UpdateDeploymentProvider.dll

Description: Update Deployment Provider

Version: 10.0.19041.2304

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8dbe80ca5957923a7eca5c20473ae146

File Size: 344.0 KB

Uploaded At: Dec. 1, 2025, 8:28 a.m.

Views: 29

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 3, Address: 0x98a0)
DllCanUnloadNow (Ordinal: 4, Address: 0x4e60)
DllGetClassObject (Ordinal: 5, Address: 0x4e80)
DllRegisterServer (Ordinal: 6, Address: 0x4fb0)
DllUnregisterServer (Ordinal: 7, Address: 0x50b0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180041b70)

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x180041bb8)
CoCreateInstance (Address: 0x180041bf0)
CoDisconnectContext (Address: 0x180041b90)
CoImpersonateClient (Address: 0x180041bd0)
CoInitializeEx (Address: 0x180041bd8)
CoInitializeSecurity (Address: 0x180041bc0)
CoRegisterClassObject (Address: 0x180041b80)
CoResumeClassObjects (Address: 0x180041ba0)
CoRevertToSelf (Address: 0x180041b98)
CoRevokeClassObject (Address: 0x180041b88)
CoTaskMemAlloc (Address: 0x180041bc8)
CoTaskMemFree (Address: 0x180041ba8)
CoTaskMemRealloc (Address: 0x180041bb0)
CoUninitialize (Address: 0x180041be0)
StringFromGUID2 (Address: 0x180041be8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180041c10)
IsDebuggerPresent (Address: 0x180041c00)
OutputDebugStringW (Address: 0x180041c08)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180041c38)
RaiseException (Address: 0x180041c28)
SetLastError (Address: 0x180041c30)
SetUnhandledExceptionFilter (Address: 0x180041c40)
UnhandledExceptionFilter (Address: 0x180041c20)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x180041c90)
CreateFileW (Address: 0x180041ca8)
GetDriveTypeW (Address: 0x180041c78)
GetFileAttributesW (Address: 0x180041c88)
GetFileSizeEx (Address: 0x180041c98)
GetFileType (Address: 0x180041ca0)
GetVolumePathNameW (Address: 0x180041c80)
LocalFileTimeToFileTime (Address: 0x180041c68)
ReadFile (Address: 0x180041c58)
SetFilePointer (Address: 0x180041c50)
SetFileTime (Address: 0x180041c70)
WriteFile (Address: 0x180041c60)

api-ms-win-core-file-l1-2-0.dll

GetVolumeNameForVolumeMountPointW (Address: 0x180041cb8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180041cd0)
DuplicateHandle (Address: 0x180041cc8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180041cf0)
HeapAlloc (Address: 0x180041ce8)
HeapFree (Address: 0x180041ce0)
HeapReAlloc (Address: 0x180041cf8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180041d10)
LocalFree (Address: 0x180041d08)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180041d20)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

DosDateTimeToFileTime (Address: 0x180041d38)
GetSystemPowerStatus (Address: 0x180041d30)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180041d58)
FindResourceExW (Address: 0x180041d60)
FreeLibrary (Address: 0x180041d80)
GetModuleFileNameA (Address: 0x180041d90)
GetModuleFileNameW (Address: 0x180041d50)
GetModuleHandleExW (Address: 0x180041d88)
GetModuleHandleW (Address: 0x180041d98)
GetProcAddress (Address: 0x180041d68)
LoadLibraryExW (Address: 0x180041d70)
LoadResource (Address: 0x180041d78)
SizeofResource (Address: 0x180041d48)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180041da8)
GetLocaleInfoW (Address: 0x180041db0)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x180041dc0)

api-ms-win-core-localization-obsolete-l1-2-0.dll

CompareStringA (Address: 0x180041dd8)
GetSystemDefaultUILanguage (Address: 0x180041dd0)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x180041de8)
MapViewOfFile (Address: 0x180041df0)
UnmapViewOfFile (Address: 0x180041df8)

