wmipcima.dll - Online Dependency Analysis & Download

Description

WMI Win32Ex Provider

Authors

File size

172.0 KB

Uploaded

2025-12-01 07:51

Views

SHA-256

7b51d865b587d63cadca5d0ee840267e

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 4

DllCanUnloadNow #1 · 0x1b90

DllGetClassObject #2 · 0x1700

DllRegisterServer #3 · 0x83a0

DllUnregisterServer #4 · 0x8410

Imported DLLs & functions 225

ADVAPI32.dll 13

ImpersonateLoggedOnUser 0x18001a510

LsaClose 0x18001a4f0

LsaEnumerateTrustedDomains 0x18001a4f8

LsaFreeMemory 0x18001a4e8

LsaOpenPolicy 0x18001a500

LsaQueryInformationPolicy 0x18001a4e0

OpenThreadToken 0x18001a4b0

RegCloseKey 0x18001a4c8

RegCreateKeyExW 0x18001a4c0

RegDeleteKeyExW 0x18001a4d8

RegOpenKeyExW 0x18001a4d0

RegSetValueExW 0x18001a4b8

RevertToSelf 0x18001a508

DEVOBJ.dll 6

DevObjCreateDeviceInfoList 0x18001a530

DevObjDestroyDeviceInfoList 0x18001a520

DevObjEnumDeviceInfo 0x18001a548

DevObjEnumDeviceInterfaces 0x18001a538

DevObjGetClassDevs 0x18001a528

DevObjGetDeviceInterfaceDetail 0x18001a540

framedynos.dll 111

??0CHPtrArray@@QEAA@XZ 0x18001a770

??0CHString@@QEAA@AEBV0@@Z 0x18001aa58

??0CHString@@QEAA@PEBG@Z 0x18001a818

??0CHString@@QEAA@XZ 0x18001a840

??0CHStringArray@@QEAA@XZ 0x18001aa38

??0CObjectPathParser@@QEAA@W4ObjectParserFlags@@@Z 0x18001a9f8

??0CThreadBase@@QEAA@W4THREAD_SAFETY_MECHANISM@0@@Z 0x18001a780

??0CWinMsgEvent@@QEAA@XZ 0x18001a930

??0Provider@@QEAA@PEBG0@Z 0x18001a858

??1CHPtrArray@@QEAA@XZ 0x18001a768

??1CHString@@QEAA@XZ 0x18001a968

??1CHStringArray@@QEAA@XZ 0x18001aa30

??1CObjectPathParser@@QEAA@XZ 0x18001a9f0

??1CThreadBase@@UEAA@XZ 0x18001a778

??1CWinMsgEvent@@QEAA@XZ 0x18001a938

??1Provider@@UEAA@XZ 0x18001a850

??4CHString@@QEAAAEBV0@AEBV0@@Z 0x18001a7d8

??4CHString@@QEAAAEBV0@PEBD@Z 0x18001a920

??4CHString@@QEAAAEBV0@PEBG@Z 0x18001aa48

??ACHPtrArray@@QEAAAEAPEAXH@Z 0x18001a738

??ACHStringArray@@QEAAAEAVCHString@@H@Z 0x18001a980

??ACHStringArray@@QEBA?AVCHString@@H@Z 0x18001a9e8

??BCHString@@QEBAPEBGXZ 0x18001a820

??H@YA?AVCHString@@AEBV0@0@Z 0x18001a9d8

??H@YA?AVCHString@@AEBV0@G@Z 0x18001a9d0

??H@YA?AVCHString@@AEBV0@PEBG@Z 0x18001a8e8

??H@YA?AVCHString@@PEBGAEBV0@@Z 0x18001a9c8

??YCHString@@QEAAAEBV0@AEBV0@@Z 0x18001a9a0

??YCHString@@QEAAAEBV0@G@Z 0x18001a888

??YCHString@@QEAAAEBV0@PEBG@Z 0x18001a878

?Add@CHPtrArray@@QEAAHPEAX@Z 0x18001a9b0

?Add@CHStringArray@@QEAAHPEBG@Z 0x18001a990

?AddRef@CInstance@@QEAAJXZ 0x18001a790

?BeginRead@CThreadBase@@QEAAHK@Z 0x18001a760

