AccountsRt.dll

Description: Accounts RT utilities for mail, contacts, calendar

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 6a58df2b2e33000cf78f53fa2be1d4ea

File Size: 334.5 KB

Uploaded At: Dec. 1, 2025, 7:52 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x339b0)
DllGetActivationFactory (Ordinal: 2, Address: 0x1a250)
DllGetClassObject (Ordinal: 3, Address: 0x33a00)

Imported DLLs & Functions

APHostClient.dll

ApHostServerStatus_EnsureServerReady (Address: 0x1004d000)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1004d098)
CoCreateInstance (Address: 0x1004d094)
CoDecrementMTAUsage (Address: 0x1004d0a0)
CoGetApartmentType (Address: 0x1004d084)
CoIncrementMTAUsage (Address: 0x1004d09c)
CoInitializeEx (Address: 0x1004d07c)
CoMarshalInterface (Address: 0x1004d088)
CoReleaseMarshalData (Address: 0x1004d090)
CoTaskMemAlloc (Address: 0x1004d080)
CoTaskMemFree (Address: 0x1004d0ac)
CoTaskMemRealloc (Address: 0x1004d0a8)
CoUninitialize (Address: 0x1004d0a4)
CreateStreamOnHGlobal (Address: 0x1004d08c)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1004d0b4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1004d0c0)
IsDebuggerPresent (Address: 0x1004d0c4)
OutputDebugStringA (Address: 0x1004d0bc)
OutputDebugStringW (Address: 0x1004d0c8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1004d0d0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1004d0d8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1004d0e8)
RaiseException (Address: 0x1004d0e4)
SetLastError (Address: 0x1004d0ec)
SetUnhandledExceptionFilter (Address: 0x1004d0f0)
UnhandledExceptionFilter (Address: 0x1004d0e0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1004d100)
GetFileSize (Address: 0x1004d0fc)
ReadFile (Address: 0x1004d0f8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1004d108)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1004d110)
HeapAlloc (Address: 0x1004d114)
HeapFree (Address: 0x1004d118)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1004d124)
LocalFree (Address: 0x1004d120)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1004d14c)
FindResourceExW (Address: 0x1004d144)
FreeLibrary (Address: 0x1004d13c)
GetModuleFileNameA (Address: 0x1004d154)
GetModuleFileNameW (Address: 0x1004d150)
GetModuleHandleExW (Address: 0x1004d130)
GetModuleHandleW (Address: 0x1004d138)
GetProcAddress (Address: 0x1004d134)
LoadLibraryExW (Address: 0x1004d148)
LoadResource (Address: 0x1004d140)
SizeofResource (Address: 0x1004d12c)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1004d15c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1004d164)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1004d17c)
GetCurrentProcessId (Address: 0x1004d188)
GetCurrentThread (Address: 0x1004d174)
GetCurrentThreadId (Address: 0x1004d16c)
OpenProcessToken (Address: 0x1004d170)
OpenThreadToken (Address: 0x1004d180)
SetThreadToken (Address: 0x1004d184)
TerminateProcess (Address: 0x1004d178)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1004d190)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1004d198)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1004d1bc)
RegCreateKeyExW (Address: 0x1004d1b4)
RegDeleteValueW (Address: 0x1004d1b0)
RegEnumKeyExW (Address: 0x1004d1ac)
RegGetValueW (Address: 0x1004d1c0)
RegOpenKeyExW (Address: 0x1004d1a0)
RegQueryInfoKeyW (Address: 0x1004d1b8)
RegQueryValueExW (Address: 0x1004d1a8)
RegSetValueExW (Address: 0x1004d1a4)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1004d1c8)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1004d1d0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1004d1d8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1004d1e4)
AcquireSRWLockShared (Address: 0x1004d1e8)
CreateMutexExW (Address: 0x1004d214)
CreateSemaphoreExW (Address: 0x1004d218)
DeleteCriticalSection (Address: 0x1004d1ec)
EnterCriticalSection (Address: 0x1004d1f8)
InitializeCriticalSection (Address: 0x1004d220)
InitializeCriticalSectionEx (Address: 0x1004d200)
InitializeSRWLock (Address: 0x1004d204)
LeaveCriticalSection (Address: 0x1004d208)
OpenSemaphoreW (Address: 0x1004d1fc)
ReleaseMutex (Address: 0x1004d20c)
ReleaseSemaphore (Address: 0x1004d210)
ReleaseSRWLockExclusive (Address: 0x1004d1f4)
ReleaseSRWLockShared (Address: 0x1004d1f0)
WaitForSingleObject (Address: 0x1004d21c)
WaitForSingleObjectEx (Address: 0x1004d1e0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1004d228)
InitOnceComplete (Address: 0x1004d22c)
InitOnceExecuteOnce (Address: 0x1004d230)
Sleep (Address: 0x1004d23c)
SleepConditionVariableSRW (Address: 0x1004d234)
WakeAllConditionVariable (Address: 0x1004d238)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1004d248)
GetTickCount (Address: 0x1004d244)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x1004d260)
CloseThreadpoolWork (Address: 0x1004d26c)
CreateThreadpoolWait (Address: 0x1004d25c)
CreateThreadpoolWork (Address: 0x1004d268)
DisassociateCurrentThreadFromCallback (Address: 0x1004d254)
FreeLibraryWhenCallbackReturns (Address: 0x1004d270)
SetThreadpoolWait (Address: 0x1004d258)
SubmitThreadpoolWork (Address: 0x1004d264)
WaitForThreadpoolWaitCallbacks (Address: 0x1004d250)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1004d278)
EncodePointer (Address: 0x1004d27c)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x1004d28c)
RoOriginateError (Address: 0x1004d294)
RoOriginateErrorW (Address: 0x1004d290)
RoTransformError (Address: 0x1004d288)
SetRestrictedErrorInfo (Address: 0x1004d284)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1004d2a0)
RoGetMatchingRestrictedErrorInfo (Address: 0x1004d2a4)
RoReportFailedDelegate (Address: 0x1004d29c)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x1004d2b0)
RoGetActivationFactory (Address: 0x1004d2b8)
RoInitialize (Address: 0x1004d2ac)
RoUninitialize (Address: 0x1004d2b4)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsConcatString (Address: 0x1004d2e8)
WindowsCreateString (Address: 0x1004d2e4)
WindowsCreateStringReference (Address: 0x1004d2cc)
WindowsDeleteString (Address: 0x1004d2d4)
WindowsDeleteStringBuffer (Address: 0x1004d2e0)
WindowsDuplicateString (Address: 0x1004d2dc)
WindowsGetStringLen (Address: 0x1004d2c0)
WindowsGetStringRawBuffer (Address: 0x1004d2c8)
WindowsIsStringEmpty (Address: 0x1004d2c4)
WindowsPreallocateStringBuffer (Address: 0x1004d2d8)
WindowsPromoteStringBuffer (Address: 0x1004d2ec)
WindowsStringHasEmbeddedNull (Address: 0x1004d2d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1004d300)
EventRegister (Address: 0x1004d2fc)
EventSetInformation (Address: 0x1004d2f4)
EventUnregister (Address: 0x1004d304)
EventWriteTransfer (Address: 0x1004d2f8)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1004d318)
GetLengthSid (Address: 0x1004d314)
GetTokenInformation (Address: 0x1004d310)
RevertToSelf (Address: 0x1004d30c)

