OSProvider.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DLLGetDISMProviderCLSID
#1 · 0x8020
DllCanUnloadNow
#2 · 0x8050
DllGetClassObject
#3 · 0x8080
DllRegisterServer
#4 · 0x80b0
DllUnregisterServer
#5 · 0x80f0
No function matches your filter.
Imported DLLs & functions 136
ADVAPI32.dll
12
AdjustTokenPrivileges
0x10019014
LookupPrivilegeValueW
0x10019018
OpenProcessToken
0x1001901c
RegCloseKey
0x1001902c
RegCreateKeyExW
0x10019000
RegFlushKey
0x10019008
RegLoadKeyW
0x10019010
RegOpenKeyExW
0x10019024
RegQueryInfoKeyW
0x10019028
RegQueryValueExW
0x10019020
RegSetValueExW
0x10019004
RegUnLoadKeyW
0x1001900c
KERNEL32.dll
58
CloseHandle
0x10019088
CreateFileMappingW
0x10019108
CreateFileW
0x100190dc
DeleteCriticalSection
0x10019040
DisableThreadLibraryCalls
0x10019034
EnterCriticalSection
0x10019060
FindResourceExW
0x100190a4
FormatMessageW
0x100190e8
FreeLibrary
0x10019090
GetCurrentProcess
0x10019084
GetCurrentProcessId
0x10019070
GetCurrentThreadId
0x1001906c
GetEnvironmentVariableW
0x10019094
GetFileAttributesW
0x100190fc
GetFileInformationByHandle
0x100190e4
GetFullPathNameW
0x100190d8
GetLastError
0x10019048
GetModuleFileNameW
0x1001904c
GetModuleHandleExW
0x10019114
GetModuleHandleW
0x10019058
GetProcAddress
0x10019050
GetProcessHeap
0x100190b8
GetSystemInfo
0x10019118
GetSystemTimeAsFileTime
0x100190d0
GetSystemWindowsDirectoryW
0x10019100
GetThreadLocale
0x10019038
GetTickCount
0x100190d4
GetVersionExW
0x100190f8
HeapAlloc
0x100190b4
HeapDestroy
0x100190bc
HeapFree
0x100190b0
HeapReAlloc
0x100190ac
HeapSize
0x100190a8
InitializeCriticalSection
0x1001905c
LeaveCriticalSection
0x10019064
LoadLibraryExW
0x10019054
LoadResource
0x100190a0
LocalFree
0x100190e0
LockResource
0x1001909c
MapViewOfFile
0x10019104
MultiByteToWideChar
0x10019074
OpenProcess
0x10019080
OutputDebugStringW
0x10019078
QueryPerformanceCounter
0x100190cc
RaiseException
0x10019044
ReadFile
0x100190ec
SearchPathW
0x10019110
SetEnvironmentVariableW
0x1001908c
SetFilePointer
0x100190f0
SetLastError
0x100190f4
SetThreadLocale
0x1001903c
SetThreadUILanguage
0x10019068
SetUnhandledExceptionFilter
0x100190c4
SizeofResource
0x10019098
Sleep
0x1001907c
TerminateProcess
0x100190c8
UnhandledExceptionFilter
0x100190c0
UnmapViewOfFile
0x1001910c
msvcrt.dll
39
__CxxFrameHandler3
0x1001921c
__dllonexit
0x100191b0
_amsg_exit
0x100191c8
_callnewh
0x100191d4
_CxxThrowException
0x100191d0
_except_handler4_common
0x100191bc
_initterm
0x100191c4
_lock
0x100191b8
_onexit
0x100191ac
_purecall
0x100191f4
_unlock
0x100191b4
_vscwprintf
0x10019204
_vsnwprintf
0x10019198
_wcsicmp
0x10019208
_wcslwr_s
0x100191fc
_wcsnicmp
0x10019190
_XcptFilter
0x100191cc
??0exception@@QAE@ABV0@@Z
0x100191e0
??0exception@@QAE@XZ
0x100191e4
??1exception@@UAE@XZ
0x100191dc
??1type_info@@UAE@XZ
0x100191a8
?terminate@@YAXXZ
0x100191c0
?what@exception@@UBEPBDXZ
0x100191d8
free
0x10019214
malloc
0x100191e8
memcmp
0x100191a0
memcpy
0x100191a4
memcpy_s
0x100191f0
memmove_s
0x100191ec
memset
0x1001919c
towupper
0x10019184
vswprintf_s
0x10019200
wcscat_s
0x10019210
wcschr
0x10019188
wcscpy_s
0x10019218
wcsncmp
0x10019194
wcsncpy_s
0x1001920c
wcsrchr
0x1001918c
wcsstr
0x100191f8
NtQueryInformationProcess
0x1001922c
NtQueryOpenSubKeysEx
0x10019230
NtUnloadKey2
0x10019228
RtlAllocateHeap
0x10019224
RtlFreeHeap
0x10019238
RtlInitUnicodeString
0x10019234
CoCreateInstance
0x10019128
CoTaskMemFree
0x10019120
ProgIDFromCLSID
0x10019124
StringFromGUID2
0x1001912c
OLEAUT32.dll
12
CreateErrorInfo
0x1001915c
LoadRegTypeLib
0x10019138
LoadTypeLib
0x1001914c
RegisterTypeLib
0x10019150
SetErrorInfo
0x1001913c
SysAllocString
0x10019148
SysAllocStringByteLen
0x10019134
SysAllocStringLen
0x10019158
SysFreeString
0x10019140
SysStringByteLen
0x10019160
SysStringLen
0x10019154
UnRegisterTypeLib
0x10019144
GetFileVersionInfoExW
0x10019178
GetFileVersionInfoSizeExW
0x10019174
VerQueryValueW
0x1001917c
No function matches your filter.