AccountsRt.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x28f30
DllGetActivationFactory
#2 · 0xd0a0
DllGetClassObject
#3 · 0x28f90
No function matches your filter.
Imported DLLs & functions 204
ApHostServerStatus_EnsureServerReady
0x1800519b0
CoCreateFreeThreadedMarshaler
0x180051b00
CoCreateInstance
0x180051af8
CoDecrementMTAUsage
0x180051b10
CoGetApartmentType
0x180051ad8
CoIncrementMTAUsage
0x180051b08
CoInitializeEx
0x180051ac8
CoMarshalInterface
0x180051ae0
CoReleaseMarshalData
0x180051af0
CoTaskMemAlloc
0x180051b18
CoTaskMemFree
0x180051b28
CoTaskMemRealloc
0x180051b20
CoUninitialize
0x180051ad0
CreateStreamOnHGlobal
0x180051ae8
RoGetAgileReference
0x180051b38
DebugBreak
0x180051b60
IsDebuggerPresent
0x180051b50
OutputDebugStringA
0x180051b58
OutputDebugStringW
0x180051b48
DelayLoadFailureHook
0x180051b70
ResolveDelayLoadedAPI
0x180051b80
GetLastError
0x180051ba0
RaiseException
0x180051bb0
SetLastError
0x180051b98
SetUnhandledExceptionFilter
0x180051b90
UnhandledExceptionFilter
0x180051ba8
CreateFileW
0x180051bd0
GetFileSize
0x180051bc8
ReadFile
0x180051bc0
CloseHandle
0x180051be0
GetProcessHeap
0x180051c00
HeapAlloc
0x180051bf0
HeapFree
0x180051bf8
DisableThreadLibraryCalls
0x180051c58
FindResourceExW
0x180051c70
FreeLibrary
0x180051c48
GetModuleFileNameA
0x180051c68
GetModuleFileNameW
0x180051c78
GetModuleHandleExW
0x180051c30
GetModuleHandleW
0x180051c40
GetProcAddress
0x180051c38
LoadLibraryExW
0x180051c60
LoadResource
0x180051c50
SizeofResource
0x180051c28
LoadLibraryW
0x180051c88
FormatMessageW
0x180051c98
GetCurrentProcess
0x180051cc8
GetCurrentProcessId
0x180051ce0
GetCurrentThread
0x180051cb8
GetCurrentThreadId
0x180051ca8
OpenProcessToken
0x180051cb0
OpenThreadToken
0x180051cd0
SetThreadToken
0x180051cd8
TerminateProcess
0x180051cc0
OpenProcess
0x180051cf0
QueryPerformanceCounter
0x180051d00
RegCloseKey
0x180051d48
RegCreateKeyExW
0x180051d38
RegDeleteValueW
0x180051d30
RegEnumKeyExW
0x180051d28
RegGetValueW
0x180051d50
RegOpenKeyExW
0x180051d10
RegQueryInfoKeyW
0x180051d40
RegQueryValueExW
0x180051d20
RegSetValueExW
0x180051d18
MultiByteToWideChar
0x180051d60
CharNextW
0x180051d70
lstrcmpiW
0x180051d80
AcquireSRWLockExclusive
0x180051d98
AcquireSRWLockShared
0x180051da0
CreateMutexExW
0x180051df8
CreateSemaphoreExW
0x180051e00
DeleteCriticalSection
0x180051da8
EnterCriticalSection
0x180051dc0
InitializeCriticalSection
0x180051e10
InitializeCriticalSectionEx
0x180051dd0
InitializeSRWLock
0x180051dd8
LeaveCriticalSection
0x180051de0
OpenSemaphoreW
0x180051dc8
ReleaseMutex
0x180051de8
ReleaseSemaphore
0x180051df0
ReleaseSRWLockExclusive
0x180051db8
ReleaseSRWLockShared
0x180051db0
WaitForSingleObject
0x180051e08
WaitForSingleObjectEx
0x180051d90
InitOnceBeginInitialize
0x180051e20
InitOnceComplete
0x180051e28
InitOnceExecuteOnce
0x180051e30
Sleep
0x180051e48
SleepConditionVariableSRW
0x180051e38
WakeAllConditionVariable
0x180051e40
CloseThreadpoolWait
0x180051e90
CloseThreadpoolWork
0x180051ea8
CreateThreadpoolWait
0x180051e88
CreateThreadpoolWork
0x180051ea0
DisassociateCurrentThreadFromCallback
