appinfo.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
AiDisableDesktopRpcInterface
#1 · 0x243f0
AiEnableDesktopRpcInterface
#2 · 0x3c30
ServiceMain
#3 · 0x2f70
SvchostPushServiceGlobals
#4 · 0x2f60
No function matches your filter.
Imported DLLs & functions 233
GetPackageStatus
0x180027008
GetApplicationUserModelId
0x180027020
GetPackagesByPackageFamily
0x180027018
PackageFamilyNameFromFullName
0x180027028
GetApplicationUserModelIdFromToken
0x180027040
GetPackageFullNameFromToken
0x180027038
ParseApplicationUserModelId
0x180027048
ApiSetQueryApiSetPresence
0x180027058
BaseFreeAppCompatDataForProcess
0x180027068
BaseReadAppCompatDataForProcess
0x180027070
DebugBreak
0x180027088
IsDebuggerPresent
0x180027090
OutputDebugStringW
0x180027080
DelayLoadFailureHook
0x1800270a0
ResolveDelayLoadedAPI
0x1800270b0
GetLastError
0x1800270e0
RaiseException
0x1800270c8
SetLastError
0x1800270d8
SetUnhandledExceptionFilter
0x1800270c0
UnhandledExceptionFilter
0x1800270d0
CreateFileW
0x1800270f0
GetFileAttributesW
0x180027108
GetFullPathNameW
0x180027100
GetLongPathNameW
0x1800270f8
GetTempPathW
0x180027118
GetProcessHeap
0x180027148
HeapAlloc
0x180027140
HeapFree
0x180027150
UnregisterWait
0x180027178
CheckElevation
0x180027188
CheckElevationEnabled
0x180027190
GetModuleFileNameA
0x1800271a8
GetModuleHandleExW
0x1800271b0
GetModuleHandleW
0x1800271b8
GetProcAddress
0x1800271a0
FormatMessageW
0x1800271c8
CreateFileMappingW
0x1800271d8
MapViewOfFile
0x1800271e8
ReadProcessMemory
0x1800271e0
UnmapViewOfFile
0x1800271f0
GetEnvironmentVariableW
0x180027200
CreateProcessAsUserW
0x180027220
DeleteProcThreadAttributeList
0x180027228
GetCurrentProcess
0x180027230
GetCurrentProcessId
0x180027280
GetCurrentThreadId
0x180027278
GetExitCodeProcess
0x180027240
GetProcessId
0x180027218
GetProcessIdOfThread
0x180027238
GetThreadId
0x180027260
InitializeProcThreadAttributeList
0x180027210
OpenProcessToken
0x180027250
OpenThread
0x180027270
ResumeThread
0x180027258
TerminateProcess
0x180027268
UpdateProcThreadAttribute
0x180027248
OpenProcess
0x180027290
QueryPerformanceCounter
0x1800272a0
QueryFullProcessImageNameW
0x1800272b0
PsmGetKeyFromToken
0x1800272c0
RegCloseKey
0x1800272d0
RegGetValueW
0x1800272e8
RegOpenKeyExW
0x1800272e0
RegQueryValueExW
0x1800272d8
RtlCaptureContext
0x180027300
RtlLookupFunctionEntry
0x1800272f8
RtlVirtualUnwind
0x180027308
CreateActCtxW
0x180027320
QueryActCtxSettingsW
0x180027318
ReleaseActCtx
0x180027328
AcquireSRWLockExclusive
0x180027380
AcquireSRWLockShared
0x1800273a0
CreateEventW
0x1800273b0
CreateMutexExW
0x180027350
CreateMutexW
0x180027390
CreateSemaphoreExW
0x180027340
DeleteCriticalSection
0x1800273c0
EnterCriticalSection
0x180027360
InitializeCriticalSectionEx
0x180027378
LeaveCriticalSection
0x180027358
OpenSemaphoreW
0x180027368
ReleaseMutex
0x180027338
ReleaseSemaphore
0x180027398
ReleaseSRWLockExclusive
0x1800273b8
ReleaseSRWLockShared
0x180027348
SetEvent
0x180027388
WaitForSingleObject
0x1800273a8
WaitForSingleObjectEx
0x180027370
InitOnceBeginInitialize
0x1800273d8
InitOnceComplete
0x1800273e0
Sleep
0x1800273e8
SleepConditionVariableSRW
0x1800273f0
WakeAllConditionVariable
0x1800273d0
GetSystemDirectoryW
0x180027408
GetSystemTimeAsFileTime
0x180027400
GetTickCount
0x180027410
CloseThreadpoolTimer
0x180027428
CreateThreadpoolTimer
0x180027438
SetThreadpoolTimer
0x180027430
WaitForThreadpoolTimerCallbacks
0x180027420
GetFileVersionInfoExW
0x180027450
GetFileVersionInfoSizeExW
0x180027448
VerQueryValueW
0x180027458
RoActivateInstance
0x180027468
WindowsCreateStringReference
0x180027478
GetSystemWow64DirectoryW
0x180027488
EventActivityIdControl
0x180027498
EventRegister
0x1800274a0
EventSetInformation
