AboveLockAppHost.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x125f0
DllGetActivationFactory
#2 · 0x21290
DllGetClassObject
#3 · 0x18200
No function matches your filter.
Imported DLLs & functions 231
CoCreateFreeThreadedMarshaler
0x1004c0e4
CoCreateInstance
0x1004c0d0
CoGetApartmentType
0x1004c0e0
CoGetCallContext
0x1004c0d8
CoGetInterfaceAndReleaseStream
0x1004c0b4
CoGetMalloc
0x1004c0dc
CoGetStdMarshalEx
0x1004c0d4
CoMarshalInterThreadInterfaceInStream
0x1004c0e8
CoReleaseMarshalData
0x1004c0b8
CoTaskMemAlloc
0x1004c0c4
CoTaskMemFree
0x1004c0bc
CoTaskMemRealloc
0x1004c0c0
CoWaitForMultipleHandles
0x1004c0c8
CoWaitForMultipleObjects
0x1004c0cc
RoGetAgileReference
0x1004c0f0
CStdStubBuffer2_Connect
0x1004c144
CStdStubBuffer2_CountRefs
0x1004c104
CStdStubBuffer2_Disconnect
0x1004c110
CStdStubBuffer2_QueryInterface
0x1004c118
NdrProxyForwardingFunction3
0x1004c140
NdrProxyForwardingFunction4
0x1004c120
NdrProxyForwardingFunction5
0x1004c128
ObjectStublessClient10
0x1004c148
ObjectStublessClient11
0x1004c150
ObjectStublessClient12
0x1004c15c
ObjectStublessClient13
0x1004c130
ObjectStublessClient14
0x1004c154
ObjectStublessClient15
0x1004c138
ObjectStublessClient16
0x1004c124
ObjectStublessClient17
0x1004c158
ObjectStublessClient18
0x1004c108
ObjectStublessClient19
0x1004c14c
ObjectStublessClient20
0x1004c10c
ObjectStublessClient21
0x1004c12c
ObjectStublessClient3
0x1004c13c
ObjectStublessClient4
0x1004c11c
ObjectStublessClient5
0x1004c114
ObjectStublessClient6
0x1004c100
ObjectStublessClient7
0x1004c134
ObjectStublessClient8
0x1004c0fc
ObjectStublessClient9
0x1004c0f8
DebugBreak
0x1004c16c
IsDebuggerPresent
0x1004c168
OutputDebugStringW
0x1004c164
DelayLoadFailureHook
0x1004c174
ResolveDelayLoadedAPI
0x1004c17c
GetLastError
0x1004c194
RaiseException
0x1004c190
SetLastError
0x1004c18c
SetUnhandledExceptionFilter
0x1004c188
UnhandledExceptionFilter
0x1004c184
CloseHandle
0x1004c19c
GetProcessHeap
0x1004c1a4
HeapAlloc
0x1004c1a8
HeapFree
0x1004c1ac
RegisterWaitForSingleObject
0x1004c1c0
UnregisterWait
0x1004c1c4
DisableThreadLibraryCalls
0x1004c1d8
GetModuleFileNameA
0x1004c1cc
GetModuleHandleExW
0x1004c1d0
GetModuleHandleW
0x1004c1dc
GetProcAddress
0x1004c1d4
FormatMessageW
0x1004c1e4
HWND_UserFree
0x1004c1ec
HWND_UserMarshal
0x1004c1f0
HWND_UserSize
0x1004c1f4
HWND_UserUnmarshal
0x1004c1f8
ExpandEnvironmentStringsW
0x1004c200
GetCurrentProcess
0x1004c210
GetCurrentProcessId
0x1004c218
GetCurrentThreadId
0x1004c214
GetProcessId
0x1004c208
TerminateProcess
0x1004c20c
OpenProcess
0x1004c220
QueryPerformanceCounter
0x1004c228
QueryFullProcessImageNameW
0x1004c230
RegCloseKey
0x1004c238
RegCreateKeyExW
0x1004c244
RegGetValueW
0x1004c24c
RegOpenKeyExW
0x1004c240
RegQueryInfoKeyW
0x1004c248
RegQueryValueExW
0x1004c23c
CompareStringOrdinal
0x1004c254
AcquireSRWLockExclusive
0x1004c288
AcquireSRWLockShared
0x1004c284
CreateEventW
0x1004c274
CreateMutexExW
0x1004c290
CreateSemaphoreExW
0x1004c29c
DeleteCriticalSection
0x1004c27c
EnterCriticalSection
0x1004c260
InitializeCriticalSectionEx
0x1004c25c
InitializeSRWLock
0x1004c2a0
LeaveCriticalSection
0x1004c298
OpenSemaphoreW
0x1004c264
ReleaseMutex
0x1004c26c
ReleaseSemaphore
0x1004c268
ReleaseSRWLockExclusive
0x1004c280
ReleaseSRWLockShared
0x1004c28c
SetEvent
0x1004c294
WaitForSingleObject
0x1004c278
WaitForSingleObjectEx
0x1004c270
InitOnceBeginInitialize
0x1004c2bc
InitOnceComplete
0x1004c2b4
InitOnceExecuteOnce
0x1004c2a8
