NPSMDesktopProvider.dll

Description: <d> NPSM Desktop Local Provider DLL

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: 857548c77810a524f071923734f545fe

File Size: 154.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x7c80)
DllGetClassObject (Ordinal: 2, Address: 0x7c50)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCancelCall (Address: 0x100240d4)
CoCreateFreeThreadedMarshaler (Address: 0x100240ac)
CoCreateInstance (Address: 0x100240a8)
CoDisableCallCancellation (Address: 0x100240d8)
CoEnableCallCancellation (Address: 0x100240c0)
CoGetApartmentType (Address: 0x100240d0)
CoGetMalloc (Address: 0x100240c4)
CoImpersonateClient (Address: 0x100240cc)
CoInitializeEx (Address: 0x100240bc)
CoRevertToSelf (Address: 0x100240c8)
CoTaskMemAlloc (Address: 0x100240b0)
CoTaskMemFree (Address: 0x100240b4)
CoTaskMemRealloc (Address: 0x100240dc)
CoUninitialize (Address: 0x100240b8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x100240e4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100240f4)
IsDebuggerPresent (Address: 0x100240ec)
OutputDebugStringW (Address: 0x100240f0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10024100)
RaiseException (Address: 0x1002410c)
SetLastError (Address: 0x10024108)
SetUnhandledExceptionFilter (Address: 0x10024104)
UnhandledExceptionFilter (Address: 0x100240fc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10024114)
DuplicateHandle (Address: 0x10024118)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10024120)
HeapAlloc (Address: 0x10024128)
HeapFree (Address: 0x10024124)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10024130)
GetModuleFileNameA (Address: 0x10024134)
GetModuleHandleExW (Address: 0x10024144)
GetModuleHandleW (Address: 0x10024140)
GetProcAddress (Address: 0x1002413c)
LoadStringW (Address: 0x10024138)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1002414c)
GetLocaleInfoW (Address: 0x10024150)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetUserDefaultUILanguage (Address: 0x10024158)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10024160)
GetCurrentProcessId (Address: 0x1002416c)
GetCurrentThreadId (Address: 0x10024170)
OpenProcessToken (Address: 0x10024168)
TerminateProcess (Address: 0x10024164)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x10024178)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10024180)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x10024188)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10024190)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100241c0)
AcquireSRWLockShared (Address: 0x100241b8)
CreateMutexExW (Address: 0x100241a0)
CreateSemaphoreExW (Address: 0x10024198)
DeleteCriticalSection (Address: 0x100241c8)
EnterCriticalSection (Address: 0x100241a8)
InitializeCriticalSectionEx (Address: 0x100241b4)
InitializeSRWLock (Address: 0x100241ac)
LeaveCriticalSection (Address: 0x100241a4)
OpenSemaphoreW (Address: 0x100241c4)
ReleaseMutex (Address: 0x100241b0)
ReleaseSemaphore (Address: 0x100241d0)
ReleaseSRWLockExclusive (Address: 0x100241cc)
ReleaseSRWLockShared (Address: 0x100241bc)
WaitForSingleObject (Address: 0x100241d4)
WaitForSingleObjectEx (Address: 0x1002419c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100241dc)
InitOnceComplete (Address: 0x100241e8)
InitOnceExecuteOnce (Address: 0x100241e0)
Sleep (Address: 0x100241e4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100241f4)
GetTickCount (Address: 0x100241f0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10024208)
CloseThreadpoolWait (Address: 0x10024200)
CreateThreadpoolTimer (Address: 0x10024214)
CreateThreadpoolWait (Address: 0x10024204)
IsThreadpoolTimerSet (Address: 0x10024218)
SetThreadpoolTimer (Address: 0x10024210)
SetThreadpoolWait (Address: 0x1002421c)
WaitForThreadpoolTimerCallbacks (Address: 0x1002420c)
WaitForThreadpoolWaitCallbacks (Address: 0x100241fc)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x10024224)
DeleteTimerQueueTimer (Address: 0x10024228)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10024234)
EncodePointer (Address: 0x10024230)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x10024240)
RoTransformError (Address: 0x10024244)
SetRestrictedErrorInfo (Address: 0x1002423c)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10024254)
RoGetMatchingRestrictedErrorInfo (Address: 0x1002424c)
RoReportFailedDelegate (Address: 0x10024250)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x10024260)
WindowsCreateStringReference (Address: 0x10024264)
WindowsDeleteString (Address: 0x10024268)
WindowsDuplicateString (Address: 0x1002426c)
WindowsGetStringRawBuffer (Address: 0x1002425c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

