wcmsvc.dll

Description: Windows Connection Manager Service DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 6a6fa8746cf315db5092494e9eb6a1b9

File Size: 963.0 KB

Uploaded At: Dec. 1, 2025, 7:42 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CdeGetProfileList (Ordinal: 1, Address: 0x4df90)
  • CdeQueryParameter (Ordinal: 2, Address: 0x2350)
  • CdeSetParameter (Ordinal: 3, Address: 0x51770)
  • SvchostPushServiceGlobals (Ordinal: 4, Address: 0x43720)
  • WcmSvcMain (Ordinal: 5, Address: 0x43730)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800b6d70)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1800b6d88)
  • CoCreateFreeThreadedMarshaler (Address: 0x1800b6da8)
  • CoCreateInstance (Address: 0x1800b6d90)
  • CoDecrementMTAUsage (Address: 0x1800b6dd0)
  • CoIncrementMTAUsage (Address: 0x1800b6dc8)
  • CoInitializeEx (Address: 0x1800b6dd8)
  • CoTaskMemAlloc (Address: 0x1800b6db8)
  • CoTaskMemFree (Address: 0x1800b6d98)
  • CoUninitialize (Address: 0x1800b6dc0)
  • CoWaitForMultipleHandles (Address: 0x1800b6db0)
  • StringFromCLSID (Address: 0x1800b6d80)
  • StringFromGUID2 (Address: 0x1800b6da0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800b6de8)
  • IsDebuggerPresent (Address: 0x1800b6df8)
  • OutputDebugStringW (Address: 0x1800b6df0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800b6e08)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800b6e18)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800b6e30)
  • RaiseException (Address: 0x1800b6e28)
  • SetLastError (Address: 0x1800b6e48)
  • SetUnhandledExceptionFilter (Address: 0x1800b6e38)
  • UnhandledExceptionFilter (Address: 0x1800b6e40)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x1800b6e58)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800b6e68)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800b6e80)
  • DuplicateHandle (Address: 0x1800b6e78)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800b6ea0)
  • HeapAlloc (Address: 0x1800b6e98)
  • HeapFree (Address: 0x1800b6e90)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800b6eb8)
  • LocalFree (Address: 0x1800b6eb0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800b6ec8)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800b6ee0)
  • GetOverlappedResult (Address: 0x1800b6ed8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindStringOrdinal (Address: 0x1800b6ef0)
  • FreeLibrary (Address: 0x1800b6f18)
  • GetModuleFileNameA (Address: 0x1800b6ef8)
  • GetModuleHandleExW (Address: 0x1800b6f08)
  • GetModuleHandleW (Address: 0x1800b6f10)
  • GetProcAddress (Address: 0x1800b6f00)
  • LoadLibraryExW (Address: 0x1800b6f20)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800b6f30)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800b6f40)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800b6f68)
  • GetCurrentProcess (Address: 0x1800b6f70)
  • GetCurrentProcessId (Address: 0x1800b6f50)
  • GetCurrentThread (Address: 0x1800b6f58)
  • GetCurrentThreadId (Address: 0x1800b6f60)
  • OpenThreadToken (Address: 0x1800b6f78)
  • TerminateProcess (Address: 0x1800b6f80)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800b6f98)
  • OpenProcess (Address: 0x1800b6f90)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800b6fb0)
