MicrosoftAccountWAMExtension.dll
v10.0.19041.6033
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x17ff0
DllGetActivationFactory
#2 · 0x17f80
DllGetClassObject
#3 · 0x17fa0
No function matches your filter.
Imported DLLs & functions 174
ApiSetQueryApiSetPresence
0x1005d000
DebugBreak
0x1005d010
IsDebuggerPresent
0x1005d00c
OutputDebugStringW
0x1005d008
DelayLoadFailureHook
0x1005d018
ResolveDelayLoadedAPI
0x1005d020
GetLastError
0x1005d028
RaiseException
0x1005d038
SetLastError
0x1005d030
SetUnhandledExceptionFilter
0x1005d02c
UnhandledExceptionFilter
0x1005d034
GetProcessHeap
0x1005d060
HeapAlloc
0x1005d05c
HeapDestroy
0x1005d050
HeapFree
0x1005d054
HeapReAlloc
0x1005d04c
HeapSize
0x1005d058
DisableThreadLibraryCalls
0x1005d08c
FindResourceExW
0x1005d088
GetModuleFileNameA
0x1005d074
GetModuleHandleExW
0x1005d094
GetModuleHandleW
0x1005d07c
GetProcAddress
0x1005d078
LoadResource
0x1005d090
LockResource
0x1005d080
SizeofResource
0x1005d084
FormatMessageW
0x1005d09c
GetCurrentProcess
0x1005d0a8
GetCurrentProcessId
0x1005d0c0
GetCurrentThread
0x1005d0ac
GetCurrentThreadId
0x1005d0b8
OpenProcessToken
0x1005d0bc
OpenThreadToken
0x1005d0b4
SetThreadToken
0x1005d0a4
TerminateProcess
0x1005d0b0
OpenProcess
0x1005d0c8
QueryPerformanceCounter
0x1005d0d0
RegCloseKey
0x1005d0d8
RegCreateKeyExW
0x1005d0f8
RegDeleteKeyExW
0x1005d104
RegDeleteTreeW
0x1005d0ec
RegDeleteValueW
0x1005d0e8
RegEnumKeyExW
0x1005d0f4
RegEnumValueW
0x1005d0fc
RegGetValueW
0x1005d0dc
RegOpenCurrentUser
0x1005d0e4
RegOpenKeyExW
0x1005d100
RegQueryInfoKeyW
0x1005d0f0
RegQueryValueExW
0x1005d108
RegSetValueExW
0x1005d0e0
AcquireSRWLockExclusive
0x1005d144
AcquireSRWLockShared
0x1005d140
CreateEventExW
0x1005d138
CreateEventW
0x1005d15c
CreateMutexExW
0x1005d158
CreateSemaphoreExW
0x1005d13c
DeleteCriticalSection
0x1005d124
EnterCriticalSection
0x1005d148
InitializeCriticalSection
0x1005d120
InitializeCriticalSectionEx
0x1005d130
InitializeSRWLock
0x1005d150
LeaveCriticalSection
0x1005d11c
OpenSemaphoreW
0x1005d160
ReleaseMutex
0x1005d168
ReleaseSemaphore
0x1005d154
ReleaseSRWLockExclusive
0x1005d12c
ReleaseSRWLockShared
0x1005d134
SetEvent
0x1005d128
WaitForMultipleObjectsEx
0x1005d14c
WaitForSingleObject
0x1005d16c
WaitForSingleObjectEx
0x1005d164
InitOnceBeginInitialize
0x1005d174
InitOnceComplete
0x1005d17c
InitOnceExecuteOnce
0x1005d178
Sleep
0x1005d180
GetSystemTimeAsFileTime
0x1005d18c
GetTickCount
0x1005d188
GetTickCount64
0x1005d190
CloseThreadpoolTimer
0x1005d1a4
CreateThreadpoolTimer
0x1005d1a0
SetThreadpoolTimer
0x1005d198
WaitForThreadpoolTimerCallbacks
0x1005d19c
EventActivityIdControl
0x1005d1b8
EventRegister
0x1005d1c0
EventSetInformation
0x1005d1c4
EventUnregister
0x1005d1c8
EventWriteTransfer
0x1005d1bc
QueryServiceStatus
0x1005d1d0
CreateRandomAccessStreamOnFile
0x1005d1d8
SHTaskPoolAllowThreadReuse
0x1005d1e0
SHTaskPoolQueueTask
0x1005d1e4
combase.dll
22
0x1005d1ec
0x1005d1f0
0x1005d1f4
0x1005d1fc
0x1005d200
0x1005d204
0x1005d20c
0x1005d210
0x1005d214
0x1005d218
0x1005d220
0x1005d224
0x1005d228
0x1005d22c
0x1005d230
0x1005d234
0x1005d238
0x1005d240
CStdStubBuffer2_Connect
0x1005d208
CStdStubBuffer2_CountRefs
0x1005d21c
CStdStubBuffer2_Disconnect
0x1005d23c
CStdStubBuffer2_QueryInterface
0x1005d1f8
msvcrt.dll
41
__CxxFrameHandler3
0x1005d2cc
__dllonexit
0x1005d280
_amsg_exit
0x1005d248
_callnewh
0x1005d2b8
_CxxThrowException
0x1005d2b4
_except_handler4_common
0x1005d288
_ftol2
0x1005d258
_ftol2_sse
0x1005d260
_initterm
0x1005d250
_lock
0x1005d274
_onexit
0x1005d284
_purecall
0x1005d2c0
_unlock
0x1005d27c
_vsnprintf_s
0x1005d2c4
_vsnwprintf
0x1005d2e0
_vsnwprintf_s
0x1005d294
_wcsicmp
0x1005d29c
_wcsnicmp
0x1005d2a4
_XcptFilter
0x1005d278
??_V@YAXPAX@Z
0x1005d298
??0exception@@QAE@ABQBD@Z
0x1005d268
??0exception@@QAE@ABQBDH@Z
0x1005d264
??0exception@@QAE@ABV0@@Z
0x1005d2c8
??0exception@@QAE@XZ
0x1005d2d0
??1exception@@UAE@XZ
0x1005d2d4
??1type_info@@UAE@XZ
0x1005d2e4
??3@YAXPAX@Z
0x1005d2d8
?terminate@@YAXXZ
0x1005d254
?what@exception@@UBEPBDXZ
0x1005d25c
free
0x1005d24c
malloc
0x1005d2bc
memcmp
0x1005d28c
memcpy
0x1005d270
memcpy_s
0x1005d2dc
memmove
0x1005d26c
memmove_s
0x1005d290
memset
0x1005d2e8
realloc
0x1005d2a0
swprintf_s
0x1005d2a8
wcsrchr
0x1005d2b0
wcsstr
0x1005d2ac
ntdll.dll
12
NtQuerySecurityObject
0x1005d2f8
NtSetSecurityObject
0x1005d2f4
RtlAddAccessAllowedAce
0x1005d300
RtlAddAce
0x1005d304
RtlCreateAcl
0x1005d30c
RtlCreateSecurityDescriptor
0x1005d31c
RtlGetAce
0x1005d308
RtlGetDaclSecurityDescriptor
0x1005d318
RtlLengthSid
0x1005d310
RtlNtStatusToDosError
0x1005d2f0
RtlQueryInformationAcl
0x1005d314
RtlSetDaclSecurityDescriptor
0x1005d2fc
No function matches your filter.