AboveLockAppHost.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x7d00
DllGetActivationFactory
#2 · 0x15db0
DllGetClassObject
#3 · 0x7a90
No function matches your filter.
Imported DLLs & functions 241
CoCreateFreeThreadedMarshaler
0x180049558
CoCreateInstance
0x180049538
CoGetApartmentType
0x180049548
CoGetCallContext
0x180049560
CoGetInterfaceAndReleaseStream
0x180049510
CoGetMalloc
0x180049528
CoGetStdMarshalEx
0x180049530
CoMarshalInterThreadInterfaceInStream
0x1800494f8
CoReleaseMarshalData
0x180049550
CoTaskMemAlloc
0x180049520
CoTaskMemFree
0x180049540
CoTaskMemRealloc
0x180049518
CoWaitForMultipleHandles
0x180049500
CoWaitForMultipleObjects
0x180049508
RoGetAgileReference
0x180049570
CStdStubBuffer2_Connect
0x180049608
CStdStubBuffer2_CountRefs
0x180049590
CStdStubBuffer2_Disconnect
0x1800495b8
CStdStubBuffer2_QueryInterface
0x1800495d0
NdrProxyForwardingFunction3
0x1800495f8
NdrProxyForwardingFunction4
0x1800495e0
NdrProxyForwardingFunction5
0x180049648
ObjectStublessClient10
0x1800495a8
ObjectStublessClient11
0x180049620
ObjectStublessClient12
0x1800495a0
ObjectStublessClient13
0x180049640
ObjectStublessClient14
0x180049610
ObjectStublessClient15
0x180049618
ObjectStublessClient16
0x180049588
ObjectStublessClient17
0x1800495e8
ObjectStublessClient18
0x180049598
ObjectStublessClient19
0x1800495d8
ObjectStublessClient20
0x1800495b0
ObjectStublessClient21
0x1800495f0
ObjectStublessClient3
0x180049628
ObjectStublessClient4
0x180049580
ObjectStublessClient5
0x180049638
ObjectStublessClient6
0x180049600
ObjectStublessClient7
0x180049630
ObjectStublessClient8
0x1800495c8
ObjectStublessClient9
0x1800495c0
DebugBreak
0x180049658
IsDebuggerPresent
0x180049668
OutputDebugStringW
0x180049660
DelayLoadFailureHook
0x180049678
ResolveDelayLoadedAPI
0x180049688
GetLastError
0x1800496a0
RaiseException
0x1800496b0
SetLastError
0x1800496a8
SetUnhandledExceptionFilter
0x1800496b8
UnhandledExceptionFilter
0x180049698
CloseHandle
0x1800496c8
GetProcessHeap
0x1800496e8
HeapAlloc
0x1800496d8
HeapFree
0x1800496e0
RegisterWaitForSingleObject
0x180049718
UnregisterWait
0x180049710
DisableThreadLibraryCalls
0x180049748
GetModuleFileNameA
0x180049728
GetModuleHandleExW
0x180049730
GetModuleHandleW
0x180049740
GetProcAddress
0x180049738
FormatMessageW
0x180049758
HWND_UserFree
0x180049768
HWND_UserFree64
0x180049770
HWND_UserMarshal
0x180049780
HWND_UserMarshal64
0x180049790
HWND_UserSize
0x1800497a0
HWND_UserSize64
0x180049778
HWND_UserUnmarshal
0x180049798
HWND_UserUnmarshal64
0x180049788
ExpandEnvironmentStringsW
0x1800497b0
GetCurrentProcess
0x1800497c8
GetCurrentProcessId
0x1800497d0
GetCurrentThreadId
0x1800497d8
GetProcessId
0x1800497c0
TerminateProcess
0x1800497e0
OpenProcess
0x1800497f0
QueryPerformanceCounter
0x180049800
QueryFullProcessImageNameW
0x180049810
RegCloseKey
0x180049848
RegCreateKeyExW
0x180049820
RegGetValueW
0x180049828
RegOpenKeyExW
0x180049830
RegQueryInfoKeyW
0x180049840
RegQueryValueExW
0x180049838
RtlCaptureContext
0x180049860
RtlLookupFunctionEntry
0x180049858
RtlVirtualUnwind
0x180049868
CompareStringOrdinal
0x180049878
AcquireSRWLockExclusive
0x1800498e0
AcquireSRWLockShared
0x1800498b8
CreateEventW
0x180049898
CreateMutexExW
0x1800498f8
CreateSemaphoreExW
0x1800498f0
DeleteCriticalSection
0x180049900
EnterCriticalSection
0x1800498e8
InitializeCriticalSectionEx
0x180049910
InitializeSRWLock
0x180049890
LeaveCriticalSection
0x1800498d0
OpenSemaphoreW
0x1800498c8
ReleaseMutex
0x1800498d8
ReleaseSemaphore
0x1800498c0
ReleaseSRWLockExclusive
0x1800498b0
ReleaseSRWLockShared
0x180049908
SetEvent
0x1800498a0
WaitForSingleObject
0x1800498a8
WaitForSingleObjectEx
0x180049888
InitOnceBeginInitialize
0x180049920
InitOnceComplete
0x180049930
InitOnceExecuteOnce