  • QueryPerformanceFrequency (Address: 0x1800b6fa8)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1800b6fc0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800b6fd8)
  • RegCreateKeyExW (Address: 0x1800b7000)
  • RegEnumKeyExW (Address: 0x1800b6fe0)
  • RegGetValueW (Address: 0x1800b7008)
  • RegNotifyChangeKeyValue (Address: 0x1800b6ff8)
  • RegOpenKeyExW (Address: 0x1800b6fe8)
  • RegQueryValueExW (Address: 0x1800b6ff0)
  • RegSetValueExW (Address: 0x1800b6fd0)
api-ms-win-core-registry-l1-1-1.dll
  • RegDeleteKeyValueW (Address: 0x1800b7018)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800b7038)
  • RtlLookupFunctionEntry (Address: 0x1800b7030)
  • RtlVirtualUnwind (Address: 0x1800b7028)
api-ms-win-core-state-helpers-l1-1-0.dll
  • GetRegistryValueWithFallbackW (Address: 0x1800b7048)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x1800b7060)
  • WideCharToMultiByte (Address: 0x1800b7058)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800b7100)
  • AcquireSRWLockShared (Address: 0x1800b7120)
  • CreateEventExW (Address: 0x1800b70c8)
  • CreateEventW (Address: 0x1800b7090)
  • CreateMutexExW (Address: 0x1800b7078)
  • CreateSemaphoreExW (Address: 0x1800b70e8)
  • DeleteCriticalSection (Address: 0x1800b70b0)
  • EnterCriticalSection (Address: 0x1800b70c0)
  • InitializeCriticalSection (Address: 0x1800b70d0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800b70d8)
  • InitializeCriticalSectionEx (Address: 0x1800b70f8)
  • InitializeSRWLock (Address: 0x1800b7118)
  • LeaveCriticalSection (Address: 0x1800b70b8)
  • OpenSemaphoreW (Address: 0x1800b7070)
  • ReleaseMutex (Address: 0x1800b7098)
  • ReleaseSemaphore (Address: 0x1800b70e0)
  • ReleaseSRWLockExclusive (Address: 0x1800b7108)
  • ReleaseSRWLockShared (Address: 0x1800b7128)
  • ResetEvent (Address: 0x1800b70f0)
  • SetEvent (Address: 0x1800b70a0)
  • TryAcquireSRWLockExclusive (Address: 0x1800b7080)
  • TryEnterCriticalSection (Address: 0x1800b7110)
  • WaitForSingleObject (Address: 0x1800b70a8)
  • WaitForSingleObjectEx (Address: 0x1800b7088)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800b7150)
  • InitOnceComplete (Address: 0x1800b7138)
  • InitOnceExecuteOnce (Address: 0x1800b7148)
  • Sleep (Address: 0x1800b7140)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemInfo (Address: 0x1800b7188)
  • GetSystemTime (Address: 0x1800b7170)
  • GetSystemTimeAsFileTime (Address: 0x1800b7180)
  • GetTickCount (Address: 0x1800b7168)
  • GetTickCount64 (Address: 0x1800b7160)
  • GetVersionExW (Address: 0x1800b7178)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetOsSafeBootMode (Address: 0x1800b7198)
api-ms-win-core-threadpool-l1-2-0.dll
  • CancelThreadpoolIo (Address: 0x1800b71f0)
  • CloseThreadpool (Address: 0x1800b7228)
  • CloseThreadpoolIo (Address: 0x1800b7238)
  • CloseThreadpoolTimer (Address: 0x1800b71d8)
  • CloseThreadpoolWait (Address: 0x1800b7258)
  • CloseThreadpoolWork (Address: 0x1800b7200)
  • CreateThreadpool (Address: 0x1800b7218)
  • CreateThreadpoolIo (Address: 0x1800b71c0)
  • CreateThreadpoolTimer (Address: 0x1800b7230)
  • CreateThreadpoolWait (Address: 0x1800b71a8)
  • CreateThreadpoolWork (Address: 0x1800b7220)
  • DisassociateCurrentThreadFromCallback (Address: 0x1800b7240)
  • SetThreadpoolThreadMaximum (Address: 0x1800b7250)
  • SetThreadpoolThreadMinimum (Address: 0x1800b71e8)
