ActivationManager.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 14
DisableAppXDebuggingForPackage
#1 · 0x7ad70
DllCanUnloadNow
#2 · 0x2f8b0
DllGetActivationFactory
#3 · 0x55160
DllGetClassObject
#4 · 0x35f80
EnableAppXDebuggingForPackage
#5 · 0x7adf0
FreeAppXLaunchContext
#6 · 0x7aed0
GetPackageExecutionContextForAumid
#7 · 0x7bb00
GetPackageExecutionContextForAumidAndUser
#8 · 0x20410
GetPackageExecutionContextForDeviceFamilyName
#9 · 0x7bbf0
GetPackageExecutionContextForPackageByFullName
#10 · 0x7bc10
PostCreateProcessAppXActivation
#11 · 0x7af10
PrepareAppXActivation
#12 · 0x7b230
RegisterAppXPackageIfNecessary2
#13 · 0x7b460
RegisterAppXPackageIfNecessary
#14 · 0x7b6b0
No function matches your filter.
Imported DLLs & functions 376
AppXGetOSMaxVersionTested
0x1009606c
GetPackageApplicationContext
0x10096078
GetPackageApplicationPropertyString
0x10096074
GetPackageFullNameFromToken
0x10096084
GetPackageStatus
0x10096080
GetPackageStatusForUser
0x10096088
GetEffectivePackageStatusForUser
0x10096090
CouldMultiUserAppsBehaviorBePossibleForPackage
0x10096098
GetExtensionApplicationUserModelId
0x100960a4
IsOnDemandRegistrationSupportedForExtensionCategory
0x100960a0
OpenPackageInfoByFullNameForMachine
0x100960ac
CloseState
0x100960bc
GetSystemAppDataKey
0x100960b4
OpenStateExplicit
0x100960b8
ApiSetQueryApiSetPresence
0x100960c4
GlobalGetAtomNameW
0x100960cc
CLSIDFromString
0x10096138
CoAddRefServerProcess
0x100960d8
CoCancelCall
0x10096118
CoCreateFreeThreadedMarshaler
0x100960f8
CoCreateGuid
0x10096134
CoCreateInstance
0x10096140
CoDisableCallCancellation
0x10096114
CoEnableCallCancellation
0x10096110
CoGetApartmentType
0x100960dc
CoGetCallContext
0x10096100
CoGetCallerTID
0x100960fc
CoGetInterfaceAndReleaseStream
0x100960e8
CoGetMalloc
0x10096120
CoGetStdMarshalEx
0x100960e0
CoImpersonateClient
0x10096108
CoIncrementMTAUsage
0x100960f4
CoInitializeEx
0x10096104
CoMarshalInterThreadInterfaceInStream
0x100960f0
CoRegisterClassObject
0x1009611c
CoReleaseMarshalData
0x100960e4
CoReleaseServerProcess
0x10096130
CoResumeClassObjects
0x1009613c
CoRevertToSelf
0x1009610c
CoRevokeClassObject
0x100960d4
CoTaskMemAlloc
0x10096128
CoTaskMemFree
0x10096144
CoTaskMemRealloc
0x1009612c
CoUninitialize
0x10096124
CoWaitForMultipleHandles
0x100960ec
RoGetAgileReference
0x1009614c
CoGetErrorInfo
0x10096158
CoRegisterRacActivationToken
0x1009615c
CoRevokeRacActivationToken
0x10096154
CoSetErrorInfo
0x10096160
DebugBreak
0x10096170
IsDebuggerPresent
0x1009616c
OutputDebugStringW
0x10096168
DelayLoadFailureHook
0x10096178
ResolveDelayLoadedAPI
0x10096180
GetLastError
0x10096190
RaiseException
0x10096194
SetLastError
0x10096198
SetUnhandledExceptionFilter
0x1009618c
UnhandledExceptionFilter
0x10096188
RaiseFailFastException
0x100961a0
GetFileAttributesW
0x100961a8
GetProcessHeap
0x100961cc
HeapAlloc
0x100961c4
HeapDestroy
0x100961c0
HeapFree
0x100961c8
HeapReAlloc
0x100961bc
HeapSize
0x100961d0
LocalAlloc
0x100961d8
LocalFree
0x100961e0
LocalReAlloc
0x100961dc
InitializeSListHead
0x100961ec
InterlockedPushEntrySList
0x100961e8
RegisterWaitForSingleObject
0x100961f4
DisableThreadLibraryCalls
0x10096210
FreeLibrary
0x1009620c
GetModuleFileNameA
