UiaManager.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, VirtualAllocEx
Exported functions 5
UiaInitCrossMachineConnection
#1 · 0x59fc0
UiaInitCrossMachineConnectionW
#2 · 0x59fc0
DllCanUnloadNow
#3 · 0xeff0
DllGetClassObject
#4 · 0xdb10
GetProxyDllInfo
#5 · 0x2b910
No function matches your filter.
Imported DLLs & functions 305
ApiSetQueryApiSetPresence
0x100760c4
CLSIDFromString
0x100760e8
CoCreateFreeThreadedMarshaler
0x100760d8
CoCreateInstance
0x100760e4
CoImpersonateClient
0x10076104
CoInitializeEx
0x100760f0
CoRegisterClassObject
0x100760f8
CoRevertToSelf
0x100760dc
CoRevokeClassObject
0x100760fc
CoTaskMemAlloc
0x100760e0
CoTaskMemFree
0x100760f4
CoUninitialize
0x100760ec
StringFromGUID2
0x10076100
ObjectStublessClient10
0x10076164
ObjectStublessClient11
0x10076118
ObjectStublessClient12
0x10076138
ObjectStublessClient13
0x1007611c
ObjectStublessClient14
0x10076128
ObjectStublessClient15
0x10076134
ObjectStublessClient16
0x10076150
ObjectStublessClient17
0x10076114
ObjectStublessClient18
0x10076140
ObjectStublessClient19
0x1007615c
ObjectStublessClient20
0x10076158
ObjectStublessClient21
0x10076144
ObjectStublessClient22
0x1007610c
ObjectStublessClient23
0x10076110
ObjectStublessClient24
0x1007612c
ObjectStublessClient25
0x10076120
ObjectStublessClient3
0x1007614c
ObjectStublessClient4
0x10076124
ObjectStublessClient5
0x10076160
ObjectStublessClient6
0x10076130
ObjectStublessClient7
0x10076154
ObjectStublessClient8
0x1007613c
ObjectStublessClient9
0x10076148
DebugBreak
0x10076174
IsDebuggerPresent
0x1007616c
OutputDebugStringW
0x10076170
DelayLoadFailureHook
0x1007617c
ResolveDelayLoadedAPI
0x10076184
GetLastError
0x1007619c
RaiseException
0x10076194
SetLastError
0x10076190
SetUnhandledExceptionFilter
0x10076198
UnhandledExceptionFilter
0x1007618c
CloseHandle
0x100761b4
GetProcessHeap
0x100761bc
HeapAlloc
0x100761c4
HeapFree
0x100761c0
InitializeSListHead
0x100761d8
GetOverlappedResult
0x100761e0
WTSGetActiveConsoleSessionId
0x100761e8
DisableThreadLibraryCalls
0x10076200
GetModuleFileNameA
0x100761f4
GetModuleHandleExW
0x100761f0
GetModuleHandleW
0x100761fc
GetProcAddress
0x100761f8
LoadLibraryW
0x10076208
FormatMessageW
0x10076210
HWND_UserFree
0x10076224
HWND_UserMarshal
0x1007621c
HWND_UserSize
0x10076218
HWND_UserUnmarshal
0x10076220
ReadProcessMemory
0x10076234
VirtualAllocEx
0x1007622c
VirtualFreeEx
0x10076230
ConnectNamedPipe
0x10076244
CreateNamedPipeW
0x10076240
SetNamedPipeHandleState
0x1007623c
GetCurrentProcess
0x10076264
GetCurrentProcessId
0x1007625c
GetCurrentThread
0x10076254
GetCurrentThreadId
0x10076260
OpenProcessToken
0x1007624c
OpenThreadToken
0x10076250
ProcessIdToSessionId
0x10076268
TerminateProcess
0x10076258
IsProcessorFeaturePresent
0x10076274
OpenProcess
0x10076270
QueryPerformanceCounter
0x1007627c
QueryUnbiasedInterruptTime
0x10076284
RegCloseKey
0x10076298
RegGetValueW
0x10076294
RegOpenKeyExW
0x1007628c
RegQueryValueExW
0x10076290
CompareStringW
0x100762a0
CharLowerW
0x100762a8
lstrcmpiW
0x100762b0
AcquireSRWLockExclusive
0x100762cc
AcquireSRWLockShared
0x100762c0
CreateEventExW
0x10076300
CreateMutexExW
0x100762b8
CreateSemaphoreExW
0x100762f0
DeleteCriticalSection
0x100762c4
EnterCriticalSection
0x100762e4
InitializeCriticalSectionEx
0x100762d4
LeaveCriticalSection
0x100762d8
OpenSemaphoreW
0x100762e8
ReleaseMutex
0x100762c8
ReleaseSemaphore
0x100762e0
ReleaseSRWLockExclusive
0x100762bc
ReleaseSRWLockShared
0x100762f8
ResetEvent
0x100762fc
SetEvent
0x100762f4
SetWaitableTimer
0x100762ec
WaitForSingleObject
0x100762d0
