CBDHSvc.dll
v10.0.19041.6033
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
ServiceMain
#1 · 0x10ac0
SvchostPushServiceGlobals
#2 · 0x10be0
No function matches your filter.
Imported DLLs & functions 295
GetApplicationUserModelIdFromToken
0x1800c8e30
ApiSetQueryApiSetPresence
0x1800c8e40
GlobalGetAtomNameW
0x1800c8e50
CoCreateFreeThreadedMarshaler
0x1800c8f08
CoCreateGuid
0x1800c8e98
CoCreateInstance
0x1800c8ea8
CoDecrementMTAUsage
0x1800c8eb0
CoDisconnectContext
0x1800c8eb8
CoGetApartmentType
0x1800c8ed8
CoGetInterfaceAndReleaseStream
0x1800c8ea0
CoImpersonateClient
0x1800c8e70
CoIncrementMTAUsage
0x1800c8e88
CoInitializeEx
0x1800c8e60
CoMarshalInterface
0x1800c8ec0
CoRegisterClassObject
0x1800c8ef0
CoReleaseMarshalData
0x1800c8ed0
CoResumeClassObjects
0x1800c8ef8
CoRevertToSelf
0x1800c8e68
CoRevokeClassObject
0x1800c8ee8
CoTaskMemAlloc
0x1800c8f00
CoTaskMemFree
0x1800c8e78
CoUninitialize
0x1800c8e80
CoWaitForMultipleHandles
0x1800c8ee0
CreateStreamOnHGlobal
0x1800c8ec8
IIDFromString
0x1800c8e90
StringFromGUID2
0x1800c8f10
RoGetAgileReference
0x1800c8f20
DebugBreak
0x1800c8f38
IsDebuggerPresent
0x1800c8f40
OutputDebugStringW
0x1800c8f30
DelayLoadFailureHook
0x1800c8f50
ResolveDelayLoadedAPI
0x1800c8f60
GetLastError
0x1800c8f90
RaiseException
0x1800c8f80
SetLastError
0x1800c8f88
SetUnhandledExceptionFilter
0x1800c8f78
UnhandledExceptionFilter
0x1800c8f70
CreateDirectoryW
0x1800c8fa0
CloseHandle
0x1800c8fb0
GetProcessHeap
0x1800c8fc0
HeapAlloc
0x1800c8fc8
HeapFree
0x1800c8fd0
InitializeSListHead
0x1800c8ff8
UnregisterWait
0x1800c9008
DisableThreadLibraryCalls
0x1800c9020
FindStringOrdinal
0x1800c9050
FreeLibrary
0x1800c9060
FreeLibraryAndExitThread
0x1800c9018
GetModuleFileNameA
0x1800c9038
GetModuleFileNameW
0x1800c9058
GetModuleHandleExW
0x1800c9028
GetModuleHandleW
0x1800c9030
GetProcAddress
0x1800c9040
LoadLibraryExW
0x1800c9048
FormatMessageW
0x1800c9070
PathCchSkipRoot
0x1800c9080
GetCurrentProcess
0x1800c90b0
GetCurrentProcessId
0x1800c90a0
GetCurrentThread
0x1800c90b8
GetCurrentThreadId
0x1800c90a8
GetProcessId
0x1800c9098
OpenProcessToken
0x1800c9090
OpenThreadToken
0x1800c90c0
ProcessIdToSessionId
0x1800c90d0
TerminateProcess
0x1800c90c8
IsProcessorFeaturePresent
0x1800c90e8
OpenProcess
0x1800c90e0
QueryPerformanceCounter
0x1800c90f8
K32GetModuleFileNameExW
0x1800c9108
QueryUnbiasedInterruptTime
0x1800c9118
RegCloseKey
0x1800c9148
RegCreateKeyExW
0x1800c9158
RegEnumKeyExW
0x1800c9160
RegGetValueW
0x1800c9130
RegNotifyChangeKeyValue
0x1800c9138
RegOpenKeyExW
0x1800c9150
RegQueryInfoKeyW
0x1800c9140
RegQueryValueExW
0x1800c9128
RegSetKeyValueW
0x1800c9170
RtlCaptureContext
0x1800c9180
RtlLookupFunctionEntry
0x1800c9188
RtlVirtualUnwind
0x1800c9190
PathFindFileNameW
0x1800c91a8
PathIsFileSpecW
0x1800c91a0
AcquireSRWLockExclusive
0x1800c9258
AcquireSRWLockShared
0x1800c91c8
CreateEventExW
0x1800c91b8
CreateEventW
0x1800c91e8
CreateMutexExW
0x1800c91d0
CreateSemaphoreExW
0x1800c91e0
DeleteCriticalSection
0x1800c91c0
EnterCriticalSection
0x1800c9238
InitializeCriticalSectionAndSpinCount
0x1800c9230
InitializeCriticalSectionEx
0x1800c9218
InitializeSRWLock
0x1800c9208
LeaveCriticalSection
0x1800c9210
OpenSemaphoreW
0x1800c9250
ReleaseMutex
0x1800c9240
ReleaseSemaphore
0x1800c91f0
ReleaseSRWLockExclusive
0x1800c9248
ReleaseSRWLockShared
0x1800c9200
ResetEvent
0x1800c9228
SetEvent
0x1800c91f8
TryAcquireSRWLockExclusive
0x1800c91d8
WaitForSingleObject
0x1800c9220
WaitForSingleObjectEx
0x1800c9260
InitOnceBeginInitialize
0x1800c9298
InitOnceComplete
0x1800c92a0
InitOnceExecuteOnce
0x1800c9270
Sleep