0x10096200
GetModuleHandleExW
0x10096204
GetModuleHandleW
0x10096208
GetProcAddress
0x100961fc
FormatMessageW
0x10096218
PathAllocCombine
0x10096220
PathCchAppend
0x10096224
PathCchRemoveFileSpec
0x10096228
ExpandEnvironmentStringsW
0x10096234
GetCurrentDirectoryW
0x10096230
CreateProcessAsUserW
0x1009625c
CreateThread
0x10096240
GetCurrentProcess
0x10096268
GetCurrentProcessId
0x10096250
GetCurrentThread
0x1009624c
GetCurrentThreadId
0x10096270
GetProcessId
0x1009623c
GetThreadId
0x10096244
OpenProcessToken
0x10096248
OpenThread
0x10096258
OpenThreadToken
0x10096254
ProcessIdToSessionId
0x10096264
SetThreadPriority
0x10096260
SetThreadToken
0x10096274
TerminateProcess
0x1009626c
IsProcessorFeaturePresent
0x1009627c
OpenProcess
0x10096280
QueryPerformanceCounter
0x1009628c
QueryPerformanceFrequency
0x10096288
QueryFullProcessImageNameW
0x10096294
PsmCreateKey
0x100962a0
PsmGetKeyFromProcess
0x100962a4
PsmGetKeyFromToken
0x1009629c
PsmCreateKeyWithDynamicId
0x100962ac
QuirkIsEnabledForPackage
0x100962b4
RegCloseKey
0x100962c0
RegCreateKeyExW
0x100962d4
RegDeleteTreeW
0x100962cc
RegEnumKeyExW
0x100962dc
RegGetValueW
0x100962c4
RegOpenCurrentUser
0x100962d0
RegOpenKeyExW
0x100962e0
RegQueryInfoKeyW
0x100962bc
RegQueryValueExW
0x100962c8
RegSetValueExW
0x100962d8
PathFindFileNameW
0x100962e8
PathIsPrefixW
0x100962ec
PathIsRelativeW
0x100962f0
CompareStringOrdinal
0x10096304
AcquireSRWLockExclusive
0x10096354
AcquireSRWLockShared
0x10096340
CreateEventExW
0x10096310
CreateEventW
0x10096334
CreateMutexExW
0x10096344
CreateSemaphoreExW
0x10096364
DeleteCriticalSection
0x1009633c
EnterCriticalSection
0x1009632c
InitializeCriticalSection
0x10096314
InitializeCriticalSectionAndSpinCount
0x1009631c
InitializeCriticalSectionEx
0x10096338
InitializeSRWLock
0x10096324
LeaveCriticalSection
0x10096330
OpenEventW
0x10096328
OpenSemaphoreW
0x1009634c
ReleaseMutex
0x1009635c
ReleaseSemaphore
0x1009630c
ReleaseSRWLockExclusive
0x10096358
ReleaseSRWLockShared
0x10096348
ResetEvent
0x10096320
SetEvent
0x10096318
WaitForSingleObject
0x10096360
WaitForSingleObjectEx
0x10096350
InitOnceBeginInitialize
0x10096370
InitOnceComplete
0x1009636c
InitOnceExecuteOnce
0x10096374
Sleep
0x10096378
WaitForMultipleObjects
0x10096380
GetSystemDirectoryW
0x10096388
GetSystemTimeAsFileTime
0x10096398
GetTickCount
0x10096390
GetTickCount64
0x1009638c
GetWindowsDirectoryW
0x10096394
CloseThreadpoolTimer
0x100963b8
CloseThreadpoolWait
0x100963b0
CreateThreadpoolTimer
0x100963c0
CreateThreadpoolWait
0x100963b4
SetThreadpoolTimer
0x100963bc
SetThreadpoolWait
0x100963c4
WaitForThreadpoolTimerCallbacks
0x100963c8
WaitForThreadpoolWaitCallbacks
0x100963ac
CreateTimerQueueTimer
0x100963d8
DeleteTimerQueueTimer
0x100963d0
UnregisterWaitEx
0x100963d4
GetRestrictedErrorInfo
0x100963f4
RoOriginateError
0x100963ec
RoOriginateErrorW
0x100963f8
RoTransformError
0x100963fc
SetRestrictedErrorInfo
0x100963f0
IsErrorPropagationEnabled
0x10096410
RoGetMatchingRestrictedErrorInfo
0x10096408
RoOriginateLanguageException
0x10096404
RoReportFailedDelegate
0x1009640c
RoActivateInstance
0x1009641c
RoGetActivationFactory
0x10096418
RoRegisterActivationFactories
0x10096420
RoRevokeActivationFactories
0x10096424
