msoobeplugins.dll
v10.0.19041.1265
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x60a0
DllGetActivationFactory
#2 · 0x5ce0
DllGetClassObject
#3 · 0x5ec0
No function matches your filter.
Imported DLLs & functions 447
CheckTokenMembership
0x1800bdc60
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800bdc40
CreateWellKnownSid
0x1800bdc68
DuplicateToken
0x1800bdc58
LogonUserW
0x1800bdc30
RegDeleteKeyExW
0x1800bdc50
RegQueryInfoKeyW
0x1800bdc38
RegSetKeySecurity
0x1800bdc48
TraceMessage
0x1800bdc70
ApiSetQueryApiSetPresence
0x1800be048
CStdStubBuffer2_Connect
0x1800be070
CStdStubBuffer2_CountRefs
0x1800be0a8
CStdStubBuffer2_Disconnect
0x1800be0f0
CStdStubBuffer2_QueryInterface
0x1800be078
NdrProxyForwardingFunction3
0x1800be068
NdrProxyForwardingFunction4
0x1800be0d8
NdrProxyForwardingFunction5
0x1800be0c8
ObjectStublessClient10
0x1800be0a0
ObjectStublessClient11
0x1800be060
ObjectStublessClient12
0x1800be090
ObjectStublessClient13
0x1800be0d0
ObjectStublessClient14
0x1800be088
ObjectStublessClient15
0x1800be0b8
ObjectStublessClient16
0x1800be058
ObjectStublessClient17
0x1800be0e0
ObjectStublessClient3
0x1800be098
ObjectStublessClient6
0x1800be0b0
ObjectStublessClient7
0x1800be080
ObjectStublessClient8
0x1800be0c0
ObjectStublessClient9
0x1800be0e8
DebugBreak
0x1800be108
IsDebuggerPresent
0x1800be110
OutputDebugStringW
0x1800be100
DelayLoadFailureHook
0x1800be120
ResolveDelayLoadedAPI
0x1800be130
GetLastError
0x1800be158
RaiseException
0x1800be150
SetLastError
0x1800be160
SetUnhandledExceptionFilter
0x1800be148
UnhandledExceptionFilter
0x1800be140
CreateFileW
0x1800be1b0
DeleteFileW
0x1800be1a0
FindFirstVolumeW
0x1800be180
FindNextVolumeW
0x1800be178
GetDriveTypeW
0x1800be170
GetFileSize
0x1800be198
GetTempFileNameW
0x1800be1a8
ReadFile
0x1800be190
WriteFile
0x1800be188
GetTempPathW
0x1800be1c8
GetVolumePathNamesForVolumeNameW
0x1800be1c0
GetProcessHeap
0x1800be218
HeapAlloc
0x1800be210
HeapDestroy
0x1800be208
HeapFree
0x1800be1f0
HeapReAlloc
0x1800be1f8
HeapSize
0x1800be200
GlobalAlloc
0x1800be248
GlobalFree
0x1800be240
LocalAlloc
0x1800be230
LocalFree
0x1800be238
LocalReAlloc
0x1800be228
GlobalLock
0x1800be268
GlobalSize
0x1800be260
GlobalUnlock
0x1800be258
DeviceIoControl
0x1800be278
DnsHostnameToComputerNameW
0x1800be288
GetComputerNameW
0x1800be290
GetSystemPowerStatus
0x1800be298
PowerClearRequest
0x1800be2b0
PowerCreateRequest
0x1800be2a8
PowerSetRequest
0x1800be2b8
SetThreadExecutionState
0x1800be2c8
DisableThreadLibraryCalls
0x1800be308
FindResourceExW
0x1800be318
FreeLibrary
0x1800be310
GetModuleFileNameA
0x1800be2e0
GetModuleHandleExW
