offlinelsa.dll - Online Dependency Analysis & Download

Description

Windows

Authors

File size

132.9 KB

Uploaded

2025-12-01 08:17

Views

SHA-256

dde7e98638a6f957a6c34cc08e4569c9

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 19

LsaOfflineAddAccountRights #1 · 0x9600

LsaOfflineAddPrivilegesToAccount #2 · 0x9370

LsaOfflineClose #3 · 0x9a00

LsaOfflineCreateAccount #4 · 0x9100

LsaOfflineDelete #5 · 0x9b70

LsaOfflineEnumerateAccountRights #6 · 0x94e0

LsaOfflineEnumerateAccounts #7 · 0x9010

LsaOfflineEnumeratePrivilegesOfAccount #8 · 0x92c0

LsaOfflineFreeMemory #9 · 0x9c10

LsaOfflineGetSystemAccessAccount #10 · 0x98b0

LsaOfflineOpenAccount #11 · 0x91e0

LsaOfflineOpenPolicy #12 · 0x8bf0

LsaOfflineOpenPolicyExternal #13 · 0x8de0

LsaOfflineOpenPolicyForInstaller #14 · 0x8d00

LsaOfflineQueryInformationPolicy #15 · 0x8f40

LsaOfflineRemoveAccountRights #16 · 0x9760

LsaOfflineRemovePrivilegesFromAccount #17 · 0x9420

LsaOfflineSetSystemAccessAccount #18 · 0x9960

LsaOfflineSyskeyRequest #19 · 0x9c40

Imported DLLs & functions 127

api-ms-win-core-errorhandling-l1-1-0.dll 3

GetLastError 0x180016590

SetUnhandledExceptionFilter 0x180016588

UnhandledExceptionFilter 0x180016598

api-ms-win-core-file-l1-1-0.dll 1

GetFileAttributesW 0x1800165a8

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x1800165b8

api-ms-win-core-heap-obsolete-l1-1-0.dll 2

LocalAlloc 0x1800165d0

LocalFree 0x1800165c8

api-ms-win-core-kernel32-legacy-l1-1-0.dll 1

WTSGetActiveConsoleSessionId 0x1800165e0

api-ms-win-core-libraryloader-l1-1-0.dll 1

DisableThreadLibraryCalls 0x1800165f0

api-ms-win-core-memory-l1-1-0.dll 3

VirtualAlloc 0x180016610

VirtualProtect 0x180016608

VirtualQuery 0x180016600

api-ms-win-core-processthreads-l1-1-0.dll 6

GetCurrentProcess 0x180016638

GetCurrentProcessId 0x180016620

GetCurrentThreadId 0x180016648

OpenProcessToken 0x180016640

SetThreadStackGuarantee 0x180016628

TerminateProcess 0x180016630

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x180016658

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x180016668

api-ms-win-core-synch-l1-1-0.dll 3

AcquireSRWLockExclusive 0x180016680

InitializeSRWLock 0x180016688

ReleaseSRWLockExclusive 0x180016678

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x180016698

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemInfo 0x1800166b8

GetSystemTimeAsFileTime 0x1800166a8

GetTickCount 0x1800166b0

api-ms-win-eventing-classicprovider-l1-1-0.dll 6

GetTraceEnableFlags 0x1800166d8

GetTraceEnableLevel 0x1800166d0

GetTraceLoggerHandle 0x1800166e0

RegisterTraceGuidsW 0x1800166f0

TraceMessage 0x1800166e8

UnregisterTraceGuids 0x1800166c8

api-ms-win-security-base-l1-1-0.dll 4

DuplicateTokenEx 0x180016710

GetLengthSid 0x180016700

GetTokenInformation 0x180016708

IsValidSid 0x180016718

api-ms-win-security-cryptoapi-l1-1-0.dll 3

CryptAcquireContextW 0x180016738