RoCreatePropertySetSerializer
0x1009642c
RoGetActivatableClassRegistration
0x10096434
WindowsConcatString
0x10096454
WindowsCreateString
0x1009645c
WindowsCreateStringReference
0x1009643c
WindowsDeleteString
0x10096440
WindowsDuplicateString
0x10096450
WindowsGetStringRawBuffer
0x10096458
WindowsIsStringEmpty
0x10096444
WindowsStringHasEmbeddedNull
0x10096448
WindowsSubstringWithSpecifiedLength
0x1009644c
IsWow64Process
0x10096464
GetSystemWow64Directory2W
0x1009646c
__CxxFrameHandler3
0x10096508
__std_terminate
0x10096504
_CxxThrowException
0x100964b8
_except_handler4_common
0x100964b4
_o___std_exception_copy
0x10096500
_o___std_exception_destroy
0x100964fc
_o___std_type_info_destroy_list
0x100964f8
_o___stdio_common_vsnprintf_s
0x100964f4
_o___stdio_common_vswprintf
0x100964f0
_o__callnewh
0x100964e4
_o__cexit
0x100964e0
_o__configure_narrow_argv
0x100964d4
_o__crt_atexit
0x100964d0
_o__errno
0x100964c0
_o__execute_onexit_table
0x100964bc
_o__get_errno
0x100964c4
_o__initialize_narrow_environment
0x100964dc
_o__initialize_onexit_table
0x100964d8
_o__invalid_parameter_noinfo
0x100964cc
_o__invalid_parameter_noinfo_noreturn
0x100964c8
_o__purecall
0x10096474
_o__register_onexit_function
0x10096478
_o__seh_filter_dll
0x1009647c
_o__set_errno
0x10096480
_o__ui64tow_s
0x10096484
_o__wcsicmp
0x10096488
_o_ceil
0x10096490
_o_free
0x10096494
_o_malloc
0x10096498
_o_realloc
0x1009649c
_o_terminate
0x100964a0
_o_toupper
0x100964a4
_o_wcscat_s
0x100964a8
_o_wcscpy_s
0x100964ac
_o_wcstok_s
0x100964b0
memcmp
0x1009650c
memcpy
0x10096510
memmove
0x1009648c
wcschr
0x100964e8
wcsrchr
0x100964ec
EventActivityIdControl
0x10096540
EventProviderEnabled
0x10096538
EventRegister
0x10096548
EventSetInformation
0x1009653c
EventUnregister
0x10096544
EventWriteTransfer
0x10096534
CopySid
0x10096574
CreateWellKnownSid
0x10096550
DuplicateTokenEx
0x10096564
FreeSid
0x10096570
GetAce
0x10096560
GetLengthSid
0x10096568
GetTokenInformation
0x10096558
ImpersonateLoggedOnUser
0x10096554
IsValidSid
0x10096578
IsWellKnownSid
0x1009656c
RevertToSelf
0x1009655c
CheckTokenMembershipEx
0x10096580
CapabilityCheck
0x10096588
GetNamedSecurityInfoW
0x10096590
ConvertSidToStringSidW
0x10096598
ConvertStringSidToSidW
0x1009659c
LocalGetStringForCondition
0x100965a4
CloseServiceHandle
0x100965b4
OpenSCManagerW
0x100965ac
OpenServiceW
0x100965b8
StartServiceW
0x100965b0
QueryServiceStatus
0x100965c0
IUnknown_QueryService
0x100965c8
IUnknown_SetSite
0x100965cc
CommandLineToArgvW
0x100965d4
IStream_Write
0x100965dc
SHTaskPoolQueueTask
0x100965e4
GetPersistedRegistryLocationW
0x100965f8
0x10096000
CoreUICreate
0x1009600c
CoreUICreateEx
0x10096008
MsgBlobCreateShared
0x10096018
MsgRelease
0x10096014
MsgStringCreateShared
0x10096010
MPR.dll
1
WNetGetConnectionW
0x10096020
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
0x10096684
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x10096640
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
0x1009665c
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x1009663c
?_Xbad_alloc@std@@YAXXZ
0x10096630
?_Xlength_error@std@@YAXPBD@Z
0x10096680
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
0x1009669c
