provcore.dll
v10.0.19041.4355
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x10110
DllGetActivationFactory
#2 · 0x10080
DllGetClassObject
#3 · 0x10160
No function matches your filter.
Imported DLLs & functions 249
ApiSetQueryApiSetPresence
0x10073024
GlobalGetAtomNameW
0x1007302c
DebugBreak
0x10073034
IsDebuggerPresent
0x1007303c
OutputDebugStringW
0x10073038
DelayLoadFailureHook
0x10073044
ResolveDelayLoadedAPI
0x1007304c
GetLastError
0x10073064
RaiseException
0x1007305c
SetLastError
0x10073054
SetUnhandledExceptionFilter
0x10073060
UnhandledExceptionFilter
0x10073058
CreateFileW
0x1007306c
DeleteFileW
0x10073070
GetTempFileNameW
0x10073078
WriteFile
0x10073074
GetTempPathW
0x10073080
GetProcessHeap
0x10073098
HeapAlloc
0x1007309c
HeapFree
0x10073094
GlobalAlloc
0x100730a4
GlobalFree
0x100730a8
LocalAlloc
0x100730ac
LocalFree
0x100730b0
InitializeSListHead
0x100730c4
DisableThreadLibraryCalls
0x100730e8
GetModuleFileNameA
0x100730dc
GetModuleFileNameW
0x100730e0
GetModuleHandleExW
0x100730d0
GetModuleHandleW
0x100730d8
GetProcAddress
0x100730d4
LoadLibraryExW
0x100730e4
LoadStringW
0x100730cc
AddSIDToBoundaryDescriptor
0x10073108
ClosePrivateNamespace
0x10073100
CreateBoundaryDescriptorW
0x100730fc
CreatePrivateNamespaceW
0x1007310c
DeleteBoundaryDescriptor
0x10073110
OpenPrivateNamespaceW
0x10073104
ExpandEnvironmentStringsW
0x10073118
GetCurrentProcess
0x10073134
GetCurrentProcessId
0x10073144
GetCurrentThread
0x10073120
GetCurrentThreadId
0x1007312c
GetExitCodeThread
0x10073138
GetProcessId
0x10073124
OpenProcessToken
0x1007313c
OpenThreadToken
0x10073140
SetThreadPriority
0x10073130
TerminateProcess
0x10073128
IsProcessorFeaturePresent
0x1007314c
OpenProcess
0x10073150
QueryPerformanceCounter
0x10073158
QueryFullProcessImageNameW
0x10073160
RegCloseKey
0x10073184
RegCreateKeyExW
0x10073170
RegDeleteTreeW
0x10073180
RegDeleteValueW
0x10073174
RegEnumKeyExW
0x1007317c
RegGetValueW
0x10073168
RegOpenCurrentUser
0x1007316c
RegOpenKeyExW
0x10073178
RegSetValueExW
0x10073188
ActivateActCtx
0x10073194
CreateActCtxW
0x10073198
DeactivateActCtx
0x1007319c
ReleaseActCtx
0x10073190
CompareStringEx
0x100731a8
CompareStringOrdinal
0x100731a4
WideCharToMultiByte
0x100731ac
AcquireSRWLockExclusive
0x10073200
AcquireSRWLockShared
0x100731fc
CreateEventExW
0x100731d4
CreateEventW
0x100731d0
CreateMutexExW
0x100731e8
CreateMutexW
0x100731ec
CreateSemaphoreExW
0x100731b4
DeleteCriticalSection
0x10073208
EnterCriticalSection
0x10073204
InitializeCriticalSection
0x100731f4
InitializeCriticalSectionAndSpinCount
0x100731f0
InitializeSRWLock
0x100731c4
LeaveCriticalSection
0x100731e4
OpenSemaphoreW
0x100731dc
ReleaseMutex
0x100731d8
ReleaseSemaphore
0x100731b8
ReleaseSRWLockExclusive
0x1007320c
ReleaseSRWLockShared
0x100731f8
ResetEvent
0x100731cc
SetEvent
0x100731c8
WaitForMultipleObjectsEx
0x100731c0
WaitForSingleObject
0x100731bc
WaitForSingleObjectEx
0x100731e0
InitOnceExecuteOnce
0x10073214
GetSystemTime
0x1007321c
GetSystemTimeAsFileTime
0x10073220
GetTickCount
0x10073224
GetTickCount64
0x10073228
CallbackMayRunLong
0x10073240
CloseThreadpoolTimer
0x10073248
CreateThreadpoolTimer
0x10073230
FreeLibraryWhenCallbackReturns
0x1007323c
SetThreadpoolTimer
0x10073238
TrySubmitThreadpoolCallback
0x10073244
WaitForThreadpoolTimerCallbacks
0x10073234
FileTimeToSystemTime
0x10073254
SystemTimeToFileTime
0x10073250
__CxxFrameHandler3
0x100732f4
__std_terminate
0x100732f0
__std_type_info_compare
0x100732ec
_CxxThrowException
0x100732c8
_except_handler4_common
0x100732c0
_o___std_exception_copy
0x100732d0
_o___std_exception_destroy
0x100732cc
_o___std_type_info_destroy_list
0x100732c4
_o___stdio_common_vsnprintf_s
0x100732fc
_o___stdio_common_vswprintf
0x100732e0
_o___stdio_common_vswprintf_s
0x100732dc
_o___stdio_common_vswscanf
0x100732d8
_o__beginthreadex
0x100732e4
_o__callnewh
0x10073298
_o__cexit
0x100732d4
_o__configure_narrow_argv
0x10073268
_o__crt_atexit
0x1007326c
_o__errno
0x10073270
_o__execute_onexit_table
0x10073274
_o__initialize_narrow_environment
0x10073278
_o__initialize_onexit_table
0x1007327c
_o__invalid_parameter_noinfo
0x10073280
_o__invalid_parameter_noinfo_noreturn
0x10073284
_o__purecall
0x10073288
_o__register_onexit_function
0x1007328c
_o__seh_filter_dll
0x10073290
_o__wcsicmp
0x1007329c
