UserDataPlatformHelperUtil.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 68
??0CalculateSize@Comms@@QEAA@_N0@Z
#1 · 0x23e0
??0Deserializer@Comms@@QEAA@PEBE0_N1@Z
#2 · 0x1950
??0RpcClient@Comms@@QEAA@XZ
#3 · 0x1cc0
??0SecureRpcClient@Comms@@QEAA@XZ
#4 · 0x1e50
??0SerializeBuffer@Comms@@QEAA@AEBVCalculateSize@1@_N1@Z
#5 · 0x2460
??1Deserializer@Comms@@QEAA@XZ
#6 · 0x11e0
??1RpcClient@Comms@@QEAA@XZ
#7 · 0x1ce0
??1SecureRpcClient@Comms@@UEAA@XZ
#8 · 0x1e70
?CopyBytesIn@CalculateSize@Comms@@UEAAXPEBX_KAEBVtype_info@@@Z
#9 · 0x2410
?CopyBytesIn@SerializeBuffer@Comms@@UEAAXPEBX_KAEBVtype_info@@@Z
#10 · 0x2540
?CopyBytesOut@Deserializer@Comms@@QEAA_NPEAX_KAEBVtype_info@@@Z
#11 · 0x1980
CreateKnownFolderPath
#12 · 0x3b20
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAPEAD@Z
#13 · 0x1a80
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAPEAG@Z
#14 · 0x1b40
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAPEBD@Z
#15 · 0x1b30
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAPEBG@Z
#16 · 0x1c00
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAV?$basic_string@GU?$char_traits@G@utl@@V?$allocator@G@2@@utl@@@Z
#17 · 0x1390
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAV?$vector@EV?$allocator@E@utl@@@utl@@@Z
#18 · 0x14c0
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEAVNullType@detail@1@@Z
#19 · 0x1c10
?DeserializeObject@Comms@@YA_NAEAVDeserializer@1@AEBVNullType@detail@1@@Z
#20 · 0x1c10
?GetBuffer@Deserializer@Comms@@QEAAPEAX_K@Z
#21 · 0x1240
?GetBuffer@SerializeBuffer@Comms@@QEAAXAEAV?$vector@EV?$allocator@E@utl@@@utl@@@Z
#22 · 0x1190
?GetBuffer@SerializeBuffer@Comms@@QEBAPEBV?$vector@EV?$allocator@E@utl@@@utl@@XZ
#23 · 0x1180
GetRpcClientThreadToken
#24 · 0x4390
GetSupportedImageFileExtensions
#25 · 0x4bf0
GetTempFileNameWithExt
#26 · 0x37c0
GetThreadIOPriority
#27 · 0x5ec0
?GetTotal@CalculateSize@Comms@@QEBA_KXZ
#28 · 0x1170
?Initialize@SerializeBuffer@Comms@@QEAA_NXZ
#29 · 0x2500
?InitializeBinding@RpcClient@Comms@@QEAAJPEBGAEAPEAX@Z
#30 · 0x1d30
IsActiveDebugger
#31 · 0x1e10
IsImageExtension
#32 · 0x4fe0
?ReleaseBuffer@Deserializer@Comms@@QEAAXPEBX@Z
#33 · 0x12e0
ResizeImageBySizeInMemory
#34 · 0x5800
ResizeImageBySizeToStream
#35 · 0x5be0
?SerializeObject@Comms@@YAXAEAVSerializeBase@1@AEBV?$basic_string@GU?$char_traits@G@utl@@V?$allocator@G@2@@utl@@@Z
#36 · 0x1310
?SerializeObject@Comms@@YAXAEAVSerializeBase@1@AEBV?$vector@EV?$allocator@E@utl@@@utl@@@Z
#37 · 0x1450
?SerializeObject@Comms@@YAXAEAVSerializeBase@1@AEBVNullType@detail@1@@Z
#38 · 0x23d0
?SerializeObject@Comms@@YAXAEAVSerializeBase@1@PEBD@Z
#39 · 0x22d0
?SerializeObject@Comms@@YAXAEAVSerializeBase@1@PEBG@Z
#40 · 0x2350
SetPoolThreadBasePriority
#41 · 0x5fc0
SetThreadIOPriority
#42 · 0x5f40
?_InitializeSecureRpcBinding@SecureRpcClient@Comms@@IEAAJPEBG0@Z
#43 · 0x1eb0
ConvertHtmlStringToPlainTextStringOneCore
#44 · 0x6480
ConvertPlainTextStringToHtmlStringOneCore
#45 · 0x65c0
DefaultMakeHresultFromJetError
#46 · 0x7530
DllCanUnloadNow
#47 · 0x29b0
DllGetClassObject
#48 · 0x29f0
FreeEnumColumn
#49 · 0x7140
GenerateUserModeServiceName
#50 · 0x44f0
GetCalendarColors
#51 · 0x6640
GetCombinedTransientObjectSecurityDescriptor
#52 · 0x48c0
GetContentTypeFromFilePath
#53 · 0x6b30
GetFileExtensionFromContentType
#54 · 0x6e00
GetNextNewCalendarColor
#55 · 0x66b0
GetQueryProcessHandle
#56 · 0x4ad0
GetUserContextFromHandle
#57 · 0x3e80
GetUserTokenFromContext
#58 · 0x3e30
IsCommsSystemService
#59 · 0x4450
JetReallocMethod
#60 · 0x70b0
PrependHtmlOneCore
#61 · 0x65e0
RunServicesInProc
#62 · 0x3ed0
SetCommsServiceJetGlobalSystemParameters
#63 · 0x74c0
StartAndWaitForService
#64 · 0x3ef0
StartAndWaitForServiceForUser
#65 · 0x3f30
StopAndWaitForFullyNamedService
#66 · 0x41b0
StopAndWaitForService
#67 · 0x4130
UT_UninitializeTrident
#68 · 0x63f0
No function matches your filter.