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
0x10096658
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
0x1009662c
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
0x10096654
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x10096634
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
0x10096648
??Bios_base@std@@QBE_NXZ
0x1009666c
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x10096690
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x1009667c
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x10096664
?exceptions@ios_base@std@@QAEXH@Z
0x10096638
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
0x10096678
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x1009668c
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
0x10096614
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x10096688
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
0x1009664c
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x10096644
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
0x1009661c
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
0x10096668
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
0x10096698
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
0x10096660
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
0x10096650
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x10096674
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
0x10096670
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
0x10096694
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
0x10096618
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
0x10096628
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
0x10096624
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
0x10096620
ntdll.dll
27
NtClose
0x100966a8
NtOpenProcessToken
0x100966b0
NtOpenProcessTokenEx
0x100966d0
NtQueryInformationProcess
0x100966f4
NtQueryInformationToken
0x100966d4
NtQuerySecurityAttributesToken
0x100966ec
NtTerminateProcess
0x1009670c
RtlAcquireSRWLockExclusive
0x100966bc
RtlAcquireSRWLockShared
0x10096704
RtlAllocateHeap
0x10096700
RtlCapabilityCheck
0x100966f0
RtlCompareUnicodeString
0x100966c0
RtlCopySid
0x100966ac
RtlExpandEnvironmentStrings
0x100966e4
RtlFreeHeap
0x100966f8
RtlGetDeviceFamilyInfoEnum
0x100966c8
RtlInitUnicodeString
0x100966e8
RtlIsMultiSessionSku
0x100966cc
RtlIsParentOfChildAppContainer
0x100966dc
RtlLengthSid
0x100966a4
RtlNtStatusToDosError
0x100966d8
RtlNtStatusToDosErrorNoTeb
0x100966c4
RtlQueryTokenHostIdAsUlong64
0x100966e0
RtlReleaseSRWLockExclusive
0x100966b8
RtlReleaseSRWLockShared
0x10096708
RtlSleepConditionVariableSRW
0x100966fc
RtlWakeAllConditionVariable
0x100966b4
SysFreeString
0x10096028
RPCRT4.dll
14
I_RpcBindingInqLocalClientPID
0x10096054
I_RpcExceptionFilter
0x1009605c
NdrAsyncClientCall
0x1009604c
RpcAsyncCancelCall
0x10096034
RpcAsyncCompleteCall
0x10096050
RpcAsyncInitializeHandle
0x10096058
RpcBindingFree
0x10096038
RpcBindingFromStringBindingW
0x10096060
RpcBindingSetAuthInfoExW
0x1009603c
RpcImpersonateClient
0x10096048
RpcRevertToSelf
0x10096044
RpcServerInqCallAttributesW
0x10096040
RpcStringBindingComposeW
0x10096064
RpcStringFreeW
0x10096030
No function matches your filter.