webthreatdefusersvc.dll
v10.0.26100.7309
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0x285c0
DllGetClassObject
#2 · 0x28610
ServiceMain
#3 · 0x22790
SvchostPushServiceGlobals
#4 · 0x22870
No function matches your filter.
Imported DLLs & functions 173
CoCreateFreeThreadedMarshaler
0x180031798
CoCreateInstance
0x1800317b0
CoGetInterfaceAndReleaseStream
0x1800317a8
CoMarshalInterface
0x180031790
CoReleaseMarshalData
0x1800317a0
CoTaskMemAlloc
0x1800317c0
CoTaskMemFree
0x1800317c8
CoWaitForMultipleHandles
0x1800317b8
CreateStreamOnHGlobal
0x1800317d0
RoGetAgileReference
0x1800317e0
DebugBreak
0x1800317f0
IsDebuggerPresent
0x180031800
OutputDebugStringW
0x1800317f8
DelayLoadFailureHook
0x180031810
ResolveDelayLoadedAPI
0x180031820
GetLastError
0x180031848
RaiseException
0x180031840
SetLastError
0x180031830
SetUnhandledExceptionFilter
0x180031838
UnhandledExceptionFilter
0x180031850
CloseHandle
0x180031860
GetProcessHeap
0x180031880
HeapAlloc
0x180031878
HeapFree
0x180031870
InitializeSListHead
0x180031898
InterlockedPushEntrySList
0x180031890
DisableThreadLibraryCalls
0x1800318c8
FreeLibrary
0x1800318b0
GetModuleFileNameA
0x1800318a8
GetModuleHandleExA
0x1800318d8
GetModuleHandleExW
0x1800318c0
GetModuleHandleW
0x1800318e0
GetProcAddress
0x1800318d0
LoadLibraryExW
0x1800318b8
FormatMessageW
0x1800318f0
GetCurrentProcess
0x180031918
GetCurrentProcessId
0x180031920
GetCurrentThreadId
0x180031900
OpenProcessToken
0x180031908
TerminateProcess
0x180031910
IsProcessorFeaturePresent
0x180031930
OpenProcess
0x180031938
QueryPerformanceCounter
0x180031948
AcquireSRWLockExclusive
0x1800319d0
AcquireSRWLockShared
0x1800319c0
CreateEventExW
0x180031980
CreateEventW
0x180031990
CreateMutexExW
0x1800319d8
CreateSemaphoreExW
0x180031a08
DeleteCriticalSection
0x1800319a0
EnterCriticalSection
0x1800319a8
InitializeCriticalSectionAndSpinCount
0x180031a10
InitializeCriticalSectionEx
0x180031998
LeaveCriticalSection
0x1800319b0
OpenSemaphoreW
0x1800319e0
ReleaseMutex
0x1800319f0
ReleaseSemaphore
0x180031a00
ReleaseSRWLockExclusive
0x1800319c8
ReleaseSRWLockShared
0x1800319b8
ResetEvent
0x180031970
SetEvent
0x180031988
WaitForMultipleObjectsEx
0x180031978
WaitForSingleObject
0x1800319f8
WaitForSingleObjectEx
0x1800319e8
InitOnceBeginInitialize
0x180031a28
InitOnceComplete
0x180031a20
InitOnceExecuteOnce
0x180031a30
GetSystemTimeAsFileTime
0x180031a40
VerSetConditionMask
0x180031a50
CloseThreadpoolTimer
0x180031a78
CreateThreadpoolTimer
0x180031a60
SetThreadpoolTimer
0x180031a68
WaitForThreadpoolTimerCallbacks
0x180031a70
RoActivateInstance
0x180031ab0
RoGetActivationFactory
0x180031ab8
RoInitialize
0x180031aa0
RoUninitialize
0x180031aa8
HSTRING_UserFree
0x180031ad8
HSTRING_UserFree64
0x180031ae8
HSTRING_UserMarshal
0x180031b08
HSTRING_UserMarshal64
0x180031af8
HSTRING_UserSize
0x180031af0
HSTRING_UserSize64
0x180031ad0
HSTRING_UserUnmarshal
0x180031b00
HSTRING_UserUnmarshal64
0x180031b10
WindowsCreateString
0x180031ae0
WindowsCreateStringReference
0x180031ac8
__C_specific_handler
0x180031ba0
__current_exception
0x180031ba8