0x1800be2f0
GetModuleHandleW
0x1800be300
GetProcAddress
0x1800be2f8
LoadLibraryExW
0x1800be2d8
LoadResource
0x1800be320
LoadStringW
0x1800be2e8
LockResource
0x1800be328
SizeofResource
0x1800be330
LoadLibraryW
0x1800be340
EnumSystemGeoID
0x1800be380
EnumSystemLocalesW
0x1800be368
FormatMessageW
0x1800be3c8
GetACP
0x1800be3d8
GetCPInfo
0x1800be360
GetFileMUIPath
0x1800be3e0
GetGeoInfoW
0x1800be3e8
GetLocaleInfoEx
0x1800be3a0
GetLocaleInfoW
0x1800be388
GetSystemPreferredUILanguages
0x1800be370
GetThreadPreferredUILanguages
0x1800be350
GetThreadUILanguage
0x1800be3b0
GetUserDefaultLCID
0x1800be390
GetUserDefaultLocaleName
0x1800be398
GetUserGeoID
0x1800be3a8
LCMapStringEx
0x1800be378
LocaleNameToLCID
0x1800be3c0
SetThreadPreferredUILanguages
0x1800be3d0
SetThreadUILanguage
0x1800be358
SetUserGeoID
0x1800be3b8
GetSystemDefaultLocaleName
0x1800be3f8
LCIDToLocaleName
0x1800be400
GetUserDefaultGeoName
0x1800be410
NlsUpdateLocale
0x1800be420
ExpandEnvironmentStringsW
0x1800be448
CreateProcessW
0x1800be468
GetCurrentProcess
0x1800be488
GetCurrentProcessId
0x1800be460
GetCurrentThread
0x1800be470
GetCurrentThreadId
0x1800be490
OpenProcessToken
0x1800be478
OpenThreadToken
0x1800be458
TerminateProcess
0x1800be480
OpenProcess
0x1800be4a0
QueryPerformanceCounter
0x1800be4b0
RegCloseKey
0x1800be500
RegCreateKeyExW
0x1800be4c0
RegDeleteTreeW
0x1800be4d8
RegDeleteValueW
0x1800be4f8
RegEnumKeyExW
0x1800be4f0
RegEnumValueW
0x1800be508
RegGetValueW
0x1800be4c8
RegOpenKeyExW
0x1800be4e0
RegQueryValueExW
0x1800be4d0
RegSetValueExW
0x1800be4e8
RtlCaptureContext
0x1800be528
RtlLookupFunctionEntry
0x1800be518
RtlVirtualUnwind
0x1800be520
CompareStringOrdinal
0x1800be538
CompareStringW
0x1800be550
MultiByteToWideChar
0x1800be540
WideCharToMultiByte
0x1800be548
AcquireSRWLockExclusive
0x1800be560
AcquireSRWLockShared
0x1800be568
CreateEventExW
0x1800be5a8
CreateEventW
0x1800be5d8
CreateMutexExW
0x1800be570
CreateSemaphoreExW
0x1800be5b8
DeleteCriticalSection
0x1800be5c8
EnterCriticalSection
0x1800be5e8
InitializeCriticalSection
0x1800be5c0
InitializeCriticalSectionEx
0x1800be5d0
InitializeSRWLock
0x1800be5b0
LeaveCriticalSection
0x1800be600
OpenSemaphoreW
0x1800be5a0
ReleaseMutex
0x1800be608
ReleaseSemaphore
0x1800be598
ReleaseSRWLockExclusive
0x1800be5e0
ReleaseSRWLockShared
0x1800be580
ResetEvent
0x1800be5f0
SetEvent
0x1800be5f8
WaitForMultipleObjectsEx
0x1800be588
WaitForSingleObject
0x1800be578
WaitForSingleObjectEx
0x1800be590
InitOnceBeginInitialize
0x1800be638
InitOnceComplete
0x1800be640
InitOnceExecuteOnce
0x1800be620
Sleep
0x1800be618
SleepConditionVariableSRW
0x1800be630