WaitForSingleObjectEx
0x100762dc
InitOnceBeginInitialize
0x1007631c
InitOnceComplete
0x10076310
InitOnceExecuteOnce
0x10076314
Sleep
0x10076318
WaitOnAddress
0x10076308
WakeByAddressAll
0x1007630c
CreateWaitableTimerW
0x10076324
WaitForMultipleObjects
0x10076328
CloseThreadpoolTimer
0x1007633c
CreateThreadpoolTimer
0x10076344
SetThreadpoolTimer
0x10076348
WaitForThreadpoolTimerCallbacks
0x10076340
RoOriginateError
0x10076360
SetRestrictedErrorInfo
0x1007635c
RoGetMatchingRestrictedErrorInfo
0x10076368
RoGetActivationFactory
0x10076370
WindowsCreateString
0x10076378
WindowsCreateStringReference
0x1007637c
WindowsDeleteString
0x10076380
WindowsGetStringRawBuffer
0x10076384
__CxxFrameHandler3
0x1007640c
__std_terminate
0x10076408
__std_type_info_compare
0x10076404
_CxxThrowException
0x100763dc
_except_handler4_common
0x100763d8
_o___std_exception_copy
0x100763fc
_o___std_exception_destroy
0x100763f8
_o___std_type_info_destroy_list
0x100763f4
_o___stdio_common_vsnprintf_s
0x100763f0
_o___stdio_common_vswprintf
0x100763ec
_o__beginthreadex
0x100763e8
_o__callnewh
0x100763e4
_o__cexit
0x100763e0
_o__configure_narrow_argv
0x10076400
_o__crt_atexit
0x10076410
_o__errno
0x10076398
_o__execute_onexit_table
0x1007639c
_o__initialize_narrow_environment
0x100763a0
_o__initialize_onexit_table
0x100763a4
_o__invalid_parameter_noinfo
0x100763a8
_o__invalid_parameter_noinfo_noreturn
0x100763ac
_o__purecall
0x100763b0
_o__register_onexit_function
0x100763b4
_o__seh_filter_dll
0x100763b8
_o__wcsicmp
0x100763c0
_o_ceil
0x100763c4
_o_free
0x100763c8
_o_malloc
0x100763cc
_o_terminate
0x100763d0
_o_towlower
0x100763d4
memcmp
0x10076418
memcpy
0x1007641c
memmove
0x100763bc
wcsstr
0x10076414
memset
0x10076430
EventRegister
0x1007643c
EventSetInformation
0x10076438
EventUnregister
0x10076444
EventWriteTransfer
0x10076440
MsgWaitForMultipleObjects
0x1007644c
DispatchMessageW
0x10076468
GetClassNameW
0x10076460
GetWindowLongW
0x10076464
PeekMessageW
0x10076454
PostThreadMessageW
0x10076458
SendMessageW
0x1007645c
TranslateMessage
0x1007646c
FreeTransientObjectSecurityDescriptor
0x10076474
AllocateAndInitializeSid
0x1007647c
GetSidLengthRequired
0x10076488
GetSidSubAuthority
0x10076480
GetTokenInformation
0x1007648c
InitializeSid
0x10076484
CapabilityCheck
0x10076494
ConvertSidToStringSidW
0x100764a0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1007649c
CoreUICreate
0x10076000
CoreUIFactoryCreate
0x10076008
_Cnd_do_broadcast_at_thread_exit
0x10076584
_Lock_shared_ptr_spin_lock
0x100764d0
_Mtx_destroy_in_situ
0x10076598
_Mtx_init_in_situ
0x100764e0
_Mtx_lock
0x100764f8
_Mtx_unlock
0x10076500
_Thrd_detach
0x100764cc
_Thrd_id
0x10076588
_Thrd_join
0x1007658c
_Unlock_shared_ptr_spin_lock
0x10076528
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x10076558
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x1007654c
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x100764f0
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
0x10076510
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
0x10076568
?_Throw_C_error@std@@YAXH@Z
0x100764fc
?_Throw_Cpp_error@std@@YAXH@Z
0x10076590
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x10076504
?_Xbad_function_call@std@@YAXXZ
0x10076594
?_Xlength_error@std@@YAXPBD@Z
0x100764f4
??0_Lockit@std@@QAE@H@Z
0x10076550
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
0x1007656c
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x100764c8
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
0x1007651c
??1_Lockit@std@@QAE@XZ
0x10076554
