CaptureService.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
ServiceMain
#1 · 0x117f0
No function matches your filter.
Imported DLLs & functions 151
CoAddRefServerProcess
0x180018398
CoCreateFreeThreadedMarshaler
0x1800183b0
CoCreateInstance
0x1800183d0
CoDecrementMTAUsage
0x1800183e0
CoDisconnectContext
0x1800183c8
CoGetCallContext
0x1800183f0
CoGetInterfaceAndReleaseStream
0x1800183b8
CoGetObjectContext
0x1800183a8
CoInitializeSecurity
0x1800183f8
CoMarshalInterface
0x180018418
CoRegisterClassObject
0x1800183c0
CoReleaseMarshalData
0x1800183e8
CoReleaseServerProcess
0x1800183a0
CoResumeClassObjects
0x1800183d8
CoRevokeClassObject
0x180018400
CoTaskMemAlloc
0x180018390
CoWaitForMultipleHandles
0x180018410
CreateStreamOnHGlobal
0x180018408
RoGetAgileReference
0x180018428
DebugBreak
0x180018438
IsDebuggerPresent
0x180018440
OutputDebugStringW
0x180018448
GetLastError
0x180018458
RaiseException
0x180018468
SetLastError
0x180018460
SetUnhandledExceptionFilter
0x180018470
UnhandledExceptionFilter
0x180018478
GetProcessHeap
0x1800184b0
HeapAlloc
0x1800184a0
HeapFree
0x1800184a8
InitializeSListHead
0x1800184d8
DisableThreadLibraryCalls
0x1800184e8
GetModuleFileNameA
0x180018508
GetModuleHandleExW
0x180018500
GetModuleHandleW
0x1800184f8
GetProcAddress
0x1800184f0
FormatMessageW
0x180018518
GetCurrentProcess
0x180018528
GetCurrentProcessId
0x180018540
GetCurrentThreadId
0x180018530
GetProcessId
0x180018548
OpenProcessToken
0x180018538
TerminateProcess
0x180018550
IsProcessorFeaturePresent
0x180018568
OpenProcess
0x180018560
QueryPerformanceCounter
0x180018578
RegCloseKey
0x1800185a8
RegEnumKeyExW
0x1800185a0
RegGetValueW
0x180018598
RegOpenKeyExW
0x180018590
RegQueryInfoKeyW
0x180018588
RtlCaptureContext
0x1800185c0
RtlLookupFunctionEntry
0x1800185c8
RtlVirtualUnwind
0x1800185b8
AcquireSRWLockExclusive
0x180018630
AcquireSRWLockShared
0x180018608
CreateEventExW
0x180018610
CreateEventW
0x1800185f8
CreateMutexExW
0x180018620
CreateSemaphoreExW
0x1800185e0
OpenSemaphoreW
0x1800185d8
ReleaseMutex
0x180018640
ReleaseSemaphore
0x1800185e8
ReleaseSRWLockExclusive
0x180018638
ReleaseSRWLockShared
0x180018618
SetEvent
0x180018600
WaitForSingleObject
0x1800185f0
WaitForSingleObjectEx
0x180018628
InitOnceBeginInitialize
0x180018660
InitOnceComplete
0x180018650
InitOnceExecuteOnce
0x180018658
GetSystemTimeAsFileTime
0x180018670
GetRestrictedErrorInfo
0x1800186b0
RoOriginateError
0x1800186a0
RoOriginateErrorW
0x1800186a8
RoTransformError
0x180018698
SetRestrictedErrorInfo
0x1800186b8
IsErrorPropagationEnabled
0x1800186c8
RoGetMatchingRestrictedErrorInfo
0x1800186d0
RoReportFailedDelegate
0x1800186d8
RoGetActivationFactory
0x180018700
RoInitialize
0x180018708
RoRegisterActivationFactories
0x1800186e8
RoRevokeActivationFactories
0x1800186f8
RoUninitialize
0x1800186f0
WindowsCreateString
0x180018738
WindowsCreateStringReference
0x180018740
WindowsDeleteString
0x180018720
WindowsGetStringRawBuffer
0x180018718
WindowsIsStringEmpty
0x180018728
WindowsStringHasEmbeddedNull
0x180018730
__C_specific_handler
0x1800187c8
__CxxFrameHandler3
0x1800187d0
__CxxFrameHandler4
0x180018828
__std_terminate
0x180018820
_CxxThrowException
0x1800187e0
_o___std_exception_copy
0x180018808
_o___std_exception_destroy
0x180018800
_o___std_type_info_destroy_list
0x1800187f8
_o___stdio_common_vsnprintf_s
0x1800187f0
_o___stdio_common_vswprintf
0x180018798
_o__callnewh
0x1800187e8
_o__cexit
0x1800187d8
_o__configure_narrow_argv
0x180018810
_o__crt_atexit
0x180018818
_o__errno
0x180018750
_o__execute_onexit_table
0x180018758
_o__initialize_narrow_environment
0x180018760
_o__initialize_onexit_table
0x180018768
_o__invalid_parameter_noinfo
0x180018770
_o__invalid_parameter_noinfo_noreturn
0x180018778
_o__purecall
0x180018780
_o__register_onexit_function
0x180018788
_o__seh_filter_dll
0x180018790
_o_ceil
0x1800187a8
_o_free
0x1800187b0
_o_malloc
0x1800187b8
_o_terminate
0x1800187c0
memcpy
0x180018830
memmove
0x1800187a0
memset
0x180018858
EventActivityIdControl
0x180018880
EventRegister
0x180018878
EventSetInformation
0x180018870
EventUnregister
0x180018868
EventWriteTransfer
0x180018888
GetSidSubAuthority
0x1800188b0
GetSidSubAuthorityCount
0x1800188a8
GetTokenInformation
0x180018898
MakeAbsoluteSD
0x1800188a0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800188c0
RegisterServiceCtrlHandlerExW
0x1800188d0
SetServiceStatus
0x1800188d8
SHTaskPoolAllowThreadReuse
0x1800188e8
SHTaskPoolQueueTask
0x1800188f0
DCompositionCreateDevice
0x180018928
?_Xbad_function_call@std@@YAXXZ
0x180018940
?_Xlength_error@std@@YAXPEBD@Z
0x180018938
PolicyManager_GetPolicyInt
0x180018950
No function matches your filter.