WakeAllConditionVariable
0x1800be628
WaitForMultipleObjects
0x1800be650
GetComputerNameExW
0x1800be680
GetSystemDirectoryW
0x1800be668
GetSystemTimeAsFileTime
0x1800be678
GetTickCount
0x1800be670
GetTickCount64
0x1800be660
SetComputerNameExW
0x1800be690
CloseThreadpoolTimer
0x1800be6a0
CloseThreadpoolWait
0x1800be6c0
CreateThreadpoolTimer
0x1800be6c8
CreateThreadpoolWait
0x1800be6b8
SetThreadpoolTimer
0x1800be6d8
SetThreadpoolWait
0x1800be6b0
WaitForThreadpoolTimerCallbacks
0x1800be6a8
WaitForThreadpoolWaitCallbacks
0x1800be6d0
QueueUserWorkItem
0x1800be6e8
GetDynamicTimeZoneInformation
0x1800be6f8
SetDynamicTimeZoneInformation
0x1800be700
GetRestrictedErrorInfo
0x1800be748
RoOriginateError
0x1800be728
RoOriginateErrorW
0x1800be740
RoTransformError
0x1800be730
SetRestrictedErrorInfo
0x1800be738
IsErrorPropagationEnabled
0x1800be758
RoGetMatchingRestrictedErrorInfo
0x1800be760
RoReportFailedDelegate
0x1800be768
RoActivateInstance
0x1800be780
RoGetActivationFactory
0x1800be778
RoInitialize
0x1800be788
RoUninitialize
0x1800be790
HSTRING_UserFree
0x1800be7a8
HSTRING_UserFree64
0x1800be810
HSTRING_UserMarshal
0x1800be818
HSTRING_UserMarshal64
0x1800be808
HSTRING_UserSize
0x1800be800
HSTRING_UserSize64
0x1800be7f0
HSTRING_UserUnmarshal
0x1800be7d0
HSTRING_UserUnmarshal64
0x1800be7b0
WindowsConcatString
0x1800be7a0
WindowsCreateString
0x1800be7d8
WindowsCreateStringReference
0x1800be7c0
WindowsDeleteString
0x1800be7c8
WindowsDuplicateString
0x1800be7e0
WindowsGetStringRawBuffer
0x1800be7f8
WindowsIsStringEmpty
0x1800be7e8
WindowsStringHasEmbeddedNull
0x1800be7b8
EventActivityIdControl
0x1800be828
EventRegister
0x1800be830
EventSetInformation
0x1800be838
EventUnregister
0x1800be848
EventWriteTransfer
0x1800be840
AdjustTokenPrivileges
0x1800be868
CopySid
0x1800be870
DuplicateTokenEx
0x1800be890
GetSidLengthRequired
0x1800be878
GetSidSubAuthority
0x1800be880
GetSidSubAuthorityCount
0x1800be888
GetTokenInformation
0x1800be860
IsWellKnownSid
0x1800be858
CapabilityCheck
0x1800be8a0
LookupAccountNameW
0x1800be8b8
LookupPrivilegeValueW
0x1800be8b0
LsaClose
0x1800be8d8
LsaFreeMemory
0x1800be8e0
LsaOpenPolicy
0x1800be8f8
LsaQueryInformationPolicy
0x1800be8f0
LsaRetrievePrivateData
0x1800be8c8
LsaSetInformationPolicy
0x1800be8e8
LsaStorePrivateData
0x1800be8d0
ConvertSidToStringSidW
0x1800be910
ConvertStringSidToSidW
0x1800be908
CloseServiceHandle
0x1800be920
OpenSCManagerW
0x1800be938
OpenServiceW
0x1800be930
StartServiceW
0x1800be928
ChangeServiceConfigW
0x1800be948
QueryServiceConfigW
0x1800be958
QueryServiceStatusEx
0x1800be950
GetPersistedRegistryLocationW
0x1800be980
