msoobeplugins.dll
v10.0.19041.6392
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x67c0
DllGetActivationFactory
#2 · 0x6400
DllGetClassObject
#3 · 0x65e0
No function matches your filter.
Imported DLLs & functions 454
CheckTokenMembership
0x1800c6048
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800c6040
CreateWellKnownSid
0x1800c6058
DuplicateToken
0x1800c6030
LogonUserW
0x1800c6038
RegDeleteKeyExW
0x1800c6028
RegSetKeySecurity
0x1800c6020
TraceMessage
0x1800c6050
ApiSetQueryApiSetPresence
0x1800c6430
CStdStubBuffer2_Connect
0x1800c6448
CStdStubBuffer2_CountRefs
0x1800c6490
CStdStubBuffer2_Disconnect
0x1800c64a8
CStdStubBuffer2_QueryInterface
0x1800c64c0
NdrProxyForwardingFunction3
0x1800c6450
NdrProxyForwardingFunction4
0x1800c64d0
NdrProxyForwardingFunction5
0x1800c64d8
ObjectStublessClient10
0x1800c6460
ObjectStublessClient11
0x1800c6488
ObjectStublessClient12
0x1800c6478
ObjectStublessClient13
0x1800c64b8
ObjectStublessClient14
0x1800c6480
ObjectStublessClient15
0x1800c6440
ObjectStublessClient16
0x1800c6458
ObjectStublessClient17
0x1800c6470
ObjectStublessClient18
0x1800c6498
ObjectStublessClient19
0x1800c64c8
ObjectStublessClient20
0x1800c64a0
ObjectStublessClient3
0x1800c6468
ObjectStublessClient6
0x1800c64e0
ObjectStublessClient7
0x1800c64b0
ObjectStublessClient8
0x1800c64e8
ObjectStublessClient9
0x1800c64f0
DebugBreak
0x1800c6508
IsDebuggerPresent
0x1800c6500
OutputDebugStringW
0x1800c6510
DelayLoadFailureHook
0x1800c6520
ResolveDelayLoadedAPI
0x1800c6530
GetLastError
0x1800c6540
RaiseException
0x1800c6548
SetLastError
0x1800c6550
SetUnhandledExceptionFilter
0x1800c6560
UnhandledExceptionFilter
0x1800c6558
CreateFileW
0x1800c6580
DeleteFileW
0x1800c65a8
FindFirstVolumeW
0x1800c6578
FindNextVolumeW
0x1800c65a0
GetDriveTypeW
0x1800c6598
GetFileSize
0x1800c6588
GetTempFileNameW
0x1800c6570
ReadFile
0x1800c65b0
WriteFile
0x1800c6590
GetTempPathW
0x1800c65c0
GetVolumePathNamesForVolumeNameW
0x1800c65c8
GetProcessHeap
0x1800c65f8
HeapAlloc
0x1800c65f0
HeapDestroy
0x1800c6610
HeapFree
0x1800c6618
HeapReAlloc
0x1800c6608
HeapSize
0x1800c6600
GlobalAlloc
0x1800c6630
GlobalFree
0x1800c6638
LocalAlloc
0x1800c6628
LocalFree
0x1800c6648
LocalReAlloc
0x1800c6640
GlobalLock
0x1800c6668
GlobalSize
0x1800c6658
GlobalUnlock
0x1800c6660
InitializeSListHead
0x1800c6678
DeviceIoControl
0x1800c6688
DnsHostnameToComputerNameW
0x1800c66a0
GetComputerNameW
0x1800c66a8
GetSystemPowerStatus
0x1800c6698
PowerClearRequest
0x1800c66c0
PowerCreateRequest
0x1800c66b8
PowerSetRequest
0x1800c66c8
SetThreadExecutionState
0x1800c66d8
DisableThreadLibraryCalls
0x1800c66e8
FindResourceExW
0x1800c66f8
FreeLibrary
0x1800c6738
GetModuleFileNameA