CryptGenRandom 0x180016728

CryptReleaseContext 0x180016730

api-ms-win-security-lsalookup-l2-1-0.dll 2

LookupPrivilegeNameW 0x180016750

LookupPrivilegeValueW 0x180016748

api-ms-win-security-sddl-l1-1-0.dll 2

ConvertSidToStringSidW 0x180016768

ConvertStringSidToSidW 0x180016760

bcrypt.dll 9

BCryptCloseAlgorithmProvider 0x1800167a0

BCryptCreateHash 0x1800167b8

BCryptDestroyHash 0x180016778

BCryptDestroyKey 0x180016780

BCryptEncrypt 0x1800167b0

BCryptFinishHash 0x180016798

BCryptGenerateSymmetricKey 0x180016788

BCryptHashData 0x1800167a8

BCryptOpenAlgorithmProvider 0x180016790

msvcrt.dll 11

__C_specific_handler 0x1800167e0

_amsg_exit 0x1800167f0

_initterm 0x1800167d8

_purecall 0x180016808

_vsnwprintf 0x1800167d0

_wcsicmp 0x180016800

_XcptFilter 0x1800167f8

free 0x1800167c8

malloc 0x1800167e8

memcpy 0x180016810

memset 0x180016818

ntdll.dll 60

DbgPrintEx 0x180016830

NtAdjustPrivilegesToken 0x1800168a8

NtClose 0x1800169d8

NtCreateKey 0x1800169c8

NtDeleteKey 0x180016960

NtDeleteValueKey 0x180016938

NtDuplicateToken 0x1800168d8

NtFlushKey 0x180016998

NtLoadKey 0x1800169a8

NtOpenKey 0x1800169f0

NtOpenProcessToken 0x1800168e0

NtOpenThreadToken 0x1800168b8

NtQueryInformationToken 0x1800168c0

NtQueryKey 0x180016968

NtQuerySystemInformation 0x1800168d0

NtQueryValueKey 0x180016918

NtSetInformationThread 0x1800168c8

NtSetSecurityObject 0x180016940

NtSetValueKey 0x180016928

NtUnloadKey2 0x180016990

RtlAddAccessAllowedAce 0x180016888

RtlAllocateAndInitializeSid 0x180016978

RtlAllocateHeap 0x180016840

RtlAnsiStringToUnicodeString 0x180016a00

RtlCaptureContext 0x180016868

RtlCompareUnicodeString 0x1800168e8

RtlCopySid 0x1800169d0

RtlCreateAcl 0x180016878

RtlCreateSecurityDescriptor 0x180016870

RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x1800169a0

RtlEqualSid 0x1800168b0

RtlEqualUnicodeString 0x1800169c0

RtlFormatCurrentUserKeyPath 0x180016850

RtlFreeAnsiString 0x180016910

RtlFreeHeap 0x180016988

RtlFreeSid 0x180016970

RtlFreeUnicodeString 0x180016900

RtlGetAce 0x180016890

RtlGetDaclSecurityDescriptor 0x180016920

RtlGetGroupSecurityDescriptor 0x180016930

RtlGetOwnerSecurityDescriptor 0x180016948

RtlGetSaclSecurityDescriptor 0x180016950

RtlImageNtHeader 0x180016908

RtlInitAnsiString 0x1800168f0

RtlInitializeRXact 0x1800169b0

RtlInitUnicodeString 0x1800169e8

RtlLengthSecurityDescriptor 0x1800169b8

RtlLengthSid 0x1800169e0

RtlLookupFunctionEntry 0x180016860

RtlNewSecurityObject 0x180016880

RtlpNtEnumerateSubKey 0x180016958

RtlRaiseStatus 0x180016848

RtlReAllocateHeap 0x180016838

RtlSetDaclSecurityDescriptor 0x180016898

RtlSetOwnerSecurityDescriptor 0x1800168a0

RtlSubAuthoritySid 0x180016980

RtlUnicodeStringToAnsiString 0x1800168f8

RtlUpcaseUnicodeChar 0x180016828

RtlValidSid 0x1800169f8

RtlVirtualUnwind 0x180016858

RPCRT4.dll 3

RpcStringFreeW 0x180016568

UuidCreate 0x180016570

UuidToStringW 0x180016578