Windows.Security.Authentication.Web.Core.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0x454e0
DllGetActivationFactory
#2 · 0x44d00
DllGetClassObject
#3 · 0x702a0
FreeIdentityProviderCookies
#4 · 0x702c0
GetIdentityProviderCookies
#5 · 0x702e0
No function matches your filter.
Imported DLLs & functions 215
AppContainerDeriveSidFromMoniker
0x100e5000
GetPackageFamilyNameFromToken
0x100e5008
GetPackageFullNameFromToken
0x100e500c
CloseState
0x100e501c
GetStateRootFolder
0x100e5014
OpenStateExplicit
0x100e5018
ApiSetQueryApiSetPresence
0x100e5024
DebugBreak
0x100e5030
IsDebuggerPresent
0x100e502c
OutputDebugStringW
0x100e5034
DelayLoadFailureHook
0x100e503c
ResolveDelayLoadedAPI
0x100e5044
GetLastError
0x100e5054
RaiseException
0x100e504c
SetLastError
0x100e505c
SetUnhandledExceptionFilter
0x100e5058
UnhandledExceptionFilter
0x100e5050
CompareFileTime
0x100e5080
CreateDirectoryW
0x100e508c
CreateFileW
0x100e5090
FindClose
0x100e5064
FindFirstFileW
0x100e5088
FindNextFileW
0x100e506c
GetFileSizeEx
0x100e5068
GetFileTime
0x100e5084
ReadFile
0x100e507c
SetEndOfFile
0x100e5094
SetFileInformationByHandle
0x100e5070
SetFilePointer
0x100e5078
WriteFile
0x100e5074
GetProcessHeap
0x100e50ac
HeapAlloc
0x100e50b0
HeapFree
0x100e50a8
InitializeSListHead
0x100e50c8
InterlockedPushEntrySList
0x100e50c4
MulDiv
0x100e50d0
FreeLibrary
0x100e50e4
GetModuleFileNameA
0x100e50dc
GetModuleHandleExW
0x100e50e0
GetModuleHandleW
0x100e50e8
GetProcAddress
0x100e50d8
FormatMessageW
0x100e50f0
GetCurrentProcess
0x100e5118
GetCurrentProcessId
0x100e5104
GetCurrentThread
0x100e5108
GetCurrentThreadId
0x100e5114
GetProcessId
0x100e50fc
OpenProcessToken
0x100e5100
OpenThreadToken
0x100e5110
SetThreadToken
0x100e510c
TerminateProcess
0x100e50f8
IsProcessorFeaturePresent
0x100e5120
OpenProcess
0x100e5124
QueryPerformanceCounter
0x100e512c
QueryFullProcessImageNameW
0x100e5134
RegCloseKey
0x100e5140
RegEnumKeyExW
0x100e5144
RegGetValueW
0x100e513c
RegOpenKeyW
0x100e514c
CompareStringOrdinal
0x100e5160
CharLowerW
0x100e5168
AcquireSRWLockExclusive
0x100e51b8
AcquireSRWLockShared
0x100e5194
CreateEventExW
0x100e51a4
CreateMutexExW
0x100e5190
CreateSemaphoreExW
0x100e5180
DeleteCriticalSection
0x100e51b4
EnterCriticalSection
0x100e517c
InitializeCriticalSectionEx
0x100e51b0
InitializeSRWLock
0x100e51a0
LeaveCriticalSection
0x100e5178
OpenSemaphoreW
0x100e5188
ReleaseMutex
0x100e51ac
ReleaseSemaphore
0x100e5174
ReleaseSRWLockExclusive
0x100e5184
ReleaseSRWLockShared
0x100e518c
SetEvent
0x100e5198
TryAcquireSRWLockExclusive
0x100e519c
WaitForSingleObject
0x100e51a8
WaitForSingleObjectEx
0x100e5170
InitOnceBeginInitialize
0x100e51c0
InitOnceComplete
0x100e51c4
InitOnceExecuteOnce
0x100e51cc
Sleep
0x100e51c8
CreateSemaphoreW
0x100e51d4
CloseThreadpool
0x100e51f8
CloseThreadpoolTimer
0x100e51f0
CloseThreadpoolWork
0x100e5200
CreateThreadpool
0x100e51fc
CreateThreadpoolTimer
0x100e5204
CreateThreadpoolWork
0x100e51e8
FreeLibraryWhenCallbackReturns
0x100e520c
SetThreadpoolTimer
0x100e51ec
SubmitThreadpoolWork
0x100e5208
WaitForThreadpoolTimerCallbacks
0x100e51f4
GetRestrictedErrorInfo
0x100e522c
RoOriginateError
0x100e5228
RoOriginateErrorW
0x100e5220
RoTransformError
0x100e5230
SetRestrictedErrorInfo
0x100e5224
IsErrorPropagationEnabled