0x1800c9290
WaitOnAddress
0x1800c9288
WakeByAddressAll
0x1800c9280
WakeByAddressSingle
0x1800c9278
GetSystemTimeAsFileTime
0x1800c92b8
GetTickCount
0x1800c92c0
GetTickCount64
0x1800c92b0
GetSystemTimePreciseAsFileTime
0x1800c92d0
CloseThreadpoolTimer
0x1800c9300
CloseThreadpoolWait
0x1800c92f8
CreateThreadpoolTimer
0x1800c9310
CreateThreadpoolWait
0x1800c9318
SetThreadpoolTimer
0x1800c92f0
SetThreadpoolWait
0x1800c9308
WaitForThreadpoolTimerCallbacks
0x1800c92e0
WaitForThreadpoolWaitCallbacks
0x1800c92e8
GetRestrictedErrorInfo
0x1800c9358
RoOriginateError
0x1800c9360
RoOriginateErrorW
0x1800c9350
RoTransformError
0x1800c9340
SetRestrictedErrorInfo
0x1800c9348
IsErrorPropagationEnabled
0x1800c9378
RoGetMatchingRestrictedErrorInfo
0x1800c9370
RoReportFailedDelegate
0x1800c9380
RoActivateInstance
0x1800c93a8
RoGetActivationFactory
0x1800c9398
RoRegisterActivationFactories
0x1800c93a0
RoRevokeActivationFactories
0x1800c9390
WindowsCompareStringOrdinal
0x1800c93c8
WindowsCreateString
0x1800c93e0
WindowsCreateStringReference
0x1800c93d8
WindowsDeleteString
0x1800c93c0
WindowsDuplicateString
0x1800c93d0
WindowsGetStringRawBuffer
0x1800c93b8
WindowsIsStringEmpty
0x1800c93f0
WindowsStringHasEmbeddedNull
0x1800c93e8
ceilf
0x1800c9400
__C_specific_handler
0x1800c9490
__CxxFrameHandler3
0x1800c9498
__CxxFrameHandler4
0x1800c9538
__std_terminate
0x1800c9530
__std_type_info_compare
0x1800c9518
_CxxThrowException
0x1800c94a0
_o___std_exception_copy
0x1800c9508
_o___std_exception_destroy
0x1800c9500
_o___std_type_info_destroy_list
0x1800c94f8
_o___stdio_common_vsnprintf_s
0x1800c94f0
_o___stdio_common_vsprintf_s
0x1800c94e8
_o___stdio_common_vswprintf
0x1800c94e0
_o___stdio_common_vswscanf
0x1800c94d8
_o__beginthreadex
0x1800c94d0
_o__callnewh
0x1800c94c8
_o__cexit
0x1800c94c0
_o__configure_narrow_argv
0x1800c94b8
_o__crt_atexit
0x1800c94b0
_o__difftime64
0x1800c94a8
_o__errno
0x1800c9528
_o__execute_onexit_table
0x1800c9520
_o__gmtime64
0x1800c9410
_o__initialize_narrow_environment
0x1800c9418
_o__initialize_onexit_table
0x1800c9420
_o__invalid_parameter_noinfo
0x1800c9428
_o__invalid_parameter_noinfo_noreturn
0x1800c9430
_o__mkgmtime64
0x1800c9438
_o__purecall
0x1800c9440
_o__register_onexit_function
0x1800c9448
_o__seh_filter_dll
0x1800c9450
_o__wcsicmp
0x1800c9458
_o_free
0x1800c9468
_o_malloc
0x1800c9470
_o_realloc
0x1800c9478
_o_terminate
0x1800c9480
_o_wcsftime
0x1800c9488
memcmp
0x1800c9540
memcpy
0x1800c9548
memmove
0x1800c9460
wcschr
0x1800c9510
EventActivityIdControl
0x1800c95a0
EventRegister
0x1800c9588
EventSetInformation
0x1800c9590
EventUnregister
0x1800c95a8
EventWriteTransfer
0x1800c9598
GetSystemMetrics
0x1800c95b8
PowerSettingRegisterNotification
0x1800c95d0
PowerSettingUnregisterNotification
0x1800c95c8
DestroyWindow
0x1800c95f8
GetForegroundWindow
0x1800c95e0
GetPropW
0x1800c95f0
GetWindowThreadProcessId
0x1800c95e8
AccessCheck
0x1800c9608
CheckTokenMembership
0x1800c9628
CreateWellKnownSid
0x1800c9620
GetTokenInformation
0x1800c9618
MapGenericMask
0x1800c9610
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800c9638
RegisterServiceCtrlHandlerExW
0x1800c9650
SetServiceStatus
0x1800c9648
SHTaskPoolAllowThreadReuse
0x1800c9668
SHTaskPoolGetUniqueContext
0x1800c9660
SHTaskPoolQueueTask
0x1800c9670
SHGetThreadRef
0x1800c9680
0x1800c9690
_Cnd_broadcast
0x1800c97d0
_Cnd_destroy_in_situ
0x1800c96b0
_Cnd_do_broadcast_at_thread_exit
0x1800c97a8
_Cnd_init_in_situ
0x1800c96b8
_Cnd_wait
0x1800c96a8
_Mtx_destroy_in_situ
0x1800c97c8
_Mtx_init_in_situ
0x1800c97e0
_Mtx_lock
0x1800c97f0
_Mtx_unlock
0x1800c97f8
_Thrd_detach