__current_exception_context
0x180031bb0
__CxxFrameHandler3
0x180031bb8
__CxxFrameHandler4
0x180031c08
__std_terminate
0x180031c00
__std_type_info_compare
0x180031c28
_CxxThrowException
0x180031bc0
_o___std_exception_copy
0x180031be0
_o___std_exception_destroy
0x180031bd8
_o___std_type_info_destroy_list
0x180031bd0
_o___stdio_common_vswprintf
0x180031be8
_o__beginthreadex
0x180031b70
_o__callnewh
0x180031bf8
_o__cexit
0x180031bf0
_o__configure_narrow_argv
0x180031bc8
_o__crt_atexit
0x180031b20
_o__errno
0x180031b28
_o__execute_onexit_table
0x180031b30
_o__initialize_narrow_environment
0x180031b38
_o__initialize_onexit_table
0x180031b40
_o__invalid_parameter_noinfo
0x180031b48
_o__invalid_parameter_noinfo_noreturn
0x180031b50
_o__purecall
0x180031b58
_o__register_onexit_function
0x180031b60
_o__seh_filter_dll
0x180031b68
_o_abort
0x180031b78
_o_free
0x180031b80
_o_iswspace
0x180031b88
_o_malloc
0x180031b90
_o_terminate
0x180031b98
memcmp
0x180031c10
memcpy
0x180031c18
memmove
0x180031c20
memset
0x180031c50
EventRegister
0x180031c60
EventSetInformation
0x180031c68
EventUnregister
0x180031c78
EventWriteTransfer
0x180031c70
_Cnd_broadcast
0x180031dc0
_Cnd_destroy_in_situ
0x180031cf8
_Cnd_do_broadcast_at_thread_exit
0x180031db0
_Cnd_init_in_situ
0x180031cf0
_Cnd_register_at_thread_exit
0x180031d08
_Cnd_unregister_at_thread_exit
0x180031d10
_Cnd_wait
0x180031d00
_Mtx_destroy_in_situ
0x180031cd8
_Mtx_init_in_situ
0x180031cd0
_Mtx_lock
0x180031ce0
_Mtx_unlock
0x180031ce8
_Thrd_id
0x180031da8
_Thrd_join
0x180031da0
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
0x180031cb0
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
0x180031ca8
?__ExceptionPtrCreate@@YAXPEAX@Z
0x180031d98
?__ExceptionPtrCurrentException@@YAXPEAX@Z
0x180031cc0
?__ExceptionPtrDestroy@@YAXPEAX@Z
0x180031ca0
?__ExceptionPtrRethrow@@YAXPEBX@Z
0x180031cc8
?__ExceptionPtrToBool@@YA_NPEBX@Z
0x180031cb8
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
0x180031d48
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
0x180031d58
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x180031d70
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
0x180031d68
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x180031d78
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x180031d80
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x180031d90
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
0x180031d88
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
0x180031d30
?_ReportUnobservedException@details@Concurrency@@YAXXZ
0x180031d38
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
0x180031d50
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
0x180031d28
?_Syserror_map@std@@YAPEBDH@Z
0x180031d18
?_Throw_Cpp_error@std@@YAXH@Z
0x180031db8
?_Xbad_function_call@std@@YAXXZ
0x180031d20
?_Xlength_error@std@@YAXPEBD@Z
0x180031dc8
??0task_continuation_context@Concurrency@@AEAA@XZ
0x180031d60
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
0x180031d40
RtlGetDeviceFamilyInfoEnum
0x180031dd8
No function matches your filter.