  • SetThreadpoolTimer (Address: 0x1800b71e0)
  • SetThreadpoolTimerEx (Address: 0x1800b7248)
  • SetThreadpoolWait (Address: 0x1800b71f8)
  • StartThreadpoolIo (Address: 0x1800b71b0)
  • SubmitThreadpoolWork (Address: 0x1800b71c8)
  • WaitForThreadpoolIoCallbacks (Address: 0x1800b71b8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800b71d0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800b7208)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1800b7210)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • ChangeTimerQueueTimer (Address: 0x1800b7270)
  • CreateTimerQueue (Address: 0x1800b7268)
  • CreateTimerQueueTimer (Address: 0x1800b7278)
  • DeleteTimerQueueEx (Address: 0x1800b7288)
  • DeleteTimerQueueTimer (Address: 0x1800b7280)
  • UnregisterWaitEx (Address: 0x1800b7290)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800b72a8)
  • RoGetActivationFactory (Address: 0x1800b72b0)
  • RoInitialize (Address: 0x1800b72b8)
  • RoUninitialize (Address: 0x1800b72a0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateStringReference (Address: 0x1800b72c8)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x1800b72d8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800b7400)
  • __CxxFrameHandler3 (Address: 0x1800b7398)
  • __CxxFrameHandler4 (Address: 0x1800b7410)
  • __std_terminate (Address: 0x1800b7408)
  • __std_type_info_compare (Address: 0x1800b73f8)
  • _CxxThrowException (Address: 0x1800b73a0)
  • _o___std_exception_copy (Address: 0x1800b73d0)
  • _o___std_exception_destroy (Address: 0x1800b73c8)
  • _o___std_type_info_destroy_list (Address: 0x1800b73c0)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800b73b8)
  • _o___stdio_common_vswprintf (Address: 0x1800b73b0)
  • _o___stdio_common_vswprintf_s (Address: 0x1800b73a8)
  • _o__callnewh (Address: 0x1800b7420)
  • _o__cexit (Address: 0x1800b7418)
  • _o__configure_narrow_argv (Address: 0x1800b73f0)
  • _o__crt_atexit (Address: 0x1800b73e8)
  • _o__errno (Address: 0x1800b73e0)
  • _o__execute_onexit_table (Address: 0x1800b73d8)
  • _o__initialize_narrow_environment (Address: 0x1800b72e8)
  • _o__initialize_onexit_table (Address: 0x1800b72f0)
  • _o__invalid_parameter_noinfo (Address: 0x1800b72f8)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800b7300)
  • _o__itow_s (Address: 0x1800b7308)
  • _o__purecall (Address: 0x1800b7310)
  • _o__register_onexit_function (Address: 0x1800b7318)
  • _o__seh_filter_dll (Address: 0x1800b7320)
  • _o__wcsicmp (Address: 0x1800b7328)
  • _o__wcsnicmp (Address: 0x1800b7330)
  • _o__wtoi (Address: 0x1800b7340)
  • _o__wtol (Address: 0x1800b7348)
  • _o_calloc (Address: 0x1800b7350)
  • _o_free (Address: 0x1800b7358)
  • _o_malloc (Address: 0x1800b7360)
  • _o_mbtowc (Address: 0x1800b7368)
  • _o_memcpy_s (Address: 0x1800b7370)
  • _o_strcpy_s (Address: 0x1800b7378)
  • _o_terminate (Address: 0x1800b7380)
  • _o_toupper (Address: 0x1800b7388)
  • _o_wcscpy_s (Address: 0x1800b7390)
  • memcmp (Address: 0x1800b7428)
  • memcpy (Address: 0x1800b7430)
  • memmove (Address: 0x1800b7338)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800b7448)
  • _initterm_e (Address: 0x1800b7440)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800b7458)
  • wcscmp (Address: 0x1800b7468)