CRYPT32.dll

CertCloseStore (Address: 0x1004d00c)
CertCompareCertificateName (Address: 0x1004d028)
CertEnumCertificatesInStore (Address: 0x1004d008)
CertFreeCertificateChain (Address: 0x1004d014)
CertFreeCertificateChainEngine (Address: 0x1004d030)
CertGetCertificateChain (Address: 0x1004d02c)
CertGetCertificateContextProperty (Address: 0x1004d020)
CertGetEnhancedKeyUsage (Address: 0x1004d01c)
CertGetNameStringW (Address: 0x1004d024)
CertOpenStore (Address: 0x1004d018)
CryptDecodeObjectEx (Address: 0x1004d010)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1004d334)
__dllonexit (Address: 0x1004d35c)
_amsg_exit (Address: 0x1004d324)
_callnewh (Address: 0x1004d388)
_errno (Address: 0x1004d380)
_except_handler4_common (Address: 0x1004d370)
_initterm (Address: 0x1004d344)
_lock (Address: 0x1004d338)
_onexit (Address: 0x1004d364)
_purecall (Address: 0x1004d354)
_strnicmp (Address: 0x1004d368)
_unlock (Address: 0x1004d33c)
_vsnwprintf (Address: 0x1004d384)
_vsnwprintf_s (Address: 0x1004d360)
_wcsicmp (Address: 0x1004d32c)
_XcptFilter (Address: 0x1004d328)
free (Address: 0x1004d350)
malloc (Address: 0x1004d34c)
memcmp (Address: 0x1004d374)
memcpy (Address: 0x1004d378)
memcpy_s (Address: 0x1004d37c)
memmove (Address: 0x1004d36c)
memmove_s (Address: 0x1004d340)
memset (Address: 0x1004d390)
realloc (Address: 0x1004d330)
wcschr (Address: 0x1004d358)
wcsncpy_s (Address: 0x1004d348)
wcstok_s (Address: 0x1004d320)
wcstoul (Address: 0x1004d38c)

ntdll.dll

RtlCaptureContext (Address: 0x1004d398)
RtlReportException (Address: 0x1004d39c)

OLEAUT32.dll

BSTR_UserFree (Address: 0x1004d044)
BSTR_UserMarshal (Address: 0x1004d03c)
BSTR_UserSize (Address: 0x1004d048)
BSTR_UserUnmarshal (Address: 0x1004d050)
SysFreeString (Address: 0x1004d038)
SysStringLen (Address: 0x1004d040)
VarUI4FromStr (Address: 0x1004d04c)

RPCRT4.dll

NdrClientCall4 (Address: 0x1004d070)
RpcBindingFree (Address: 0x1004d068)
RpcBindingFromStringBindingW (Address: 0x1004d058)
RpcBindingSetAuthInfoExW (Address: 0x1004d064)
RpcExceptionFilter (Address: 0x1004d074)
RpcSsDestroyClientContext (Address: 0x1004d06c)
RpcStringBindingComposeW (Address: 0x1004d05c)
RpcStringFreeW (Address: 0x1004d060)