Microsoft.Uev.AgentWmi.dll
v10.0.19041.5915
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x8570
DllGetClassObject
#2 · 0x85b0
DllInstall
#3 · 0x8900
DllRegisterServer
#4 · 0x86f0
DllUnregisterServer
#5 · 0x8840
No function matches your filter.
Imported DLLs & functions 274
0x18010a0e0
ADVAPI32.dll
22
CreateWellKnownSid
0x18010a188
EqualSid
0x18010a190
EventRegister
0x18010a0f8
EventSetInformation
0x18010a128
EventUnregister
0x18010a178
EventWriteTransfer
0x18010a0f0
GetNamedSecurityInfoW
0x18010a180
GetTokenInformation
0x18010a168
OpenProcessToken
0x18010a170
RegCloseKey
0x18010a130
RegCreateKeyExW
0x18010a140
RegDeleteKeyExW
0x18010a118
RegDeleteTreeW
0x18010a108
RegDeleteValueW
0x18010a160
RegEnumKeyExW
0x18010a148
RegEnumValueW
0x18010a110
RegGetValueW
0x18010a198
RegOpenKeyExW
0x18010a158
RegQueryInfoKeyW
0x18010a138
RegQueryValueExW
0x18010a100
RegSetKeyValueW
0x18010a120
RegSetValueExW
0x18010a150
KERNEL32.dll
107
AcquireSRWLockExclusive
0x18010a450
AcquireSRWLockShared
0x18010a200
AreFileApisANSI
0x18010a2f8
CloseHandle
0x18010a3e0
CloseThreadpoolTimer
0x18010a220
CopyFileW
0x18010a2f0
CreateDirectoryW
0x18010a1d0
CreateEventA
0x18010a3d0
CreateFileW
0x18010a2a0
CreateMutexExW
0x18010a2e0
CreateSemaphoreExW
0x18010a4f0
CreateThreadpoolTimer
0x18010a208
DebugBreak
0x18010a2d0
DecodePointer
0x18010a420
DeleteCriticalSection
0x18010a3c8
DeleteFileW
0x18010a280
DeviceIoControl
0x18010a1c8
EncodePointer
0x18010a418
EnterCriticalSection
0x18010a350
ExpandEnvironmentStringsW
0x18010a2a8
FindClose
0x18010a1e8
FindFirstFileW
0x18010a1f8
FindNextFileW
0x18010a1f0
FindResourceExW
0x18010a388
FormatMessageA
0x18010a300
FormatMessageW
0x18010a328
FreeLibrary
0x18010a3a8
GetComputerNameExW
0x18010a290
GetCurrentDirectoryW
0x18010a1a8
GetCurrentProcess
0x18010a438
GetCurrentProcessId
0x18010a470
GetCurrentThreadId
0x18010a478
GetExitCodeProcess
0x18010a248
GetFileAttributesExW
0x18010a1b0
GetFileAttributesW
0x18010a298
GetFileSize
0x18010a270
GetFileTime
0x18010a260
GetLastError
0x18010a378
GetLocaleInfoW
0x18010a408
GetLocalTime
0x18010a2e8
GetLongPathNameW
0x18010a238
GetModuleFileNameA
0x18010a4e8
GetModuleFileNameW
0x18010a358
GetModuleHandleExW
0x18010a4a8
GetModuleHandleW
0x18010a3a0
GetProcAddress
0x18010a398
GetProcessHeap
0x18010a2d8
GetProcessMitigationPolicy
0x18010a1e0
GetStringTypeW
0x18010a3f8
GetSystemTimeAsFileTime
0x18010a480
GetTempPathW
0x18010a230
GetThreadLocale
0x18010a360
GetTickCount
0x18010a488
HeapAlloc
0x18010a308
HeapFree
0x18010a4c0
InitializeCriticalSection
0x18010a3c0
