Windows.Security.Authentication.OnlineId.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x7770
DllGetActivationFactory
#2 · 0x171c0
DllGetClassObject
#3 · 0x3e000
No function matches your filter.
Imported DLLs & functions 260
ApiSetQueryApiSetPresence
0x1800a9c08
GlobalGetAtomNameW
0x1800a9c18
DebugBreak
0x1800a9c40
IsDebuggerPresent
0x1800a9c28
OutputDebugStringA
0x1800a9c38
OutputDebugStringW
0x1800a9c30
DelayLoadFailureHook
0x1800a9c50
ResolveDelayLoadedAPI
0x1800a9c60
GetLastError
0x1800a9c90
RaiseException
0x1800a9c78
SetLastError
0x1800a9c70
SetUnhandledExceptionFilter
0x1800a9c88
UnhandledExceptionFilter
0x1800a9c80
GetProcessHeap
0x1800a9cd8
HeapAlloc
0x1800a9ce0
HeapDestroy
0x1800a9cc8
HeapFree
0x1800a9cd0
HeapReAlloc
0x1800a9cc0
HeapSize
0x1800a9cb8
GetComputerNameW
0x1800a9d08
FindResourceExW
0x1800a9d60
FreeLibrary
0x1800a9d30
GetModuleFileNameA
0x1800a9d48
GetModuleFileNameW
0x1800a9d20
GetModuleHandleExW
0x1800a9d28
GetModuleHandleW
0x1800a9d50
GetProcAddress
0x1800a9d68
LoadLibraryExW
0x1800a9d18
LoadResource
0x1800a9d40
LockResource
0x1800a9d38
SizeofResource
0x1800a9d58
LoadLibraryW
0x1800a9d78
FormatMessageW
0x1800a9d88
GetThreadPreferredUILanguages
0x1800a9d98
GetUserDefaultLocaleName
0x1800a9d90
GetUserDefaultUILanguage
0x1800a9da8
GetCurrentProcess
0x1800a9dd0
GetCurrentProcessId
0x1800a9dc8
GetCurrentThread
0x1800a9db8
GetCurrentThreadId
0x1800a9df8
GetProcessId
0x1800a9df0
GetProcessIdOfThread
0x1800a9dc0
OpenProcessToken
0x1800a9de8
OpenThread
0x1800a9e00
OpenThreadToken
0x1800a9de0
TerminateProcess
0x1800a9dd8
OpenProcess
0x1800a9e10
QueryPerformanceCounter
0x1800a9e20
RegCloseKey
0x1800a9e80
RegCreateKeyExW
0x1800a9e70
RegDeleteKeyExW
0x1800a9e78
RegDeleteTreeW
0x1800a9e30
RegDeleteValueW
0x1800a9e90
RegEnumKeyExW
0x1800a9e68
RegEnumValueW
0x1800a9e40
RegGetValueW
0x1800a9e38
RegOpenCurrentUser
0x1800a9e98
RegOpenKeyExW
0x1800a9e58
RegQueryInfoKeyW
0x1800a9e88
RegQueryValueExW
0x1800a9e50
RegSetKeySecurity
0x1800a9e60
RegSetValueExW
0x1800a9e48
RtlCaptureContext
0x1800a9eb8
RtlLookupFunctionEntry
0x1800a9ea8
RtlVirtualUnwind
0x1800a9eb0
StrStrIW
0x1800a9ec8
CompareStringOrdinal
0x1800a9ee0
WideCharToMultiByte
0x1800a9ed8
AcquireSRWLockExclusive
0x1800a9f78
AcquireSRWLockShared
0x1800a9f10
CreateEventExW
0x1800a9f20
CreateEventW
0x1800a9f80
CreateMutexExW
0x1800a9ef8
CreateSemaphoreExW
0x1800a9f00
DeleteCriticalSection
0x1800a9f28
EnterCriticalSection
0x1800a9f38
InitializeCriticalSection
0x1800a9f08
InitializeCriticalSectionEx
0x1800a9f90
InitializeSRWLock
0x1800a9f30
LeaveCriticalSection