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
0x10076580
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x1007657c
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
0x10076564
??Bid@locale@std@@QAEIXZ
0x10076544
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x100764a8
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x100764b4
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x100764c0
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
0x100764e4
?flags@ios_base@std@@QBEHXZ
0x1007650c
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
0x10076534
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
0x10076570
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
0x10076540
?good@ios_base@std@@QBE_NXZ
0x1007653c
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x10076578
?id@?$ctype@G@std@@2V0locale@2@A
0x10076548
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
0x10076514
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x10076520
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
0x10076574
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
0x10076530
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
0x100764dc
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
0x100764bc
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
0x10076524
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
0x100764c4
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
0x10076560
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
0x100764ac
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
0x100764e8
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
0x10076518
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
0x1007652c
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
0x10076538
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
0x100764b8
?uncaught_exception@std@@YA_NXZ
0x10076508
?widen@?$ctype@G@std@@QBEGD@Z
0x1007655c
?width@ios_base@std@@QAE_J_J@Z
0x100764b0
?width@ios_base@std@@QBE_JXZ
0x100764ec
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
0x100764d4
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
0x100764d8
OLEAUT32.dll
25
BSTR_UserFree
0x10076030
BSTR_UserMarshal
0x10076050
BSTR_UserSize
0x10076024
BSTR_UserUnmarshal
0x10076064
LPSAFEARRAY_UserFree
0x10076054
LPSAFEARRAY_UserMarshal
0x10076034
LPSAFEARRAY_UserSize
0x10076038
LPSAFEARRAY_UserUnmarshal
0x10076058
SafeArrayAccessData
0x1007604c
SafeArrayCreateVector
0x10076014
SafeArrayDestroy
0x10076018
SafeArrayGetDim
0x1007603c
SafeArrayGetLBound
0x1007602c
SafeArrayGetUBound
0x10076028
SafeArrayGetVartype
0x10076040
SafeArrayUnaccessData
0x10076010
SysAllocString
0x1007601c
SysAllocStringLen
0x1007606c
SysFreeString
0x10076020
VARIANT_UserFree
0x1007605c
VARIANT_UserMarshal
0x10076060
VARIANT_UserSize
0x10076070
VARIANT_UserUnmarshal
0x10076068
VariantClear
0x10076048
VariantInit
0x10076044
RPCRT4.dll
18
CStdStubBuffer_AddRef
0x1007608c
CStdStubBuffer_Connect
0x10076098
CStdStubBuffer_CountRefs
0x100760ac
CStdStubBuffer_DebugServerQueryInterface
0x100760bc
CStdStubBuffer_DebugServerRelease
0x100760a8
CStdStubBuffer_Disconnect
0x100760a4
CStdStubBuffer_Invoke
0x10076080
CStdStubBuffer_IsIIDSupported
0x1007609c
CStdStubBuffer_QueryInterface
0x100760b4
IUnknown_AddRef_Proxy
0x100760b8
IUnknown_QueryInterface_Proxy
0x100760a0
IUnknown_Release_Proxy
0x10076090
NdrCStdStubBuffer_Release
0x10076084
NdrDllCanUnloadNow
0x10076088
NdrDllGetClassObject
0x10076094
NdrOleAllocate
0x100760b0
NdrOleFree
0x1007607c
UuidFromStringW
0x10076078
No function matches your filter.