oleacc.dll

Description: Active Accessibility Core Component

Version: 7.2.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 6c87529c880ecd5ce5b88ce4c5590ece

File Size: 313.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported Functions

DllRegisterServer (Ordinal: 1, Address: 0x1b840)
DllUnregisterServer (Ordinal: 2, Address: 0x1b840)
AccGetRunningUtilityState (Ordinal: 3, Address: 0x3f0b0)
AccNotifyTouchInteraction (Ordinal: 4, Address: 0x3f940)
AccSetRunningUtilityState (Ordinal: 5, Address: 0x3f970)
AccessibleChildren (Ordinal: 6, Address: 0x3f9a0)
AccessibleObjectFromEvent (Ordinal: 7, Address: 0x3f9d0)
AccessibleObjectFromPoint (Ordinal: 8, Address: 0xb470)
AccessibleObjectFromWindow (Ordinal: 9, Address: 0x18ce0)
AccessibleObjectFromWindowTimeout (Ordinal: 10, Address: 0x10a20)
CreateStdAccessibleObject (Ordinal: 11, Address: 0x17930)
CreateStdAccessibleProxyA (Ordinal: 12, Address: 0x3fa00)
CreateStdAccessibleProxyW (Ordinal: 13, Address: 0xa630)
DllCanUnloadNow (Ordinal: 14, Address: 0x1b7b0)
DllGetClassObject (Ordinal: 15, Address: 0x1a4e0)
GetOleaccVersionInfo (Ordinal: 16, Address: 0x17960)
GetProcessHandleFromHwnd (Ordinal: 17, Address: 0x17550)
GetRoleTextA (Ordinal: 18, Address: 0x3fa30)
GetRoleTextW (Ordinal: 19, Address: 0x1bec0)
GetStateTextA (Ordinal: 20, Address: 0x3fa60)
GetStateTextW (Ordinal: 21, Address: 0x3fa90)
IID_IAccessible (Ordinal: 22, Address: 0x5dc0)
IID_IAccessibleHandler (Ordinal: 23, Address: 0x6c20)
LIBID_Accessibility (Ordinal: 24, Address: 0x8d60)
LresultFromObject (Ordinal: 25, Address: 0x18db0)
ObjectFromLresult (Ordinal: 26, Address: 0x1a3c0)
PropMgrClient_LookupProp (Ordinal: 27, Address: 0x15360)
WindowFromAccessibleObject (Ordinal: 28, Address: 0x15600)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

GlobalAddAtomW (Address: 0x618c5060)
GlobalDeleteAtom (Address: 0x618c505c)
GlobalFindAtomW (Address: 0x618c5054)
GlobalGetAtomNameW (Address: 0x618c5058)

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x618c5068)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x618c5070)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x618c5078)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x618c5084)
RaiseException (Address: 0x618c5088)
SetLastError (Address: 0x618c508c)
SetUnhandledExceptionFilter (Address: 0x618c5080)
UnhandledExceptionFilter (Address: 0x618c5090)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x618c5098)
DuplicateHandle (Address: 0x618c509c)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x618c50a8)
GlobalFree (Address: 0x618c50b0)
LocalAlloc (Address: 0x618c50ac)
LocalFree (Address: 0x618c50a4)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x618c50bc)
GlobalUnlock (Address: 0x618c50b8)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x618c50c4)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x618c50f4)
FindResourceExW (Address: 0x618c50d8)
FreeLibrary (Address: 0x618c50dc)
GetModuleFileNameW (Address: 0x618c50f0)
GetModuleHandleExW (Address: 0x618c50d0)
GetModuleHandleW (Address: 0x618c50e8)
GetProcAddress (Address: 0x618c50e4)
LoadLibraryExW (Address: 0x618c50d4)
LoadResource (Address: 0x618c50cc)
LoadStringW (Address: 0x618c50ec)
SizeofResource (Address: 0x618c50e0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x618c50fc)

