WmiDcPrv.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0x19e0
DllGetClassObject
#2 · 0x18a0
DllRegisterServer
#3 · 0x1e20
DllUnregisterServer
#4 · 0x1e70
No function matches your filter.
Imported DLLs & functions 89
DelayLoadFailureHook
0x180021520
ResolveDelayLoadedAPI
0x180021530
GetLastError
0x180021550
SetUnhandledExceptionFilter
0x180021548
UnhandledExceptionFilter
0x180021540
CompareFileTime
0x180021560
CloseHandle
0x180021570
GetProcessHeap
0x1800215a0
HeapAlloc
0x180021588
HeapCreate
0x180021598
HeapDestroy
0x180021580
HeapFree
0x180021590
GlobalAlloc
0x1800215b8
GlobalFree
0x1800215c0
LocalFree
0x1800215b0
DisableThreadLibraryCalls
0x1800215e8
GetModuleFileNameW
0x1800215f0
GetProcAddress
0x180021600
LoadLibraryExW
0x1800215f8
LCMapStringW
0x180021610
GetCurrentProcess
0x180021660
GetCurrentProcessId
0x180021628
GetCurrentThread
0x180021630
GetCurrentThreadId
0x180021658
GetProcessTimes
0x180021640
OpenThreadToken
0x180021620
SetThreadToken
0x180021638
SwitchToThread
0x180021648
TerminateProcess
0x180021650
OpenProcess
0x180021670
QueryPerformanceCounter
0x180021680
RegCloseKey
0x1800216b8
RegCreateKeyExW
0x180021698
RegDeleteKeyExW
0x1800216a0
RegGetKeySecurity
0x1800216a8
RegOpenKeyExW
0x1800216c0
RegQueryValueExW
0x1800216b0
RegSetValueExW
0x180021690
RtlCaptureContext
0x1800216e0
RtlLookupFunctionEntry
0x1800216d8
RtlVirtualUnwind
0x1800216d0
GetStringTypeExW
0x1800216f0
CreateMutexW
0x180021700
DeleteCriticalSection
0x180021710
EnterCriticalSection
0x180021720
InitializeCriticalSectionAndSpinCount
0x180021718
LeaveCriticalSection
0x180021728
ReleaseMutex
0x180021708
Sleep
0x180021738
FileTimeToSystemTime
0x180021760
SystemTimeToFileTime
0x180021768
AllocateAndInitializeSid
0x180021790
CopySid
0x180021798
EqualSid
0x180021780
FreeSid
0x180021788
GetLengthSid
0x1800217a8
GetSecurityDescriptorOwner
0x180021778
GetTokenInformation
0x1800217a0
RevertToSelf
0x1800217b0
?AddRef@CWbemCallSecurity@@UEAAKXZ
0x1800214e8
?GetThreadSecurity@CWbemCallSecurity@@UEAAJW4tag_WMI_THREAD_SECURITY_ORIGIN@@PEAPEAU_IWmiThreadSecHandle@@@Z
0x180021510
?New@CWbemCallSecurity@@SAPEAV1@XZ
0x1800214f0
?QueryInterface@CWbemCallSecurity@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180021500
?Release@CWbemCallSecurity@@UEAAKXZ
0x180021508
?SetThreadSecurity@CWbemCallSecurity@@UEAAJPEAU_IWmiThreadSecHandle@@@Z
0x1800214f8
msvcrt.dll
18
__C_specific_handler
0x1800217f0
__CxxFrameHandler3
0x1800217c0
__dllonexit
0x180021810
_amsg_exit
0x1800217d0
_CxxThrowException
0x180021808
_initterm
0x180021820
_lock
0x180021840
_onexit
0x180021800
_purecall
0x180021830
_unlock
0x180021818
_vsnwprintf
0x180021838
_XcptFilter
0x1800217c8
??1type_info@@UEAA@XZ
0x1800217f8
??8type_info@@QEBAHAEBV0@@Z
0x180021828
free
0x1800217d8
malloc
0x1800217e0
memcpy
0x1800217e8
memset
0x180021848
No function matches your filter.