UserAgent2.0.2.22.dll

Description: UserAgent

Version: 2.0.2.22

Architecture: 32-bit

Operating System: Windows

SHA256: 8ea14896d572d85d3e366671ee893330

File Size: 175.3 KB

Uploaded At: Dec. 2, 2025, 2:41 p.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x13500)
DllGetClassObject (Ordinal: 2, Address: 0x13880)
DllInstall (Ordinal: 3, Address: 0x13b40)
DllRegisterServer (Ordinal: 4, Address: 0x13520)
DllRegisterServerDirect (Ordinal: 5, Address: 0x13b90)
DllUnregisterServer (Ordinal: 6, Address: 0x139c0)

Imported DLLs & Functions

ADVAPI32.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x2118d01c)
GetSecurityDescriptorControl (Address: 0x2118d014)
GetSecurityDescriptorDacl (Address: 0x2118d00c)
GetSecurityDescriptorGroup (Address: 0x2118d008)
GetSecurityDescriptorLength (Address: 0x2118d018)
GetSecurityDescriptorOwner (Address: 0x2118d004)
GetSecurityDescriptorSacl (Address: 0x2118d010)
MakeSelfRelativeSD (Address: 0x2118d000)
RegCloseKey (Address: 0x2118d020)
RegCreateKeyExW (Address: 0x2118d028)
RegSetValueExW (Address: 0x2118d024)

ATL90.DLL

(Address: 0x2118d030)
(Address: 0x2118d034)
(Address: 0x2118d038)
(Address: 0x2118d03c)
(Address: 0x2118d040)
(Address: 0x2118d044)
(Address: 0x2118d048)
(Address: 0x2118d04c)
(Address: 0x2118d050)
(Address: 0x2118d054)
(Address: 0x2118d058)
(Address: 0x2118d05c)

IMM32.dll

ImmDisableIME (Address: 0x2118d064)

KERNEL32.dll

CloseHandle (Address: 0x2118d0d4)
CopyFileW (Address: 0x2118d0ac)
CreateEventW (Address: 0x2118d0e0)
CreateFileMappingW (Address: 0x2118d078)
CreateMutexW (Address: 0x2118d06c)
DeleteCriticalSection (Address: 0x2118d118)
EnterCriticalSection (Address: 0x2118d124)
FindResourceExW (Address: 0x2118d098)
FindResourceW (Address: 0x2118d094)
FlushInstructionCache (Address: 0x2118d0fc)
GetCurrentProcess (Address: 0x2118d0c0)
GetCurrentProcessId (Address: 0x2118d0a4)
GetCurrentThreadId (Address: 0x2118d0dc)
GetLastError (Address: 0x2118d0b4)
GetModuleFileNameW (Address: 0x2118d15c)
GetModuleHandleW (Address: 0x2118d110)
GetProcAddress (Address: 0x2118d114)
GetProcessHeap (Address: 0x2118d0d8)
GetSystemTimeAsFileTime (Address: 0x2118d168)
GetThreadLocale (Address: 0x2118d0b8)
GetTickCount (Address: 0x2118d0f8)
HeapAlloc (Address: 0x2118d100)
HeapDestroy (Address: 0x2118d104)
HeapFree (Address: 0x2118d158)
HeapReAlloc (Address: 0x2118d170)
HeapSize (Address: 0x2118d138)
InitializeCriticalSection (Address: 0x2118d11c)
InterlockedCompareExchange (Address: 0x2118d13c)
InterlockedDecrement (Address: 0x2118d108)
InterlockedExchange (Address: 0x2118d144)
InterlockedIncrement (Address: 0x2118d10c)
IsDebuggerPresent (Address: 0x2118d160)
IsProcessorFeaturePresent (Address: 0x2118d130)
LeaveCriticalSection (Address: 0x2118d120)
LoadLibraryA (Address: 0x2118d12c)
LoadLibraryW (Address: 0x2118d0b0)
LoadResource (Address: 0x2118d090)
LocalFree (Address: 0x2118d07c)
LockResource (Address: 0x2118d08c)
lstrlenA (Address: 0x2118d0d0)
lstrlenW (Address: 0x2118d084)
MapViewOfFile (Address: 0x2118d074)
MultiByteToWideChar (Address: 0x2118d0a0)
OpenEventW (Address: 0x2118d0f0)
OpenFileMappingW (Address: 0x2118d080)
OpenMutexW (Address: 0x2118d0bc)
OpenProcess (Address: 0x2118d09c)
QueryPerformanceCounter (Address: 0x2118d164)
RaiseException (Address: 0x2118d128)
ReleaseMutex (Address: 0x2118d0c8)
ResetEvent (Address: 0x2118d0f4)
ResumeThread (Address: 0x2118d0e4)
SetEvent (Address: 0x2118d0ec)
SetLastError (Address: 0x2118d0cc)
SetThreadLocale (Address: 0x2118d16c)
SetUnhandledExceptionFilter (Address: 0x2118d154)
SizeofResource (Address: 0x2118d088)
Sleep (Address: 0x2118d148)
TerminateProcess (Address: 0x2118d14c)
UnhandledExceptionFilter (Address: 0x2118d150)
UnmapViewOfFile (Address: 0x2118d070)
VirtualAlloc (Address: 0x2118d140)
VirtualFree (Address: 0x2118d134)
WaitForMultipleObjects (Address: 0x2118d0e8)
WaitForSingleObject (Address: 0x2118d0c4)
WideCharToMultiByte (Address: 0x2118d0a8)