?BeginWrite@CThreadBase@@QEAAHK@Z 0x18001a740

?captainsLog@@3VProviderLog@@A 0x18001a868

?Commit@CInstance@@QEAAJXZ 0x18001a7e8

?Compare@CHString@@QEBAHPEBG@Z 0x18001a7c8

?CompareNoCase@CHString@@QEBAHPEBG@Z 0x18001a960

?Create@CWbemGlueFactory@@SAPEAV1@PEAJ@Z 0x18001aa60

?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z 0x18001a7f8

?DeleteInstance@Provider@@MEAAJAEBVCInstance@@J@Z 0x18001a718

?Destroy@CWbemGlueFactory@@QEAAXXZ 0x18001aa68

?Empty@CHString@@QEAAXXZ 0x18001a898

?EndRead@CThreadBase@@QEAAXXZ 0x18001a748

?EndWrite@CThreadBase@@QEAAXXZ 0x18001a728

?ExecMethod@Provider@@MEAAJAEBVCInstance@@QEAGPEAV2@2J@Z 0x18001a710

?ExecQuery@Provider@@MEAAJPEAVMethodContext@@AEAVCFrameworkQuery@@J@Z 0x18001a928

?Find@CHString@@QEBAHG@Z 0x18001a7e0

?FindOneOf@CHString@@QEBAHPEBG@Z 0x18001a890

?Flush@Provider@@MEAAXXZ 0x18001a838

?Format@CHString@@QEAAXPEBGZZ 0x18001a830

?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z 0x18001aa78

?FrameworkLogoffDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z 0x18001aa70

?Free@CObjectPathParser@@QEAAXPEAUParsedObjectPath@@@Z 0x18001aa00

?GetAt@CHPtrArray@@QEBAPEAXH@Z 0x18001a750

?GetBuffer@CHString@@QEAAPEAGH@Z 0x18001a7a8

?GetCHString@CInstance@@QEBA_NPEBGAEAVCHString@@@Z 0x18001a808

?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z 0x18001a9c0

?GetInstanceKeysByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@@Z 0x18001a828

?GetInstancePropertiesByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@AEAVCHStringArray@@@Z 0x18001a988

?GetInstancesByQuery@CWbemProviderGlue@@SAJPEBGPEAV?$TRefPointerCollection@VCInstance@@@@PEAVMethodContext@@0@Z 0x18001a800

?GetInstancesByQueryAsynch@CWbemProviderGlue@@SAJPEBGPEAVProvider@@P6AJ1PEAVCInstance@@PEAVMethodContext@@PEAX@Z034@Z 0x18001aa18

?GetLength@CHString@@QEBAHXZ 0x18001a7b0

?GetLocalComputerName@Provider@@IEAAAEBVCHString@@XZ 0x18001a958

?GetLocalInstancePath@Provider@@IEAA_NPEBVCInstance@@AEAVCHString@@@Z 0x18001aa08

?GetMethodContext@CInstance@@QEBAPEAVMethodContext@@XZ 0x18001a810

?GetNamespace@Provider@@IEAAAEBVCHString@@XZ 0x18001aa10

?GetObject@Provider@@MEAAJPEAVCInstance@@J@Z 0x18001a918

?GetObject@Provider@@MEAAJPEAVCInstance@@JAEAVCFrameworkQuery@@@Z 0x18001a708

?GetPropertyBitMask@CFrameworkQueryEx@@QEAAXAEBVCHPtrArray@@PEAX@Z 0x18001a8e0

?GetSize@CHPtrArray@@QEBAHXZ 0x18001a758

?GetSize@CHStringArray@@QEBAHXZ 0x18001aa20

?GetValuesForProp@CFrameworkQuery@@QEAAJPEBGAEAV?$vector@V_bstr_t@@V?$allocator@V_bstr_t@@@std@@@std@@@Z 0x18001a848