0x1800c6710
GetModuleHandleExW
0x1800c6708
GetModuleHandleW
0x1800c66f0
GetProcAddress
0x1800c6718
LoadLibraryExW
0x1800c6730
LoadResource
0x1800c6720
LoadStringW
0x1800c6700
LockResource
0x1800c6740
SizeofResource
0x1800c6728
LoadLibraryW
0x1800c6750
EnumSystemGeoID
0x1800c6788
EnumSystemLocalesW
0x1800c6768
FormatMessageW
0x1800c6790
GetACP
0x1800c67c8
GetCPInfo
0x1800c67b8
GetFileMUIPath
0x1800c6798
GetGeoInfoW
0x1800c67f8
GetLocaleInfoEx
0x1800c6770
GetLocaleInfoW
0x1800c67c0
GetSystemPreferredUILanguages
0x1800c67e8
GetThreadPreferredUILanguages
0x1800c67d0
GetThreadUILanguage
0x1800c67a8
GetUserDefaultLCID
0x1800c6778
GetUserDefaultLocaleName
0x1800c67b0
GetUserGeoID
0x1800c6780
LCMapStringEx
0x1800c67f0
LocaleNameToLCID
0x1800c67e0
SetThreadPreferredUILanguages
0x1800c67d8
SetThreadUILanguage
0x1800c67a0
SetUserGeoID
0x1800c6760
GetSystemDefaultLocaleName
0x1800c6810
LCIDToLocaleName
0x1800c6808
GetUserDefaultGeoName
0x1800c6820
NlsUpdateLocale
0x1800c6830
ExpandEnvironmentStringsW
0x1800c6858
CreateProcessW
0x1800c6888
GetCurrentProcess
0x1800c68a0
GetCurrentProcessId
0x1800c6890
GetCurrentThread
0x1800c6870
GetCurrentThreadId
0x1800c6880
OpenProcessToken
0x1800c6868
OpenThreadToken
0x1800c6878
TerminateProcess
0x1800c6898
IsProcessorFeaturePresent
0x1800c68b0
OpenProcess
0x1800c68b8
QueryPerformanceCounter
0x1800c68c8
RegCloseKey
0x1800c68d8
RegCreateKeyExW
0x1800c6908
RegDeleteTreeW
0x1800c6928
RegDeleteValueW
0x1800c6910
RegEnumKeyExW
0x1800c6920
RegEnumValueW
0x1800c68f0
RegGetValueW
0x1800c68e0
RegOpenKeyExW
0x1800c6900
RegQueryInfoKeyW
0x1800c68e8
RegQueryValueExW
0x1800c6918
RegSetValueExW
0x1800c68f8
RtlCaptureContext
0x1800c6948
RtlLookupFunctionEntry
0x1800c6940
RtlVirtualUnwind
0x1800c6938
CompareStringOrdinal
0x1800c6970
CompareStringW
0x1800c6958
MultiByteToWideChar
0x1800c6968
WideCharToMultiByte
0x1800c6960
AcquireSRWLockExclusive
0x1800c6980
AcquireSRWLockShared
0x1800c69c8
CreateEventExW
0x1800c6a28
CreateEventW
0x1800c69a0
CreateMutexExW
0x1800c69c0
CreateSemaphoreExW
0x1800c6a18
DeleteCriticalSection
0x1800c69f8
EnterCriticalSection
0x1800c6a00
InitializeCriticalSection
0x1800c6988
InitializeCriticalSectionAndSpinCount
0x1800c69b8
InitializeCriticalSectionEx
0x1800c6a10
InitializeSRWLock
0x1800c6a30
LeaveCriticalSection
0x1800c6a08
OpenSemaphoreW
0x1800c69d0
ReleaseMutex
0x1800c69e0
ReleaseSemaphore
0x1800c69f0
ReleaseSRWLockExclusive
0x1800c6998
ReleaseSRWLockShared
0x1800c6990
ResetEvent
0x1800c69a8
SetEvent
0x1800c69b0
WaitForMultipleObjectsEx
0x1800c6a20
WaitForSingleObject
0x1800c69e8
WaitForSingleObjectEx
0x1800c69d8
InitOnceBeginInitialize
0x1800c6a40
InitOnceComplete
0x1800c6a48
InitOnceExecuteOnce