Imported DLLs & functions 99
ApiSetQueryApiSetPresence
0x18000b610
IsDebuggerPresent
0x18000b620
DelayLoadFailureHook
0x18000b630
ResolveDelayLoadedAPI
0x18000b640
GetLastError
0x18000b650
RaiseException
0x18000b658
SetLastError
0x18000b660
SetUnhandledExceptionFilter
0x18000b668
UnhandledExceptionFilter
0x18000b670
CreateFileW
0x18000b680
GetFileAttributesW
0x18000b690
GetTempFileNameW
0x18000b688
CloseHandle
0x18000b6a0
GetProcessHeap
0x18000b6c0
HeapAlloc
0x18000b6b8
HeapFree
0x18000b6c8
HeapReAlloc
0x18000b6b0
DisableThreadLibraryCalls
0x18000b710
FreeLibrary
0x18000b700
GetModuleHandleW
0x18000b6f0
GetProcAddress
0x18000b708
LoadLibraryExW
0x18000b6f8
GetCurrentProcess
0x18000b748
GetCurrentProcessId
0x18000b728
GetCurrentThread
0x18000b740
GetCurrentThreadId
0x18000b730
OpenThreadToken
0x18000b720
TerminateProcess
0x18000b738
OpenProcess
0x18000b758
QueryPerformanceCounter
0x18000b768
QuirkIsEnabled
0x18000b778
RegCloseKey
0x18000b790
RegCreateKeyExW
0x18000b7a0
RegGetValueW
0x18000b788
RegSetValueExW
0x18000b798
RtlCaptureContext
0x18000b7b8
RtlLookupFunctionEntry
0x18000b7c0
RtlVirtualUnwind
0x18000b7b0
PathFindExtensionW
0x18000b7d0
PathMatchSpecW
0x18000b7d8
StrStrIW
0x18000b7e8
AcquireSRWLockExclusive
0x18000b800
DeleteCriticalSection
0x18000b808
EnterCriticalSection
0x18000b820
InitializeCriticalSection
0x18000b810
InitializeCriticalSectionEx
0x18000b818
LeaveCriticalSection
0x18000b828
ReleaseSRWLockExclusive
0x18000b7f8
InitOnceBeginInitialize
0x18000b848
InitOnceComplete
0x18000b850
InitOnceExecuteOnce
0x18000b840
Sleep
0x18000b858
SleepConditionVariableSRW
0x18000b860
WakeAllConditionVariable
0x18000b838
GetSystemTimeAsFileTime
0x18000b878
GetTickCount
0x18000b880
GetTickCount64
0x18000b870
GetSecurityDescriptorDacl
0x18000b8b0
MakeAbsoluteSD
0x18000b8c0
MakeSelfRelativeSD
0x18000b8b8
SetSecurityDescriptorDacl
0x18000b8a8
ControlService
0x18000b8d0
0x18000b8e0
msvcrt.dll
23
__C_specific_handler
0x18000b970
__CxxFrameHandler3
0x18000b920
__dllonexit
0x18000b928
_amsg_exit
0x18000b998
_callnewh
0x18000b940
_initterm
0x18000b988
_lock
0x18000b8f8
_onexit
0x18000b930
_purecall
0x18000b978
_unlock
0x18000b900
_vsnwprintf
0x18000b950
_XcptFilter
0x18000b960
??1type_info@@UEAA@XZ
0x18000b8f0
?raw_name@type_info@@QEBAPEBDXZ
0x18000b980
free
0x18000b908
malloc
0x18000b990
memcpy
0x18000b948
memcpy_s
0x18000b938
memmove
0x18000b918
memset
0x18000b958
rand
0x18000b910
sqrtf
0x18000b9a0
srand
0x18000b968
RpcBindingFree
0x18000b5e8
RpcBindingFromStringBindingW
0x18000b5d0
RpcBindingSetAuthInfoExW
0x18000b600
RpcImpersonateClient
0x18000b5d8
RpcRevertToSelf
0x18000b5e0
RpcStringBindingComposeW
0x18000b5f8
RpcStringFreeW
0x18000b5f0
No function matches your filter.