AppendUserLanguageInternal
0x1800bdc88
Bcp47FromLcid
0x1800bdc80
GetUserLanguageInputMethods
0x1800bdc90
CryptAcquireContextW
0x1800bdce8
CryptDestroyKey
0x1800bdcf8
CryptEncrypt
0x1800bdd10
CryptExportKey
0x1800bdcf0
CryptGenKey
0x1800bdce0
CryptImportKey
0x1800bdd08
CryptReleaseContext
0x1800bdd00
KERNEL32.dll
11
CreateDirectoryW
0x1800bdda0
EnumUILanguagesW
0x1800bdd78
FindClose
0x1800bdd50
FindFirstFileW
0x1800bdd68
FindNextFileW
0x1800bdd60
GetFileAttributesW
0x1800bdd58
GetFullPathNameW
0x1800bdd70
GetModuleFileNameW
0x1800bdd80
GetPrivateProfileSectionW
0x1800bdd88
GetSystemDefaultUILanguage
0x1800bdd98
ResolveLocaleName
0x1800bdd90
msvcrt.dll
55
__C_specific_handler
0x1800beb08
__CxxFrameHandler3
0x1800bea70
__dllonexit
0x1800beab0
_amsg_exit
0x1800bead8
_callnewh
0x1800be9a8
_CxxThrowException
0x1800beb50
_get_errno
0x1800bea18
_initterm
0x1800bead0
_lock
0x1800beac0
_onexit
0x1800beaa8
_purecall
0x1800beb00
_set_errno
0x1800bea20
_unlock
0x1800beab8
_vsnprintf
0x1800be9b8
_vsnprintf_s
0x1800beb10
_vsnwprintf
0x1800beb40
_wcsicmp
0x1800bea00
_wcsnicmp
0x1800be9c0
_wtoi
0x1800be9d8
_wtol
0x1800be9f8
_XcptFilter
0x1800beae0
??_V@YAXPEAX@Z
0x1800beb48
??0exception@@QEAA@AEBQEBD@Z
0x1800bea10
??0exception@@QEAA@AEBQEBDH@Z
0x1800bea68
??0exception@@QEAA@AEBV0@@Z
0x1800beb18
??0exception@@QEAA@XZ
0x1800beb20
??1exception@@UEAA@XZ
0x1800beb28
??1type_info@@UEAA@XZ
0x1800beaa0
??3@YAXPEAX@Z
0x1800beb30
?terminate@@YAXXZ
0x1800beac8
?what@exception@@UEBAPEBDXZ
0x1800bea80
bsearch
0x1800be9b0
free
0x1800beaf0
iswascii
0x1800bea48
iswspace
0x1800bea30
iswupper
0x1800bea40
malloc
0x1800beae8
memcmp
0x1800bea78
memcpy
0x1800bea58
memcpy_s
0x1800beb38
memmove
0x1800bea60
memmove_s
0x1800bea88
memset
0x1800bea90
rand
0x1800be9e0
realloc
0x1800bea98
swprintf_s
0x1800be9c8
toupper
0x1800be9d0
towlower
0x1800bea38
wcschr
0x1800be9f0
wcscmp
0x1800beb58
wcscpy_s
0x1800beaf8
wcscspn
0x1800bea28
wcsrchr
0x1800bea50
wcstok_s
0x1800be9e8
wcstol
0x1800bea08
ntdll.dll
28
NtClose
0x1800beba8
NtDeviceIoControlFile
0x1800bebb0
NtOpenFile
0x1800beba0
NtQueryInformationToken
0x1800bebc8
NtQueryLicenseValue
0x1800bebb8
NtQueryWnfStateData
0x1800beb90
NtUpdateWnfStateData
0x1800bebe0
RtlAllocateHeap
0x1800bebd0
RtlCanonicalizeDomainName
0x1800bec18
RtlConvertSidToUnicodeString
0x1800beb80
RtlEqualUnicodeString
0x1800bec10
RtlFreeHeap
0x1800bebc0
RtlFreeUnicodeString
0x1800bec08
RtlGetDeviceFamilyInfoEnum
0x1800bec28
RtlGetUILanguageInfo
0x1800bebd8
RtlInitUnicodeString
0x1800bec20
RtlIsMultiSessionSku
0x1800beb78
RtlNtStatusToDosError
0x1800bebf0
RtlpSetPreferredUILanguages