0x1800c6a50
Sleep
0x1800c6a58
WaitForMultipleObjects
0x1800c6a68
GetComputerNameExW
0x1800c6a90
GetSystemDirectoryW
0x1800c6a98
GetSystemTimeAsFileTime
0x1800c6a78
GetTickCount
0x1800c6a88
GetTickCount64
0x1800c6a80
SetComputerNameExW
0x1800c6aa8
CloseThreadpoolTimer
0x1800c6ad8
CloseThreadpoolWait
0x1800c6ac0
CreateThreadpoolTimer
0x1800c6af0
CreateThreadpoolWait
0x1800c6ae0
SetThreadpoolTimer
0x1800c6ac8
SetThreadpoolWait
0x1800c6ad0
WaitForThreadpoolTimerCallbacks
0x1800c6ae8
WaitForThreadpoolWaitCallbacks
0x1800c6ab8
QueueUserWorkItem
0x1800c6b00
GetDynamicTimeZoneInformation
0x1800c6b18
SetDynamicTimeZoneInformation
0x1800c6b10
GetRestrictedErrorInfo
0x1800c6b60
RoOriginateError
0x1800c6b48
RoOriginateErrorW
0x1800c6b50
RoTransformError
0x1800c6b58
SetRestrictedErrorInfo
0x1800c6b40
IsErrorPropagationEnabled
0x1800c6b80
RoGetMatchingRestrictedErrorInfo
0x1800c6b70
RoReportFailedDelegate
0x1800c6b78
RoActivateInstance
0x1800c6ba8
RoGetActivationFactory
0x1800c6b90
RoInitialize
0x1800c6b98
RoUninitialize
0x1800c6ba0
HSTRING_UserFree
0x1800c6c28
HSTRING_UserFree64
0x1800c6c18
HSTRING_UserMarshal
0x1800c6c10
HSTRING_UserMarshal64
0x1800c6c30
HSTRING_UserSize
0x1800c6c08
HSTRING_UserSize64
0x1800c6c20
HSTRING_UserUnmarshal
0x1800c6c00
HSTRING_UserUnmarshal64
0x1800c6be0
WindowsConcatString
0x1800c6bd0
WindowsCreateString
0x1800c6bd8
WindowsCreateStringReference
0x1800c6bf8
WindowsDeleteString
0x1800c6bc8
WindowsDuplicateString
0x1800c6be8
WindowsGetStringRawBuffer
0x1800c6bf0
WindowsIsStringEmpty
0x1800c6bb8
WindowsStringHasEmbeddedNull
0x1800c6bc0
__C_specific_handler
0x1800c6da8
__CxxFrameHandler3
0x1800c6ce0
__CxxFrameHandler4
0x1800c6db8
__std_terminate
0x1800c6db0
_CxxThrowException
0x1800c6ce8
_o___std_exception_copy
0x1800c6da0
_o___std_exception_destroy
0x1800c6d98
_o___std_type_info_destroy_list
0x1800c6d90
_o___stdio_common_vsnprintf_s
0x1800c6d78
_o___stdio_common_vsprintf
0x1800c6d70
_o___stdio_common_vswprintf
0x1800c6d68
_o__callnewh
0x1800c6d60
_o__cexit
0x1800c6d58
_o__configure_narrow_argv
0x1800c6d50
_o__crt_atexit
0x1800c6d48
_o__errno
0x1800c6d40
_o__execute_onexit_table
0x1800c6d38
_o__get_errno
0x1800c6d30
_o__initialize_narrow_environment
0x1800c6d08
_o__initialize_onexit_table
0x1800c6d00
_o__invalid_parameter_noinfo
0x1800c6cf8
_o__invalid_parameter_noinfo_noreturn
0x1800c6cf0
_o__purecall
0x1800c6d28
_o__register_onexit_function
0x1800c6d20
_o__seh_filter_dll
0x1800c6d18
_o__set_errno
0x1800c6d10
_o__wcsicmp
0x1800c6c40
_o__wcsnicmp
0x1800c6c48
_o__wtoi
0x1800c6c50
_o__wtol
0x1800c6c58
_o_bsearch
0x1800c6c60
_o_free
0x1800c6c68
_o_iswascii
0x1800c6c70
_o_iswspace
0x1800c6c80
_o_iswupper
0x1800c6c88