libexpat.dll

(Address: 0x2118d3e8)
(Address: 0x2118d3ec)
(Address: 0x2118d3f0)
(Address: 0x2118d3f4)
(Address: 0x2118d3f8)
(Address: 0x2118d3fc)
(Address: 0x2118d400)
(Address: 0x2118d404)

MSVCP90.dll

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z (Address: 0x2118d1b4)
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z (Address: 0x2118d184)
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z (Address: 0x2118d1b0)
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z (Address: 0x2118d180)
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z (Address: 0x2118d1d0)
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z (Address: 0x2118d1a0)
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z (Address: 0x2118d19c)
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x2118d1c4)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z (Address: 0x2118d214)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z (Address: 0x2118d1e0)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x2118d1dc)
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x2118d1cc)
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x2118d210)
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x2118d1a4)
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z (Address: 0x2118d1a8)
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x2118d1c0)
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x2118d1d4)
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z (Address: 0x2118d1c8)
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z (Address: 0x2118d200)
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z (Address: 0x2118d1ec)
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z (Address: 0x2118d1d8)
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z (Address: 0x2118d17c)
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z (Address: 0x2118d1ac)
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ (Address: 0x2118d190)
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ (Address: 0x2118d1e4)
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x2118d1b8)
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z (Address: 0x2118d208)
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z (Address: 0x2118d18c)
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z (Address: 0x2118d1fc)
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z (Address: 0x2118d1e8)
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB (Address: 0x2118d178)
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB (Address: 0x2118d188)
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z (Address: 0x2118d204)
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z (Address: 0x2118d1f0)
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z (Address: 0x2118d1f8)
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z (Address: 0x2118d198)
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ (Address: 0x2118d20c)
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z (Address: 0x2118d1f4)
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z (Address: 0x2118d194)
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z (Address: 0x2118d1bc)