0x1800bebf8
RtlPublishWnfStateData
0x1800bec00
RtlpVerifyAndCommitUILanguageSettings
0x1800bebe8
RtlSubscribeWnfStateChangeNotification
0x1800beb88
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800beb98
WinSqmAddToStream
0x1800bec30
WinSqmEndSession
0x1800beb70
WinSqmIncrementDWORD
0x1800bec38
WinSqmSetDWORD
0x1800bec40
WinSqmStartSession
0x1800beb68
RPCRT4.dll
27
CStdStubBuffer_AddRef
0x1800bde30
CStdStubBuffer_Connect
0x1800bdde8
CStdStubBuffer_CountRefs
0x1800bde20
CStdStubBuffer_DebugServerQueryInterface
0x1800bde40
CStdStubBuffer_DebugServerRelease
0x1800bde08
CStdStubBuffer_Disconnect
0x1800bde00
CStdStubBuffer_Invoke
0x1800bde60
CStdStubBuffer_IsIIDSupported
0x1800bddf0
CStdStubBuffer_QueryInterface
0x1800bde18
IUnknown_AddRef_Proxy
0x1800bde58
IUnknown_QueryInterface_Proxy
0x1800bddf8
IUnknown_Release_Proxy
0x1800bde28
NdrClientCall3
0x1800bddb8
NdrCStdStubBuffer_Release
0x1800bde68
NdrCStdStubBuffer2_Release
0x1800bde80
NdrDllCanUnloadNow
0x1800bde70
NdrDllGetClassObject
0x1800bde78
NdrOleAllocate
0x1800bde10
NdrOleFree
0x1800bde38
NdrStubCall3
0x1800bddc8
NdrStubForwardingFunction
0x1800bdde0
RpcBindingFree
0x1800bde50
RpcBindingFromStringBindingW
0x1800bde48
RpcExceptionFilter
0x1800bddb0
RpcStringBindingComposeW
0x1800bddd8
RpcStringFreeW
0x1800bddd0
UuidCreate
0x1800bddc0
0x1800bde90
ShellExecuteExW
0x1800bdea8
SHGetFolderPathEx
0x1800bde98
SHGetKnownFolderPath
0x1800bdea0
SHLWAPI.dll
14
0x1800bdeb8
0x1800bdec0
0x1800bdec8
0x1800bded8
0x1800bdee0
0x1800bdf00
0x1800bdf08
PathAppendW
0x1800bdf20
SHCreateStreamOnFileW
0x1800bdf18
SHDeleteValueW
0x1800bdee8
SHStrDupW
0x1800bded0
StrChrW
0x1800bdef8
StrStrW
0x1800bdf10
StrTrimW
0x1800bdef0
USER32.dll
22
DefWindowProcW
0x1800bdf48
DestroyWindow
0x1800bdfc0
DispatchMessageW
0x1800bdfd0
ExitWindowsEx
0x1800bdf50
GetForegroundWindow
0x1800bdfc8
GetMessageW
0x1800bdfa8
GetPointerDevices
0x1800bdfd8
GetWindowLongPtrW
0x1800bdf40
KillTimer
0x1800bdf98
LoadCursorW
0x1800bdf58
MsgWaitForMultipleObjectsEx
0x1800bdf80
PeekMessageW
0x1800bdf78
PostMessageW
0x1800bdf30
PostQuitMessage
0x1800bdf70
RegisterDeviceNotificationW
0x1800bdfa0
RegisterWindowMessageW
0x1800bdf38
SetCursor
0x1800bdf60
SetTimer
0x1800bdfb0
SetWindowLongPtrW
0x1800bdf88
TranslateMessage
0x1800bdf68
UnregisterClassA
0x1800bdfb8
UnregisterDeviceNotification
0x1800bdf90
0x1800bdff0
DeleteProfileW
0x1800be000
LoadUserProfileW
0x1800bdff8
UnloadUserProfile
0x1800bdfe8
EulaFreeBuffer
0x1800be018
GetEULAFile
0x1800be020
GetInstalledEULAPath
0x1800be010
InstallEULA
0x1800be028
SetUserLanguages
0x1800be038
No function matches your filter.