Microsoft.Uev.AgentWmi.dll
v10.0.19041.5915
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x24860
DllGetClassObject
#2 · 0x24890
DllInstall
#3 · 0x24960
DllRegisterServer
#4 · 0x248c0
DllUnregisterServer
#5 · 0x24900
No function matches your filter.
Imported DLLs & functions 270
0x100fa000
ADVAPI32.dll
22
CreateWellKnownSid
0x100fa00c
EqualSid
0x100fa008
EventRegister
0x100fa058
EventSetInformation
0x100fa054
EventUnregister
0x100fa050
EventWriteTransfer
0x100fa038
GetNamedSecurityInfoW
0x100fa010
GetTokenInformation
0x100fa018
OpenProcessToken
0x100fa014
RegCloseKey
0x100fa04c
RegCreateKeyExW
0x100fa044
RegDeleteKeyExW
0x100fa024
RegDeleteTreeW
0x100fa02c
RegDeleteValueW
0x100fa05c
RegEnumKeyExW
0x100fa040
RegEnumValueW
0x100fa028
RegGetValueW
0x100fa034
RegOpenKeyExW
0x100fa01c
RegQueryInfoKeyW
0x100fa048
RegQueryValueExW
0x100fa030
RegSetKeyValueW
0x100fa020
RegSetValueExW
0x100fa03c
KERNEL32.dll
107
AcquireSRWLockExclusive
0x100fa1a0
AcquireSRWLockShared
0x100fa0a0
AreFileApisANSI
0x100fa06c
CloseHandle
0x100fa168
CloseThreadpoolTimer
0x100fa0b0
CopyFileW
0x100fa070
CreateDirectoryW
0x100fa088
CreateEventA
0x100fa160
CreateFileW
0x100fa0f0
CreateMutexExW
0x100fa110
CreateSemaphoreExW
0x100fa1fc
CreateThreadpoolTimer
0x100fa0a4
DebugBreak
0x100fa108
DecodePointer
0x100fa188
DeleteCriticalSection
0x100fa15c
DeleteFileW
0x100fa0e0
DeviceIoControl
0x100fa084
EncodePointer
0x100fa184
EnterCriticalSection
0x100fa120
ExpandEnvironmentStringsW
0x100fa204
FindClose
0x100fa094
FindFirstFileW
0x100fa09c
FindNextFileW
0x100fa098
FindResourceExW
0x100fa13c
FormatMessageA
0x100fa068
FormatMessageW
0x100fa1d8
FreeLibrary
0x100fa14c
GetComputerNameExW
0x100fa0e8
GetCurrentDirectoryW
0x100fa074
GetCurrentProcess
0x100fa194
GetCurrentProcessId
0x100fa1b0
GetCurrentThreadId
0x100fa1b4
GetExitCodeProcess
0x100fa0c4
GetFileAttributesExW
0x100fa078
GetFileAttributesW
0x100fa0ec
GetFileSize
0x100fa0d8
GetFileTime
0x100fa0d0
GetLastError
0x100fa134
GetLocaleInfoW
0x100fa17c
GetLocalTime
0x100fa114
GetLongPathNameW
0x100fa0bc
GetModuleFileNameA
0x100fa20c
GetModuleFileNameW
0x100fa124
GetModuleHandleExW
0x100fa208
GetModuleHandleW
0x100fa148
GetProcAddress
0x100fa144
GetProcessHeap
0x100fa10c
GetProcessMitigationPolicy
0x100fa090
GetStringTypeW
0x100fa174
GetSystemTimeAsFileTime
0x100fa1b8
GetTempPathW
0x100fa0b8
GetThreadLocale
0x100fa128
GetTickCount
0x100fa1bc
HeapAlloc
0x100fa1c8
