Windows.Internal.UI.Shell.WindowTabManager.dll
vUnknown
32-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0xcc40
DllGetActivationFactory
#2 · 0xcc90
No function matches your filter.
Imported DLLs & functions 216
ApiSetQueryApiSetPresence
0x1004900c
CLSIDFromString
0x1004901c
CoCreateFreeThreadedMarshaler
0x10049018
CoCreateInstance
0x10049040
CoGetObjectContext
0x10049020
CoIncrementMTAUsage
0x10049014
CoRevertToSelf
0x10049024
CoTaskMemAlloc
0x1004902c
CoTaskMemFree
0x10049030
CoTaskMemRealloc
0x10049028
CoWaitForMultipleHandles
0x10049034
PropVariantClear
0x1004903c
StringFromCLSID
0x10049038
RoGetAgileReference
0x10049048
DebugBreak
0x10049054
IsDebuggerPresent
0x10049058
OutputDebugStringW
0x10049050
GetLastError
0x1004906c
RaiseException
0x10049070
SetLastError
0x10049068
SetUnhandledExceptionFilter
0x10049064
UnhandledExceptionFilter
0x10049060
GetProcessHeap
0x1004908c
HeapAlloc
0x10049084
HeapFree
0x10049088
InitializeSListHead
0x10049098
InterlockedFlushSList
0x10049094
InterlockedPushEntrySList
0x1004909c
FreeLibrary
0x100490a8
GetModuleFileNameA
0x100490a4
GetModuleHandleExW
0x100490b0
GetModuleHandleW
0x100490b4
GetProcAddress
0x100490ac
FormatMessageW
0x100490bc
CreateFileMappingW
0x100490c4
FlushViewOfFile
0x100490c8
MapViewOfFile
0x100490d0
OpenFileMappingW
0x100490cc
UnmapViewOfFile
0x100490d8
VirtualQuery
0x100490d4
GetCurrentProcess
0x100490ec
GetCurrentProcessId
0x100490e8
GetCurrentThread
0x100490f4
GetCurrentThreadId
0x100490e0
OpenProcessToken
0x100490f8
OpenThreadToken
0x100490f0
TerminateProcess
0x100490e4
IsProcessorFeaturePresent
0x10049100
OpenProcess
0x10049104
QueryPerformanceCounter
0x1004910c
RegCloseKey
0x10049124
RegCreateKeyExW
0x10049118
RegDeleteValueW
0x10049128
RegGetValueW
0x10049114
RegOpenKeyExW
0x1004911c
RegSetValueExW
0x10049120
MultiByteToWideChar
0x10049130
AcquireSRWLockExclusive
0x10049174
AcquireSRWLockShared
0x10049178
CreateEventExW
0x1004913c
CreateEventW
0x10049180
CreateMutexExW
0x1004916c
CreateSemaphoreExW
0x10049148
DeleteCriticalSection
0x10049144
EnterCriticalSection
0x1004914c
InitializeCriticalSection
0x10049140
InitializeCriticalSectionEx
0x10049138
LeaveCriticalSection
0x10049150
OpenSemaphoreW
0x10049168
ReleaseMutex
0x10049160
ReleaseSemaphore
0x10049154
ReleaseSRWLockExclusive
0x10049170
ReleaseSRWLockShared
0x1004917c
SetEvent
0x10049158
WaitForSingleObject
0x1004915c
WaitForSingleObjectEx
0x10049164
InitOnceBeginInitialize
0x10049188
InitOnceComplete
0x1004918c
InitOnceExecuteOnce
0x10049190
GetSystemTimeAsFileTime
0x10049198
GetProductInfo
0x100491a0
CloseThreadpoolTimer
0x100491ac
CreateThreadpoolTimer
0x100491b0
SetThreadpoolTimer
0x100491b4
TrySubmitThreadpoolCallback
0x100491a8
WaitForThreadpoolTimerCallbacks
0x100491b8
GetRestrictedErrorInfo
0x100491d0
RoFailFastWithErrorContext
0x100491e0
RoOriginateError
0x100491d8
RoOriginateErrorW
0x100491d4
RoTransformError
0x100491dc
SetRestrictedErrorInfo
0x100491cc
RoOriginateLanguageException
0x100491e8
RoCreatePropertySetSerializer
0x100491fc
WindowsCreateString
0x1004921c
WindowsCreateStringReference
0x10049214
WindowsDeleteString
0x10049204
WindowsDeleteStringBuffer
0x10049208
WindowsDuplicateString
0x10049218
WindowsGetStringLen
0x1004922c
WindowsGetStringRawBuffer
0x10049210
WindowsIsStringEmpty
0x1004920c
WindowsPreallocateStringBuffer
0x10049224
WindowsPromoteStringBuffer
0x10049220
WindowsStringHasEmbeddedNull
0x10049228
__CxxFrameHandler3
0x100492a0
__std_terminate
0x1004929c
_CxxThrowException
0x100492b0
_except_handler4_common
0x1004927c
_o___std_exception_copy
0x1004928c
_o___std_exception_destroy
0x10049288
_o___std_type_info_destroy_list
0x10049284