?GetValuesForProp@CFrameworkQuery@@QEAAJPEBGAEAVCHStringArray@@@Z 0x18001aa28

?GetVariant@CInstance@@QEBA_NPEBGAEAUtagVARIANT@@@Z 0x18001a9a8

?initFailed@Provider@@SAHXZ 0x18001aa40

?IsDerivedFrom@CWbemProviderGlue@@SA_NPEBG0PEAVMethodContext@@0@Z 0x18001a9b8

?IsEmpty@CHString@@QEBAHXZ 0x18001a8d8

?IsLoggingOn@ProviderLog@@QEAA?AW4LogLevel@1@PEAVCHString@@@Z 0x18001a880

?Left@CHString@@QEBA?AV1@H@Z 0x18001a7c0

?LocalLogMessage@ProviderLog@@QEAAXPEBG0HW4LogLevel@1@@Z 0x18001a860

?LocalLogMessage@ProviderLog@@QEAAXPEBGHW4LogLevel@1@0ZZ 0x18001a870

?MakeLower@CHString@@QEAAXXZ 0x18001a798

?MakeUpper@CHString@@QEAAXXZ 0x18001aa50

?Mid@CHString@@QEBA?AV1@H@Z 0x18001a7d0

?OnFinalRelease@CThreadBase@@MEAAXXZ 0x18001a720

?Parse@CObjectPathParser@@QEAAHPEBGPEAPEAUParsedObjectPath@@@Z 0x18001a9e0

?PutInstance@Provider@@MEAAJAEBVCInstance@@J@Z 0x18001a910

?RegisterForMessage@CWinMsgEvent@@IEAAXIH@Z 0x18001a940

?Release@CInstance@@QEAAJXZ 0x18001a788

?ReleaseBuffer@CHString@@QEAAXH@Z 0x18001a7a0

?RemoveAll@CHPtrArray@@QEAAXXZ 0x18001a730

?RemoveAll@CHStringArray@@QEAAXXZ 0x18001a978

?RemoveAt@CHStringArray@@QEAAXHH@Z 0x18001a970

?Right@CHString@@QEBA?AV1@H@Z 0x18001a7b8

?SetAt@CHString@@QEAAXHG@Z 0x18001a998

?Setbool@CInstance@@QEAA_NPEBG_N@Z 0x18001a900

?SetCHString@CInstance@@QEAA_NPEBG0@Z 0x18001a908

?SetCHString@CInstance@@QEAA_NPEBGAEBVCHString@@@Z 0x18001a7f0

?SetCreationClassName@Provider@@IEAA_NPEAVCInstance@@@Z 0x18001a950

?SetDWORD@CInstance@@QEAA_NPEBGK@Z 0x18001a8f8

?SetSize@CHPtrArray@@QEAAXHH@Z 0x18001a8d0

?SetWCHARSplat@CInstance@@QEAA_NPEBG0@Z 0x18001a8f0

?UnRegisterMessage@CWinMsgEvent@@IEAA_NIH@Z 0x18001a948

?ValidateDeletionFlags@Provider@@MEAAJJ@Z 0x18001a8c0

?ValidateEnumerationFlags@Provider@@MEAAJJ@Z 0x18001a8a0

?ValidateGetObjFlags@Provider@@MEAAJJ@Z 0x18001a8a8

?ValidateMethodFlags@Provider@@MEAAJJ@Z 0x18001a8b0

?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z 0x18001a8c8

?ValidateQueryFlags@Provider@@MEAAJJ@Z 0x18001a8b8

KERNEL32.dll 45

AssignProcessToJobObject 0x18001a690

CloseHandle 0x18001a680

CreateEventW 0x18001a5b0

CreateFileW 0x18001a678

CreateThread 0x18001a5e8

DebugBreak 0x18001a640

DeleteCriticalSection 0x18001a5a8

DeviceIoControl 0x18001a5f0

DisableThreadLibraryCalls 0x18001a610

EnterCriticalSection 0x18001a5b8

FreeLibrary 0x18001a660

GetComputerNameExW 0x18001a638

GetCurrentProcess 0x18001a570