_o_malloc
0x1800c6c90
_o_memcpy_s
0x1800c6c98
_o_rand
0x1800c6ca0
_o_realloc
0x1800c6ca8
_o_terminate
0x1800c6cb0
_o_toupper
0x1800c6cb8
_o_towlower
0x1800c6cc0
_o_wcscpy_s
0x1800c6cc8
_o_wcstok_s
0x1800c6cd0
_o_wcstol
0x1800c6cd8
memcmp
0x1800c6dc0
memcpy
0x1800c6dc8
memmove
0x1800c6c78
wcschr
0x1800c6d88
wcsrchr
0x1800c6d80
EventActivityIdControl
0x1800c6e28
EventRegister
0x1800c6e20
EventSetInformation
0x1800c6e10
EventUnregister
0x1800c6e18
EventWriteTransfer
0x1800c6e30
AdjustTokenPrivileges
0x1800c6e40
CopySid
0x1800c6e60
DuplicateTokenEx
0x1800c6e78
GetSidLengthRequired
0x1800c6e58
GetSidSubAuthority
0x1800c6e50
GetSidSubAuthorityCount
0x1800c6e48
GetTokenInformation
0x1800c6e68
IsWellKnownSid
0x1800c6e70
CapabilityCheck
0x1800c6e88
LookupAccountNameW
0x1800c6e98
LookupPrivilegeValueW
0x1800c6ea0
LsaClose
0x1800c6ee0
LsaFreeMemory
0x1800c6ed8
LsaOpenPolicy
0x1800c6ec0
LsaQueryInformationPolicy
0x1800c6ec8
LsaRetrievePrivateData
0x1800c6eb8
LsaSetInformationPolicy
0x1800c6ed0
LsaStorePrivateData
0x1800c6eb0
ConvertSidToStringSidW
0x1800c6ef0
ConvertStringSidToSidW
0x1800c6ef8
CloseServiceHandle
0x1800c6f18
OpenSCManagerW
0x1800c6f20
OpenServiceW
0x1800c6f08
StartServiceW
0x1800c6f10
ChangeServiceConfigW
0x1800c6f30
QueryServiceConfigW
0x1800c6f40
QueryServiceStatusEx
0x1800c6f38
GetPersistedRegistryLocationW
0x1800c6f68
AppendUserLanguageInternal
0x1800c6078
Bcp47FromLcid
0x1800c6068
GetUserLanguageInputMethods
0x1800c6070
CryptAcquireContextW
0x1800c60d0
CryptDestroyKey
0x1800c60f8
CryptEncrypt
0x1800c60e0
CryptExportKey
0x1800c60e8
CryptGenKey
0x1800c60c8
CryptImportKey
0x1800c60d8
CryptReleaseContext
0x1800c60f0
KERNEL32.dll
11
CreateDirectoryW
0x1800c6158
EnumUILanguagesW
0x1800c6148
FindClose
0x1800c6178
FindFirstFileW
0x1800c6188
FindNextFileW
0x1800c6168
GetFileAttributesW
0x1800c6180
GetFullPathNameW
0x1800c6160
GetModuleFileNameW
0x1800c6138
GetPrivateProfileSectionW
0x1800c6140
GetSystemDefaultUILanguage
0x1800c6150
ResolveLocaleName
0x1800c6170
?_Xbad_function_call@std@@YAXXZ
0x1800c6f98
?_Xlength_error@std@@YAXPEBD@Z
0x1800c6f90
?_Xout_of_range@std@@YAXPEBD@Z
0x1800c6fa0
ntdll.dll
28
NtClose
0x1800c6ff0
NtDeviceIoControlFile
0x1800c6fe8
NtOpenFile
0x1800c6ff8
NtQueryInformationToken
0x1800c7080
NtQueryLicenseValue
0x1800c6fe0
NtQueryWnfStateData
0x1800c7010
NtUpdateWnfStateData
0x1800c6fb8
RtlAllocateHeap
0x1800c7070
RtlCanonicalizeDomainName
0x1800c7058
RtlConvertSidToUnicodeString
0x1800c7060
RtlEqualUnicodeString
0x1800c7078
RtlFreeHeap
0x1800c6fd8
RtlFreeUnicodeString
0x1800c7088
RtlGetDeviceFamilyInfoEnum
0x1800c7040
RtlGetUILanguageInfo
0x1800c6fb0
RtlInitUnicodeString
0x1800c7048
RtlIsMultiSessionSku