0x180049948
Sleep
0x180049940
SleepConditionVariableSRW
0x180049928
WakeAllConditionVariable
0x180049938
GetSystemTimeAsFileTime
0x180049960
GetTickCount
0x180049968
GetTickCount64
0x180049958
GetProductInfo
0x180049978
CloseThreadpoolTimer
0x1800499a0
CreateThreadpoolTimer
0x180049988
SetThreadpoolTimer
0x180049990
WaitForThreadpoolTimerCallbacks
0x180049998
RoOriginateError
0x1800499d8
RoOriginateErrorW
0x1800499d0
SetRestrictedErrorInfo
0x1800499c8
RoGetMatchingRestrictedErrorInfo
0x1800499e8
RoActivateInstance
0x180049a00
RoGetActivationFactory
0x1800499f8
RoCreatePropertySetSerializer
0x180049a10
HSTRING_UserFree
0x180049a90
HSTRING_UserFree64
0x180049a88
HSTRING_UserMarshal
0x180049a48
HSTRING_UserMarshal64
0x180049a78
HSTRING_UserSize
0x180049aa0
HSTRING_UserSize64
0x180049a58
HSTRING_UserUnmarshal
0x180049a70
HSTRING_UserUnmarshal64
0x180049a60
WindowsCreateString
0x180049a30
WindowsCreateStringReference
0x180049a20
WindowsDeleteString
0x180049a80
WindowsDuplicateString
0x180049a28
WindowsGetStringLen
0x180049a68
WindowsGetStringRawBuffer
0x180049a50
WindowsIsStringEmpty
0x180049a98
WindowsStringHasEmbeddedNull
0x180049a38
WindowsSubstringWithSpecifiedLength
0x180049a40
IsWow64Process
0x180049ab0
EventActivityIdControl
0x180049ac0
EventProviderEnabled
0x180049ad8
EventRegister
0x180049ae8
EventSetInformation
0x180049ae0
EventUnregister
0x180049ac8
EventWriteTransfer
0x180049ad0
GetTokenInformation
0x180049af8
ConvertSidToStringSidW
0x180049b08
GetProcessReference
0x180049b18
GetPersistedRegistryLocationW
0x180049b28
msvcrt.dll
35
__C_specific_handler
0x180049b70
__CxxFrameHandler3
0x180049c50
__dllonexit
0x180049b58
_amsg_exit
0x180049c30
_callnewh
0x180049c20
_CxxThrowException
0x180049c08
_initterm
0x180049b78
_lock
0x180049b68
_onexit
0x180049b50
_purecall
0x180049ba8
_unlock
0x180049b60
_vsnprintf_s
0x180049bc8
_vsnwprintf
0x180049ba0
_wcsicmp
0x180049bd8
_XcptFilter
0x180049c38
??0exception@@QEAA@AEBQEBD@Z
0x180049bf0
??0exception@@QEAA@AEBQEBDH@Z
0x180049bf8
??0exception@@QEAA@AEBV0@@Z
0x180049bc0
??0exception@@QEAA@XZ
0x180049bb8
??1exception@@UEAA@XZ
0x180049bb0
??1type_info@@UEAA@XZ
0x180049c28
??3@YAXPEAX@Z
0x180049c40
?terminate@@YAXXZ
0x180049b80
?what@exception@@UEBAPEBDXZ
0x180049c00
free
0x180049b88
malloc
0x180049c58
memcmp
0x180049c48
memcpy
0x180049c10
memcpy_s
0x180049b90
memmove
0x180049c18
memmove_s
0x180049b98
memset
0x180049c60
toupper
0x180049be8
wcscspn
0x180049be0
wcsrchr
0x180049bd0
RPCRT4.dll
20
CStdStubBuffer_AddRef
0x1800493e8
CStdStubBuffer_Connect
0x180049438
CStdStubBuffer_CountRefs
0x180049400
CStdStubBuffer_DebugServerQueryInterface
0x1800493c0
CStdStubBuffer_DebugServerRelease
0x180049420
CStdStubBuffer_Disconnect
0x180049430
CStdStubBuffer_Invoke
0x180049418
CStdStubBuffer_IsIIDSupported
0x180049440
CStdStubBuffer_QueryInterface
0x180049408
IUnknown_AddRef_Proxy
0x1800493e0
IUnknown_QueryInterface_Proxy
0x180049448
IUnknown_Release_Proxy
0x1800493f0
NdrCStdStubBuffer_Release
0x1800493d8
NdrCStdStubBuffer2_Release
0x1800493b8
NdrDllCanUnloadNow
0x1800493d0
NdrDllGetClassObject
0x1800493c8
NdrOleAllocate
0x180049410
NdrOleFree
0x1800493b0
NdrStubCall3
0x1800493f8
NdrStubForwardingFunction
0x180049428
IUnknown_QueryService
0x180049458
SHGetThreadRef
0x180049460
SHTaskPoolQueueTask
0x180049468
USER32.dll
15
GetShellWindow
0x180049498
GetSystemMetrics
0x1800494b0
GetWindowBand
0x1800494c0
GetWindowLongW
0x180049488
GetWindowRect
0x1800494a0
GetWindowThreadProcessId
0x1800494d8
IsIconic
0x1800494b8
IsZoomed
0x180049490
PostMessageW
0x1800494e8
SetForegroundWindow
0x1800494a8
SetLayeredWindowAttributes
0x1800494c8
SetPropW
0x1800494e0
SetRectEmpty
0x180049478
SetWindowLongW
0x180049480
SetWindowPos
0x1800494d0
No function matches your filter.