_o___stdio_common_vsnprintf_s
0x10049298
_o___stdio_common_vswprintf
0x10049294
_o___stdio_common_vswprintf_s
0x10049290
_o__callnewh
0x10049280
_o__cexit
0x10049264
_o__configure_narrow_argv
0x10049268
_o__crt_atexit
0x10049234
_o__errno
0x10049238
_o__execute_onexit_table
0x1004923c
_o__get_errno
0x10049240
_o__initialize_narrow_environment
0x10049244
_o__initialize_onexit_table
0x10049248
_o__invalid_parameter_noinfo
0x1004924c
_o__invalid_parameter_noinfo_noreturn
0x10049250
_o__purecall
0x10049254
_o__register_onexit_function
0x10049258
_o__seh_filter_dll
0x1004925c
_o__set_errno
0x10049260
_o_free
0x1004926c
_o_iswspace
0x10049270
_o_malloc
0x10049274
_o_terminate
0x10049278
memcmp
0x100492a8
memcpy
0x100492a4
memmove
0x100492ac
EventActivityIdControl
0x100492d4
EventRegister
0x100492e4
EventSetInformation
0x100492e0
EventUnregister
0x100492dc
EventWriteTransfer
0x100492d8
GetWindowThreadProcessId
0x100492ec
DuplicateTokenEx
0x100492f8
EqualSid
0x10049304
GetAce
0x10049300
GetTokenInformation
0x100492fc
RevertToSelf
0x100492f4
CapabilityCheck
0x1004930c
IUnknown_QueryService
0x10049314
UMgrGetConstrainedUserToken
0x10049328
UMgrOpenProcessTokenForQuery
0x1004932c
?__ExceptionPtrAssign@@YAXPAXPBX@Z
0x1004936c
?__ExceptionPtrCopy@@YAXPAXPBX@Z
0x10049384
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
0x100493b8
?__ExceptionPtrCreate@@YAXPAX@Z
0x1004939c
?__ExceptionPtrCurrentException@@YAXPAX@Z
0x10049398
?__ExceptionPtrDestroy@@YAXPAX@Z
0x10049380
?__ExceptionPtrRethrow@@YAXPBX@Z
0x100493a0
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
0x10049360
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
0x1004933c
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
0x10049378
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
0x10049374
?_Xbad_function_call@std@@YAXXZ
0x100493ac
?_Xlength_error@std@@YAXPBD@Z
0x100493b4
?_Xout_of_range@std@@YAXPBD@Z
0x100493b0
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
0x10049368
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
0x10049388
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
0x10049340
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x100493a8
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x100493a4
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x10049394
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
0x1004938c
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
0x10049338
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
0x1004937c
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
0x10049348
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
0x1004934c
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
0x10049334
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
0x10049358
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
0x10049364
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
0x10049344
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
0x1004935c
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
0x10049354
?uncaught_exception@std@@YA_NXZ
0x10049370
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
0x10049350
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
0x10049390
ntdll.dll
13
NtQuerySecurityObject
0x100493dc
NtSetSecurityObject
0x100493c8
RtlAddAccessAllowedAce
0x100493d4
RtlAddAce
0x100493d8
RtlCreateAcl
0x100493c4
RtlCreateSecurityDescriptor
0x100493ec
RtlFreeUnicodeString
0x100493f0
RtlGetAce
0x100493e8
RtlGetDaclSecurityDescriptor
0x100493e4
RtlGetTokenNamedObjectPath
0x100493d0
RtlLengthSid
0x100493e0
RtlQueryInformationAcl
0x100493c0
RtlSetDaclSecurityDescriptor
0x100493cc
No function matches your filter.