MSVCR90.dll

__clean_type_info_names_internal (Address: 0x2118d240)
__CppXcptFilter (Address: 0x2118d24c)
__CxxFrameHandler3 (Address: 0x2118d2a4)
__dllonexit (Address: 0x2118d278)
_adjust_fdiv (Address: 0x2118d250)
_amsg_exit (Address: 0x2118d254)
_beginthreadex (Address: 0x2118d228)
_crt_debugger_hook (Address: 0x2118d244)
_CxxThrowException (Address: 0x2118d28c)
_decode_pointer (Address: 0x2118d268)
_encode_pointer (Address: 0x2118d274)
_encoded_null (Address: 0x2118d260)
_except_handler4_common (Address: 0x2118d284)
_initterm (Address: 0x2118d25c)
_initterm_e (Address: 0x2118d258)
_invalid_parameter_noinfo (Address: 0x2118d2e0)
_itoa (Address: 0x2118d300)
_lock (Address: 0x2118d270)
_malloc_crt (Address: 0x2118d264)
_onexit (Address: 0x2118d26c)
_purecall (Address: 0x2118d2e4)
_recalloc (Address: 0x2118d2a0)
_resetstkoflw (Address: 0x2118d2f0)
_snprintf (Address: 0x2118d2f4)
_time64 (Address: 0x2118d224)
_unlock (Address: 0x2118d27c)
_vscwprintf (Address: 0x2118d314)
_wcsnicmp (Address: 0x2118d310)
_wfopen (Address: 0x2118d2e8)
?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x2118d248)
??_V@YAXPAX@Z (Address: 0x2118d29c)
??0exception@std@@QAE@ABQBD@Z (Address: 0x2118d2c4)
??0exception@std@@QAE@ABV01@@Z (Address: 0x2118d2d8)
??0exception@std@@QAE@XZ (Address: 0x2118d2d0)
??1exception@std@@UAE@XZ (Address: 0x2118d2cc)
??2@YAPAXI@Z (Address: 0x2118d2d4)
??3@YAXPAX@Z (Address: 0x2118d288)
?terminate@@YAXXZ (Address: 0x2118d280)
?what@exception@std@@UBEPBDXZ (Address: 0x2118d2c8)
atoi (Address: 0x2118d304)
atol (Address: 0x2118d31c)
calloc (Address: 0x2118d21c)
fclose (Address: 0x2118d324)
feof (Address: 0x2118d23c)
fgetwc (Address: 0x2118d234)
fread (Address: 0x2118d22c)
free (Address: 0x2118d298)
fseek (Address: 0x2118d230)
fwprintf (Address: 0x2118d320)
fwrite (Address: 0x2118d328)
getc (Address: 0x2118d238)
malloc (Address: 0x2118d2b0)
mbstowcs (Address: 0x2118d308)
memcpy (Address: 0x2118d2ec)
memcpy_s (Address: 0x2118d2ac)
memmove_s (Address: 0x2118d2bc)
memset (Address: 0x2118d2b4)
rand (Address: 0x2118d32c)
setlocale (Address: 0x2118d30c)
sprintf (Address: 0x2118d2fc)
srand (Address: 0x2118d220)
strncmp (Address: 0x2118d2b8)
strncpy (Address: 0x2118d2dc)
strstr (Address: 0x2118d2a8)
swprintf_s (Address: 0x2118d294)
vswprintf_s (Address: 0x2118d318)
wcsncpy_s (Address: 0x2118d290)
wcsrchr (Address: 0x2118d2c0)
wcstombs (Address: 0x2118d2f8)

ole32.dll

CoCreateInstance (Address: 0x2118d40c)

OLEAUT32.dll

LoadRegTypeLib (Address: 0x2118d35c)
LoadTypeLib (Address: 0x2118d360)
RegisterTypeLib (Address: 0x2118d340)
SysAllocString (Address: 0x2118d350)
SysAllocStringByteLen (Address: 0x2118d354)
SysAllocStringLen (Address: 0x2118d368)
SysFreeString (Address: 0x2118d338)
SysStringByteLen (Address: 0x2118d358)
SysStringLen (Address: 0x2118d334)
UnRegisterTypeLib (Address: 0x2118d33c)
VarBstrCmp (Address: 0x2118d364)
VariantClear (Address: 0x2118d348)
VariantCopy (Address: 0x2118d34c)
VariantInit (Address: 0x2118d344)

PSAPI.DLL

GetModuleFileNameExW (Address: 0x2118d370)

SHELL32.dll

SHCreateDirectoryExW (Address: 0x2118d37c)
SHGetSpecialFolderPathW (Address: 0x2118d378)

SHLWAPI.dll

PathCombineW (Address: 0x2118d388)
PathFileExistsW (Address: 0x2118d384)

USER32.dll

CallWindowProcW (Address: 0x2118d3c4)
CharNextW (Address: 0x2118d3d0)
CreateWindowExW (Address: 0x2118d3c0)
DefWindowProcW (Address: 0x2118d3bc)
DestroyWindow (Address: 0x2118d3c8)
FindWindowW (Address: 0x2118d39c)
GetClassInfoExW (Address: 0x2118d390)
GetDesktopWindow (Address: 0x2118d3b0)
GetWindowLongW (Address: 0x2118d3b8)
IsWindow (Address: 0x2118d3a0)
LoadCursorW (Address: 0x2118d394)
RegisterClassExW (Address: 0x2118d398)
SendMessageTimeoutW (Address: 0x2118d3a4)
SendMessageW (Address: 0x2118d3ac)
SetWindowLongW (Address: 0x2118d3b4)
UnregisterClassA (Address: 0x2118d3cc)
wsprintfW (Address: 0x2118d3a8)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x2118d3e0)
GetFileVersionInfoW (Address: 0x2118d3dc)
VerQueryValueW (Address: 0x2118d3d8)