PrintWorkflowService.dll

Description: Microsoft Windows Print Workflow Service Internal

Version: 10.0.19041.6456

Architecture: 64-bit

Operating System: Windows NT

SHA256: b5135990542f668831b931462fbf277f

File Size: 464.5 KB

Uploaded At: Dec. 1, 2025, 7:36 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

ServiceMain (Ordinal: 1, Address: 0xb3d0)
SvchostPushServiceGlobals (Ordinal: 2, Address: 0xb390)
DllCanUnloadNow (Ordinal: 3, Address: 0xac30)
DllGetActivationFactory (Ordinal: 4, Address: 0xaca0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackagesByPackageFamily (Address: 0x1800583f8)

api-ms-win-appmodel-state-l1-2-0.dll

CloseState (Address: 0x180058408)
GetSystemAppDataKey (Address: 0x180058418)
OpenStateExplicit (Address: 0x180058410)

api-ms-win-appmodel-unlock-l1-1-0.dll

IsDeveloperModeEnabled (Address: 0x180058428)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180058438)

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x180058448)

api-ms-win-core-biptcltapi-l1-1-7.dll

BiPtActivateInBackground (Address: 0x180058460)
BiPtQueryWorkItemStatusStateName (Address: 0x180058458)

api-ms-win-core-com-l1-1-0.dll

CoAddRefServerProcess (Address: 0x180058470)
CoCreateFreeThreadedMarshaler (Address: 0x180058490)
CoCreateGuid (Address: 0x1800584f8)
CoCreateInstance (Address: 0x180058528)
CoDecrementMTAUsage (Address: 0x1800584b8)
CoDisconnectContext (Address: 0x1800584a8)
CoGetCallContext (Address: 0x1800584e8)
CoGetClassObject (Address: 0x180058520)
CoGetMalloc (Address: 0x1800584a0)
CoGetObjectContext (Address: 0x1800584d8)
CoGetStdMarshalEx (Address: 0x1800584e0)
CoImpersonateClient (Address: 0x180058508)
CoIncrementMTAUsage (Address: 0x1800584d0)
CoInitializeEx (Address: 0x1800584c0)
CoRegisterClassObject (Address: 0x180058498)
CoReleaseServerProcess (Address: 0x180058478)
CoResumeClassObjects (Address: 0x1800584b0)
CoRevertToSelf (Address: 0x180058500)
CoRevokeClassObject (Address: 0x1800584c8)
CoTaskMemAlloc (Address: 0x180058480)
CoTaskMemFree (Address: 0x180058510)
CoUninitialize (Address: 0x180058488)
CreateStreamOnHGlobal (Address: 0x180058518)
StringFromGUID2 (Address: 0x1800584f0)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180058538)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180058548)
IsDebuggerPresent (Address: 0x180058550)
OutputDebugStringW (Address: 0x180058558)

api-ms-win-core-debug-l1-1-1.dll

CheckRemoteDebuggerPresent (Address: 0x180058568)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180058578)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180058588)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180058598)
RaiseException (Address: 0x1800585b0)
SetLastError (Address: 0x1800585b8)
SetUnhandledExceptionFilter (Address: 0x1800585a0)
UnhandledExceptionFilter (Address: 0x1800585a8)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x1800585d0)
CreateFileW (Address: 0x1800585c8)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1800585e0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800585f0)
DuplicateHandle (Address: 0x1800585f8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180058608)
HeapAlloc (Address: 0x180058610)
HeapFree (Address: 0x180058618)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180058630)
LocalFree (Address: 0x180058628)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180058650)
InterlockedFlushSList (Address: 0x180058640)
InterlockedPushEntrySList (Address: 0x180058648)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

UnregisterWait (Address: 0x180058660)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180058680)
FreeLibrary (Address: 0x180058670)
GetModuleFileNameA (Address: 0x180058678)
GetModuleHandleExW (Address: 0x180058688)
GetModuleHandleW (Address: 0x180058698)
GetProcAddress (Address: 0x180058690)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1800586a8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800586b8)

api-ms-win-core-path-l1-1-0.dll

PathCchCombineEx (Address: 0x1800586c8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180058710)
GetCurrentProcess (Address: 0x1800586e8)
GetCurrentProcessId (Address: 0x180058700)
GetCurrentThread (Address: 0x180058718)
GetCurrentThreadId (Address: 0x1800586d8)
GetExitCodeThread (Address: 0x180058708)
GetProcessId (Address: 0x1800586f0)
OpenProcessToken (Address: 0x180058720)
OpenThreadToken (Address: 0x1800586e0)
TerminateProcess (Address: 0x1800586f8)

