AppExtension.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x8c50
DllGetActivationFactory
#2 · 0x8850
DllGetClassObject
#3 · 0x10110
No function matches your filter.
Imported DLLs & functions 167
GetPackageStatus
0x180026fb0
PackageFamilyNameFromFullName
0x180026fc0
ApiSetQueryApiSetPresence
0x180026fd0
CoCreateFreeThreadedMarshaler
0x180027038
CoCreateGuid
0x180027048
CoCreateInstance
0x180026fe8
CoGetApartmentType
0x180027000
CoGetCallContext
0x180026fe0
CoGetCallerTID
0x180026ff8
CoGetInterfaceAndReleaseStream
0x180027010
CoMarshalInterface
0x180027028
CoReleaseMarshalData
0x180027020
CoRevertToSelf
0x180027018
CoTaskMemAlloc
0x180027030
CoTaskMemFree
0x180026ff0
CoWaitForMultipleHandles
0x180027040
CreateStreamOnHGlobal
0x180027050
StringFromCLSID
0x180027008
RoGetAgileReference
0x180027060
DebugBreak
0x180027080
IsDebuggerPresent
0x180027078
OutputDebugStringW
0x180027070
DelayLoadFailureHook
0x180027090
ResolveDelayLoadedAPI
0x1800270a0
GetLastError
0x1800270d0
RaiseException
0x1800270b8
SetLastError
0x1800270b0
SetUnhandledExceptionFilter
0x1800270c8
UnhandledExceptionFilter
0x1800270c0
CloseHandle
0x1800270e0
GetProcessHeap
0x1800270f8
HeapAlloc
0x1800270f0
HeapFree
0x180027100
RegisterWaitForSingleObject
0x180027110
DisableThreadLibraryCalls
0x180027148
FreeLibrary
0x180027158
GetModuleFileNameA
0x180027150
GetModuleHandleExW
0x180027138
GetModuleHandleW
0x180027140
GetProcAddress
0x180027128
LoadLibraryExW
0x180027120
LoadStringW
0x180027130
FormatMessageW
0x180027168
ExpandEnvironmentStringsW
0x180027178
GetCurrentProcess
0x180027190
GetCurrentProcessId
0x180027198
GetCurrentThread
0x1800271a8
GetCurrentThreadId
0x1800271b0
GetProcessId
0x1800271c0
OpenProcessToken
0x1800271a0
OpenThreadToken
0x1800271b8
TerminateProcess
0x180027188
OpenProcess
0x1800271d0
QueryPerformanceCounter
0x1800271e0
QueryFullProcessImageNameW
0x1800271f0
RegCloseKey
0x180027210
RegNotifyChangeKeyValue
0x180027208
RegOpenKeyExW
0x180027218
RegQueryValueExW
0x180027200
RtlCaptureContext
0x180027230
RtlLookupFunctionEntry
0x180027238
RtlVirtualUnwind
0x180027228
CompareStringOrdinal
0x180027248
SHLoadIndirectString
0x180027258
AcquireSRWLockExclusive
0x180027278
AcquireSRWLockShared
0x180027288
CreateEventExW
0x1800272d0
CreateEventW
0x1800272f0
CreateMutexExW
0x1800272a0
CreateSemaphoreExW
0x1800272e0
DeleteCriticalSection
0x1800272e8
EnterCriticalSection
0x1800272f8
InitializeCriticalSectionEx
0x180027298
InitializeSRWLock
0x180027268
LeaveCriticalSection
0x1800272c8
OpenSemaphoreW
0x1800272a8
ReleaseMutex
0x1800272b8
ReleaseSemaphore
0x1800272d8
ReleaseSRWLockExclusive
0x180027290
ReleaseSRWLockShared
0x180027270
SetEvent
0x180027280
WaitForMultipleObjectsEx
0x180027300
WaitForSingleObject
0x1800272c0
WaitForSingleObjectEx
0x1800272b0
UnregisterWaitEx
0x180027340
GetRestrictedErrorInfo
0x180027368
RoOriginateError
0x180027388
RoOriginateErrorW
0x180027378
RoTransformError
0x180027380
SetRestrictedErrorInfo
0x180027370
IsErrorPropagationEnabled
0x1800273a8
RoGetMatchingRestrictedErrorInfo
0x1800273a0
RoReportFailedDelegate
0x180027398
MsgWaitForMultipleObjectsEx
0x1800273b8
DispatchMessageW
0x1800273d8
PeekMessageW
0x1800273c8
PostQuitMessage
0x1800273e0
TranslateMessage
0x1800273d0
CopySid
0x180027408
DuplicateTokenEx
0x1800273f0
GetLengthSid
0x1800273f8
GetTokenInformation
0x180027400
CapabilityCheck
0x180027418
SHTaskPoolAllowThreadReuse
0x180027430
SHTaskPoolQueueTask
0x180027428
0x180027440
msvcrt.dll
33
__C_specific_handler
0x1800274b0
__CxxFrameHandler3
0x180027530
__dllonexit
0x180027470
_amsg_exit
0x1800274a8
_callnewh
0x180027500
_CxxThrowException
0x180027488
_initterm
0x180027468
_lock
0x180027480
_onexit
0x1800274c8
_purecall
0x1800274e8
_unlock
0x180027490
_vsnprintf_s
0x1800274f0
_vsnwprintf
0x180027538
_XcptFilter
0x1800274d8
??_V@YAXPEAX@Z
0x180027528
??0exception@@QEAA@AEBQEBD@Z
0x1800274d0
??0exception@@QEAA@AEBQEBDH@Z
0x1800274b8
??0exception@@QEAA@AEBV0@@Z
0x180027478
??0exception@@QEAA@XZ
0x180027520
??1exception@@UEAA@XZ
0x180027518
??1type_info@@UEAA@XZ
0x180027458
??3@YAXPEAX@Z
0x1800274f8
?terminate@@YAXXZ
0x180027540
?what@exception@@UEBAPEBDXZ
0x1800274a0
free
0x180027498
malloc
0x1800274e0
memcpy
0x180027460
memcpy_s
0x1800274c0
memmove
0x180027548
memmove_s
0x180027510
memset
0x180027550
realloc
0x180027450
wcschr
0x180027508
ntdll.dll
15
NtQueryInformationToken
0x180027570
RtlAcquireSRWLockExclusive
0x180027598
RtlAcquireSRWLockShared
0x180027588
RtlAllocateHeap
0x180027560
RtlCompareUnicodeString
0x1800275d0
RtlConvertSidToUnicodeString
0x1800275c0
RtlFreeHeap
0x180027578
RtlFreeUnicodeString
0x1800275c8
RtlInitializeGenericTableAvl
0x1800275b0
RtlInitUnicodeString
0x180027568
RtlInsertElementGenericTableAvl
0x1800275a8
RtlLookupElementGenericTableAvl
0x1800275b8
RtlNtStatusToDosErrorNoTeb
0x1800275a0
RtlReleaseSRWLockExclusive
0x180027590
RtlReleaseSRWLockShared
0x180027580
0x180026fa0
No function matches your filter.