AccountsRt.dll
v10.0.19041.4355
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x339b0
DllGetActivationFactory
#2 · 0x1a250
DllGetClassObject
#3 · 0x33a00
No function matches your filter.
Imported DLLs & functions 196
ApHostServerStatus_EnsureServerReady
0x1004d000
CoCreateFreeThreadedMarshaler
0x1004d098
CoCreateInstance
0x1004d094
CoDecrementMTAUsage
0x1004d0a0
CoGetApartmentType
0x1004d084
CoIncrementMTAUsage
0x1004d09c
CoInitializeEx
0x1004d07c
CoMarshalInterface
0x1004d088
CoReleaseMarshalData
0x1004d090
CoTaskMemAlloc
0x1004d080
CoTaskMemFree
0x1004d0ac
CoTaskMemRealloc
0x1004d0a8
CoUninitialize
0x1004d0a4
CreateStreamOnHGlobal
0x1004d08c
RoGetAgileReference
0x1004d0b4
DebugBreak
0x1004d0c0
IsDebuggerPresent
0x1004d0c4
OutputDebugStringA
0x1004d0bc
OutputDebugStringW
0x1004d0c8
DelayLoadFailureHook
0x1004d0d0
ResolveDelayLoadedAPI
0x1004d0d8
GetLastError
0x1004d0e8
RaiseException
0x1004d0e4
SetLastError
0x1004d0ec
SetUnhandledExceptionFilter
0x1004d0f0
UnhandledExceptionFilter
0x1004d0e0
CloseHandle
0x1004d108
GetProcessHeap
0x1004d110
HeapAlloc
0x1004d114
HeapFree
0x1004d118
DisableThreadLibraryCalls
0x1004d14c
FindResourceExW
0x1004d144
FreeLibrary
0x1004d13c
GetModuleFileNameA
0x1004d154
GetModuleFileNameW
0x1004d150
GetModuleHandleExW
0x1004d130
GetModuleHandleW
0x1004d138
GetProcAddress
0x1004d134
LoadLibraryExW
0x1004d148
LoadResource
0x1004d140
SizeofResource
0x1004d12c
LoadLibraryW
0x1004d15c
FormatMessageW
0x1004d164
GetCurrentProcess
0x1004d17c
GetCurrentProcessId
0x1004d188
GetCurrentThread
0x1004d174
GetCurrentThreadId
0x1004d16c
OpenProcessToken
0x1004d170
OpenThreadToken
0x1004d180
SetThreadToken
0x1004d184
TerminateProcess
0x1004d178
OpenProcess
0x1004d190
QueryPerformanceCounter
0x1004d198
RegCloseKey
0x1004d1bc
RegCreateKeyExW
0x1004d1b4
RegDeleteValueW
0x1004d1b0
RegEnumKeyExW
0x1004d1ac
RegGetValueW
0x1004d1c0
RegOpenKeyExW
0x1004d1a0
RegQueryInfoKeyW
0x1004d1b8
RegQueryValueExW
0x1004d1a8
RegSetValueExW
0x1004d1a4
MultiByteToWideChar
0x1004d1c8
CharNextW
0x1004d1d0
lstrcmpiW
0x1004d1d8
AcquireSRWLockExclusive
0x1004d1e4
AcquireSRWLockShared
0x1004d1e8
CreateMutexExW
0x1004d214
CreateSemaphoreExW
0x1004d218
DeleteCriticalSection
0x1004d1ec
EnterCriticalSection
0x1004d1f8
InitializeCriticalSection
0x1004d220
InitializeCriticalSectionEx
0x1004d200
InitializeSRWLock
0x1004d204
LeaveCriticalSection
0x1004d208
OpenSemaphoreW
0x1004d1fc
ReleaseMutex
0x1004d20c
ReleaseSemaphore
0x1004d210
ReleaseSRWLockExclusive
0x1004d1f4
ReleaseSRWLockShared
0x1004d1f0
WaitForSingleObject
0x1004d21c
WaitForSingleObjectEx
0x1004d1e0
InitOnceBeginInitialize
0x1004d228
InitOnceComplete
0x1004d22c
InitOnceExecuteOnce
0x1004d230
Sleep
0x1004d23c
SleepConditionVariableSRW
0x1004d234
WakeAllConditionVariable
0x1004d238
CloseThreadpoolWait
0x1004d260
CloseThreadpoolWork
