ProvProvider.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DLLGetDISMProviderCLSID
#1 · 0x49f0
DllCanUnloadNow
#2 · 0x4a20
DllGetClassObject
#3 · 0x4a60
DllRegisterServer
#4 · 0x4ba0
DllUnregisterServer
#5 · 0x4ca0
No function matches your filter.
Imported DLLs & functions 267
ADVAPI32.dll
23
AdjustTokenPrivileges
0x18008e4d0
CloseEncryptedFileRaw
0x18008e568
GetAclInformation
0x18008e510
GetSecurityDescriptorControl
0x18008e500
GetSecurityDescriptorDacl
0x18008e4f0
GetSecurityDescriptorGroup
0x18008e4e8
GetSecurityDescriptorLength
0x18008e508
GetSecurityDescriptorOwner
0x18008e4e0
GetSecurityDescriptorSacl
0x18008e4f8
GetSecurityInfo
0x18008e550
LookupPrivilegeValueW
0x18008e4c8
OpenEncryptedFileRawW
0x18008e558
OpenProcessToken
0x18008e4d8
ReadEncryptedFileRaw
0x18008e578
RegCloseKey
0x18008e518
RegCreateKeyExW
0x18008e538
RegGetValueW
0x18008e540
RegOpenKeyExW
0x18008e520
RegQueryInfoKeyW
0x18008e530
RegQueryValueExW
0x18008e528
RegSetValueExW
0x18008e548
RevertToSelf
0x18008e570
WriteEncryptedFileRaw
0x18008e560
BCryptCloseAlgorithmProvider
0x18008ea68
BCryptCreateHash
0x18008ea78
BCryptDestroyHash
0x18008ea70
BCryptFinishHash
0x18008ea98
BCryptGetProperty
0x18008ea88
BCryptHashData
0x18008ea80
BCryptOpenAlgorithmProvider
0x18008ea90
KERNEL32.dll
123
CloseHandle
0x18008e860
CompareStringW
0x18008e760
CopyFileExW
0x18008e868
CopyFileW
0x18008e5a8
CreateDirectoryW
0x18008e898
CreateEventW
0x18008e978
CreateFileMappingW
0x18008e680
CreateFileW
0x18008e830
CreateMutexExW
0x18008e930
CreateSemaphoreExW
0x18008e900
CreateThread
0x18008e8e0
DebugBreak
0x18008e938
DeleteCriticalSection
0x18008e6d8
DeleteFileW
0x18008e858
DeviceIoControl
0x18008e818
DisableThreadLibraryCalls
0x18008e6b0
DosDateTimeToFileTime
0x18008e7d0
DuplicateHandle
0x18008e970
EnterCriticalSection
0x18008e6e8
ExpandEnvironmentStringsW
0x18008e8c8
FindClose
0x18008e828
FindFirstFileW
0x18008e800
FindNextFileW
0x18008e810
FindResourceExW
0x18008e5c8
FlushFileBuffers
0x18008e870
FormatMessageW
0x18008e8d0
FreeLibrary
0x18008e890
GetCurrentDirectoryW
0x18008e888
GetCurrentProcess
0x18008e648
GetCurrentProcessId
0x18008e6c8
GetCurrentThread
0x18008e968
GetCurrentThreadId
0x18008e6d0
GetEnvironmentVariableW
0x18008e600
GetFileAttributesW
0x18008e838
GetFileInformationByHandle
0x18008e848
GetFileInformationByHandleEx
0x18008e7f8
GetFileSizeEx
0x18008e878
GetFinalPathNameByHandleW
0x18008e8b0
GetFullPathNameW
0x18008e8a0
GetHandleInformation
0x18008e700
GetLastError
0x18008e770
GetLongPathNameW
0x18008e8a8
