edputil.dll
v10.0.19041.4355
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 54
EdpAddAppClipboardConsentInCache
#1 · 0x8a70
EdpAuditAction
#2 · 0x8a90
EdpCanCallerAccessWin32Clipboard
#3 · 0xa520
EdpCheckAccess
#4 · 0xd490
EdpCheckAccessForContext
#5 · 0xd600
EdpCheckIsDpapiNgEntId
#6 · 0x8e20
EdpCheckIsRmsEntId
#7 · 0x8e40
EdpClearClipboardMetaData
#8 · 0x8e60
EdpConvertProtectorToExternalId
#9 · 0x8e70
EdpFreeContext
#10 · 0xd640
EdpGetAppLockerUniqueAppIdentifier
#11 · 0x8e90
EdpGetAppLockerUniqueAppIdentifierByToken
#12 · 0x8ff0
EdpGetAppLockerUniqueAppIdentifierByTokenEx
#13 · 0x9010
EdpGetClipboardAccessDeniedData
#14 · 0xa720
EdpGetContextForBinaryPath
#15 · 0xd6c0
EdpGetContextForImpersonatedToken
#16 · 0xd6e0
EdpGetContextForPackageFullName
#17 · 0xd8c0
EdpGetContextForProcess
#18 · 0xd8e0
EdpGetContextForWindow
#19 · 0xdaf0
EdpGetDataInfoFromDataObject
#20 · 0xa9d0
EdpGetDataInfoFromWin32Clipboard
#21 · 0xac10
EdpGetEnterpriseIdForClipboard
#22 · 0x9100
EdpGetEnterpriseIdForDataObject
#23 · 0xad20
EdpGetEnterpriseIdForUIEnforcement
#24 · 0x9120
EdpGetEnterpriseIdForUIEnforcementFromProcess
#25 · 0x9140
EdpGetFilePathsForDataObject
#26 · 0xae90
EdpGetIsManaged
#27 · 0x4370
EdpGetPersonalEnterpriseIdString
#28 · 0x93c0
EdpGetPrimaryIdentities
#29 · 0x94f0
EdpGetPrimaryIdentityIfManaged
#30 · 0x9510
EdpGetSourceAppIdForClipboard
#31 · 0x9540
EdpGetSourceIsEnlightenedForClipboard
#32 · 0x9560
EdpGetWindowFromThreadId
#33 · 0x9580
EdpIsAppClipboardConsentCached
#34 · 0x96f0
EdpIsContextExemptOrEnlightenedAllowed
#35 · 0xde20
EdpIsFileAccessAllowed
#36 · 0x9710
EdpIsUIPolicyEvaluationEnabledForThread
#37 · 0x9730
EdpIsValidSubjectForEncryption
#38 · 0x9750
EdpRequestAccess
#39 · 0xdf20
EdpRequestAccessForContext
#40 · 0xe0b0
EdpSetEnterpriseIdForClipboard
#41 · 0x98a0
EdpSetSourceAppIdForClipboard
#42 · 0x98d0
EdpSetSourceIsEnlightenedForClipboard
#43 · 0x98f0
EdpShouldShowEnterpriseIndicator
#44 · 0x9910
EdpUtilCreateEnterpriseContextFromEnterpriseId
#45 · 0x9a70
EdpUtilFreeEnterpriseContext
#46 · 0x9b90
EdpUtilGetEnterpriseContextByName
#47 · 0x9ba0
EdpUtilGetEnterpriseContextByProcess
#48 · 0x9bc0
EdpUtilGetEnterpriseContextByWindowHandle
#49 · 0x9d70
EdpUtilGetEnterpriseContextForCurrentView
#50 · 0x9d90
EdpUtilGetEnterpriseContextForView
#51 · 0x9d70
EdpUtilIsAppEnlightened
#52 · 0x9db0
EdpUtilQueryPolicy
#53 · 0x9dd0
GetProcessUniqueIdFromToken
#54 · 0x9e10
No function matches your filter.