Sleep
0x1004c2ac
SleepConditionVariableSRW
0x1004c2b0
WakeAllConditionVariable
0x1004c2b8
GetSystemTimeAsFileTime
0x1004c2c4
GetTickCount
0x1004c2cc
GetTickCount64
0x1004c2c8
GetProductInfo
0x1004c2d4
CloseThreadpoolTimer
0x1004c2e4
CreateThreadpoolTimer
0x1004c2dc
SetThreadpoolTimer
0x1004c2e8
WaitForThreadpoolTimerCallbacks
0x1004c2e0
RoOriginateError
0x1004c300
RoOriginateErrorW
0x1004c304
SetRestrictedErrorInfo
0x1004c2fc
RoGetMatchingRestrictedErrorInfo
0x1004c30c
RoCreatePropertySetSerializer
0x1004c320
HSTRING_UserFree
0x1004c348
HSTRING_UserMarshal
0x1004c350
HSTRING_UserSize
0x1004c334
HSTRING_UserUnmarshal
0x1004c33c
WindowsCreateString
0x1004c338
WindowsCreateStringReference
0x1004c32c
WindowsDeleteString
0x1004c354
WindowsDuplicateString
0x1004c358
WindowsGetStringLen
0x1004c330
WindowsGetStringRawBuffer
0x1004c328
WindowsIsStringEmpty
0x1004c344
WindowsStringHasEmbeddedNull
0x1004c340
WindowsSubstringWithSpecifiedLength
0x1004c34c
IsWow64Process
0x1004c360
EventActivityIdControl
0x1004c37c
EventProviderEnabled
0x1004c374
EventRegister
0x1004c368
EventSetInformation
0x1004c36c
EventUnregister
0x1004c378
EventWriteTransfer
0x1004c370
GetTokenInformation
0x1004c384
ConvertSidToStringSidW
0x1004c38c
GetProcessReference
0x1004c394
GetPersistedRegistryLocationW
0x1004c39c
msvcrt.dll
36
__CxxFrameHandler3
0x1004c438
__dllonexit
0x1004c3b8
_amsg_exit
0x1004c420
_callnewh
0x1004c418
_CxxThrowException
0x1004c40c
_except_handler4_common
0x1004c3f0
_ftol2_sse
0x1004c434
_initterm
0x1004c3c4
_lock
0x1004c3c0
_onexit
0x1004c3b4
_purecall
0x1004c3dc
_unlock
0x1004c3bc
_vsnprintf_s
0x1004c3ec
_vsnwprintf
0x1004c3d8
_wcsicmp
0x1004c3f4
_XcptFilter
0x1004c424
??0exception@@QAE@ABQBD@Z
0x1004c400
??0exception@@QAE@ABQBDH@Z
0x1004c404
??0exception@@QAE@ABV0@@Z
0x1004c3e8
??0exception@@QAE@XZ
0x1004c3e4
??1exception@@UAE@XZ
0x1004c3e0
??1type_info@@UAE@XZ
0x1004c41c
??3@YAXPAX@Z
0x1004c428
?terminate@@YAXXZ
0x1004c3b0
?what@exception@@UBEPBDXZ
0x1004c408
free
0x1004c3cc
malloc
0x1004c3c8
memcmp
0x1004c42c
memcpy
0x1004c410
memcpy_s
0x1004c3d0
memmove
0x1004c414
memmove_s
0x1004c3d4
memset
0x1004c43c
toupper
0x1004c3fc
wcscspn
0x1004c3f8
wcsrchr
0x1004c430
RPCRT4.dll
20
CStdStubBuffer_AddRef
0x1004c02c
CStdStubBuffer_Connect
0x1004c040
CStdStubBuffer_CountRefs
0x1004c03c
CStdStubBuffer_DebugServerQueryInterface
0x1004c018
CStdStubBuffer_DebugServerRelease
0x1004c058
CStdStubBuffer_Disconnect
0x1004c050
CStdStubBuffer_Invoke
0x1004c048
CStdStubBuffer_IsIIDSupported
0x1004c044
CStdStubBuffer_QueryInterface
0x1004c054
IUnknown_AddRef_Proxy
0x1004c010
IUnknown_QueryInterface_Proxy
0x1004c04c
IUnknown_Release_Proxy
0x1004c030
NdrCStdStubBuffer_Release
0x1004c024
NdrCStdStubBuffer2_Release
0x1004c014
NdrDllCanUnloadNow
0x1004c020
NdrDllGetClassObject
0x1004c01c
NdrOleAllocate
0x1004c05c
NdrOleFree
0x1004c028
NdrStubCall2
0x1004c034
NdrStubForwardingFunction
0x1004c038
IUnknown_QueryService
0x1004c064
SHGetThreadRef
0x1004c06c
SHTaskPoolQueueTask
0x1004c068
USER32.dll
15
GetShellWindow
0x1004c0a8
GetSystemMetrics
0x1004c0a0
GetWindowBand
0x1004c090
GetWindowLongW
0x1004c07c
GetWindowRect
0x1004c098
GetWindowThreadProcessId
0x1004c084
IsIconic
0x1004c08c
IsZoomed
0x1004c094
PostMessageW
0x1004c0a4
SetForegroundWindow
0x1004c09c
SetLayeredWindowAttributes
0x1004c080
SetPropW
0x1004c0ac
SetRectEmpty
0x1004c074
SetWindowLongW
0x1004c078
SetWindowPos
0x1004c088
No function matches your filter.