  • wcsncmp (Address: 0x1800b7460)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x1800b7478)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x1800b74a8)
  • EventRegister (Address: 0x1800b74a0)
  • EventSetInformation (Address: 0x1800b7498)
  • EventUnregister (Address: 0x1800b7488)
  • EventWriteTransfer (Address: 0x1800b7490)
api-ms-win-power-setting-l1-1-0.dll
  • PowerSettingRegisterNotification (Address: 0x1800b74c0)
  • PowerSettingUnregisterNotification (Address: 0x1800b74b8)
api-ms-win-security-base-l1-1-0.dll
  • CheckTokenMembership (Address: 0x1800b7500)
  • CreateWellKnownSid (Address: 0x1800b74f0)
  • FreeSid (Address: 0x1800b74e0)
  • GetLengthSid (Address: 0x1800b74d8)
  • GetTokenInformation (Address: 0x1800b74f8)
  • ImpersonateSelf (Address: 0x1800b74d0)
  • RevertToSelf (Address: 0x1800b74e8)
api-ms-win-security-grouppolicy-l1-1-0.dll
  • RegisterGPNotificationInternal (Address: 0x1800b7510)
  • UnregisterGPNotificationInternal (Address: 0x1800b7518)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800b7538)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800b7530)
  • ConvertStringSidToSidW (Address: 0x1800b7528)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x1800b7548)
  • SetServiceStatus (Address: 0x1800b7550)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1800b7570)
  • OpenSCManagerW (Address: 0x1800b7568)
  • OpenServiceW (Address: 0x1800b7560)
api-ms-win-service-management-l2-1-0.dll
  • QueryServiceStatusEx (Address: 0x1800b7580)
api-ms-win-service-private-l1-1-0.dll
  • SubscribeServiceChangeNotifications (Address: 0x1800b7590)
  • UnsubscribeServiceChangeNotifications (Address: 0x1800b7598)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x1800b75a8)
IPHLPAPI.DLL
  • CancelMibChangeNotify2 (Address: 0x1800b6b48)
  • ConvertInterfaceGuidToLuid (Address: 0x1800b6b70)
  • ConvertInterfaceIndexToLuid (Address: 0x1800b6b30)
  • ConvertInterfaceLuidToGuid (Address: 0x1800b6b38)
  • ConvertInterfaceLuidToIndex (Address: 0x1800b6b28)
  • FreeMibTable (Address: 0x1800b6b40)
  • GetIfEntry2 (Address: 0x1800b6b78)
  • GetIfStackTable (Address: 0x1800b6b20)
  • GetIfTable2 (Address: 0x1800b6b68)
  • GetIpForwardTable2 (Address: 0x1800b6b58)
  • GetIpInterfaceTable (Address: 0x1800b6b60)
  • GetUnicastIpAddressTable (Address: 0x1800b6b50)
  • NotifyUnicastIpAddressChange (Address: 0x1800b6b18)
MobileNetworking.dll
  • GetPersistentRegPath (Address: 0x1800b6b88)
msvcp_win.dll
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800b75b8)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800b75c8)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800b75c0)
nlaapi.dll
  • NlaIndicateReprobe (Address: 0x1800b75d8)
NSI.dll
  • NsiAllocateAndGetTable (Address: 0x1800b6ba0)
  • NsiFreeTable (Address: 0x1800b6ba8)
  • NsiGetAllParameters (Address: 0x1800b6bb8)
  • NsiGetParameter (Address: 0x1800b6b98)
  • NsiSetAllParameters (Address: 0x1800b6bb0)
ntdll.dll
  • EtwEventRegister (Address: 0x1800b7618)
  • EtwEventSetInformation (Address: 0x1800b7610)
  • EtwEventUnregister (Address: 0x1800b7608)
  • EtwEventWrite (Address: 0x1800b75f0)
  • EtwEventWriteTransfer (Address: 0x1800b75f8)
  • EtwGetTraceEnableFlags (Address: 0x1800b76b0)
  • EtwGetTraceEnableLevel (Address: 0x1800b7648)
  • EtwGetTraceLoggerHandle (Address: 0x1800b7650)