0x100e5238
RoGetMatchingRestrictedErrorInfo
0x100e5240
RoOriginateLanguageException
0x100e5244
RoReportFailedDelegate
0x100e523c
RoActivateInstance
0x100e524c
RoGetActivationFactory
0x100e5254
RoInitialize
0x100e5258
RoUninitialize
0x100e5250
RoCreatePropertySetSerializer
0x100e5260
WindowsCompareStringOrdinal
0x100e526c
WindowsConcatString
0x100e5268
WindowsCreateString
0x100e5290
WindowsCreateStringReference
0x100e527c
WindowsDeleteString
0x100e5284
WindowsDuplicateString
0x100e5270
WindowsGetStringLen
0x100e5278
WindowsGetStringRawBuffer
0x100e5280
WindowsIsStringEmpty
0x100e5288
WindowsStringHasEmbeddedNull
0x100e528c
WindowsSubstringWithSpecifiedLength
0x100e5274
__CxxFrameHandler3
0x100e531c
__std_terminate
0x100e5318
_CxxThrowException
0x100e52e4
_except_handler4_common
0x100e52e0
_o___std_exception_copy
0x100e5314
_o___std_exception_destroy
0x100e5310
_o___std_type_info_destroy_list
0x100e530c
_o___stdio_common_vsnprintf_s
0x100e5308
_o___stdio_common_vswprintf
0x100e5304
_o___stdio_common_vswprintf_s
0x100e5300
_o__callnewh
0x100e52fc
_o__cexit
0x100e52f8
_o__configure_narrow_argv
0x100e52f0
_o__crt_atexit
0x100e52e8
_o__errno
0x100e52f4
_o__execute_onexit_table
0x100e52ec
_o__initialize_narrow_environment
0x100e5298
_o__initialize_onexit_table
0x100e529c
_o__invalid_parameter_noinfo
0x100e52a0
_o__invalid_parameter_noinfo_noreturn
0x100e52a4
_o__purecall
0x100e52a8
_o__register_onexit_function
0x100e52ac
_o__seh_filter_dll
0x100e52b0
_o__wcsicmp
0x100e52b8
_o__wcsnicmp
0x100e52bc
_o_ceil
0x100e52c0
_o_free
0x100e52c4
_o_iswspace
0x100e52c8
_o_malloc
0x100e52cc
_o_realloc
0x100e52d0
_o_terminate
0x100e52d4
_o_towlower
0x100e52d8
_o_wcstoul
0x100e52dc
memcmp
0x100e5320
memcpy
0x100e5324
memmove
0x100e52b4
memset
0x100e5338
EventActivityIdControl
0x100e5344
EventRegister
0x100e5340
EventSetInformation
0x100e5350
EventUnregister
0x100e5348
EventWriteTransfer
0x100e534c
CreateWellKnownSid
0x100e5358
DuplicateTokenEx
0x100e536c
FreeSid
0x100e5364
GetLengthSid
0x100e5374
GetTokenInformation
0x100e5368
ImpersonateLoggedOnUser
0x100e5370
IsWellKnownSid
0x100e535c
RevertToSelf
0x100e5360
CheckTokenMembershipEx
0x100e537c
ConvertSidToStringSidW
0x100e5388
ConvertStringSidToSidW
0x100e5384
I_QueryTagInformation
0x100e5390
CreateRandomAccessStreamOverStream
0x100e539c
CreateStreamOverRandomAccessStream
0x100e5398
SHTaskPoolAllowThreadReuse
0x100e53a8
SHTaskPoolQueueTask
0x100e53a4
?_Xlength_error@std@@YAXPBD@Z
0x100e53c0
ntdll.dll
21
NtQueryInformationToken
0x100e53e0
NtQueryWnfStateData
0x100e53f8
RtlAcquireSRWLockExclusive
0x100e5408
RtlCapabilityCheck
0x100e53c8
RtlCheckTokenCapability
0x100e5414
RtlCheckTokenMembership
0x100e53cc
RtlCheckTokenMembershipEx
0x100e53d4
RtlEqualSid
0x100e53f4
RtlFreeSid
0x100e5418
RtlGetDeviceFamilyInfoEnum
0x100e5404
RtlInitializeSid
0x100e53e8
RtlIsMultiSessionSku
0x100e5410
RtlLoadString
0x100e53e4
RtlNtStatusToDosError
0x100e53fc
RtlReleaseSRWLockExclusive
0x100e540c
RtlSleepConditionVariableSRW
0x100e53dc
RtlSubAuthoritySid
0x100e53d0
RtlSubscribeWnfStateChangeNotification
0x100e5400
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100e53f0
RtlUnsubscribeWnfStateChangeNotification
0x100e53d8
RtlWakeAllConditionVariable
0x100e53ec
No function matches your filter.