0x1800c7068
RtlNtStatusToDosError
0x1800c6fc8
RtlpSetPreferredUILanguages
0x1800c6fd0
RtlPublishWnfStateData
0x1800c7000
RtlpVerifyAndCommitUILanguageSettings
0x1800c6fc0
RtlSubscribeWnfStateChangeNotification
0x1800c7050
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800c7008
WinSqmAddToStream
0x1800c7038
WinSqmEndSession
0x1800c7020
WinSqmIncrementDWORD
0x1800c7030
WinSqmSetDWORD
0x1800c7028
WinSqmStartSession
0x1800c7018
RPCRT4.dll
27
CStdStubBuffer_AddRef
0x1800c61f0
CStdStubBuffer_Connect
0x1800c6248
CStdStubBuffer_CountRefs
0x1800c6200
CStdStubBuffer_DebugServerQueryInterface
0x1800c61e0
CStdStubBuffer_DebugServerRelease
0x1800c6218
CStdStubBuffer_Disconnect
0x1800c6228
CStdStubBuffer_Invoke
0x1800c61d0
CStdStubBuffer_IsIIDSupported
0x1800c6240
CStdStubBuffer_QueryInterface
0x1800c6208
IUnknown_AddRef_Proxy
0x1800c61d8
IUnknown_QueryInterface_Proxy
0x1800c6230
IUnknown_Release_Proxy
0x1800c61f8
NdrClientCall3
0x1800c6260
NdrCStdStubBuffer_Release
0x1800c61c8
NdrCStdStubBuffer2_Release
0x1800c61b8
NdrDllCanUnloadNow
0x1800c61c0
NdrDllGetClassObject
0x1800c6220
NdrOleAllocate
0x1800c6210
NdrOleFree
0x1800c61e8
NdrStubCall3
0x1800c6258
NdrStubForwardingFunction
0x1800c6250
RpcBindingFree
0x1800c6268
RpcBindingFromStringBindingW
0x1800c61a0
RpcExceptionFilter
0x1800c61b0
RpcStringBindingComposeW
0x1800c6198
RpcStringFreeW
0x1800c61a8
UuidCreate
0x1800c6238
0x1800c6278
ShellExecuteExW
0x1800c6280
SHGetFolderPathEx
0x1800c6290
SHGetKnownFolderPath
0x1800c6288
SHLWAPI.dll
14
0x1800c62a0
0x1800c62c0
0x1800c62e0
0x1800c62e8
0x1800c62f0
0x1800c6300
0x1800c6308
PathAppendW
0x1800c62b0
SHCreateStreamOnFileW
0x1800c62a8
SHDeleteValueW
0x1800c62d8
SHStrDupW
0x1800c62f8
StrChrW
0x1800c62c8
StrStrW
0x1800c62b8
StrTrimW
0x1800c62d0
USER32.dll
22
DefWindowProcW
0x1800c6348
DestroyWindow
0x1800c6320
DispatchMessageW
0x1800c63b8
ExitWindowsEx
0x1800c63c0
GetForegroundWindow
0x1800c6318
GetMessageW
0x1800c6358
GetPointerDevices
0x1800c6378
GetWindowLongPtrW
0x1800c6340
KillTimer
0x1800c6368
LoadCursorW
0x1800c63b0
MsgWaitForMultipleObjectsEx
0x1800c6388
PeekMessageW
0x1800c6390
PostMessageW
0x1800c6328
PostQuitMessage
0x1800c6398
RegisterDeviceNotificationW
0x1800c6360
RegisterWindowMessageW
0x1800c6330
SetCursor
0x1800c63a8
SetTimer
0x1800c6350
SetWindowLongPtrW
0x1800c6380
TranslateMessage
0x1800c63a0
UnregisterClassA
0x1800c6338
UnregisterDeviceNotification
0x1800c6370
0x1800c63d8
DeleteProfileW
0x1800c63e0
LoadUserProfileW
0x1800c63e8
UnloadUserProfile
0x1800c63d0
EulaFreeBuffer
0x1800c6400
GetEULAFile
0x1800c6410
GetInstalledEULAPath
0x1800c63f8
InstallEULA
0x1800c6408
SetUserLanguages
0x1800c6420
No function matches your filter.