wlidprov.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0x6330
DllGetClassObject
#2 · 0xc2d0
DllRegisterServer
#3 · 0xc7b0
DllUnregisterServer
#4 · 0xc7b0
No function matches your filter.
Imported DLLs & functions 308
ApiSetQueryApiSetPresence
0x180067bd0
CoCreateFreeThreadedMarshaler
0x180067c18
CoCreateInstance
0x180067be0
CoGetApartmentType
0x180067c38
CoGetCallerTID
0x180067be8
CoMarshalInterface
0x180067c28
CoReleaseMarshalData
0x180067c10
CoTaskMemAlloc
0x180067c00
CoTaskMemFree
0x180067c30
CoTaskMemRealloc
0x180067c40
CoUninitialize
0x180067bf0
CoWaitForMultipleHandles
0x180067c08
CreateStreamOnHGlobal
0x180067c20
PropVariantClear
0x180067bf8
RoGetAgileReference
0x180067c50
CStdAsyncStubBuffer_AddRef
0x180067cc8
CStdAsyncStubBuffer_Connect
0x180067ca0
CStdAsyncStubBuffer_Disconnect
0x180067c68
CStdAsyncStubBuffer_Invoke
0x180067c78
CStdAsyncStubBuffer_QueryInterface
0x180067c88
CStdAsyncStubBuffer_Release
0x180067c70
ObjectStublessClient10
0x180067ca8
ObjectStublessClient3
0x180067c60
ObjectStublessClient4
0x180067cb0
ObjectStublessClient5
0x180067cc0
ObjectStublessClient6
0x180067cb8
ObjectStublessClient7
0x180067c80
ObjectStublessClient8
0x180067c90
ObjectStublessClient9
0x180067c98
DebugBreak
0x180067ce0
IsDebuggerPresent
0x180067cf0
OutputDebugStringA
0x180067ce8
OutputDebugStringW
0x180067cd8
DelayLoadFailureHook
0x180067d00
ResolveDelayLoadedAPI
0x180067d10
GetLastError
0x180067d38
RaiseException
0x180067d30
SetLastError
0x180067d28
SetUnhandledExceptionFilter
0x180067d20
UnhandledExceptionFilter
0x180067d40
CloseHandle
0x180067d50
GetProcessHeap
0x180067d88
HeapAlloc
0x180067d78
HeapDestroy
0x180067d60
HeapFree
0x180067d68
HeapReAlloc
0x180067d80
HeapSize
0x180067d70
LocalSize
0x180067db0
GetComputerNameW
0x180067dc0
DisableThreadLibraryCalls
0x180067e08
FindResourceExW
0x180067df8
FreeLibrary
0x180067e20
GetModuleFileNameA
0x180067e28
GetModuleFileNameW
0x180067de0
GetModuleHandleExW
0x180067e10
GetModuleHandleW
0x180067df0
GetProcAddress
0x180067de8
LoadLibraryExW
0x180067e00
LoadResource
0x180067dd8
LockResource
0x180067dd0
SizeofResource
0x180067e18
LoadLibraryW
0x180067e38
FormatMessageW
0x180067e48
GetThreadPreferredUILanguages
0x180067e50
GetUserDefaultLocaleName
0x180067e58
GetUserDefaultUILanguage
0x180067e68
HWND_UserFree
0x180067e98
HWND_UserFree64
0x180067eb0
HWND_UserMarshal
0x180067ea8
HWND_UserMarshal64
0x180067e90
HWND_UserSize
0x180067e80
HWND_UserSize64
0x180067e78
HWND_UserUnmarshal
0x180067ea0
HWND_UserUnmarshal64
0x180067e88
CreateThread
0x180067ee8
GetCurrentProcess
0x180067ec8
GetCurrentProcessId
0x180067f10
GetCurrentThread
0x180067f00
GetCurrentThreadId
0x180067ec0
GetProcessIdOfThread
0x180067ef0
OpenProcessToken
0x180067ed8
OpenThread
0x180067ed0
OpenThreadToken
0x180067ee0
SetThreadToken
0x180067ef8
TerminateProcess
0x180067f08
OpenProcess
0x180067f20
QueryPerformanceCounter
0x180067f30
RegCloseKey
0x180067f98
RegCreateKeyExW
0x180067f80
RegDeleteKeyExW
0x180067f68
RegDeleteTreeW
0x180067f70
RegDeleteValueW
0x180067f78
RegEnumKeyExW
0x180067fa8
RegEnumValueW
0x180067f88
RegGetValueW
0x180067f60
RegOpenCurrentUser
0x180067f40
RegOpenKeyExW
0x180067fa0