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcessorNumber (Address: 0x180058738)
IsProcessorFeaturePresent (Address: 0x180058740)
OpenProcess (Address: 0x180058730)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180058750)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180058760)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180058770)
RegCreateKeyExW (Address: 0x180058798)
RegGetValueW (Address: 0x180058778)
RegOpenCurrentUser (Address: 0x180058790)
RegOpenKeyExW (Address: 0x180058780)
RegQueryValueExW (Address: 0x180058788)

api-ms-win-core-registry-l2-1-0.dll

RegOpenKeyW (Address: 0x1800587a8)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x1800587b8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800587d8)
MultiByteToWideChar (Address: 0x1800587d0)
WideCharToMultiByte (Address: 0x1800587c8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180058888)
AcquireSRWLockShared (Address: 0x180058870)
CreateEventExW (Address: 0x180058858)
CreateEventW (Address: 0x180058808)
CreateMutexExW (Address: 0x180058860)
CreateSemaphoreExW (Address: 0x180058868)
DeleteCriticalSection (Address: 0x180058878)
EnterCriticalSection (Address: 0x180058810)
InitializeCriticalSectionAndSpinCount (Address: 0x180058850)
InitializeCriticalSectionEx (Address: 0x1800587f0)
InitializeSRWLock (Address: 0x180058830)
LeaveCriticalSection (Address: 0x180058828)
OpenSemaphoreW (Address: 0x180058840)
ReleaseMutex (Address: 0x180058800)
ReleaseSemaphore (Address: 0x180058880)
ReleaseSRWLockExclusive (Address: 0x180058818)
ReleaseSRWLockShared (Address: 0x180058848)
ResetEvent (Address: 0x1800587e8)
SetEvent (Address: 0x180058820)
WaitForSingleObject (Address: 0x1800587f8)
WaitForSingleObjectEx (Address: 0x180058838)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800588a0)
InitOnceComplete (Address: 0x1800588b0)
InitOnceExecuteOnce (Address: 0x180058898)
Sleep (Address: 0x1800588a8)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1800588c0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800588d8)
GetTickCount (Address: 0x1800588d0)
GetTickCount64 (Address: 0x1800588e0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180058928)
CloseThreadpoolWait (Address: 0x1800588f8)
CreateThreadpoolTimer (Address: 0x180058908)
CreateThreadpoolWait (Address: 0x180058918)
SetThreadpoolTimer (Address: 0x1800588f0)
SetThreadpoolWait (Address: 0x180058910)
TrySubmitThreadpoolCallback (Address: 0x180058900)
WaitForThreadpoolTimerCallbacks (Address: 0x180058920)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180058940)
EncodePointer (Address: 0x180058938)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180058958)
RoFailFastWithErrorContext (Address: 0x180058970)
RoOriginateError (Address: 0x180058950)
RoOriginateErrorW (Address: 0x180058960)
RoTransformError (Address: 0x180058968)
SetRestrictedErrorInfo (Address: 0x180058978)

api-ms-win-core-winrt-error-l1-1-1.dll

RoGetMatchingRestrictedErrorInfo (Address: 0x180058988)
RoOriginateLanguageException (Address: 0x180058990)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x1800589a8)
RoGetActivationFactory (Address: 0x1800589a0)
RoInitialize (Address: 0x1800589b8)
RoRegisterActivationFactories (Address: 0x1800589c8)
RoRevokeActivationFactories (Address: 0x1800589b0)
RoUninitialize (Address: 0x1800589c0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x180058a20)
WindowsCreateStringReference (Address: 0x1800589d8)
WindowsDeleteString (Address: 0x180058a00)
WindowsDeleteStringBuffer (Address: 0x1800589f0)
WindowsDuplicateString (Address: 0x180058a08)
WindowsGetStringRawBuffer (Address: 0x1800589e8)
WindowsIsStringEmpty (Address: 0x180058a10)
WindowsPreallocateStringBuffer (Address: 0x1800589f8)
WindowsPromoteStringBuffer (Address: 0x1800589e0)
WindowsStringHasEmbeddedNull (Address: 0x180058a18)
WindowsSubstringWithSpecifiedLength (Address: 0x180058a28)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180058ab0)
__CxxFrameHandler3 (Address: 0x180058ab8)
__CxxFrameHandler4 (Address: 0x180058b20)
__std_terminate (Address: 0x180058b18)
_CxxThrowException (Address: 0x180058ac0)
_o___std_exception_copy (Address: 0x180058b40)
_o___std_exception_destroy (Address: 0x180058b38)
_o___std_type_info_destroy_list (Address: 0x180058b30)
_o___stdio_common_vsnprintf_s (Address: 0x180058b10)
_o___stdio_common_vswprintf (Address: 0x180058b08)
_o___stdio_common_vswprintf_s (Address: 0x180058b00)
_o__callnewh (Address: 0x180058af8)
_o__cexit (Address: 0x180058af0)
_o__configure_narrow_argv (Address: 0x180058ae0)
_o__crt_atexit (Address: 0x180058ad8)
_o__errno (Address: 0x180058ad0)
_o__execute_onexit_table (Address: 0x180058ac8)
_o__initialize_narrow_environment (Address: 0x180058a38)
_o__initialize_onexit_table (Address: 0x180058a40)
_o__invalid_parameter_noinfo (Address: 0x180058a48)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180058a50)
_o__itow_s (Address: 0x180058a58)
_o__purecall (Address: 0x180058a60)
_o__register_onexit_function (Address: 0x180058a68)
_o__seh_filter_dll (Address: 0x180058a70)
_o__wcsicmp (Address: 0x180058a78)
_o_free (Address: 0x180058a88)
_o_iswspace (Address: 0x180058a90)
_o_malloc (Address: 0x180058a98)
_o_terminate (Address: 0x180058aa0)
_o_toupper (Address: 0x180058aa8)
memcmp (Address: 0x180058b48)
memcpy (Address: 0x180058b50)
memmove (Address: 0x180058a80)
wcschr (Address: 0x180058b28)
wcsrchr (Address: 0x180058ae8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180058b60)
_initterm_e (Address: 0x180058b68)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180058b80)
wcscspn (Address: 0x180058b78)

