VmHostAI.dll
v10.0.19041.3385
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x7530
DllCsiGetHandler
#2 · 0x7550
No function matches your filter.
Imported DLLs & functions 152
CoCreateInstance
0x10012084
CoInitializeEx
0x10012078
CoSetProxyBlanket
0x10012074
CoTaskMemAlloc
0x10012080
CoTaskMemFree
0x1001208c
CoTaskMemRealloc
0x1001207c
CoUninitialize
0x10012088
OutputDebugStringA
0x10012094
GetLastError
0x100120a4
RaiseException
0x1001209c
SetLastError
0x100120a8
SetUnhandledExceptionFilter
0x100120a0
UnhandledExceptionFilter
0x100120ac
CloseHandle
0x100120b4
HeapSetInformation
0x100120bc
DisableThreadLibraryCalls
0x100120dc
FindResourceExW
0x100120e8
FreeLibrary
0x100120e0
GetModuleFileNameW
0x100120e4
GetModuleHandleW
0x100120d8
GetProcAddress
0x100120d0
LoadLibraryExW
0x100120d4
LoadResource
0x100120ec
SizeofResource
0x100120f0
CreateThread
0x1001210c
GetCurrentProcess
0x10012110
GetCurrentProcessId
0x10012104
GetCurrentThreadId
0x10012100
GetExitCodeProcess
0x100120f8
OpenProcessToken
0x10012108
TerminateProcess
0x100120fc
OpenProcess
0x10012118
QueryPerformanceCounter
0x10012120
RegCloseKey
0x10012140
RegCreateKeyExW
0x1001213c
RegDeleteValueW
0x1001212c
RegEnumKeyExW
0x10012130
RegOpenKeyExW
0x10012128
RegQueryInfoKeyW
0x10012134
RegSetValueExW
0x10012138
MultiByteToWideChar
0x10012148
CharNextW
0x10012150
lstrcmpiW
0x10012158
DeleteCriticalSection
0x10012170
EnterCriticalSection
0x1001216c
InitializeCriticalSection
0x10012164
LeaveCriticalSection
0x10012160
WaitForSingleObject
0x10012168
Sleep
0x10012178
GetSystemTimeAsFileTime
0x10012188
GetTickCount
0x1001218c
GetTickCount64
0x10012180
GetVersionExW
0x10012184
AddAccessAllowedAce
0x100121f8
AddAccessAllowedAceEx
0x10012198
AddAce
0x100121a4
AllocateAndInitializeSid
0x100121c8
CreateWellKnownSid
0x100121b4
DeleteAce
0x100121fc
EqualSid
0x10012194
FreeSid
0x100121c4
GetAce
0x100121a8
GetAclInformation
0x100121ac
GetLengthSid
0x100121a0
GetSecurityDescriptorDacl
0x100121e0
GetSecurityDescriptorGroup
0x100121d8
GetSecurityDescriptorLength
0x100121d0
GetSecurityDescriptorOwner
0x100121dc
GetSecurityDescriptorSacl
0x100121e4
GetTokenInformation
0x100121b8
InitializeAcl
0x1001219c
InitializeSecurityDescriptor
0x100121bc
IsValidAcl
0x100121b0
IsValidSecurityDescriptor
0x100121e8
MakeAbsoluteSD
0x100121d4
MakeSelfRelativeSD
0x100121cc
SetSecurityDescriptorControl
0x100121c0
SetSecurityDescriptorDacl
0x100121f4
SetSecurityDescriptorGroup
0x100121f0
SetSecurityDescriptorOwner
0x100121ec
LookupAccountSidW
0x10012204
ConvertStringSidToSidW
0x1001220c
EnumDependentServicesW
0x10012214
CloseServiceHandle
0x10012220
OpenSCManagerW
0x10012228
OpenServiceW
0x1001221c
StartServiceW
0x10012224
QueryServiceStatusEx
0x10012230
msvcrt.dll
34
__CxxFrameHandler3
0x100122c0
__dllonexit
0x10012270
_amsg_exit
0x1001225c
_callnewh
0x100122a4
_CxxThrowException
0x10012280
_errno
0x10012290
_except_handler4_common
0x10012284
_initterm
0x10012260
_lock
0x1001229c
_onexit
0x10012278
_purecall
0x100122b8
_snwprintf_s
0x10012294
_unlock
0x1001226c
_vsnwprintf_s
0x100122a0
_wstrdate
0x10012268
_wstrtime
0x1001228c
_XcptFilter
0x10012258
??_V@YAXPAX@Z
0x100122bc
??0exception@@QAE@ABQBD@Z
0x10012244
??0exception@@QAE@ABQBDH@Z
0x10012248
??0exception@@QAE@ABV0@@Z
0x1001224c
??1exception@@UAE@XZ
0x10012250
??1type_info@@UAE@XZ
0x100122c4
??3@YAXPAX@Z
0x10012298
?terminate@@YAXXZ
0x10012264
?what@exception@@UBEPBDXZ
0x10012254
free
0x100122ac
malloc
0x100122b0
memcpy
0x1001227c
memcpy_s
0x100122a8
memmove
0x10012274
memset
0x100122c8
realloc
0x10012288
wcsncpy_s
0x100122b4
OLEAUT32.dll
16
SafeArrayAccessData
0x10012044
SafeArrayCopy
0x10012018
SafeArrayCreate
0x10012040
SafeArrayDestroy
0x1001200c
SafeArrayGetLBound
0x10012010
SafeArrayGetUBound
0x10012014
SafeArrayGetVartype
0x1001201c
SafeArrayLock
0x10012034
SafeArrayRedim
0x10012048
SafeArrayUnaccessData
0x10012020
SafeArrayUnlock
0x10012024
SysAllocString
0x10012030
SysFreeString
0x10012038
VariantClear
0x1001202c
VariantInit
0x10012028
VarUI4FromStr
0x1001203c
WCP.dll
8
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YIKPAU_RTL_TRACING_FACILITY@123@@Z
0x10012054
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YIXPAUIRtlFormattedOutputStream@13@PBX@Z
0x10012060
?RtlTraceVa@Rtl@WCP@Windows@@YIXKKPAU_RTL_TRACING_FACILITY@123@QBDKPAD@Z
0x1001206c
RtlConcatenateLUnicodeStrings
0x10012058
RtlConvertWin32RegistryPathToNtRegistryPath
0x10012050
RtlFreeLBlob
0x10012068
RtlFreeLUnicodeString
0x1001205c
RtlReportErrorOrigination
0x10012064
No function matches your filter.