AccountsRt.dll

Description: Accounts RT utilities for mail, contacts, calendar

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: f0097e52b385de5938240935561033e5

File Size: 425.5 KB

Uploaded At: Dec. 1, 2025, 7:21 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x28f30)
DllGetActivationFactory (Ordinal: 2, Address: 0xd0a0)
DllGetClassObject (Ordinal: 3, Address: 0x28f90)

Imported DLLs & Functions

APHostClient.dll

ApHostServerStatus_EnsureServerReady (Address: 0x1800519b0)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180051b00)
CoCreateInstance (Address: 0x180051af8)
CoDecrementMTAUsage (Address: 0x180051b10)
CoGetApartmentType (Address: 0x180051ad8)
CoIncrementMTAUsage (Address: 0x180051b08)
CoInitializeEx (Address: 0x180051ac8)
CoMarshalInterface (Address: 0x180051ae0)
CoReleaseMarshalData (Address: 0x180051af0)
CoTaskMemAlloc (Address: 0x180051b18)
CoTaskMemFree (Address: 0x180051b28)
CoTaskMemRealloc (Address: 0x180051b20)
CoUninitialize (Address: 0x180051ad0)
CreateStreamOnHGlobal (Address: 0x180051ae8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180051b38)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180051b60)
IsDebuggerPresent (Address: 0x180051b50)
OutputDebugStringA (Address: 0x180051b58)
OutputDebugStringW (Address: 0x180051b48)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180051b70)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180051b80)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180051ba0)
RaiseException (Address: 0x180051bb0)
SetLastError (Address: 0x180051b98)
SetUnhandledExceptionFilter (Address: 0x180051b90)
UnhandledExceptionFilter (Address: 0x180051ba8)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180051bd0)
GetFileSize (Address: 0x180051bc8)
ReadFile (Address: 0x180051bc0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180051be0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180051c00)
HeapAlloc (Address: 0x180051bf0)
HeapFree (Address: 0x180051bf8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180051c10)
LocalFree (Address: 0x180051c18)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180051c58)
FindResourceExW (Address: 0x180051c70)
FreeLibrary (Address: 0x180051c48)
GetModuleFileNameA (Address: 0x180051c68)
GetModuleFileNameW (Address: 0x180051c78)
GetModuleHandleExW (Address: 0x180051c30)
GetModuleHandleW (Address: 0x180051c40)
GetProcAddress (Address: 0x180051c38)
LoadLibraryExW (Address: 0x180051c60)
LoadResource (Address: 0x180051c50)
SizeofResource (Address: 0x180051c28)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x180051c88)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180051c98)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180051cc8)
GetCurrentProcessId (Address: 0x180051ce0)
GetCurrentThread (Address: 0x180051cb8)
GetCurrentThreadId (Address: 0x180051ca8)
OpenProcessToken (Address: 0x180051cb0)
OpenThreadToken (Address: 0x180051cd0)
SetThreadToken (Address: 0x180051cd8)
TerminateProcess (Address: 0x180051cc0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180051cf0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180051d00)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180051d48)
RegCreateKeyExW (Address: 0x180051d38)
RegDeleteValueW (Address: 0x180051d30)
RegEnumKeyExW (Address: 0x180051d28)
RegGetValueW (Address: 0x180051d50)
RegOpenKeyExW (Address: 0x180051d10)
RegQueryInfoKeyW (Address: 0x180051d40)
RegQueryValueExW (Address: 0x180051d20)
RegSetValueExW (Address: 0x180051d18)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180051d60)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180051d70)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180051d80)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180051d98)
AcquireSRWLockShared (Address: 0x180051da0)
CreateMutexExW (Address: 0x180051df8)
CreateSemaphoreExW (Address: 0x180051e00)
DeleteCriticalSection (Address: 0x180051da8)
EnterCriticalSection (Address: 0x180051dc0)
InitializeCriticalSection (Address: 0x180051e10)
InitializeCriticalSectionEx (Address: 0x180051dd0)
InitializeSRWLock (Address: 0x180051dd8)
LeaveCriticalSection (Address: 0x180051de0)
OpenSemaphoreW (Address: 0x180051dc8)
ReleaseMutex (Address: 0x180051de8)
ReleaseSemaphore (Address: 0x180051df0)
ReleaseSRWLockExclusive (Address: 0x180051db8)
ReleaseSRWLockShared (Address: 0x180051db0)
WaitForSingleObject (Address: 0x180051e08)
WaitForSingleObjectEx (Address: 0x180051d90)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180051e20)
InitOnceComplete (Address: 0x180051e28)
InitOnceExecuteOnce (Address: 0x180051e30)
Sleep (Address: 0x180051e48)
SleepConditionVariableSRW (Address: 0x180051e38)
WakeAllConditionVariable (Address: 0x180051e40)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180051e60)
GetTickCount (Address: 0x180051e58)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x180051e90)
CloseThreadpoolWork (Address: 0x180051ea8)
CreateThreadpoolWait (Address: 0x180051e88)
CreateThreadpoolWork (Address: 0x180051ea0)
DisassociateCurrentThreadFromCallback (Address: 0x180051e78)
FreeLibraryWhenCallbackReturns (Address: 0x180051eb0)
SetThreadpoolWait (Address: 0x180051e80)
SubmitThreadpoolWork (Address: 0x180051e98)
WaitForThreadpoolWaitCallbacks (Address: 0x180051e70)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180051ec0)
EncodePointer (Address: 0x180051ec8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180051ee8)
RoOriginateError (Address: 0x180051ef8)
RoOriginateErrorW (Address: 0x180051ef0)
RoTransformError (Address: 0x180051ee0)
SetRestrictedErrorInfo (Address: 0x180051ed8)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180051f10)
RoGetMatchingRestrictedErrorInfo (Address: 0x180051f08)
RoReportFailedDelegate (Address: 0x180051f18)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180051f30)
RoGetActivationFactory (Address: 0x180051f40)
RoInitialize (Address: 0x180051f28)
RoUninitialize (Address: 0x180051f38)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsConcatString (Address: 0x180051fa0)
WindowsCreateString (Address: 0x180051f78)
WindowsCreateStringReference (Address: 0x180051f68)
WindowsDeleteString (Address: 0x180051f90)
WindowsDeleteStringBuffer (Address: 0x180051f98)
WindowsDuplicateString (Address: 0x180051f88)
WindowsGetStringLen (Address: 0x180051f50)
WindowsGetStringRawBuffer (Address: 0x180051f60)
WindowsIsStringEmpty (Address: 0x180051f58)
WindowsPreallocateStringBuffer (Address: 0x180051f80)
WindowsPromoteStringBuffer (Address: 0x180051fa8)
WindowsStringHasEmbeddedNull (Address: 0x180051f70)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180051fd0)
EventRegister (Address: 0x180051fc8)
EventSetInformation (Address: 0x180051fb8)
EventUnregister (Address: 0x180051fd8)
EventWriteTransfer (Address: 0x180051fc0)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180051ff8)
GetLengthSid (Address: 0x180051ff0)
GetTokenInformation (Address: 0x180051fe8)
RevertToSelf (Address: 0x180052000)