Imported DLLs & functions 142
ApiSetQueryApiSetPresence
0x10016010
CoTaskMemAlloc
0x10016020
CoTaskMemFree
0x10016018
CoTaskMemRealloc
0x1001601c
DebugBreak
0x10016030
IsDebuggerPresent
0x10016028
OutputDebugStringW
0x1001602c
GetLastError
0x1001603c
RaiseException
0x10016044
SetLastError
0x10016038
SetUnhandledExceptionFilter
0x10016040
UnhandledExceptionFilter
0x10016048
CloseHandle
0x10016050
GetProcessHeap
0x1001605c
HeapAlloc
0x10016058
HeapFree
0x10016060
GlobalAlloc
0x10016068
GlobalFree
0x10016074
LocalAlloc
0x10016070
LocalFree
0x1001606c
GlobalLock
0x1001607c
GlobalSize
0x10016084
GlobalUnlock
0x10016080
DisableThreadLibraryCalls
0x1001608c
FindResourceExW
0x100160b8
FreeLibrary
0x10016094
GetModuleFileNameA
0x1001609c
GetModuleHandleExW
0x100160ac
GetModuleHandleW
0x100160a0
GetProcAddress
0x10016090
LoadLibraryExA
0x100160a4
LoadResource
0x100160b4
LoadStringA
0x100160a8
LoadStringW
0x10016098
LockResource
0x100160b0
GetCurrentProcess
0x100160f4
GetCurrentProcessId
0x100160ec
GetCurrentThread
0x10016100
GetCurrentThreadId
0x100160e0
OpenProcessToken
0x100160f0
OpenThreadToken
0x100160f8
TerminateProcess
0x100160fc
TlsAlloc
0x100160e8
TlsFree
0x100160e4
TlsGetValue
0x100160dc
TlsSetValue
0x100160d8
OpenProcess
0x10016108
QueryPerformanceCounter
0x10016114
QueryPerformanceFrequency
0x10016110
RegCloseKey
0x10016120
RegGetValueW
0x1001611c
RegOpenCurrentUser
0x10016124
RtlCompareMemory
0x1001612c
CompareStringOrdinal
0x10016134
AcquireSRWLockExclusive
0x10016154
CreateMutexExW
0x10016150
CreateSemaphoreExW
0x1001614c
InitializeSRWLock
0x10016160
OpenSemaphoreW
0x10016148
ReleaseMutex
0x1001615c
ReleaseSemaphore
0x10016140
ReleaseSRWLockExclusive
0x10016158
WaitForSingleObject
0x1001613c
WaitForSingleObjectEx
0x10016144
InitOnceBeginInitialize
0x10016170
InitOnceComplete
0x1001616c
Sleep
0x10016168
GetSystemInfo
0x1001617c
GetSystemTimeAsFileTime
0x10016178
GetTickCount
0x10016180
RoGetActivationFactory
0x10016188
WindowsCreateStringReference
0x1001619c
WindowsDeleteString
0x10016194
WindowsGetStringLen
0x10016190
WindowsGetStringRawBuffer
0x10016198
EventActivityIdControl
0x100161ac
EventProviderEnabled
0x100161b8
EventRegister
0x100161a4
EventSetInformation
0x100161b4
EventUnregister
0x100161a8
EventWriteTransfer
0x100161b0
CopySid
0x100161c0
GetLengthSid
0x100161c4
GetTokenInformation
0x100161cc
IsValidSid
0x100161c8
ConvertStringSidToSidW
0x100161d4
msvcrt.dll
37
__CxxFrameHandler3
0x10016258
__dllonexit
0x10016260
_amsg_exit
0x100161f4
_callnewh
0x1001625c
_CxxThrowException
0x10016230
_except_handler4_common
0x10016268
_initterm
0x100161e8
_lock
0x100161e4
_onexit
0x10016218
_purecall
0x1001624c
_unlock
0x100161e0
_vsnwprintf
0x10016264
_wcsicmp
0x100161fc
_wcsnicmp
0x10016200
_XcptFilter
0x10016240
??0exception@@QAE@ABQBD@Z
0x1001621c
??0exception@@QAE@ABQBDH@Z
0x10016220
??0exception@@QAE@ABV0@@Z
0x10016224
??1exception@@UAE@XZ
0x10016228
??1type_info@@UAE@XZ
0x1001623c
??3@YAXPAX@Z
0x10016250
?what@exception@@UBEPBDXZ
0x1001622c
free
0x100161f0
malloc
0x100161ec
memcmp
0x100161dc
memcpy
0x10016234
memcpy_s
0x10016254
memmove
0x10016238
memset
0x1001626c
toupper
0x10016214
wcschr
0x10016210
wcsncmp
0x10016208
wcsncpy_s
0x100161f8
wcsnlen
0x10016248
wcsrchr
0x10016244
wcsstr
0x10016204
wcstok_s
0x1001620c
ntdll.dll
13
NtQuerySecurityAttributesToken
0x100162a0
NtQueryWnfStateData
0x10016298
NtUpdateWnfStateData
0x10016284
RtlAllocateHeap
0x10016278
RtlAppendUnicodeStringToString
0x10016280
RtlAppendUnicodeToString
0x1001627c
RtlCompareUnicodeString
0x10016290
RtlCopyUnicodeString
0x10016274
RtlFreeHeap
0x10016294
RtlInitUnicodeString
0x100162a4
RtlNtStatusToDosError
0x1001629c
RtlNtStatusToDosErrorNoTeb
0x10016288
ZwQueryWnfStateData
0x1001628c
SysFreeString
0x10016000
UuidFromStringW
0x10016008
No function matches your filter.