GetCurrentProcessId 0x18001a588

GetCurrentThread 0x18001a628

GetCurrentThreadId 0x18001a590

GetExitCodeThread 0x18001a600

GetLastError 0x18001a698

GetModuleFileNameW 0x18001a620

GetProcAddress 0x18001a658

GetSystemTimeAsFileTime 0x18001a598

GetTickCount 0x18001a558

GetVersionExW 0x18001a618

GetWindowsDirectoryW 0x18001a650

InitializeCriticalSection 0x18001a630

InitializeCriticalSectionAndSpinCount 0x18001a5a0

InitializeCriticalSectionEx 0x18001a5e0

LeaveCriticalSection 0x18001a5c0

LoadLibraryExW 0x18001a648

LocalAlloc 0x18001a670

LocalFree 0x18001a668

lstrlenA 0x18001a5d0

MultiByteToWideChar 0x18001a5d8

OpenJobObjectW 0x18001a688

OpenProcess 0x18001a6a8

QueryInformationJobObject 0x18001a6b0

QueryPerformanceCounter 0x18001a580

ResetEvent 0x18001a5f8

SetEvent 0x18001a6a0

SetLastError 0x18001a608

SetUnhandledExceptionFilter 0x18001a568

Sleep 0x18001a6b8

TerminateProcess 0x18001a578

UnhandledExceptionFilter 0x18001a560

WaitForSingleObjectEx 0x18001a5c8

msvcrt.dll 35

__C_specific_handler 0x18001ab60

__CxxFrameHandler3 0x18001ab90

__dllonexit 0x18001ab78

_amsg_exit 0x18001ab48

_callnewh 0x18001aaf0

_CxxThrowException 0x18001ab28

_initterm 0x18001ab58

_lock 0x18001ab68

_onexit 0x18001ab80

_purecall 0x18001aaf8

_unlock 0x18001ab70

_vsnwprintf 0x18001aad8

_wcsicmp 0x18001aad0

_wcslwr 0x18001aaa8

_wcsnicmp 0x18001aac8

_wcsupr 0x18001aa88

_wtoi 0x18001aa98

_wtol 0x18001aaa0

_XcptFilter 0x18001ab40

??_V@YAXPEAX@Z 0x18001aab8

??0exception@@QEAA@AEBQEBD@Z 0x18001ab00

??0exception@@QEAA@AEBQEBDH@Z 0x18001ab08

??0exception@@QEAA@AEBV0@@Z 0x18001ab10

??1exception@@UEAA@XZ 0x18001ab18

??1type_info@@UEAA@XZ 0x18001ab88

??3@YAXPEAX@Z 0x18001aa90

?what@exception@@UEBAPEBDXZ 0x18001ab20

free 0x18001ab50

iswupper 0x18001aac0

malloc 0x18001aae8

memcpy 0x18001ab30

memmove 0x18001ab38

memset 0x18001ab98

swscanf 0x18001aae0

towupper 0x18001aab0

ntdll.dll 4

RtlCaptureContext 0x18001abb0

RtlLookupFunctionEntry 0x18001abb8

RtlNtStatusToDosError 0x18001aba8

RtlVirtualUnwind 0x18001abc0

ole32.dll 4

CLSIDFromString 0x18001abe8

CoTaskMemFree 0x18001abe0

StringFromCLSID 0x18001abd8

StringFromGUID2 0x18001abd0

OLEAUT32.dll 7

SysAllocString 0x18001a6d0

SysAllocStringByteLen 0x18001a6f8

SysFreeString 0x18001a6c8

SysStringLen 0x18001a6d8

VariantChangeType 0x18001a6f0

VariantClear 0x18001a6e8

VariantInit 0x18001a6e0