CRYPT32.dll

CertCloseStore (Address: 0x1800519c8)
CertCompareCertificateName (Address: 0x180051a00)
CertEnumCertificatesInStore (Address: 0x1800519c0)
CertFreeCertificateChain (Address: 0x1800519d8)
CertFreeCertificateChainEngine (Address: 0x180051a10)
CertGetCertificateChain (Address: 0x180051a08)
CertGetCertificateContextProperty (Address: 0x1800519f0)
CertGetEnhancedKeyUsage (Address: 0x1800519e8)
CertGetNameStringW (Address: 0x1800519f8)
CertOpenStore (Address: 0x1800519e0)
CryptDecodeObjectEx (Address: 0x1800519d0)

msvcrt.dll

__C_specific_handler (Address: 0x1800520e8)
__CxxFrameHandler3 (Address: 0x1800520c8)
__dllonexit (Address: 0x180052030)
_amsg_exit (Address: 0x180052020)
_callnewh (Address: 0x180052068)
_errno (Address: 0x180052010)
_initterm (Address: 0x1800520f8)
_lock (Address: 0x1800520d0)
_onexit (Address: 0x180052038)
_purecall (Address: 0x180052088)
_strnicmp (Address: 0x1800520b8)
_unlock (Address: 0x1800520e0)
_vsnwprintf (Address: 0x1800520d8)
_vsnwprintf_s (Address: 0x1800520a8)
_wcsicmp (Address: 0x180052028)
_XcptFilter (Address: 0x180052048)
free (Address: 0x180052080)
malloc (Address: 0x180052078)
memcmp (Address: 0x1800520c0)
memcpy (Address: 0x1800520b0)
memcpy_s (Address: 0x180052090)
memmove (Address: 0x1800520a0)
memmove_s (Address: 0x180052060)
memset (Address: 0x180052050)
realloc (Address: 0x180052058)
strcmp (Address: 0x180052040)
wcschr (Address: 0x180052098)
wcscmp (Address: 0x180052100)
wcsncpy_s (Address: 0x180052070)
wcstok_s (Address: 0x180052018)
wcstoul (Address: 0x1800520f0)

ntdll.dll

RtlCaptureContext (Address: 0x180052118)
RtlLookupFunctionEntry (Address: 0x180052110)
RtlReportException (Address: 0x180052128)
RtlVirtualUnwind (Address: 0x180052120)

OLEAUT32.dll

BSTR_UserFree (Address: 0x180051a68)
BSTR_UserFree64 (Address: 0x180051a28)
BSTR_UserMarshal (Address: 0x180051a48)
BSTR_UserMarshal64 (Address: 0x180051a38)
BSTR_UserSize (Address: 0x180051a60)
BSTR_UserSize64 (Address: 0x180051a20)
BSTR_UserUnmarshal (Address: 0x180051a50)
BSTR_UserUnmarshal64 (Address: 0x180051a70)
SysFreeString (Address: 0x180051a30)
SysStringLen (Address: 0x180051a40)
VarUI4FromStr (Address: 0x180051a58)

RPCRT4.dll

NdrClientCall3 (Address: 0x180051a90)
RpcBindingFree (Address: 0x180051a80)
RpcBindingFromStringBindingW (Address: 0x180051aa8)
RpcBindingSetAuthInfoExW (Address: 0x180051a98)
RpcExceptionFilter (Address: 0x180051a88)
RpcSsDestroyClientContext (Address: 0x180051ab8)
RpcStringBindingComposeW (Address: 0x180051aa0)
RpcStringFreeW (Address: 0x180051ab0)