api-ms-win-devices-query-l1-1-0.dll

DevFreeObjectProperties (Address: 0x180058b90)
DevGetObjectProperties (Address: 0x180058b98)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180058bc0)
EventProviderEnabled (Address: 0x180058bd0)
EventRegister (Address: 0x180058bc8)
EventSetInformation (Address: 0x180058ba8)
EventUnregister (Address: 0x180058bb8)
EventWriteTransfer (Address: 0x180058bb0)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x180058be8)
PowerSettingUnregisterNotification (Address: 0x180058be0)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DispatchMessageW (Address: 0x180058c10)
PeekMessageW (Address: 0x180058c00)
PostMessageW (Address: 0x180058c18)
RegisterClassExW (Address: 0x180058c08)
TranslateMessage (Address: 0x180058bf8)

api-ms-win-security-base-l1-1-0.dll

GetSecurityDescriptorSacl (Address: 0x180058c30)
GetSidSubAuthority (Address: 0x180058c38)
GetSidSubAuthorityCount (Address: 0x180058c28)
GetTokenInformation (Address: 0x180058c40)

api-ms-win-security-provider-l1-1-0.dll

SetNamedSecurityInfoW (Address: 0x180058c50)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180058c60)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180058c70)
SetServiceStatus (Address: 0x180058c78)

api-ms-win-shcore-comhelpers-l1-1-0.dll

IUnknown_QueryService (Address: 0x180058c88)

api-ms-win-shcore-stream-l1-1-0.dll

IStream_Write (Address: 0x180058ca8)
SHCreateMemStream (Address: 0x180058ca0)
SHCreateStreamOnFileEx (Address: 0x180058c98)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOverStream (Address: 0x180058cc0)
CreateStreamOverRandomAccessStream (Address: 0x180058cb8)

combase.dll

(Address: 0x180058cd0)
(Address: 0x180058cd8)
(Address: 0x180058ce0)
(Address: 0x180058ce8)
(Address: 0x180058cf0)

msvcp_win.dll

_Xtime_get_ticks (Address: 0x180058d48)
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180058d28)
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180058d50)
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180058d18)
?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180058d08)
?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180058d10)
?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180058d20)
?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180058d00)
?_Xbad_function_call@std@@YAXXZ (Address: 0x180058d40)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180058d38)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180058d30)

ntdll.dll

NtQueryInformationToken (Address: 0x180058d80)
NtQueryWnfStateData (Address: 0x180058db0)
RtlAllocateHeap (Address: 0x180058d68)
RtlCaptureContext (Address: 0x180058d88)
RtlCompareUnicodeString (Address: 0x180058da0)
RtlFreeHeap (Address: 0x180058da8)
RtlGetDeviceFamilyInfoEnum (Address: 0x180058d90)
RtlInitUnicodeString (Address: 0x180058dc0)
RtlLookupFunctionEntry (Address: 0x180058db8)
RtlNtStatusToDosErrorNoTeb (Address: 0x180058d98)
RtlSubscribeWnfStateChangeNotification (Address: 0x180058d70)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180058d60)
RtlVirtualUnwind (Address: 0x180058d78)

OLEAUT32.dll

SysFreeString (Address: 0x1800583d0)
SysStringLen (Address: 0x1800583d8)

OnDemandBrokerClient.dll

CreateOnDemandBrokerClient (Address: 0x1800583e8)