HeapFree
0x100fa1c4
InitializeCriticalSection
0x100fa158
InitializeCriticalSectionEx
0x100fa178
IsDebuggerPresent
0x100fa104
LeaveCriticalSection
0x100fa12c
LoadLibraryExW
0x100fa154
LoadResource
0x100fa140
LocalAlloc
0x100fa08c
LocalFree
0x100fa170
LocalLock
0x100fa0fc
LocalUnlock
0x100fa0d4
lstrcmpiW
0x100fa150
lstrlenA
0x100fa0c0
MoveFileExW
0x100fa0dc
MultiByteToWideChar
0x100fa130
OpenEventA
0x100fa064
OpenProcess
0x100fa0cc
OpenSemaphoreW
0x100fa1cc
OutputDebugStringA
0x100fa1c0
OutputDebugStringW
0x100fa1d4
ProcessIdToSessionId
0x100fa200
QueryPerformanceCounter
0x100fa1ac
RaiseException
0x100fa138
ReadFile
0x100fa100
ReleaseMutex
0x100fa1dc
ReleaseSemaphore
0x100fa1e8
ReleaseSRWLockExclusive
0x100fa19c
ReleaseSRWLockShared
0x100fa0a8
RemoveDirectoryW
0x100fa080
ResetEvent
0x100fa1ec
SetEvent
0x100fa164
SetFileAttributesW
0x100fa0e4
SetFileTime
0x100fa07c
SetLastError
0x100fa1e4
SetThreadLocale
0x100fa11c
SetThreadpoolTimer
0x100fa0ac
SetUnhandledExceptionFilter
0x100fa190
SizeofResource
0x100fa118
Sleep
0x100fa180
SleepConditionVariableSRW
0x100fa1a8
SystemTimeToFileTime
0x100fa0c8
TerminateProcess
0x100fa198
TlsAlloc
0x100fa1f0
TlsFree
0x100fa1f8
TlsGetValue
0x100fa1f4
TlsSetValue
0x100fa0f4
UnhandledExceptionFilter
0x100fa18c
WaitForSingleObject
0x100fa1e0
WaitForSingleObjectEx
0x100fa1d0
WaitForThreadpoolTimerCallbacks
0x100fa0b4
WakeAllConditionVariable
0x100fa1a4
WideCharToMultiByte
0x100fa16c
WriteFile
0x100fa0f8
msvcrt.dll
106
___lc_codepage_func
0x100fa394
___lc_collate_cp_func
0x100fa324
___lc_handle_func
0x100fa398
___mb_cur_max_func
0x100fa390
__crtCompareStringA
0x100fa374
__crtCompareStringW
0x100fa378
__crtLCMapStringA
0x100fa36c
__crtLCMapStringW
0x100fa370
__CxxFrameHandler3
0x100fa2c8
__dllonexit
0x100fa304
__mb_cur_max
0x100fa33c
__pctype_func
0x100fa3a0
__uncaught_exception
0x100fa364
_amsg_exit
0x100fa310
_callnewh
0x100fa3c4
_CxxThrowException
0x100fa3bc
_errno
0x100fa3b0
_except_handler4_common
0x100fa2f8
_fseeki64
0x100fa2e8
_Getdays
0x100fa354
_Getmonths
0x100fa350
_Gettnames
0x100fa338
_initterm
0x100fa30c
_ismbblead
0x100fa38c
_lock
0x100fa3ac
_onexit
0x100fa300
_purecall
0x100fa2dc
_Strftime
0x100fa334
_stricmp
0x100fa29c
_unlock
0x100fa3a8
_vsnprintf_s
0x100fa318
_vsnwprintf
0x100fa2c0
_W_Getdays
0x100fa34c
_W_Getmonths
0x100fa348
_W_Gettnames
0x100fa344
_wcsdup
0x100fa380
_Wcsftime
0x100fa340
_wcsicmp
0x100fa2a8
_wcsnicmp
0x100fa3f8