RegQueryInfoKeyW
0x180067f48
RegQueryValueExW
0x180067f90
RegSetKeySecurity
0x180067f50
RegSetValueExW
0x180067f58
RtlCaptureContext
0x180067fc8
RtlLookupFunctionEntry
0x180067fc0
RtlVirtualUnwind
0x180067fb8
CompareStringOrdinal
0x180067fe8
MultiByteToWideChar
0x180067fd8
WideCharToMultiByte
0x180067fe0
CharNextW
0x180067ff8
lstrcmpiW
0x180068008
AcquireSRWLockExclusive
0x180068078
AcquireSRWLockShared
0x180068030
CreateEventExW
0x1800680b8
CreateEventW
0x180068088
CreateMutexExW
0x180068098
CreateSemaphoreExW
0x180068040
DeleteCriticalSection
0x180068060
EnterCriticalSection
0x180068050
InitializeCriticalSection
0x1800680a8
InitializeCriticalSectionEx
0x1800680b0
InitializeSRWLock
0x180068018
LeaveCriticalSection
0x1800680c8
OpenEventW
0x180068058
OpenSemaphoreW
0x1800680c0
ReleaseMutex
0x180068020
ReleaseSemaphore
0x180068038
ReleaseSRWLockExclusive
0x180068080
ReleaseSRWLockShared
0x180068090
ResetEvent
0x180068048
SetEvent
0x180068028
WaitForMultipleObjectsEx
0x1800680a0
WaitForSingleObject
0x180068070
WaitForSingleObjectEx
0x180068068
InitOnceBeginInitialize
0x1800680e8
InitOnceComplete
0x1800680e0
InitOnceExecuteOnce
0x1800680f0
Sleep
0x1800680d8
GetSystemDirectoryW
0x180068100
GetSystemTimeAsFileTime
0x180068108
GetTickCount
0x180068110
GetTickCount64
0x180068120
GetVersionExW
0x180068118
CloseThreadpoolTimer
0x180068148
CreateThreadpoolTimer
0x180068138
SetThreadpoolTimer
0x180068130
WaitForThreadpoolTimerCallbacks
0x180068140
SystemTimeToFileTime
0x180068158
UrlEscapeW
0x180068168
GetFileVersionInfoExW
0x180068188
GetFileVersionInfoSizeExW
0x180068178
VerQueryValueW
0x180068180
GetRestrictedErrorInfo
0x180068198
RoOriginateError
0x1800681a0
RoOriginateErrorW
0x1800681b8
RoTransformError
0x1800681a8
SetRestrictedErrorInfo
0x1800681b0
IsErrorPropagationEnabled
0x1800681d8
RoGetMatchingRestrictedErrorInfo
0x1800681d0
RoReportFailedDelegate
0x1800681c8
RoActivateInstance
0x1800681e8
RoGetActivationFactory
0x1800681f0
HSTRING_UserFree
0x180068268
HSTRING_UserFree64
0x180068250
HSTRING_UserMarshal
0x180068230
HSTRING_UserMarshal64
0x180068238
HSTRING_UserSize
0x180068210
HSTRING_UserSize64
0x180068248
HSTRING_UserUnmarshal
0x180068258
HSTRING_UserUnmarshal64
0x180068208
WindowsCreateString
0x180068218
WindowsCreateStringReference
0x180068228
WindowsDeleteString
0x180068220
WindowsDuplicateString
0x180068240
WindowsGetStringRawBuffer
0x180068260
WindowsIsStringEmpty
0x180068270
WindowsStringHasEmbeddedNull
0x180068200
EventActivityIdControl
0x180068298
EventRegister
0x180068288
EventSetInformation
0x1800682a0
EventUnregister
0x180068280
EventWriteTransfer
0x180068290
AllocateAndInitializeSid
0x1800682c8
CreateWellKnownSid
0x1800682c0
FreeSid
0x1800682d8
GetSecurityDescriptorDacl
0x1800682f0
GetSecurityDescriptorSacl
0x1800682e0
GetTokenInformation
0x1800682b0
ImpersonateLoggedOnUser
0x1800682d0
IsValidSid
0x1800682e8
RevertToSelf
0x1800682b8
CredIsProtectedW
0x180068300
CredUnprotectW
0x180068308
LsaLookupUserAccountType
0x180068318
ConvertSidToStringSidW
0x180068330
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180068328
ConvertStringSidToSidW
0x180068338
CloseServiceHandle
0x180068358