api-ms-win-core-namespace-l1-1-0.dll

AddSIDToBoundaryDescriptor (Address: 0x180041e28)
ClosePrivateNamespace (Address: 0x180041e10)
CreateBoundaryDescriptorW (Address: 0x180041e20)
CreatePrivateNamespaceW (Address: 0x180041e08)
DeleteBoundaryDescriptor (Address: 0x180041e18)
OpenPrivateNamespaceW (Address: 0x180041e30)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180041e40)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x180041e60)
CreateThread (Address: 0x180041e80)
GetCurrentProcess (Address: 0x180041e68)
GetCurrentProcessId (Address: 0x180041eb0)
GetCurrentThread (Address: 0x180041ea0)
GetCurrentThreadId (Address: 0x180041ea8)
GetExitCodeProcess (Address: 0x180041e50)
GetExitCodeThread (Address: 0x180041e70)
GetThreadPriority (Address: 0x180041e58)
OpenProcessToken (Address: 0x180041e90)
OpenThreadToken (Address: 0x180041e88)
SetThreadPriority (Address: 0x180041e78)
TerminateProcess (Address: 0x180041e98)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180041ec0)
OpenProcess (Address: 0x180041ec8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180041ed8)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180041ee8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180041ef8)
RegCreateKeyExW (Address: 0x180041f00)
RegDeleteKeyExW (Address: 0x180041f08)
RegDeleteValueW (Address: 0x180041f18)
RegEnumKeyExW (Address: 0x180041f38)
RegOpenKeyExW (Address: 0x180041f28)
RegQueryInfoKeyW (Address: 0x180041f20)
RegQueryValueExW (Address: 0x180041f10)
RegSetValueExW (Address: 0x180041f30)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180041f58)
RtlLookupFunctionEntry (Address: 0x180041f48)
RtlVirtualUnwind (Address: 0x180041f50)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathIsRelativeW (Address: 0x180041f70)
PathIsRootW (Address: 0x180041f78)
PathIsUNCW (Address: 0x180041f68)
PathStripToRootW (Address: 0x180041f80)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrChrW (Address: 0x180041f90)
StrRChrW (Address: 0x180041f98)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x180041fb0)
MultiByteToWideChar (Address: 0x180041fa8)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180041fc0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180041fd0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180042060)
AcquireSRWLockShared (Address: 0x180041fe0)
CreateEventW (Address: 0x180042008)
CreateMutexExW (Address: 0x180041fe8)
CreateMutexW (Address: 0x180042078)
CreateSemaphoreExW (Address: 0x180042080)
DeleteCriticalSection (Address: 0x180042020)
EnterCriticalSection (Address: 0x180042058)
InitializeCriticalSection (Address: 0x180042028)
InitializeCriticalSectionAndSpinCount (Address: 0x180042048)
InitializeCriticalSectionEx (Address: 0x180042010)
LeaveCriticalSection (Address: 0x180042068)
OpenSemaphoreW (Address: 0x180042040)
ReleaseMutex (Address: 0x180041ff0)
ReleaseSemaphore (Address: 0x180042050)
ReleaseSRWLockExclusive (Address: 0x180042070)
ReleaseSRWLockShared (Address: 0x180041ff8)
ResetEvent (Address: 0x180042018)
SetEvent (Address: 0x180042000)
WaitForSingleObject (Address: 0x180042038)
WaitForSingleObjectEx (Address: 0x180042030)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800420a0)
InitOnceComplete (Address: 0x180042098)
Sleep (Address: 0x180042090)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1800420b0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1800420d0)
GetSystemTimeAsFileTime (Address: 0x1800420c8)
GetSystemWindowsDirectoryW (Address: 0x1800420c0)
GetTickCount (Address: 0x1800420d8)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x1800420e8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800420f8)
CreateThreadpoolTimer (Address: 0x180042108)
SetThreadpoolTimer (Address: 0x180042100)
WaitForThreadpoolTimerCallbacks (Address: 0x180042110)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x180042120)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180042288)
__CxxFrameHandler3 (Address: 0x180042238)
__CxxFrameHandler4 (Address: 0x180042298)
__std_terminate (Address: 0x180042290)
_CxxThrowException (Address: 0x1800421d8)
_o___std_exception_copy (Address: 0x1800421f0)
_o___std_exception_destroy (Address: 0x1800421e8)
_o___std_type_info_destroy_list (Address: 0x1800421e0)
_o___stdio_common_vsnprintf_s (Address: 0x180042280)
_o___stdio_common_vsprintf_s (Address: 0x180042278)
_o___stdio_common_vswprintf (Address: 0x180042270)
_o__callnewh (Address: 0x180042268)
_o__cexit (Address: 0x180042260)
_o__configure_narrow_argv (Address: 0x180042258)
_o__crt_atexit (Address: 0x180042250)
_o__errno (Address: 0x180042248)
_o__execute_onexit_table (Address: 0x180042240)
_o__get_errno (Address: 0x180042218)
_o__initialize_narrow_environment (Address: 0x180042210)
_o__initialize_onexit_table (Address: 0x180042208)
_o__invalid_parameter_noinfo (Address: 0x180042200)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1800421f8)
_o__purecall (Address: 0x180042130)
_o__recalloc (Address: 0x180042138)
_o__register_onexit_function (Address: 0x180042140)
_o__seh_filter_dll (Address: 0x180042148)
_o__set_errno (Address: 0x180042150)
_o__wtol (Address: 0x180042160)
_o_free (Address: 0x180042168)
_o_iswspace (Address: 0x180042170)
_o_malloc (Address: 0x180042178)
_o_mbstowcs_s (Address: 0x180042180)
_o_strcpy_s (Address: 0x180042188)
_o_strncpy_s (Address: 0x180042190)
_o_strtol (Address: 0x180042198)
_o_terminate (Address: 0x1800421a0)
_o_toupper (Address: 0x1800421a8)
_o_wcscat_s (Address: 0x1800421b0)
_o_wcscpy_s (Address: 0x1800421b8)
_o_wcsncpy_s (Address: 0x1800421c0)
_o_wcstombs (Address: 0x1800421c8)
_o_wcstoul (Address: 0x1800421d0)
memcmp (Address: 0x1800422a0)
memcpy (Address: 0x1800422a8)
memmove (Address: 0x180042158)
strchr (Address: 0x180042220)
strrchr (Address: 0x180042228)
wcsstr (Address: 0x180042230)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800422b8)
_initterm_e (Address: 0x1800422c0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800422d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x1800422f8)
EventRegister (Address: 0x1800422e0)
EventSetInformation (Address: 0x1800422e8)
EventUnregister (Address: 0x180042300)
EventWriteTransfer (Address: 0x1800422f0)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAceEx (Address: 0x180042368)
AllocateAndInitializeSid (Address: 0x180042318)
CheckTokenMembership (Address: 0x180042310)
CopySid (Address: 0x180042338)
CreateRestrictedToken (Address: 0x180042350)
CreateWellKnownSid (Address: 0x180042388)
DuplicateTokenEx (Address: 0x180042340)
FreeSid (Address: 0x1800423a0)
GetLengthSid (Address: 0x1800423a8)
GetSidSubAuthority (Address: 0x180042380)
GetSidSubAuthorityCount (Address: 0x180042378)
GetTokenInformation (Address: 0x180042348)
ImpersonateLoggedOnUser (Address: 0x180042330)
ImpersonateSelf (Address: 0x180042328)
InitializeAcl (Address: 0x180042370)
InitializeSecurityDescriptor (Address: 0x180042360)
IsValidSid (Address: 0x180042390)
MakeAbsoluteSD (Address: 0x180042398)
RevertToSelf (Address: 0x180042320)
SetSecurityDescriptorDacl (Address: 0x180042358)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountSidW (Address: 0x1800423b8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800423d8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800423d0)
ConvertStringSidToSidW (Address: 0x1800423c8)