_wfopen_s
0x100fa288
_wfsopen
0x100fa2ac
_wsetlocale
0x100fa368
_wtoi
0x100fa2a0
_XcptFilter
0x100fa314
??_V@YAXPAX@Z
0x100fa2cc
??0bad_cast@@QAE@ABV0@@Z
0x100fa40c
??0bad_cast@@QAE@PBD@Z
0x100fa410
??0exception@@QAE@ABQBD@Z
0x100fa400
??0exception@@QAE@ABQBDH@Z
0x100fa3d0
??0exception@@QAE@ABV0@@Z
0x100fa3e8
??0exception@@QAE@XZ
0x100fa3c0
??1bad_cast@@UAE@XZ
0x100fa414
??1exception@@UAE@XZ
0x100fa404
??1type_info@@UAE@XZ
0x100fa2fc
??3@YAXPAX@Z
0x100fa41c
??8type_info@@QBEHABV0@@Z
0x100fa37c
?name@type_info@@QBEPBDXZ
0x100fa3e0
?terminate@@YAXXZ
0x100fa308
?what@exception@@UBEPBDXZ
0x100fa408
abort
0x100fa360
calloc
0x100fa3c8
fclose
0x100fa2b4
feof
0x100fa298
ferror
0x100fa294
fflush
0x100fa2b8
fgetc
0x100fa2b0
fgetpos
0x100fa2f4
fputc
0x100fa2bc
fread
0x100fa290
free
0x100fa2e0
fseek
0x100fa28c
fsetpos
0x100fa2ec
ftell
0x100fa284
fwrite
0x100fa3f4
isalnum
0x100fa31c
isdigit
0x100fa3f0
islower
0x100fa384
isspace
0x100fa330
isupper
0x100fa39c
ldexp
0x100fa358
ldiv
0x100fa3e4
localeconv
0x100fa3d8
malloc
0x100fa3fc
mbstowcs_s
0x100fa280
memchr
0x100fa328
memcmp
0x100fa320
memcpy
0x100fa3b8
memcpy_s
0x100fa2d0
memmove
0x100fa3b4
memmove_s
0x100fa3cc
memset
0x100fa388
realloc
0x100fa35c
setlocale
0x100fa3a4
setvbuf
0x100fa2c4
sprintf_s
0x100fa3d4
strchr
0x100fa278
strcspn
0x100fa3dc
strerror
0x100fa2a4
swprintf_s
0x100fa3ec
time
0x100fa27c
tolower
0x100fa32c
towlower
0x100fa2e4
ungetc
0x100fa2f0
wcscat_s
0x100fa2d8
wcscpy_s
0x100fa2d4
wcsncpy_s
0x100fa418
ole32.dll
12
CLSIDFromProgID
0x100fa428
CLSIDFromString
0x100fa42c
CoCreateGuid
0x100fa430
CoCreateInstance
0x100fa444
CoImpersonateClient
0x100fa450
CoInitializeEx
0x100fa43c
CoTaskMemAlloc
0x100fa434
CoTaskMemFree
0x100fa448
CoTaskMemRealloc
0x100fa44c
CoUninitialize
0x100fa438
OleRun
0x100fa424
StringFromGUID2
0x100fa440
OLEAUT32.dll
19
LoadTypeLib
0x100fa240
RegisterTypeLib
0x100fa248
SafeArrayAccessData
0x100fa234
SafeArrayCreateVector
0x100fa230
SafeArrayGetLBound
0x100fa22c
SafeArrayGetUBound
0x100fa214
SafeArrayPutElement
0x100fa224
SafeArrayUnaccessData
0x100fa228
SysAllocString
0x100fa24c
SysAllocStringByteLen
0x100fa220
SysAllocStringLen
0x100fa258
SysFreeString
0x100fa244
SysStringByteLen
0x100fa25c
SysStringLen
0x100fa250
UnRegisterTypeLib
0x100fa23c
VariantChangeType
0x100fa21c
VariantClear
0x100fa238
VariantInit
0x100fa218
VarUI4FromStr
0x100fa254
SHGetKnownFolderPath
0x100fa264
No function matches your filter.