GetModuleFileNameA
0x18008e8f8
GetModuleFileNameW
0x18008e6c0
GetModuleHandleExW
0x18008e910
GetModuleHandleW
0x18008e748
GetOverlappedResult
0x18008e718
GetPrivateProfileSectionW
0x18008e790
GetProcAddress
0x18008e758
GetProcessHeap
0x18008e5f0
GetSystemInfo
0x18008e6f8
GetSystemTimeAsFileTime
0x18008e660
GetTempPathW
0x18008e820
GetThreadLocale
0x18008e6a8
GetTickCount
0x18008e668
GetVersionExW
0x18008e690
GetVolumeInformationByHandleW
0x18008e7a0
GetVolumeInformationW
0x18008e730
GetVolumeNameForVolumeMountPointW
0x18008e8c0
GetVolumePathNamesForVolumeNameW
0x18008e7f0
GetVolumePathNameW
0x18008e8b8
HeapAlloc
0x18008e5e8
HeapDestroy
0x18008e5f8
HeapFree
0x18008e5e0
HeapReAlloc
0x18008e5d8
HeapSize
0x18008e5d0
InitializeCriticalSection
0x18008e6b8
InitializeCriticalSectionAndSpinCount
0x18008e738
IsDebuggerPresent
0x18008e940
LeaveCriticalSection
0x18008e6e0
LoadLibraryExW
0x18008e750
LoadLibraryW
0x18008e7e8
LoadResource
0x18008e5c0
LocalAlloc
0x18008e960
LocalFileTimeToFileTime
0x18008e7d8
LocalFree
0x18008e8f0
LockFileEx
0x18008e778
LockResource
0x18008e5b8
MapViewOfFile
0x18008e678
MultiByteToWideChar
0x18008e6f0
OpenProcess
0x18008e788
OpenSemaphoreW
0x18008e928
OutputDebugStringA
0x18008e768
OutputDebugStringW
0x18008e670
QueryPerformanceCounter
0x18008e658
RaiseException
0x18008e610
ReadFile
0x18008e948
ReleaseMutex
0x18008e918
ReleaseSemaphore
0x18008e908
RemoveDirectoryW
0x18008e958
ResetEvent
0x18008e8e8
RtlCaptureContext
0x18008e620
RtlLookupFunctionEntry
0x18008e628
RtlVirtualUnwind
0x18008e630
SearchPathW
0x18008e698
SetEndOfFile
0x18008e710
SetEvent
0x18008e8d8
SetFileAttributesW
0x18008e840
SetFileInformationByHandle
0x18008e850
SetFilePointer
0x18008e720
SetFilePointerEx
0x18008e708
SetFileTime
0x18008e7e0
SetLastError
0x18008e808
SetThreadIdealProcessor
0x18008e728
SetThreadLocale
0x18008e6a0
SetThreadUILanguage
0x18008e740
SetUnhandledExceptionFilter
0x18008e640
SizeofResource
0x18008e5b0
Sleep
0x18008e618
TerminateProcess
0x18008e650
TlsAlloc
0x18008e7a8
TlsFree
0x18008e7b0
TlsGetValue
0x18008e7b8
TlsSetValue
0x18008e7c0
UnhandledExceptionFilter
0x18008e638
UnlockFileEx
0x18008e780
UnmapViewOfFile
0x18008e688
WaitForMultipleObjects
0x18008e798
WaitForMultipleObjectsEx
0x18008e7c8
WaitForSingleObject
0x18008e880
WaitForSingleObjectEx
0x18008e920
WideCharToMultiByte
0x18008e608
WriteFile
0x18008e950
msvcrt.dll
60
__C_specific_handler
0x18008ec50
__CxxFrameHandler3
0x18008ec78
__dllonexit
0x18008eb70
__RTDynamicCast
0x18008eb50
_amsg_exit
0x18008eba0