InitializeCriticalSectionEx
0x18010a400
IsDebuggerPresent
0x18010a2c8
LeaveCriticalSection
0x18010a368
LoadLibraryExW
0x18010a3b8
LoadResource
0x18010a390
LocalAlloc
0x18010a1d8
LocalFree
0x18010a3f0
LocalLock
0x18010a2b8
LocalUnlock
0x18010a268
lstrcmpiW
0x18010a3b0
lstrlenA
0x18010a240
MoveFileExW
0x18010a278
MultiByteToWideChar
0x18010a370
OpenEventA
0x18010a338
OpenProcess
0x18010a258
OpenSemaphoreW
0x18010a310
OutputDebugStringA
0x18010a490
OutputDebugStringW
0x18010a320
ProcessIdToSessionId
0x18010a4a0
QueryPerformanceCounter
0x18010a468
RaiseException
0x18010a380
ReadFile
0x18010a2c0
ReleaseMutex
0x18010a330
ReleaseSemaphore
0x18010a4b0
ReleaseSRWLockExclusive
0x18010a448
ReleaseSRWLockShared
0x18010a210
RemoveDirectoryW
0x18010a1c0
ResetEvent
0x18010a4e0
SetEvent
0x18010a3d8
SetFileAttributesW
0x18010a288
SetFileTime
0x18010a1b8
SetLastError
0x18010a4b8
SetThreadLocale
0x18010a348
SetThreadpoolTimer
0x18010a218
SetUnhandledExceptionFilter
0x18010a430
SizeofResource
0x18010a340
Sleep
0x18010a410
SleepConditionVariableSRW
0x18010a460
SystemTimeToFileTime
0x18010a250
TerminateProcess
0x18010a440
TlsAlloc
0x18010a4d0
TlsFree
0x18010a498
TlsGetValue
0x18010a4c8
TlsSetValue
0x18010a4d8
UnhandledExceptionFilter
0x18010a428
WaitForSingleObject
0x18010a4f8
WaitForSingleObjectEx
0x18010a318
WaitForThreadpoolTimerCallbacks
0x18010a228
WakeAllConditionVariable
0x18010a458
WideCharToMultiByte
0x18010a3e8
WriteFile
0x18010a2b0
msvcrt.dll
107
___lc_codepage_func
0x18010a7e0
___lc_collate_cp_func
0x18010a700
___lc_handle_func
0x18010a7e8
___mb_cur_max_func
0x18010a7d8
__C_specific_handler
0x18010a888
__crtCompareStringA
0x18010a7a8
__crtCompareStringW
0x18010a7b0
__crtLCMapStringA
0x18010a798
__crtLCMapStringW
0x18010a7a0
__CxxFrameHandler3
0x18010a910
__dllonexit
0x18010a6c0
__mb_cur_max
0x18010a730
__pctype_func
0x18010a7f8
__uncaught_exception
0x18010a788
_amsg_exit
0x18010a6d8
_callnewh
0x18010a840
_CxxThrowException
0x18010a830
_errno
0x18010a818
_fseeki64
0x18010a678
_Getdays
0x18010a760
_Getmonths
0x18010a758
_Gettnames
0x18010a728
_initterm
0x18010a6d0
_ismbblead
0x18010a7d0
_lock
0x18010a810
_onexit
0x18010a6b8
_purecall
0x18010a8e8
_Strftime
0x18010a720
_stricmp
0x18010a628
_unlock
0x18010a808
_vsnprintf_s
0x18010a668
_vsnwprintf
0x18010a918
_W_Getdays
0x18010a750
_W_Getmonths
0x18010a748
_W_Gettnames
0x18010a740
_wcsdup
0x18010a7c0
_Wcsftime
0x18010a738
_wcsicmp
0x18010a5d0
_wcsnicmp
0x18010a8d8
_wfopen_s
0x18010a600
_wfsopen
0x18010a640
_wsetlocale
0x18010a790
_wtoi
0x18010a630
_XcptFilter
0x18010a6e0