0x1800274b0
EventUnregister
0x1800274a8
EventWriteTransfer
0x1800274b8
CheckTokenMembership
0x180027510
CreateRestrictedToken
0x1800274f8
EqualSid
0x1800274e8
GetSidLengthRequired
0x1800274e0
GetSidSubAuthority
0x180027500
GetTokenInformation
0x1800274c8
ImpersonateLoggedOnUser
0x1800274d0
InitializeSid
0x1800274d8
IsTokenRestricted
0x1800274f0
RevertToSelf
0x180027508
SetTokenInformation
0x180027518
RegisterServiceCtrlHandlerExW
0x180027530
SetServiceStatus
0x180027528
msvcrt.dll
31
__C_specific_handler
0x180027590
__CxxFrameHandler3
0x1800275d8
__dllonexit
0x180027608
_amsg_exit
0x180027550
_callnewh
0x180027618
_initterm
0x180027540
_lock
0x1800275f0
_onexit
0x180027560
_purecall
0x1800275e0
_ui64tow_s
0x180027600
_unlock
0x1800275f8
_vsnwprintf
0x180027628
_wcsicmp
0x180027578
_wcsnicmp
0x180027568
_XcptFilter
0x180027558
bsearch
0x180027570
free
0x180027610
malloc
0x180027548
memcmp
0x1800275a8
memcpy
0x1800275a0
memcpy_s
0x180027620
memmove
0x1800275e8
memmove_s
0x180027580
memset
0x180027630
swprintf_s
0x1800275c8
wcscat_s
0x1800275b8
wcschr
0x1800275b0
wcscpy_s
0x1800275d0
wcsnlen
0x1800275c0
wcsrchr
0x180027588
wcsstr
0x180027598
ntdll.dll
59
EtwEventRegister
0x1800277a8
EtwEventUnregister
0x1800277b8
EtwEventWrite
0x1800277b0
EtwGetTraceEnableFlags
0x1800277c8
EtwGetTraceEnableLevel
0x180027800
EtwGetTraceLoggerHandle
0x1800277e0
EtwRegisterTraceGuidsW
0x180027808
EtwTraceMessage
0x1800277d0
EtwUnregisterTraceGuids
0x1800277c0
LdrOpenImageFileOptionsKey
0x1800276b0
LdrQueryImageFileKeyOption
0x180027688
LdrResSearchResource
0x180027740
NtClose
0x180027650
NtDuplicateObject
0x180027660
NtDuplicateToken
0x180027790
NtOpenProcess
0x180027698
NtOpenProcessToken
0x180027798
NtOpenThreadToken
0x1800276d8
NtQueryInformationProcess
0x180027778
NtQueryInformationToken
0x1800276a8
NtQuerySecurityObject
0x180027758
NtQuerySystemInformation
0x180027788
NtReadVirtualMemory
0x180027648
NtSetInformationToken
0x180027770
NtSetSecurityObject
0x180027748
RtlAcquireSRWLockExclusive
0x180027810
RtlAcquireSRWLockShared
0x1800276d0
RtlAllocateAndInitializeSid
0x1800277f0
RtlAllocateHeap
0x180027690
RtlCreateEnvironmentEx
0x1800276f8
RtlCreateServiceSid
0x180027750
RtlDeregisterWait
0x180027668
RtlDeregisterWaitEx
0x180027780
RtlDeriveCapabilitySidsFromName
0x1800276c8
RtlDestroyEnvironment
0x1800276e8
RtlDosPathNameToRelativeNtPathName_U_WithStatus
0x180027718
RtlEqualSid
0x1800276e0
RtlEqualUnicodeString
0x180027700
RtlExpandEnvironmentStrings
0x1800276c0
RtlFindAceByType
0x1800277e8
RtlFreeSid
0x1800277f8
RtlFreeUnicodeString
0x180027710
RtlImageNtHeaderEx
0x180027658
RtlInitializeSRWLock
0x1800277d8
RtlInitUnicodeString
0x1800276a0
RtlInitUnicodeStringEx
0x180027738
RtlNtPathNameToDosPathName
0x180027708
RtlNtStatusToDosError
0x180027670
RtlNtStatusToDosErrorNoTeb
0x1800277a0
RtlpEnsureBufferSize
0x180027720
RtlPrefixUnicodeString
0x180027730
RtlQueryEnvironmentVariable
0x1800276f0
RtlQueryPackageClaims
0x1800276b8
RtlRegisterWait
0x180027678
RtlReleaseRelativeName
0x180027728
RtlReleaseSRWLockExclusive
0x180027768
RtlReleaseSRWLockShared
0x180027640
RtlRemovePrivileges
0x180027680
RtlSetEnvironmentVar
0x180027760
RPCRT4.dll
15
I_RpcBindingInqLocalClientPID
0x180026f98
Ndr64AsyncServerCallAll
0x180026fb8
NdrAsyncServerCall
0x180026fd8
NdrServerCall2
0x180026fb0
NdrServerCallAll
0x180026fc0
RpcAsyncCompleteCall
0x180026fa0
RpcBindingVectorFree
0x180026ff0
RpcEpRegisterW
0x180026fd0
RpcEpUnregister
0x180026ff8
RpcImpersonateClient
0x180026fa8
RpcRevertToSelf
0x180026fe0
RpcServerInqBindings
0x180026fc8
RpcServerRegisterIfEx
0x180026fe8
RpcServerUnregisterIf
0x180026f88
RpcServerUseProtseqW
0x180026f90
No function matches your filter.