OSProvider.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DLLGetDISMProviderCLSID
#1 · 0x12c0
DllCanUnloadNow
#2 · 0x12f0
DllGetClassObject
#3 · 0x1330
DllRegisterServer
#4 · 0x1470
DllUnregisterServer
#5 · 0x1570
No function matches your filter.
Imported DLLs & functions 139
ADVAPI32.dll
12
AdjustTokenPrivileges
0x180016ac0
LookupPrivilegeValueW
0x180016ac8
OpenProcessToken
0x180016ad0
RegCloseKey
0x180016af0
RegCreateKeyExW
0x180016a98
RegFlushKey
0x180016aa8
RegLoadKeyW
0x180016ab8
RegOpenKeyExW
0x180016ae0
RegQueryInfoKeyW
0x180016ae8
RegQueryValueExW
0x180016ad8
RegSetValueExW
0x180016aa0
RegUnLoadKeyW
0x180016ab0
KERNEL32.dll
61
CloseHandle
0x180016ca8
CreateFileMappingW
0x180016cc0
CreateFileW
0x180016c68
DeleteCriticalSection
0x180016b18
DisableThreadLibraryCalls
0x180016b00
EnterCriticalSection
0x180016b58
FindResourceExW
0x180016be0
FormatMessageW
0x180016c80
FreeLibrary
0x180016bb8
GetCurrentProcess
0x180016ba0
GetCurrentProcessId
0x180016b78
GetCurrentThreadId
0x180016b70
GetEnvironmentVariableW
0x180016bc0
GetFileAttributesW
0x180016b98
GetFileInformationByHandle
0x180016c70
GetFullPathNameW
0x180016c60
GetLastError
0x180016b28
GetModuleFileNameW
0x180016b30
GetModuleHandleExW
0x180016cd8
GetModuleHandleW
0x180016b48
GetProcAddress
0x180016b38
GetProcessHeap
0x180016c08
GetSystemInfo
0x180016ce0
GetSystemTimeAsFileTime
0x180016c50
GetSystemWindowsDirectoryW
0x180016cb0
GetThreadLocale
0x180016b08
GetTickCount
0x180016c58
GetVersionExW
0x180016ca0
HeapAlloc
0x180016c00
HeapDestroy
0x180016c10
HeapFree
0x180016bf8
HeapReAlloc
0x180016bf0
HeapSize
0x180016be8
InitializeCriticalSection
0x180016b50
LeaveCriticalSection
0x180016b60
LoadLibraryExW
0x180016b40
LoadResource
0x180016bd8
LocalFree
0x180016c78
LockResource
0x180016bd0
MapViewOfFile
0x180016cb8
MultiByteToWideChar
0x180016b80
OpenProcess
0x180016ba8
OutputDebugStringW
0x180016b88
QueryPerformanceCounter
0x180016c48
RaiseException
0x180016b20
ReadFile
0x180016c88
RtlCaptureContext
0x180016c18
RtlLookupFunctionEntry
0x180016c20
RtlVirtualUnwind
0x180016c28
SearchPathW
0x180016cd0
SetEnvironmentVariableW
0x180016bb0
SetFilePointer
0x180016c90
SetLastError
0x180016c98
SetThreadLocale
0x180016b10
SetThreadUILanguage
0x180016b68
SetUnhandledExceptionFilter
0x180016c38
SizeofResource
0x180016bc8
Sleep
0x180016b90
TerminateProcess
0x180016c40
UnhandledExceptionFilter
0x180016c30
UnmapViewOfFile
0x180016cc8
msvcrt.dll
39
__C_specific_handler
0x180016ee0
__CxxFrameHandler3
0x180016ee8
__dllonexit
0x180016e10
_amsg_exit
0x180016e38
_callnewh
0x180016e50
_CxxThrowException
0x180016e48
_initterm
0x180016e30
_lock
0x180016e20
_onexit
0x180016e08
_purecall
0x180016e90
_unlock
0x180016e18
_vscwprintf
0x180016eb0
_vsnwprintf
0x180016de0
_wcsicmp
0x180016eb8
_wcslwr_s
0x180016ea0
_wcsnicmp
0x180016dd0
_XcptFilter
0x180016e40
??0exception@@QEAA@AEBQEBDH@Z
0x180016e70
??0exception@@QEAA@AEBV0@@Z
0x180016e68
??1exception@@UEAA@XZ
0x180016e60
??1type_info@@UEAA@XZ
0x180016e00
?terminate@@YAXXZ
0x180016e28
?what@exception@@UEBAPEBDXZ
0x180016e58
free
0x180016ed0
malloc
0x180016e78
memcmp
0x180016df0
memcpy
0x180016df8
memcpy_s
0x180016e88
memmove_s
0x180016e80
memset
0x180016de8
towupper
0x180016db8
vswprintf_s
0x180016ea8
wcscat_s
0x180016ec8
wcschr
0x180016dc0
wcscpy_s
0x180016ed8
wcsncmp
0x180016dd8
wcsncpy_s
0x180016ec0
wcsrchr
0x180016dc8
wcsstr
0x180016e98
NtQueryInformationProcess
0x180016f10
NtQueryOpenSubKeysEx
0x180016f18
NtUnloadKey2
0x180016f08
RtlAllocateHeap
0x180016ef8
RtlFreeHeap
0x180016f00
RtlInitUnicodeString
0x180016f20
CoCreateInstance
0x180016cf8
CoTaskMemFree
0x180016d00
ProgIDFromCLSID
0x180016d08
StringFromGUID2
0x180016cf0
OLEAUT32.dll
12
CreateErrorInfo
0x180016d70
LoadRegTypeLib
0x180016d60
LoadTypeLib
0x180016d30
RegisterTypeLib
0x180016d38
SetErrorInfo
0x180016d68
SysAllocString
0x180016d28
SysAllocStringByteLen
0x180016d58
SysAllocStringLen
0x180016d48
SysFreeString
0x180016d18
SysStringByteLen
0x180016d50
SysStringLen
0x180016d40
UnRegisterTypeLib
0x180016d20
GetFileVersionInfoExW
0x180016d98
GetFileVersionInfoSizeExW
0x180016da8
VerQueryValueW
0x180016da0
No function matches your filter.