0x1800a9f58
OpenSemaphoreW
0x1800a9f40
ReleaseMutex
0x1800a9f60
ReleaseSemaphore
0x1800a9f70
ReleaseSRWLockExclusive
0x1800a9f98
ReleaseSRWLockShared
0x1800a9ef0
ResetEvent
0x1800a9f18
SetEvent
0x1800a9f88
WaitForMultipleObjectsEx
0x1800a9f68
WaitForSingleObject
0x1800a9f48
WaitForSingleObjectEx
0x1800a9f50
InitOnceBeginInitialize
0x1800a9fa8
InitOnceComplete
0x1800a9fb0
InitOnceExecuteOnce
0x1800a9fb8
Sleep
0x1800a9fc0
GetSystemDirectoryW
0x1800a9fe8
GetSystemTimeAsFileTime
0x1800a9fd8
GetTickCount
0x1800a9fd0
GetTickCount64
0x1800a9ff0
GetVersionExW
0x1800a9fe0
CloseThreadpoolTimer
0x1800aa020
CloseThreadpoolWork
0x1800aa018
CreateThreadpoolTimer
0x1800aa000
CreateThreadpoolWork
0x1800aa008
FreeLibraryWhenCallbackReturns
0x1800aa038
SetThreadpoolTimer
0x1800aa010
SubmitThreadpoolWork
0x1800aa030
WaitForThreadpoolTimerCallbacks
0x1800aa028
UrlEscapeW
0x1800aa048
GetFileVersionInfoExW
0x1800aa078
GetFileVersionInfoSizeExW
0x1800aa080
VerQueryValueW
0x1800aa070
GetRestrictedErrorInfo
0x1800aa0b0
RoOriginateError
0x1800aa090
RoOriginateErrorW
0x1800aa0a0
RoTransformError
0x1800aa098
SetRestrictedErrorInfo
0x1800aa0a8
IsErrorPropagationEnabled
0x1800aa0c8
RoGetMatchingRestrictedErrorInfo
0x1800aa0d0
RoReportFailedDelegate
0x1800aa0c0
RoActivateInstance
0x1800aa0f8
RoGetActivationFactory
0x1800aa0f0
RoInitialize
0x1800aa0e8
RoUninitialize
0x1800aa0e0
WindowsConcatString
0x1800aa108
WindowsCreateString
0x1800aa120
WindowsCreateStringReference
0x1800aa110
WindowsDeleteString
0x1800aa130
WindowsDuplicateString
0x1800aa118
WindowsGetStringLen
0x1800aa140
WindowsGetStringRawBuffer
0x1800aa148
WindowsIsStringEmpty
0x1800aa138
WindowsStringHasEmbeddedNull
0x1800aa128
EventActivityIdControl
0x1800aa168
EventRegister
0x1800aa158
EventSetInformation
0x1800aa178
EventUnregister
0x1800aa160
EventWriteTransfer
0x1800aa170
CopySid
0x1800aa1a0
CreateWellKnownSid
0x1800aa1c8
EqualSid
0x1800aa198
GetAce
0x1800aa188
GetLengthSid
0x1800aa1b0
GetSecurityDescriptorDacl
0x1800aa1c0
GetSecurityDescriptorSacl
0x1800aa1b8
GetTokenInformation
0x1800aa1a8
ImpersonateLoggedOnUser
0x1800aa1d8
IsValidSid
0x1800aa1d0
RevertToSelf
0x1800aa190
SHTaskPoolAllowThreadReuse
0x1800aa1e8
SHTaskPoolQueueTask
0x1800aa1f0
GetPersistedRegistryLocationW
0x1800aa200
BCryptGenRandom
0x1800aa210
msvcrt.dll
36
__C_specific_handler
0x1800aa298
__CxxFrameHandler3
0x1800aa290
__dllonexit
0x1800aa2c0
_amsg_exit
0x1800aa280
_callnewh
0x1800aa2f0
_CxxThrowException
0x1800aa278
_errno
0x1800aa250
_initterm
0x1800aa2a0
_lock
0x1800aa350
_onexit
0x1800aa2a8
_purecall
0x1800aa338
_set_errno