0x180051e78
FreeLibraryWhenCallbackReturns
0x180051eb0
SetThreadpoolWait
0x180051e80
SubmitThreadpoolWork
0x180051e98
WaitForThreadpoolWaitCallbacks
0x180051e70
GetRestrictedErrorInfo
0x180051ee8
RoOriginateError
0x180051ef8
RoOriginateErrorW
0x180051ef0
RoTransformError
0x180051ee0
SetRestrictedErrorInfo
0x180051ed8
IsErrorPropagationEnabled
0x180051f10
RoGetMatchingRestrictedErrorInfo
0x180051f08
RoReportFailedDelegate
0x180051f18
RoActivateInstance
0x180051f30
RoGetActivationFactory
0x180051f40
RoInitialize
0x180051f28
RoUninitialize
0x180051f38
WindowsConcatString
0x180051fa0
WindowsCreateString
0x180051f78
WindowsCreateStringReference
0x180051f68
WindowsDeleteString
0x180051f90
WindowsDeleteStringBuffer
0x180051f98
WindowsDuplicateString
0x180051f88
WindowsGetStringLen
0x180051f50
WindowsGetStringRawBuffer
0x180051f60
WindowsIsStringEmpty
0x180051f58
WindowsPreallocateStringBuffer
0x180051f80
WindowsPromoteStringBuffer
0x180051fa8
WindowsStringHasEmbeddedNull
0x180051f70
EventActivityIdControl
0x180051fd0
EventRegister
0x180051fc8
EventSetInformation
0x180051fb8
EventUnregister
0x180051fd8
EventWriteTransfer
0x180051fc0
CopySid
0x180051ff8
GetLengthSid
0x180051ff0
GetTokenInformation
0x180051fe8
RevertToSelf
0x180052000
CRYPT32.dll
11
CertCloseStore
0x1800519c8
CertCompareCertificateName
0x180051a00
CertEnumCertificatesInStore
0x1800519c0
CertFreeCertificateChain
0x1800519d8
CertFreeCertificateChainEngine
0x180051a10
CertGetCertificateChain
0x180051a08
CertGetCertificateContextProperty
0x1800519f0
CertGetEnhancedKeyUsage
0x1800519e8
CertGetNameStringW
0x1800519f8
CertOpenStore
0x1800519e0
CryptDecodeObjectEx
0x1800519d0
msvcrt.dll
31
__C_specific_handler
0x1800520e8
__CxxFrameHandler3
0x1800520c8
__dllonexit
0x180052030
_amsg_exit
0x180052020
_callnewh
0x180052068
_errno
0x180052010
_initterm
0x1800520f8
_lock
0x1800520d0
_onexit
0x180052038
_purecall
0x180052088
_strnicmp
0x1800520b8
_unlock
0x1800520e0
_vsnwprintf
0x1800520d8
_vsnwprintf_s
0x1800520a8
_wcsicmp
0x180052028
_XcptFilter
0x180052048
free
0x180052080
malloc
0x180052078
memcmp
0x1800520c0
memcpy
0x1800520b0
memcpy_s
0x180052090
memmove
0x1800520a0
memmove_s
0x180052060
memset
0x180052050
realloc
0x180052058
strcmp
0x180052040
wcschr
0x180052098
wcscmp
0x180052100
wcsncpy_s
0x180052070
wcstok_s
0x180052018
wcstoul
0x1800520f0
RtlCaptureContext
0x180052118
RtlLookupFunctionEntry
0x180052110
RtlReportException
0x180052128
RtlVirtualUnwind
0x180052120
OLEAUT32.dll
11
BSTR_UserFree
0x180051a68
BSTR_UserFree64
0x180051a28
BSTR_UserMarshal
0x180051a48
BSTR_UserMarshal64
0x180051a38
BSTR_UserSize
0x180051a60
BSTR_UserSize64
0x180051a20
BSTR_UserUnmarshal
0x180051a50
BSTR_UserUnmarshal64
0x180051a70
SysFreeString
0x180051a30
SysStringLen
0x180051a40
VarUI4FromStr
0x180051a58
NdrClientCall3
0x180051a90
RpcBindingFree
0x180051a80
RpcBindingFromStringBindingW
0x180051aa8
RpcBindingSetAuthInfoExW
0x180051a98
RpcExceptionFilter
0x180051a88
RpcSsDestroyClientContext
0x180051ab8
RpcStringBindingComposeW
0x180051aa0
RpcStringFreeW
0x180051ab0
No function matches your filter.