  • EtwRegisterTraceGuidsW (Address: 0x1800b7628)
  • EtwTraceMessage (Address: 0x1800b7658)
  • EtwUnregisterTraceGuids (Address: 0x1800b7620)
  • NtCreateWnfStateName (Address: 0x1800b76a0)
  • NtDeleteWnfStateName (Address: 0x1800b7670)
  • NtPowerInformation (Address: 0x1800b7660)
  • NtQueryWnfStateData (Address: 0x1800b7638)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800b7668)
  • RtlIpv4StringToAddressExW (Address: 0x1800b7680)
  • RtlIpv6StringToAddressExW (Address: 0x1800b7688)
  • RtlIsStateSeparationEnabled (Address: 0x1800b7678)
  • RtlNtStatusToDosError (Address: 0x1800b7630)
  • RtlPublishWnfStateData (Address: 0x1800b7600)
  • RtlQueryPackageIdentity (Address: 0x1800b7690)
  • RtlQueryWnfStateData (Address: 0x1800b7698)
  • RtlReportException (Address: 0x1800b7640)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800b75e8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800b76a8)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x1800b6c40)
  • Ndr64AsyncServerCallAll (Address: 0x1800b6c50)
  • NdrAsyncServerCall (Address: 0x1800b6c60)
  • NdrClientCall3 (Address: 0x1800b6c78)
  • NdrServerCall2 (Address: 0x1800b6c48)
  • NdrServerCallAll (Address: 0x1800b6c58)
  • RpcAsyncAbortCall (Address: 0x1800b6cb0)
  • RpcAsyncCompleteCall (Address: 0x1800b6ca0)
  • RpcBindingBind (Address: 0x1800b6c28)
  • RpcBindingCreateW (Address: 0x1800b6ca8)
  • RpcBindingFree (Address: 0x1800b6c80)
  • RpcBindingToStringBindingW (Address: 0x1800b6c90)
  • RpcBindingVectorFree (Address: 0x1800b6c08)
  • RpcEpRegisterW (Address: 0x1800b6be0)
  • RpcEpUnregister (Address: 0x1800b6bd0)
  • RpcImpersonateClient (Address: 0x1800b6c98)
  • RpcRaiseException (Address: 0x1800b6c70)
  • RpcRevertToSelf (Address: 0x1800b6c30)
  • RpcRevertToSelfEx (Address: 0x1800b6c10)
  • RpcServerInqBindings (Address: 0x1800b6c00)
  • RpcServerInqCallAttributesW (Address: 0x1800b6c18)
  • RpcServerRegisterIf3 (Address: 0x1800b6bf0)
  • RpcServerTestCancel (Address: 0x1800b6cb8)
  • RpcServerUnregisterIfEx (Address: 0x1800b6bc8)
  • RpcServerUseProtseqW (Address: 0x1800b6bf8)
  • RpcSsContextLockExclusive (Address: 0x1800b6c38)
  • RpcStringBindingParseW (Address: 0x1800b6c88)
  • RpcStringFreeW (Address: 0x1800b6c20)
  • UuidCreate (Address: 0x1800b6c68)
  • UuidFromStringW (Address: 0x1800b6bd8)
  • UuidToStringW (Address: 0x1800b6be8)
UMPDC.dll
  • PdcResiliencyClientRegister (Address: 0x1800b6cd0)
  • PdcResiliencyClientUnregister (Address: 0x1800b6cc8)
USERENV.dll
  • DeriveAppContainerSidFromAppContainerName (Address: 0x1800b6ce0)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x1800b6cf8)
  • WinHttpConnectionDeletePolicyEntries (Address: 0x1800b6d08)
  • WinHttpConnectionDeleteProxyInfo (Address: 0x1800b6d00)
  • WinHttpConnectionSetPolicyEntries (Address: 0x1800b6d18)
  • WinHttpConnectionSetProxyInfo (Address: 0x1800b6cf0)
  • WinHttpConnectionUpdateIfIndexTable (Address: 0x1800b6d20)
  • WinHttpOpen (Address: 0x1800b6d10)
WINNSI.DLL
  • NsiConnectToServer (Address: 0x1800b6d38)
  • NsiDisconnectFromServer (Address: 0x1800b6d40)
  • NsiRpcDeregisterChangeNotification (Address: 0x1800b6d48)
  • NsiRpcRegisterChangeNotification (Address: 0x1800b6d30)
WS2_32.dll
  • InetNtopW (Address: 0x1800b6d58)
  • WSAAddressToStringW (Address: 0x1800b6d60)