VmHostAI.dll
v10.0.19041.6151
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x35b0
DllCsiGetHandler
#2 · 0x35d0
No function matches your filter.
Imported DLLs & functions 155
CoCreateInstance
0x18000f048
CoInitializeEx
0x18000f038
CoSetProxyBlanket
0x18000f030
CoTaskMemAlloc
0x18000f020
CoTaskMemFree
0x18000f028
CoTaskMemRealloc
0x18000f050
CoUninitialize
0x18000f040
OutputDebugStringA
0x18000f060
GetLastError
0x18000f090
RaiseException
0x18000f088
SetLastError
0x18000f070
SetUnhandledExceptionFilter
0x18000f080
UnhandledExceptionFilter
0x18000f078
CloseHandle
0x18000f0a0
HeapSetInformation
0x18000f0b0
DisableThreadLibraryCalls
0x18000f118
FindResourceExW
0x18000f110
FreeLibrary
0x18000f0d8
GetModuleFileNameW
0x18000f0f8
GetModuleHandleW
0x18000f0e8
GetProcAddress
0x18000f108
LoadLibraryExW
0x18000f0e0
LoadResource
0x18000f0f0
SizeofResource
0x18000f100
CreateThread
0x18000f140
GetCurrentProcess
0x18000f130
GetCurrentProcessId
0x18000f150
GetCurrentThreadId
0x18000f158
GetExitCodeProcess
0x18000f148
OpenProcessToken
0x18000f128
TerminateProcess
0x18000f138
OpenProcess
0x18000f168
QueryPerformanceCounter
0x18000f178
RegCloseKey
0x18000f188
RegCreateKeyExW
0x18000f1b8
RegDeleteValueW
0x18000f1b0
RegEnumKeyExW
0x18000f1a0
RegOpenKeyExW
0x18000f198
RegQueryInfoKeyW
0x18000f190
RegSetValueExW
0x18000f1a8
RtlCaptureContext
0x18000f1d8
RtlLookupFunctionEntry
0x18000f1c8
RtlVirtualUnwind
0x18000f1d0
MultiByteToWideChar
0x18000f1e8
CharNextW
0x18000f1f8
lstrcmpiW
0x18000f208
DeleteCriticalSection
0x18000f218
EnterCriticalSection
0x18000f228
InitializeCriticalSection
0x18000f220
LeaveCriticalSection
0x18000f230
WaitForSingleObject
0x18000f238
Sleep
0x18000f248
GetSystemTimeAsFileTime
0x18000f260
GetTickCount
0x18000f270
GetTickCount64
0x18000f268
GetVersionExW
0x18000f258
AddAccessAllowedAce
0x18000f2d8
AddAccessAllowedAceEx
0x18000f288
AddAce
0x18000f2a0
AllocateAndInitializeSid
0x18000f2f8
CreateWellKnownSid
0x18000f2c8
DeleteAce
0x18000f298
EqualSid
0x18000f280
FreeSid
0x18000f2f0
GetAce
0x18000f2a8
GetAclInformation
0x18000f2b0
GetLengthSid
0x18000f2c0
GetSecurityDescriptorDacl
0x18000f328
GetSecurityDescriptorGroup
0x18000f318
GetSecurityDescriptorLength
0x18000f308
GetSecurityDescriptorOwner
0x18000f320
GetSecurityDescriptorSacl
0x18000f330
GetTokenInformation
0x18000f350
InitializeAcl
0x18000f290
InitializeSecurityDescriptor
0x18000f2d0
IsValidAcl
0x18000f2b8
IsValidSecurityDescriptor
0x18000f338
MakeAbsoluteSD
0x18000f310
MakeSelfRelativeSD
0x18000f300
SetSecurityDescriptorControl
0x18000f2e8
SetSecurityDescriptorDacl
0x18000f2e0
SetSecurityDescriptorGroup
0x18000f348
SetSecurityDescriptorOwner
0x18000f340
LookupAccountSidW
0x18000f360
ConvertStringSidToSidW
0x18000f370
EnumDependentServicesW
0x18000f380
CloseServiceHandle
0x18000f390
OpenSCManagerW
0x18000f398
OpenServiceW
0x18000f3a0
StartServiceW
0x18000f3a8
QueryServiceStatusEx
0x18000f3b8
msvcrt.dll
34
__C_specific_handler
0x18000f4c0
__CxxFrameHandler3
0x18000f4d8
__dllonexit
0x18000f438
_amsg_exit
0x18000f410
_callnewh
0x18000f468
_CxxThrowException
0x18000f460
_errno
0x18000f478
_initterm
0x18000f418
_lock
0x18000f480
_onexit
0x18000f440
_purecall
0x18000f4c8
_snwprintf_s
0x18000f428
_unlock
0x18000f430
_vsnwprintf_s
0x18000f470
_wstrdate
0x18000f3e8
_wstrtime
0x18000f3e0
_XcptFilter
0x18000f408
??_V@YAXPEAX@Z
0x18000f4d0
??0exception@@QEAA@AEBQEBD@Z
0x18000f490
??0exception@@QEAA@AEBQEBDH@Z
0x18000f4e0
??0exception@@QEAA@AEBV0@@Z
0x18000f3f0
??1exception@@UEAA@XZ
0x18000f3f8
??1type_info@@UEAA@XZ
0x18000f448
??3@YAXPEAX@Z
0x18000f498
?terminate@@YAXXZ
0x18000f420
?what@exception@@UEBAPEBDXZ
0x18000f400
free
0x18000f4a8
malloc
0x18000f4b0
memcpy
0x18000f458
memcpy_s
0x18000f4a0
memmove
0x18000f450
memset
0x18000f4e8
realloc
0x18000f488
wcsncpy_s
0x18000f4b8
OLEAUT32.dll
16
SafeArrayAccessData
0x18000efc0
SafeArrayCopy
0x18000ef68
SafeArrayCreate
0x18000efb8
SafeArrayDestroy
0x18000ef50
SafeArrayGetLBound
0x18000ef58
SafeArrayGetUBound
0x18000ef60
SafeArrayGetVartype
0x18000ef70
SafeArrayLock
0x18000efa8
SafeArrayRedim
0x18000efc8
SafeArrayUnaccessData
0x18000ef78
SafeArrayUnlock
0x18000ef80
SysAllocString
0x18000ef98
SysFreeString
0x18000efa0
VariantClear
0x18000ef90
VariantInit
0x18000ef88
VarUI4FromStr
0x18000efb0
WCP.dll
8
?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z
0x18000eff0
?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
0x18000efe0
?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z
0x18000efe8
RtlConcatenateLUnicodeStrings
0x18000f010
RtlConvertWin32RegistryPathToNtRegistryPath
0x18000f000
RtlFreeLBlob
0x18000efd8
RtlFreeLUnicodeString
0x18000eff8
RtlReportErrorOrigination
0x18000f008
No function matches your filter.