DMPushRouterCore.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 11
PrAreAllClientsHandled
#1 · 0xb500
PrSvcDecMessageCount
#2 · 0xb5e0
PrSvcGetMessageCount
#3 · 0xb550
PrSvcIncMessageCount
#4 · 0xb6a0
PrSvcSetMessageCount
#5 · 0xb590
PushRouter_SubmitPushLocal
#6 · 0xbd00
InitializePushRouter
#7 · 0xcee0
RegisterRPCInterface
#8 · 0x9520
ShutDownPushRouter
#9 · 0xd280
ShutDownPushRouterSynchronously
#10 · 0xd330
UnregisterRPCInterface
#11 · 0x9880
No function matches your filter.
Imported DLLs & functions 249
CLSIDFromProgID
0x180037eb0
CLSIDFromString
0x180037ec0
CoCreateInstance
0x180037eb8
CoInitializeEx
0x180037ee8
CoInitializeSecurity
0x180037ed8
CoRevertToSelf
0x180037ef0
CoTaskMemAlloc
0x180037ee0
CoTaskMemFree
0x180037ea8
CoUninitialize
0x180037ed0
StringFromGUID2
0x180037ec8
DebugBreak
0x180037f00
IsDebuggerPresent
0x180037f10
OutputDebugStringW
0x180037f08
DelayLoadFailureHook
0x180037f20
ResolveDelayLoadedAPI
0x180037f30
GetLastError
0x180037f58
RaiseException
0x180037f60
SetLastError
0x180037f48
SetUnhandledExceptionFilter
0x180037f40
UnhandledExceptionFilter
0x180037f50
CreateDirectoryW
0x180037fc8
CreateFileW
0x180037f88
DeleteFileW
0x180037f70
FileTimeToLocalFileTime
0x180037fb8
FindClose
0x180037fc0
FindFirstFileW
0x180037f90
FindNextFileW
0x180037fa0
GetFileAttributesW
0x180037f98
GetFileSize
0x180037fb0
ReadFile
0x180037f78
SetEndOfFile
0x180037fd0
SetFilePointer
0x180037fa8
WriteFile
0x180037f80
MoveFileExW
0x180037fe0
CloseHandle
0x180037ff0
GetProcessHeap
0x180038018
HeapAlloc
0x180038008
HeapFree
0x180038010
HeapReAlloc
0x180038000
LocalAlloc
0x180038028
LocalFree
0x180038038
LocalReAlloc
0x180038030
DisableThreadLibraryCalls
0x180038068
GetModuleFileNameA
0x180038058
GetModuleHandleExW
0x180038050
GetModuleHandleW
0x180038060
GetProcAddress
0x180038048
FormatMessageW
0x180038078
ExpandEnvironmentStringsW
0x1800380a0
CreateProcessW
0x1800380d8
CreateThread
0x1800380e8
GetCurrentProcess
0x1800380b8
GetCurrentProcessId
0x1800380b0
GetCurrentThread
0x180038100
GetCurrentThreadId
0x1800380e0
GetExitCodeProcess
0x1800380f0
GetExitCodeThread
0x1800380d0
GetStartupInfoW
0x1800380f8
OpenProcessToken
0x1800380c8
OpenThreadToken
0x180038108
TerminateProcess
0x1800380c0
OpenProcess
0x180038118
QueryPerformanceCounter
0x180038128
RegCloseKey
0x180038178
RegCreateKeyExW
0x180038168
RegDeleteTreeW
0x180038138
RegDeleteValueW
0x180038148
RegEnumKeyExW
0x180038140
RegEnumValueW
0x180038170
RegGetValueW
0x180038160
RegOpenKeyExW
0x180038180
RegQueryInfoKeyW
0x180038150
RegQueryValueExW
0x180038188
RegSetValueExW
0x180038158
RegSetKeyValueW
0x180038198
RegDeleteKeyW
0x1800381a8
RtlCaptureContext
0x1800381c8
RtlCompareMemory
0x1800381d0
RtlLookupFunctionEntry
0x1800381c0
RtlVirtualUnwind
0x1800381b8
PathFindExtensionW
0x1800381e0
MultiByteToWideChar
0x1800381f0
lstrlenA
0x180038200
AcquireSRWLockExclusive
0x180038298
AcquireSRWLockShared
0x180038280
CreateEventW
0x180038268
CreateMutexExW
0x180038230
CreateSemaphoreExW
0x180038238
DeleteCriticalSection
0x180038248
EnterCriticalSection
0x180038260
InitializeCriticalSection
0x180038288
InitializeCriticalSectionEx
0x180038250
LeaveCriticalSection
0x180038290
OpenEventW
0x180038278
OpenSemaphoreW
0x180038220
ReleaseMutex
0x180038228
ReleaseSemaphore
0x180038258
ReleaseSRWLockExclusive
0x180038218
ReleaseSRWLockShared
0x180038210
SetEvent
0x180038270
WaitForSingleObject
0x180038240
WaitForSingleObjectEx
0x1800382a0
InitOnceBeginInitialize
0x1800382d0
InitOnceComplete
0x1800382c0
Sleep
0x1800382c8
SleepConditionVariableSRW
0x1800382b8
WakeAllConditionVariable
0x1800382b0
WaitForMultipleObjects
0x1800382e0
GetSystemTime
0x1800382f8
GetSystemTimeAsFileTime
0x1800382f0
GetTickCount
0x180038300
CloseThreadpoolTimer
0x180038318
CreateThreadpoolTimer
0x180038320
SetThreadpoolTimer