_callnewh
0x18008ebb8
_CxxThrowException
0x18008ebb0
_errno
0x18008eb60
_initterm
0x18008eb98
_lock
0x18008eb80
_onexit
0x18008eb68
_purecall
0x18008ebf8
_strnicmp
0x18008eaf8
_unlock
0x18008eb78
_vscwprintf
0x18008ec08
_vsnprintf_s
0x18008eb30
_vsnwprintf
0x18008eaa8
_vsnwprintf_s
0x18008ec58
_wcsicmp
0x18008eab0
_wcslwr
0x18008eaf0
_wcslwr_s
0x18008ebd0
_wcsnicmp
0x18008ead0
_wcsrev
0x18008eae8
_wcstoi64
0x18008eb18
_wtoi
0x18008eb20
_XcptFilter
0x18008eba8
??0exception@@QEAA@AEBQEBD@Z
0x18008ec20
??0exception@@QEAA@AEBQEBDH@Z
0x18008ebc0
??0exception@@QEAA@AEBV0@@Z
0x18008ec40
??0exception@@QEAA@XZ
0x18008ec10
??1exception@@UEAA@XZ
0x18008ec28
??1type_info@@UEAA@XZ
0x18008eb88
?terminate@@YAXXZ
0x18008eb90
?what@exception@@UEBAPEBDXZ
0x18008ec30
free
0x18008ec48
iswalpha
0x18008eb08
iswspace
0x18008eb38
malloc
0x18008ebd8
memcmp
0x18008eab8
memcpy
0x18008eac0
memcpy_s
0x18008ec38
memmove
0x18008eb58
memmove_s
0x18008ec18
memset
0x18008ec80
qsort
0x18008eae0
strcpy_s
0x18008ead8
strncpy_s
0x18008eb10
swscanf_s
0x18008eb48
towlower
0x18008eb40
towupper
0x18008eb28
vswprintf_s
0x18008ec00
wcscat_s
0x18008ebe8
wcschr
0x18008eac8
wcscpy_s
0x18008ebf0
wcsncmp
0x18008eb00
wcsncpy_s
0x18008ebe0
wcsrchr
0x18008ec70
wcsstr
0x18008ebc8
wcstok_s
0x18008ec68
wcstoul
0x18008ec60
ntdll.dll
27
DbgPrintEx
0x18008ed38
NtClose
0x18008ecb8
NtCreateFile
0x18008ecd8
NtOpenFile
0x18008eca8
NtQueryDirectoryFile
0x18008ecb0
NtQueryEaFile
0x18008ecd0
NtQueryInformationFile
0x18008ecc0
NtQueryInformationProcess
0x18008ecc8
NtSetEaFile
0x18008ece0
NtSetInformationFile
0x18008ed60
NtSetSecurityObject
0x18008ec98
NtYieldExecution
0x18008ed30
RtlAcquireResourceExclusive
0x18008ed00
RtlAcquireResourceShared
0x18008ed40
RtlAdjustPrivilege
0x18008ecf0
RtlAllocateHeap
0x18008ed50
RtlDeleteResource
0x18008ed18
RtlDosPathNameToNtPathName_U
0x18008eca0
RtlFindAceByType
0x18008ec90
RtlFreeHeap
0x18008ed48
RtlImpersonateSelf
0x18008ece8
RtlInitializeResource
0x18008ecf8
RtlNtStatusToDosError
0x18008ed58
RtlRaiseStatus
0x18008ed28
RtlReAllocateHeap
0x18008ed20
RtlReleaseResource
0x18008ed10
RtlSetControlSecurityDescriptor
0x18008ed08
OLEAUT32.dll
12
LoadRegTypeLib
0x18008e9f8
LoadTypeLib
0x18008ea00
RegisterTypeLib
0x18008e9d8
SysAllocString
0x18008e9e8
SysAllocStringByteLen
0x18008e9d0
SysAllocStringLen
0x18008e9b0
SysFreeString
0x18008e9c0
SysStringByteLen
0x18008e9c8
SysStringLen
0x18008e9f0
UnRegisterTypeLib
0x18008e9b8
VarBstrCmp
0x18008e9a8
VariantClear
0x18008e9e0
0x18008ed70
No function matches your filter.