TraceMessage (Address: 0x10024274)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1002427c)
EventRegister (Address: 0x10024284)
EventSetInformation (Address: 0x10024280)
EventUnregister (Address: 0x10024288)
EventWriteTransfer (Address: 0x1002428c)

api-ms-win-security-base-l1-1-0.dll

DuplicateTokenEx (Address: 0x10024298)
GetTokenInformation (Address: 0x10024294)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x100242a0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x100242b0)
OpenSCManagerW (Address: 0x100242ac)
OpenServiceW (Address: 0x100242a8)

api-ms-win-service-private-l1-1-0.dll

SubscribeServiceChangeNotifications (Address: 0x100242bc)
UnsubscribeServiceChangeNotifications (Address: 0x100242b8)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x100242c4)

api-ms-win-shcore-comhelpers-l1-1-0.dll

IUnknown_QueryService (Address: 0x100242cc)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolGetUniqueContext (Address: 0x100242d4)
SHTaskPoolQueueTask (Address: 0x100242d8)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThread (Address: 0x100242e0)

COMCTL32.dll

ImageList_AddMasked (Address: 0x10024000)
ImageList_Create (Address: 0x10024004)
ImageList_Destroy (Address: 0x10024008)
ImageList_LoadImageW (Address: 0x1002400c)

GDI32.dll

CreateCompatibleBitmap (Address: 0x1002401c)
CreateCompatibleDC (Address: 0x10024014)
CreateDIBSection (Address: 0x10024020)
DeleteDC (Address: 0x10024030)
DeleteObject (Address: 0x1002402c)
GetDeviceCaps (Address: 0x10024034)
GetObjectW (Address: 0x10024018)
SelectObject (Address: 0x10024024)
StretchBlt (Address: 0x10024028)

KERNEL32.dll

CreateEventW (Address: 0x1002403c)
InitializeCriticalSection (Address: 0x10024040)
SetEvent (Address: 0x10024044)

MMDevAPI.DLL

(Address: 0x10024050)
(Address: 0x1002404c)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100242f0)
__dllonexit (Address: 0x100242f4)
_amsg_exit (Address: 0x10024300)
_callnewh (Address: 0x10024334)
_CxxThrowException (Address: 0x10024348)
_except_handler4_common (Address: 0x10024340)
_initterm (Address: 0x10024358)
_lock (Address: 0x100242ec)
_onexit (Address: 0x100242f8)
_purecall (Address: 0x10024354)
_unlock (Address: 0x100242e8)
_vsnprintf_s (Address: 0x10024330)
_vsnwprintf (Address: 0x10024314)
_wsplitpath_s (Address: 0x10024318)
_XcptFilter (Address: 0x10024304)
??0exception@@QAE@ABV0@@Z (Address: 0x1002432c)
??0exception@@QAE@XZ (Address: 0x10024328)
??1exception@@UAE@XZ (Address: 0x10024324)
??1type_info@@UAE@XZ (Address: 0x1002433c)
?terminate@@YAXXZ (Address: 0x10024338)
free (Address: 0x10024344)
malloc (Address: 0x100242fc)
memcmp (Address: 0x1002434c)
memcpy (Address: 0x10024350)
memcpy_s (Address: 0x1002430c)
memmove (Address: 0x10024308)
memmove_s (Address: 0x10024310)
memset (Address: 0x1002435c)
realloc (Address: 0x1002431c)
wcschr (Address: 0x10024320)

ntdll.dll

NtQueryInformationToken (Address: 0x10024364)
NtQueryWnfStateData (Address: 0x10024380)
RtlAllocateHeap (Address: 0x1002436c)
RtlCompareUnicodeString (Address: 0x10024374)
RtlFreeHeap (Address: 0x10024370)
RtlInitUnicodeString (Address: 0x10024368)
RtlNtStatusToDosErrorNoTeb (Address: 0x10024388)
RtlQueryTokenHostIdAsUlong64 (Address: 0x10024378)
RtlSubscribeWnfStateChangeNotification (Address: 0x1002437c)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x10024384)

RPCRT4.dll

NdrClientCall4 (Address: 0x10024060)
RpcBindingFree (Address: 0x1002405c)
RpcBindingFromStringBindingW (Address: 0x10024068)
RpcStringBindingComposeW (Address: 0x10024064)
RpcStringFreeW (Address: 0x10024058)

SHCORE.dll

GetFeatureEnabledState (Address: 0x10024070)
RecordFeatureUsage (Address: 0x1002407c)
SubscribeFeatureStateChangeNotification (Address: 0x10024078)
UnsubscribeFeatureStateChangeNotification (Address: 0x10024074)

USER32.dll

(Address: 0x10024098)
DestroyWindow (Address: 0x10024084)
GetDC (Address: 0x10024090)
GetSystemMetrics (Address: 0x10024094)
GetWindowThreadProcessId (Address: 0x10024088)
IsWindow (Address: 0x1002408c)
LoadImageW (Address: 0x100240a0)
ReleaseDC (Address: 0x1002409c)