0x1800c9720
_Thrd_id
0x1800c9840
_Thrd_join
0x1800c9768
_Xtime_get_ticks
0x1800c9740
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
0x1800c9780
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
0x1800c9790
?__ExceptionPtrCreate@@YAXPEAX@Z
0x1800c9820
?__ExceptionPtrCurrentException@@YAXPEAX@Z
0x1800c9708
?__ExceptionPtrDestroy@@YAXPEAX@Z
0x1800c9808
?__ExceptionPtrRethrow@@YAXPEBX@Z
0x1800c97b8
?__ExceptionPtrToBool@@YA_NPEBX@Z
0x1800c97c0
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
0x1800c9818
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x1800c9870
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
0x1800c9800
?_Incref@facet@locale@std@@UEAAXXZ
0x1800c9848
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
0x1800c9868
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
0x1800c9890
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
0x1800c9828
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
0x1800c9700
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
0x1800c96d8
?_Throw_C_error@std@@YAXH@Z
0x1800c9798
?_Throw_Cpp_error@std@@YAXH@Z
0x1800c97a0
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
0x1800c9718
?_Xbad_alloc@std@@YAXXZ
0x1800c9888
?_Xbad_function_call@std@@YAXXZ
0x1800c96a0
?_XGetLastError@std@@YAXXZ
0x1800c9788
?_Xlength_error@std@@YAXPEBD@Z
0x1800c9830
?_Xout_of_range@std@@YAXPEBD@Z
0x1800c9878
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x1800c9770
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
0x1800c9778
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x1800c9858
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
0x1800c9838
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x1800c96c0
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x1800c96c8
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x1800c96e0
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
0x1800c9860
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
0x1800c97d8
??Bid@locale@std@@QEAA_KXZ
0x1800c9810
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
0x1800c96f0
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
0x1800c96d0
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
0x1800c97b0
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
0x1800c97e8
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
0x1800c9758
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
0x1800c9850
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
0x1800c9750
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
0x1800c96e8
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
0x1800c9738
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
0x1800c9728
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
0x1800c9760
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
0x1800c96f8
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
0x1800c9880
?uncaught_exception@std@@YA_NXZ
0x1800c9710
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
0x1800c9748
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
0x1800c9730
ntdll.dll
13
NtQueryInformationProcess
0x1800c9900
NtQueryInformationToken
0x1800c98d8
NtQueryWnfStateData
0x1800c98b0
RtlAllocateHeap
0x1800c98e8
RtlCompareUnicodeString
0x1800c98f8
RtlFreeHeap
0x1800c98d0
RtlInitUnicodeString
0x1800c98e0
RtlIsMultiSessionSku
0x1800c98c8
RtlIsMultiUsersInSessionSku
0x1800c98c0
RtlNtStatusToDosErrorNoTeb
0x1800c98f0
RtlPublishWnfStateData
0x1800c98a0
RtlSubscribeWnfStateChangeNotification
0x1800c98b8
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800c98a8
No function matches your filter.