api-ms-win-core-localization-l1-2-0.dll

GetLocaleInfoW (Address: 0x618c5104)
GetThreadLocale (Address: 0x618c5108)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x618c511c)
MapViewOfFile (Address: 0x618c5120)
ReadProcessMemory (Address: 0x618c5128)
UnmapViewOfFile (Address: 0x618c5110)
VirtualAllocEx (Address: 0x618c5124)
VirtualFreeEx (Address: 0x618c5118)
WriteProcessMemory (Address: 0x618c5114)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x618c5138)
GetCurrentProcess (Address: 0x618c5134)
GetCurrentProcessId (Address: 0x618c5148)
GetCurrentThreadId (Address: 0x618c5130)
GetExitCodeThread (Address: 0x618c513c)
OpenProcessToken (Address: 0x618c5144)
TerminateProcess (Address: 0x618c5140)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x618c5150)
OpenProcess (Address: 0x618c5154)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x618c515c)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleBaseNameW (Address: 0x618c5164)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x618c5188)
RegCreateKeyExW (Address: 0x618c5174)
RegDeleteValueW (Address: 0x618c517c)
RegEnumKeyExW (Address: 0x618c5170)
RegOpenKeyExW (Address: 0x618c5178)
RegQueryInfoKeyW (Address: 0x618c5180)
RegQueryValueExW (Address: 0x618c516c)
RegSetValueExW (Address: 0x618c5184)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x618c5190)
MultiByteToWideChar (Address: 0x618c5194)
WideCharToMultiByte (Address: 0x618c5198)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x618c51a4)
CharNextW (Address: 0x618c51a0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x618c51ac)
lstrcmpW (Address: 0x618c51b0)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x618c51d4)
CreateMutexW (Address: 0x618c51c0)
DeleteCriticalSection (Address: 0x618c51cc)
EnterCriticalSection (Address: 0x618c51b8)
InitializeCriticalSection (Address: 0x618c51c4)
LeaveCriticalSection (Address: 0x618c51c8)
OpenMutexW (Address: 0x618c51bc)
SetEvent (Address: 0x618c51d0)
WaitForSingleObject (Address: 0x618c51d8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x618c51e0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x618c51e8)
GetTickCount (Address: 0x618c51f4)
GetVersionExA (Address: 0x618c51ec)
GetVersionExW (Address: 0x618c51f0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x618c51fc)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x618c5278)
__std_terminate (Address: 0x618c5274)
_CxxThrowException (Address: 0x618c527c)
_except_handler4_common (Address: 0x618c5254)
_o___std_type_info_destroy_list (Address: 0x618c526c)
_o___stdio_common_vswprintf (Address: 0x618c5268)
_o___stdio_common_vswprintf_s (Address: 0x618c5264)
_o__beginthreadex (Address: 0x618c525c)
_o__cexit (Address: 0x618c5258)
_o__configure_narrow_argv (Address: 0x618c5260)
_o__crt_atexit (Address: 0x618c522c)
_o__errno (Address: 0x618c5204)
_o__execute_onexit_table (Address: 0x618c5208)
_o__initialize_narrow_environment (Address: 0x618c520c)
_o__initialize_onexit_table (Address: 0x618c5210)
_o__invalid_parameter_noinfo (Address: 0x618c5214)
_o__purecall (Address: 0x618c5218)
_o__recalloc (Address: 0x618c521c)
_o__register_onexit_function (Address: 0x618c5220)
_o__seh_filter_dll (Address: 0x618c5224)
_o__wcslwr_s (Address: 0x618c5230)
_o_free (Address: 0x618c5234)
_o_malloc (Address: 0x618c5238)
_o_strncpy_s (Address: 0x618c523c)
_o_terminate (Address: 0x618c5240)
_o_wcscat_s (Address: 0x618c5244)
_o_wcscpy_s (Address: 0x618c5248)
_o_wcsncpy_s (Address: 0x618c524c)
_o_wcstok_s (Address: 0x618c5250)
memcmp (Address: 0x618c5280)
memcpy (Address: 0x618c5284)
memmove (Address: 0x618c5228)
wcsstr (Address: 0x618c5270)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x618c5290)
_initterm_e (Address: 0x618c528c)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x618c5298)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x618c52a8)
CheckTokenMembership (Address: 0x618c52a0)
FreeSid (Address: 0x618c52b0)
GetSidSubAuthority (Address: 0x618c52a4)
GetTokenInformation (Address: 0x618c52ac)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x618c52bc)
EtwGetTraceEnableLevel (Address: 0x618c52b8)
EtwGetTraceLoggerHandle (Address: 0x618c52c8)
EtwLogTraceEvent (Address: 0x618c52c0)
EtwRegisterTraceGuidsW (Address: 0x618c52cc)
EtwUnregisterTraceGuids (Address: 0x618c52c4)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x618c5044)
CStdStubBuffer_Connect (Address: 0x618c500c)
CStdStubBuffer_CountRefs (Address: 0x618c503c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x618c5000)
CStdStubBuffer_DebugServerRelease (Address: 0x618c5004)
CStdStubBuffer_Disconnect (Address: 0x618c504c)
CStdStubBuffer_Invoke (Address: 0x618c5024)
CStdStubBuffer_IsIIDSupported (Address: 0x618c5010)
CStdStubBuffer_QueryInterface (Address: 0x618c5030)
IUnknown_AddRef_Proxy (Address: 0x618c5038)
IUnknown_QueryInterface_Proxy (Address: 0x618c502c)
IUnknown_Release_Proxy (Address: 0x618c5048)
NdrCStdStubBuffer_Release (Address: 0x618c5020)
NdrCStdStubBuffer2_Release (Address: 0x618c5014)
NdrDllCanUnloadNow (Address: 0x618c501c)
NdrDllGetClassObject (Address: 0x618c5018)
NdrOleAllocate (Address: 0x618c5008)
NdrOleFree (Address: 0x618c5040)
NdrStubCall2 (Address: 0x618c5034)
NdrStubForwardingFunction (Address: 0x618c5028)