0x180038328
WaitForThreadpoolTimerCallbacks
0x180038310
FileTimeToSystemTime
0x180038338
SystemTimeToFileTime
0x180038340
WindowsCreateStringReference
0x180038368
WindowsGetStringRawBuffer
0x180038370
EventActivityIdControl
0x180038388
EventRegister
0x180038380
EventSetInformation
0x1800383a0
EventUnregister
0x180038390
EventWriteTransfer
0x180038398
BuildSecurityDescriptorForSharingAccess
0x1800383c0
FreeTransientObjectSecurityDescriptor
0x1800383b8
QueryTransientObjectSecurityDescriptor
0x1800383b0
AllocateAndInitializeSid
0x180038410
CheckTokenMembership
0x1800383e8
CopySid
0x1800383e0
EqualSid
0x1800383d0
FreeSid
0x1800383d8
GetLengthSid
0x1800383f0
GetTokenInformation
0x180038408
ImpersonateLoggedOnUser
0x180038400
RevertToSelf
0x1800383f8
ConvertSidToStringSidW
0x180038420
CloseServiceHandle
0x180038438
OpenSCManagerW
0x180038440
OpenServiceW
0x180038430
ChangeServiceConfig2W
0x180038450
ChangeServiceConfigW
0x180038458
CertCloseStore
0x180037d10
CertFindCertificateInStore
0x180037d18
CertFreeCertificateContext
0x180037d28
CertOpenStore
0x180037d20
BigStrcat
0x180037d80
CopyString
0x180037d70
DecodeBase64W
0x180037d90
DmCreateTask
0x180037d40
DmDisableTask
0x180037d68
DmIsTaskScheduled
0x180037d38
EncodeBase64W
0x180037d98
HexStringToBinary
0x180037d50
InvStrCmpIW
0x180037db0
InvStrCmpNIW
0x180037d78
InvStrCmpW
0x180037da8
IsWvdFeatureAllowed
0x180037d60
OmaDmRegistryGetDWORD
0x180037d88
OmaDmRegistryGetString
0x180037d58
SafeStringToDword
0x180037da0
UnicodeToMB
0x180037d48
?_Syserror_map@std@@YAPEBDH@Z
0x180038468
?_Winerror_map@std@@YAPEBDH@Z
0x180038488
?_Xbad_alloc@std@@YAXXZ
0x180038470
?_Xlength_error@std@@YAXPEBD@Z
0x180038478
?_Xout_of_range@std@@YAXPEBD@Z
0x180038480
msvcrt.dll
45
__C_specific_handler
0x1800385f0
__CxxFrameHandler3
0x1800384b8
__dllonexit
0x1800385c8
_amsg_exit
0x1800385b8
_callnewh
0x1800385a8
_CxxThrowException
0x1800384a8
_errno
0x1800384f8
_initterm
0x1800385f8
_itow_s
0x180038578
_lock
0x1800385d8
_ltow_s
0x180038598
_onexit
0x1800385c0
_purecall
0x180038558
_set_errno
0x180038500
_ultow_s
0x1800385a0
_unlock
0x1800385d0
_vsnprintf_s
0x180038548
_vsnwprintf
0x180038540
_wcsicmp
0x180038568
_wcsnicmp
0x1800384d8
_XcptFilter
0x1800385b0
??_V@YAXPEAX@Z
0x180038528
??0exception@@QEAA@AEBV0@@Z
0x180038530
??0exception@@QEAA@XZ
0x180038538
??1exception@@UEAA@XZ
0x180038508
??1type_info@@UEAA@XZ
0x1800385e0
??3@YAXPEAX@Z
0x180038510
?terminate@@YAXXZ
0x1800385e8
free
0x1800384d0
malloc
0x180038550
memcmp
0x1800384a0
memcpy
0x180038498
memcpy_s
0x180038518
memmove
0x1800384b0
memmove_s
0x180038520
memset
0x180038588
qsort
0x180038580
rand
0x1800384c0
sprintf_s
0x180038570
srand
0x1800384c8
strchr
0x1800384e8
strncpy_s
0x180038560
strrchr
0x1800384e0
strtol
0x1800384f0
wcsstr
0x180038590
NtQuerySecurityAttributesToken
0x180038628
NtSetInformationToken
0x180038610
RtlAllocateHeap
0x180038638
RtlFreeHeap
0x180038618
RtlInitUnicodeString
0x180038608
RtlIsStateSeparationEnabled
0x180038630
RtlNtStatusToDosError
0x180038620
OLEAUT32.dll
11
SafeArrayCreate
0x180037dd8
SafeArrayDestroy
0x180037de8
SafeArrayGetLBound
0x180037e00
SafeArrayGetUBound
0x180037dc8
SafeArrayLock
0x180037e10
SafeArrayUnlock
0x180037dd0
SysAllocString
0x180037df0
SysFreeString
0x180037e08
SysStringByteLen
0x180037df8
VariantClear
0x180037dc0
VariantInit
0x180037de0
0x180038648
RPCRT4.dll
11
I_RpcBindingInqLocalClientPID
0x180037e68
NdrServerCall2
0x180037e70
NdrServerCallAll
0x180037e38
RpcImpersonateClient
0x180037e60
RpcRevertToSelfEx
0x180037e58
RpcServerInterfaceGroupActivate
0x180037e30
RpcServerInterfaceGroupClose
0x180037e20
RpcServerInterfaceGroupCreateW
0x180037e50
RpcServerInterfaceGroupDeactivate
0x180037e28
UuidCreate
0x180037e40
UuidFromStringW
0x180037e48
GetUserNameExW
0x180037e80
No function matches your filter.