_o__wtoi
0x100732a0
_o_free
0x100732a4
_o_malloc
0x100732a8
_o_memcpy_s
0x100732ac
_o_realloc
0x100732b0
_o_wcscpy_s
0x100732b4
_o_wcstod
0x100732b8
_o_wcstoul
0x100732bc
memcmp
0x10073300
memcpy
0x10073304
memmove
0x10073294
strchr
0x100732e8
wcschr
0x100732f8
memset
0x10073318
DevFreeObjectProperties
0x10073324
DevGetObjectProperties
0x10073320
MsgWaitForMultipleObjectsEx
0x1007332c
AddAccessAllowedAce
0x1007333c
AllocateAndInitializeSid
0x10073348
CheckTokenMembership
0x10073354
CopySid
0x10073340
CreateWellKnownSid
0x10073350
FreeSid
0x1007334c
GetLengthSid
0x10073334
GetTokenInformation
0x1007335c
InitializeAcl
0x10073338
InitializeSecurityDescriptor
0x10073358
SetSecurityDescriptorDacl
0x10073344
GetPersistentRegPath
0x10073000
_Wcscoll
0x100733b0
_Wcsxfrm
0x100733ac
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
0x10073374
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x10073420
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
0x10073368
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x100733a0
?_Incref@facet@locale@std@@UAEXXZ
0x10073370
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
0x100733a8
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
0x10073400
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x100733ec
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
0x1007341c
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x100733e8
?_Xbad_alloc@std@@YAXXZ
0x10073414
?_Xbad_function_call@std@@YAXXZ
0x100733c0
?_Xinvalid_argument@std@@YAXPBD@Z
0x1007339c
?_Xlength_error@std@@YAXPBD@Z
0x10073424
?_Xout_of_range@std@@YAXPBD@Z
0x10073410
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
0x10073390
??0_Locinfo@std@@QAE@PBD@Z
0x1007338c
??0_Lockit@std@@QAE@H@Z
0x100733b8
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
0x100733a4
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x10073418
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
0x100733d0
??0facet@locale@std@@IAE@I@Z
0x10073378
??1_Locinfo@std@@QAE@XZ
0x10073364
??1_Lockit@std@@QAE@XZ
0x100733b4
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
0x1007340c
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x100733bc
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
0x100733f4
??1facet@locale@std@@MAE@XZ
0x1007337c
??Bid@locale@std@@QAEIXZ
0x1007336c
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
0x100733f8
?id@?$collate@G@std@@2V0locale@2@A
0x10073394
?id@?$ctype@G@std@@2V0locale@2@A
0x10073398
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
0x100733c4
?is@?$ctype@G@std@@QBE_NFG@Z
0x10073380
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x100733fc
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
0x100733cc
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
0x10073408
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x100733f0
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
0x100733e4
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x10073404
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
0x100733c8
?tolower@?$ctype@G@std@@QBEGG@Z
0x10073384
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
0x10073388
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
0x100733e0
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
0x100733d4
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
0x100733dc
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
0x100733d8
ntdll.dll
21
EtwEventActivityIdControl
0x10073478
EtwEventRegister
0x10073468
EtwEventSetInformation
0x1007346c
EtwEventUnregister
0x10073470
EtwEventWriteTransfer
0x1007344c
EtwGetTraceEnableFlags
0x1007345c
EtwGetTraceEnableLevel
0x10073458
EtwGetTraceLoggerHandle
0x10073454
EtwRegisterTraceGuidsW
0x10073460
EtwTraceMessage
0x10073450
EtwUnregisterTraceGuids
0x10073464
NtQueryInformationToken
0x10073430
NtQueryKey
0x10073448
RtlAllocateHeap
0x1007343c
RtlCompareUnicodeString
0x10073444
RtlEqualSid
0x10073438
RtlFreeHeap
0x1007342c
RtlGetPersistedStateLocation
0x1007347c
RtlInitUnicodeString
0x10073434
RtlLoadString
0x10073474
RtlNtStatusToDosErrorNoTeb
0x10073440
NdrClientCall4
0x10073010
RpcBindingBind
0x10073008
RpcBindingCreateW
0x10073018
RpcBindingFree
0x10073014
RpcExceptionFilter
0x1007301c
RpcServerInqCallAttributesW
0x1007300c
No function matches your filter.