??_V@YAXPEAX@Z
0x18010a908
??0bad_cast@@QEAA@AEBV0@@Z
0x18010a8b0
??0bad_cast@@QEAA@PEBD@Z
0x18010a8b8
??0exception@@QEAA@AEBQEBD@Z
0x18010a898
??0exception@@QEAA@AEBQEBDH@Z
0x18010a858
??0exception@@QEAA@AEBV0@@Z
0x18010a890
??0exception@@QEAA@XZ
0x18010a838
??1bad_cast@@UEAA@XZ
0x18010a8c0
??1exception@@UEAA@XZ
0x18010a8a0
??1type_info@@UEAA@XZ
0x18010a6b0
??3@YAXPEAX@Z
0x18010a650
??8type_info@@QEBAHAEBV0@@Z
0x18010a7b8
?name@type_info@@QEBAPEBDXZ
0x18010a878
?terminate@@YAXXZ
0x18010a6c8
?what@exception@@UEBAPEBDXZ
0x18010a8a8
abort
0x18010a780
calloc
0x18010a848
fclose
0x18010a690
feof
0x18010a620
ferror
0x18010a618
fflush
0x18010a698
fgetc
0x18010a688
fgetpos
0x18010a660
fputc
0x18010a6a0
fread
0x18010a610
free
0x18010a8e0
fseek
0x18010a6a8
fsetpos
0x18010a608
ftell
0x18010a5f8
fwrite
0x18010a680
isalnum
0x18010a6f0
isdigit
0x18010a6e8
islower
0x18010a7c8
isspace
0x18010a718
isupper
0x18010a7f0
ldexp
0x18010a770
ldiv
0x18010a880
localeconv
0x18010a868
malloc
0x18010a8d0
mbstowcs_s
0x18010a5f0
memchr
0x18010a708
memcmp
0x18010a6f8
memcpy
0x18010a828
memcpy_s
0x18010a900
memmove
0x18010a820
memmove_s
0x18010a850
memset
0x18010a768
realloc
0x18010a778
setlocale
0x18010a800
setvbuf
0x18010a658
sprintf_s
0x18010a860
strchr
0x18010a5e0
strcspn
0x18010a870
strerror
0x18010a638
swprintf_s
0x18010a670
time
0x18010a5e8
tolower
0x18010a710
towlower
0x18010a5d8
ungetc
0x18010a648
wcscat_s
0x18010a8f0
wcscmp
0x18010a920
wcscpy_s
0x18010a8f8
wcsncpy_s
0x18010a8c8
RtlCaptureContext
0x18010a930
RtlLookupFunctionEntry
0x18010a940
RtlVirtualUnwind
0x18010a938
ole32.dll
12
CLSIDFromProgID
0x18010a990
CLSIDFromString
0x18010a998
CoCreateGuid
0x18010a9a0
CoCreateInstance
0x18010a9a8
CoImpersonateClient
0x18010a950
CoInitializeEx
0x18010a978
CoTaskMemAlloc
0x18010a988
CoTaskMemFree
0x18010a960
CoTaskMemRealloc
0x18010a958
CoUninitialize
0x18010a970
OleRun
0x18010a968
StringFromGUID2
0x18010a980
OLEAUT32.dll
19
LoadTypeLib
0x18010a560
RegisterTypeLib
0x18010a570
SafeArrayAccessData
0x18010a548
SafeArrayCreateVector
0x18010a518
SafeArrayGetLBound
0x18010a520
SafeArrayGetUBound
0x18010a528
SafeArrayPutElement
0x18010a508
SafeArrayUnaccessData
0x18010a540
SysAllocString
0x18010a578
SysAllocStringByteLen
0x18010a510
SysAllocStringLen
0x18010a590
SysFreeString
0x18010a568
SysStringByteLen
0x18010a598
SysStringLen
0x18010a580
UnRegisterTypeLib
0x18010a558
VariantChangeType
0x18010a538
VariantClear
0x18010a550
VariantInit
0x18010a530
VarUI4FromStr
0x18010a588
SHGetKnownFolderPath
0x18010a5a8
No function matches your filter.