x18006bba0
ZwQueryInformationFile
0x18006bb80
ZwQuerySystemInformation
0x18006bae0
ZwQueryValueKey
0x18006bb90
ZwUnmapViewOfSection
0x18006bad8
CoCreateInstance
0x18006bc80
CoImpersonateClient
0x18006bc88
CoInitializeEx
0x18006bc58
CoRevertToSelf
0x18006bc90
CoTaskMemAlloc
0x18006bc70
CoTaskMemFree
0x18006bc68
CoUninitialize
0x18006bc60
PropVariantClear
0x18006bc78
SysAllocString
0x18006b688
SysFreeString
0x18006b698
SysStringByteLen
0x18006b690
SysStringLen
0x18006b680
VariantChangeType
0x18006b668
VariantClear
0x18006b670
VariantInit
0x18006b678
UuidCreate
0x18006b6a8
CommandLineToArgvW
0x18006b6b8
SHFileOperationW
0x18006b6c0
SHGetKnownFolderPath
0x18006b6c8
PathFileExistsW
0x18006b6d8
PathFindFileNameW
0x18006b6e8
PathUnExpandEnvStringsW
0x18006b6e0
wer.dll
5
WerReportAddFile
0x18006bcb8
WerReportCloseHandle
0x18006bca8
WerReportCreate
0x18006bca0
WerReportSetParameter
0x18006bcb0
WerReportSubmit
0x18006bcc0
WinHttpCloseHandle
0x18006b6f8
WinHttpConnect
0x18006b728
WinHttpOpen
0x18006b708
WinHttpOpenRequest
0x18006b730
WinHttpQueryDataAvailable
0x18006b720
WinHttpReadData
0x18006b700
WinHttpReceiveResponse
0x18006b710
WinHttpSendRequest
0x18006b718
CryptCATAdminAcquireContext
0x18006b768
CryptCATAdminCalcHashFromFileHandle
0x18006b740
CryptCATAdminEnumCatalogFromHash
0x18006b760
CryptCATAdminReleaseCatalogContext
0x18006b770
CryptCATAdminReleaseContext
0x18006b778
CryptCATCatalogInfoFromContext
0x18006b780
WinVerifyTrust
0x18006b758
WTHelperGetProvSignerFromChain
0x18006b748
WTHelperProvDataFromStateData
0x18006b750
No function matches your filter.