0x1004d26c
CreateThreadpoolWait
0x1004d25c
CreateThreadpoolWork
0x1004d268
DisassociateCurrentThreadFromCallback
0x1004d254
FreeLibraryWhenCallbackReturns
0x1004d270
SetThreadpoolWait
0x1004d258
SubmitThreadpoolWork
0x1004d264
WaitForThreadpoolWaitCallbacks
0x1004d250
GetRestrictedErrorInfo
0x1004d28c
RoOriginateError
0x1004d294
RoOriginateErrorW
0x1004d290
RoTransformError
0x1004d288
SetRestrictedErrorInfo
0x1004d284
IsErrorPropagationEnabled
0x1004d2a0
RoGetMatchingRestrictedErrorInfo
0x1004d2a4
RoReportFailedDelegate
0x1004d29c
RoActivateInstance
0x1004d2b0
RoGetActivationFactory
0x1004d2b8
RoInitialize
0x1004d2ac
RoUninitialize
0x1004d2b4
WindowsConcatString
0x1004d2e8
WindowsCreateString
0x1004d2e4
WindowsCreateStringReference
0x1004d2cc
WindowsDeleteString
0x1004d2d4
WindowsDeleteStringBuffer
0x1004d2e0
WindowsDuplicateString
0x1004d2dc
WindowsGetStringLen
0x1004d2c0
WindowsGetStringRawBuffer
0x1004d2c8
WindowsIsStringEmpty
0x1004d2c4
WindowsPreallocateStringBuffer
0x1004d2d8
WindowsPromoteStringBuffer
0x1004d2ec
WindowsStringHasEmbeddedNull
0x1004d2d0
EventActivityIdControl
0x1004d300
EventRegister
0x1004d2fc
EventSetInformation
0x1004d2f4
EventUnregister
0x1004d304
EventWriteTransfer
0x1004d2f8
CopySid
0x1004d318
GetLengthSid
0x1004d314
GetTokenInformation
0x1004d310
RevertToSelf
0x1004d30c
CRYPT32.dll
11
CertCloseStore
0x1004d00c
CertCompareCertificateName
0x1004d028
CertEnumCertificatesInStore
0x1004d008
CertFreeCertificateChain
0x1004d014
CertFreeCertificateChainEngine
0x1004d030
CertGetCertificateChain
0x1004d02c
CertGetCertificateContextProperty
0x1004d020
CertGetEnhancedKeyUsage
0x1004d01c
CertGetNameStringW
0x1004d024
CertOpenStore
0x1004d018
CryptDecodeObjectEx
0x1004d010
msvcrt.dll
29
__CxxFrameHandler3
0x1004d334
__dllonexit
0x1004d35c
_amsg_exit
0x1004d324
_callnewh
0x1004d388
_errno
0x1004d380
_except_handler4_common
0x1004d370
_initterm
0x1004d344
_lock
0x1004d338
_onexit
0x1004d364
_purecall
0x1004d354
_strnicmp
0x1004d368
_unlock
0x1004d33c
_vsnwprintf
0x1004d384
_vsnwprintf_s
0x1004d360
_wcsicmp
0x1004d32c
_XcptFilter
0x1004d328
free
0x1004d350
malloc
0x1004d34c
memcmp
0x1004d374
memcpy
0x1004d378
memcpy_s
0x1004d37c
memmove
0x1004d36c
memmove_s
0x1004d340
memset
0x1004d390
realloc
0x1004d330
wcschr
0x1004d358
wcsncpy_s
0x1004d348
wcstok_s
0x1004d320
wcstoul
0x1004d38c
BSTR_UserFree
0x1004d044
BSTR_UserMarshal
0x1004d03c
BSTR_UserSize
0x1004d048
BSTR_UserUnmarshal
0x1004d050
SysFreeString
0x1004d038
SysStringLen
0x1004d040
VarUI4FromStr
0x1004d04c
NdrClientCall4
0x1004d070
RpcBindingFree
0x1004d068
RpcBindingFromStringBindingW
0x1004d058
RpcBindingSetAuthInfoExW
0x1004d064
RpcExceptionFilter
0x1004d074
RpcSsDestroyClientContext
0x1004d06c
RpcStringBindingComposeW
0x1004d05c
RpcStringFreeW
0x1004d060
No function matches your filter.