OpenSCManagerW
0x180068350
OpenServiceW
0x180068348
QueryServiceStatus
0x180068368
SHTaskPoolAllowThreadReuse
0x180068378
SHTaskPoolQueueTask
0x180068380
GetPersistedRegistryLocationW
0x180068390
BCryptGenRandom
0x1800683a0
msvcrt.dll
36
__C_specific_handler
0x1800684a8
__CxxFrameHandler3
0x180068430
__dllonexit
0x180068438
_amsg_exit
0x1800683d8
_callnewh
0x180068410
_CxxThrowException
0x180068478
_errno
0x1800683e8
_get_errno
0x180068468
_initterm
0x1800683e0
_lock
0x180068420
_onexit
0x180068440
_purecall
0x180068498
_set_errno
0x180068460
_time64
0x180068458
_unlock
0x1800684b0
_vsnprintf_s
0x1800683c8
_vsnwprintf
0x180068450
_XcptFilter
0x1800683b8
??0exception@@QEAA@AEBQEBDH@Z
0x180068428
??0exception@@QEAA@AEBV0@@Z
0x1800683d0
??0exception@@QEAA@XZ
0x1800683c0
??1exception@@UEAA@XZ
0x1800683f0
??1type_info@@UEAA@XZ
0x180068418
?terminate@@YAXXZ
0x180068400
?what@exception@@UEBAPEBDXZ
0x1800684b8
calloc
0x1800683b0
free
0x180068490
malloc
0x180068488
memcmp
0x1800684c0
memcpy
0x180068470
memcpy_s
0x1800684a0
memmove_s
0x180068408
memset
0x180068448
realloc
0x1800683f8
wcscmp
0x1800684c8
wcsncpy_s
0x180068480
ntdll.dll
20
_vscwprintf
0x180068560
_vsnprintf
0x1800684f0
_wcsicmp
0x180068548
_wcslwr_s
0x180068520
isdigit
0x1800684f8
iswspace
0x180068540
RtlAcquireSRWLockExclusive
0x1800684e0
RtlGetDeviceFamilyInfoEnum
0x180068518
RtlReleaseSRWLockExclusive
0x1800684e8
RtlSleepConditionVariableSRW
0x180068510
RtlWakeAllConditionVariable
0x1800684d8
strrchr
0x180068570
toupper
0x180068500
vswprintf_s
0x180068568
wcschr
0x180068508
wcscspn
0x180068550
wcsspn
0x180068558
wcsstr
0x180068538
wcstol
0x180068530
WinSqmAddToStreamEx
0x180068528
RPCRT4.dll
42
CStdStubBuffer_AddRef
0x180067b70
CStdStubBuffer_Connect
0x180067b20
CStdStubBuffer_CountRefs
0x180067b60
CStdStubBuffer_DebugServerQueryInterface
0x180067b80
CStdStubBuffer_DebugServerRelease
0x180067b48
CStdStubBuffer_Disconnect
0x180067b40
CStdStubBuffer_Invoke
0x180067b90
CStdStubBuffer_IsIIDSupported
0x180067b30
CStdStubBuffer_QueryInterface
0x180067b58
I_RpcBindingInqLocalClientPID
0x180067af8
I_RpcExceptionFilter
0x180067af0
I_RpcMapWin32Status
0x180067bb0
IUnknown_AddRef_Proxy
0x180067b88
IUnknown_QueryInterface_Proxy
0x180067b38
IUnknown_Release_Proxy
0x180067b68
MesBufferHandleReset
0x180067b10
MesDecodeBufferHandleCreate
0x180067b08
MesEncodeFixedBufferHandleCreate
0x180067b18
MesHandleFree
0x180067bc0
Ndr64AsyncClientCall
0x180067ad8
NdrClientCall3
0x180067b28
NdrCStdStubBuffer_Release
0x180067b98
NdrDllCanUnloadNow
0x180067ba0
NdrDllGetClassObject
0x180067ba8
NdrMesTypeAlignSize3
0x180067a88
NdrMesTypeDecode3
0x180067aa0
NdrMesTypeEncode3
0x180067a98
NdrMesTypeFree3
0x180067a90
NdrOleAllocate
0x180067b50
NdrOleFree
0x180067b78
RpcAsyncCancelCall
0x180067ad0
RpcAsyncCompleteCall
0x180067ae0
RpcAsyncInitializeHandle
0x180067bb8
RpcBindingBind
0x180067a78
RpcBindingCreateW
0x180067a80
RpcBindingFree
0x180067aa8
RpcBindingFromStringBindingW
0x180067ac8
RpcBindingSetAuthInfoExW
0x180067ab8
RpcSsDestroyClientContext
0x180067ae8
RpcStringBindingComposeW
0x180067ac0
RpcStringFreeW
0x180067ab0
UuidCreate
0x180067b00
No function matches your filter.