api-ms-win-shell-shdirectory-l1-1-0.dll

(Address: 0x1800423e8)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x1800423f8)

Cabinet.dll

(Address: 0x180041a78)
(Address: 0x180041a70)
(Address: 0x180041a68)

CRYPT32.dll

CertCloseStore (Address: 0x180041a18)
CertControlStore (Address: 0x180041a50)
CertFindCertificateInStore (Address: 0x180041a40)
CertFreeCertificateContext (Address: 0x180041a58)
CertGetCertificateContextProperty (Address: 0x180041a28)
CertGetEnhancedKeyUsage (Address: 0x180041a48)
CertOpenStore (Address: 0x180041a38)
CertVerifyCertificateChainPolicy (Address: 0x180041a30)
CryptHashPublicKeyInfo (Address: 0x180041a20)

ext-ms-win-deployment-productenumerator-l1-1-0.dll

PE_CreateProductEnumerator (Address: 0x180042408)

ext-ms-win-session-usertoken-l1-1-0.dll

QueryUserToken (Address: 0x180042418)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180042428)

ntdll.dll

NtQueryInformationProcess (Address: 0x180042438)

OLEAUT32.dll

LoadTypeLib (Address: 0x180041ab0)
RegisterTypeLib (Address: 0x180041a98)
SysAllocString (Address: 0x180041aa8)
SysAllocStringByteLen (Address: 0x180041ac0)
SysAllocStringLen (Address: 0x180041ae0)
SysFreeString (Address: 0x180041ac8)
SysStringByteLen (Address: 0x180041ad0)
SysStringLen (Address: 0x180041aa0)
UnRegisterTypeLib (Address: 0x180041ab8)
VariantClear (Address: 0x180041a90)
VariantInit (Address: 0x180041a88)
VarUI4FromStr (Address: 0x180041ad8)

profapi.dll

(Address: 0x180042448)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x180041b10)
RpcStringFreeA (Address: 0x180041b20)
RpcStringFreeW (Address: 0x180041b08)
UuidCreate (Address: 0x180041af8)
UuidFromStringW (Address: 0x180041af0)
UuidToStringA (Address: 0x180041b18)
UuidToStringW (Address: 0x180041b00)

USERENV.dll

CreateEnvironmentBlock (Address: 0x180041b30)
DestroyEnvironmentBlock (Address: 0x180041b38)

WINTRUST.dll

WinVerifyTrust (Address: 0x180041b58)
WTHelperGetProvCertFromChain (Address: 0x180041b60)
WTHelperGetProvSignerFromChain (Address: 0x180041b50)
WTHelperProvDataFromStateData (Address: 0x180041b48)