0x1800aa330
_time64
0x1800aa328
_unlock
0x1800aa2b8
_vsnprintf_s
0x1800aa300
_vsnwprintf
0x1800aa308
_XcptFilter
0x1800aa2d8
??0exception@@QEAA@AEBQEBDH@Z
0x1800aa258
??0exception@@QEAA@AEBV0@@Z
0x1800aa310
??0exception@@QEAA@XZ
0x1800aa2f8
??1exception@@UEAA@XZ
0x1800aa318
??1type_info@@UEAA@XZ
0x1800aa248
?terminate@@YAXXZ
0x1800aa2b0
?what@exception@@UEBAPEBDXZ
0x1800aa240
calloc
0x1800aa2c8
free
0x1800aa288
malloc
0x1800aa270
memcmp
0x1800aa2e8
memcpy
0x1800aa2e0
memcpy_s
0x1800aa348
memmove_s
0x1800aa340
memset
0x1800aa268
realloc
0x1800aa260
strrchr
0x1800aa320
wcscmp
0x1800aa358
wcscpy_s
0x1800aa2d0
ntdll.dll
43
_i64tow_s
0x1800aa4a0
_vscwprintf
0x1800aa480
_wcsicmp
0x1800aa4b0
_wcslwr_s
0x1800aa3a8
_wcsnicmp
0x1800aa378
_wcsupr_s
0x1800aa460
_wtoi64
0x1800aa370
iswspace
0x1800aa468
NtQueryInformationToken
0x1800aa3f0
NtQuerySecurityObject
0x1800aa4b8
NtSetSecurityObject
0x1800aa368
RtlAcquireSRWLockExclusive
0x1800aa408
RtlAddAccessAllowedAce
0x1800aa428
RtlAddAce
0x1800aa430
RtlAllocateHeap
0x1800aa3e0
RtlCompareUnicodeString
0x1800aa3d0
RtlCreateAcl
0x1800aa440
RtlCreateSecurityDescriptor
0x1800aa3c0
RtlEqualSid
0x1800aa3c8
RtlFreeHeap
0x1800aa3f8
RtlGetAce
0x1800aa438
RtlGetDaclSecurityDescriptor
0x1800aa458
RtlGetDeviceFamilyInfoEnum
0x1800aa3b0
RtlInitUnicodeString
0x1800aa3e8
RtlLengthSid
0x1800aa448
RtlNtStatusToDosError
0x1800aa4a8
RtlNtStatusToDosErrorNoTeb
0x1800aa3d8
RtlQueryInformationAcl
0x1800aa450
RtlReleaseSRWLockExclusive
0x1800aa400
RtlSetDaclSecurityDescriptor
0x1800aa420
RtlSleepConditionVariableSRW
0x1800aa418
RtlWakeAllConditionVariable
0x1800aa410
toupper
0x1800aa3b8
vswprintf_s
0x1800aa488
wcscat_s
0x1800aa498
wcschr
0x1800aa398
wcscspn
0x1800aa380
wcsspn
0x1800aa388
wcsstr
0x1800aa470
wcstol
0x1800aa3a0
wcstoul
0x1800aa390
WinSqmAddToStreamEx
0x1800aa478
WinSqmIsOptedIn
0x1800aa490
RPCRT4.dll
20
I_RpcBindingInqLocalClientPID
0x1800a9be8
MesBufferHandleReset
0x1800a9bb0
MesDecodeBufferHandleCreate
0x1800a9b98
MesEncodeFixedBufferHandleCreate
0x1800a9bb8
MesHandleFree
0x1800a9ba0
Ndr64AsyncClientCall
0x1800a9b70
NdrMesTypeAlignSize3
0x1800a9bd8
NdrMesTypeDecode3
0x1800a9bc0
NdrMesTypeEncode3
0x1800a9bc8
NdrMesTypeFree3
0x1800a9bd0
RpcAsyncCancelCall
0x1800a9b78
RpcAsyncCompleteCall
0x1800a9b68
RpcAsyncInitializeHandle
0x1800a9be0
RpcBindingFree
0x1800a9ba8
RpcBindingFromStringBindingW
0x1800a9b80
RpcBindingSetAuthInfoExW
0x1800a9b90
RpcSsDestroyClientContext
0x1800a9b60
RpcStringBindingComposeW
0x1800a9b88
RpcStringFreeW
0x1800a9bf8
UuidCreate
0x1800a9bf0
No function matches your filter.