offlinesam.dll - Online Dependency Analysis & Download

Description

Windows

Authors

File size

272.4 KB

Uploaded

2025-12-01 08:18

Views

SHA-256

206324f61d99f3b7fead18e8ed84967e

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 25

SamOfflineAddMemberToAlias #1 · 0x10770

SamOfflineCloseHandle #2 · 0x112d0

SamOfflineConnect #3 · 0xf9d0

SamOfflineConnectExternal #4 · 0xfbc0

SamOfflineConnectForInstaller #5 · 0xfae0

SamOfflineCreateAliasInDomain #6 · 0x102d0

SamOfflineCreateUserInDomain #7 · 0x10e10

SamOfflineDeleteAlias #8 · 0x10610

SamOfflineDeleteUser #9 · 0x11130

SamOfflineEnumerateAliasesInDomain #10 · 0x10a60

SamOfflineEnumerateDomainsInSamServer #11 · 0xfd20

SamOfflineEnumerateUsersInDomain2 #12 · 0x10ba0

SamOfflineFreeMemory #13 · 0x11440

SamOfflineGetMembersInAlias #14 · 0x10960

SamOfflineLookupDomainInSamServer #15 · 0xfe50

SamOfflineLookupNamesInDomain #16 · 0x10080

SamOfflineOpenAlias #17 · 0x101b0

SamOfflineOpenDomain #18 · 0xff50

SamOfflineOpenUser #19 · 0x10cf0

SamOfflineQueryInformationAlias #20 · 0x10420

SamOfflineQueryInformationUser #21 · 0x10f50

SamOfflineRemoveMemberFromAlias #22 · 0x10880

SamOfflineRidToSid #23 · 0x11220

SamOfflineSetInformationAlias #24 · 0x10510

SamOfflineSetInformationUser #25 · 0x11040

Imported DLLs & functions 155

api-ms-win-core-errorhandling-l1-1-0.dll 3

GetLastError 0x18001f5b8

SetUnhandledExceptionFilter 0x18001f5a8

UnhandledExceptionFilter 0x18001f5b0

api-ms-win-core-file-l1-1-0.dll 1

GetFileAttributesW 0x18001f5c8

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x18001f5d8

api-ms-win-core-heap-obsolete-l1-1-0.dll 2

LocalAlloc 0x18001f5e8

LocalFree 0x18001f5f0

api-ms-win-core-kernel32-legacy-l1-1-0.dll 1

WTSGetActiveConsoleSessionId 0x18001f600

api-ms-win-core-libraryloader-l1-1-0.dll 3

DisableThreadLibraryCalls 0x18001f620

FreeLibrary 0x18001f610

LoadLibraryExW 0x18001f618

api-ms-win-core-memory-l1-1-0.dll 3

VirtualAlloc 0x18001f640

VirtualProtect 0x18001f630

VirtualQuery 0x18001f638

api-ms-win-core-processthreads-l1-1-0.dll 6

GetCurrentProcess 0x18001f668

GetCurrentProcessId 0x18001f658

GetCurrentThreadId 0x18001f678

OpenProcessToken 0x18001f670

SetThreadStackGuarantee 0x18001f650

TerminateProcess 0x18001f660

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x18001f688

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x18001f698

api-ms-win-core-string-l1-1-0.dll 1

CompareStringEx 0x18001f6a8

api-ms-win-core-synch-l1-1-0.dll 3

AcquireSRWLockExclusive 0x18001f6c0

InitializeSRWLock 0x18001f6b8

ReleaseSRWLockExclusive 0x18001f6c8

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x18001f6d8

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemInfo 0x18001f6f8

GetSystemTimeAsFileTime 0x18001f6e8

GetTickCount 0x18001f6f0

api-ms-win-eventing-classicprovider-l1-1-0.dll 6

GetTraceEnableFlags 0x18001f730

GetTraceEnableLevel 0x18001f708

GetTraceLoggerHandle 0x18001f728

RegisterTraceGuidsW 0x18001f720

TraceMessage 0x18001f710

UnregisterTraceGuids 0x18001f718

api-ms-win-security-base-l1-1-0.dll 4

DuplicateTokenEx 0x18001f758

GetLengthSid 0x18001f740

GetTokenInformation 0x18001f748

IsValidSid 0x18001f750

api-ms-win-security-cryptoapi-l1-1-0.dll 6

CryptAcquireContextA 0x18001f790

CryptCreateHash 0x18001f788

CryptDestroyHash 0x18001f770

CryptGetHashParam 0x18001f780

CryptHashData 0x18001f768

CryptReleaseContext 0x18001f778

api-ms-win-security-lsalookup-l2-1-0.dll 1

LookupPrivilegeValueW 0x18001f7a0

api-ms-win-security-sddl-l1-1-0.dll 1

ConvertStringSidToSidW 0x18001f7b0

bcrypt.dll 12

BCryptCloseAlgorithmProvider 0x18001f7f0

BCryptCreateHash 0x18001f7d0

BCryptDecrypt 0x18001f800

BCryptDestroyHash 0x18001f7e0

BCryptDestroyKey 0x18001f7e8

BCryptEncrypt 0x18001f818

BCryptFinishHash 0x18001f810

BCryptGenerateSymmetricKey 0x18001f7d8

BCryptGetProperty 0x18001f808

BCryptHashData 0x18001f7c8

BCryptOpenAlgorithmProvider 0x18001f7f8

BCryptSetProperty 0x18001f7c0

CRYPTBASE.dll 3

SystemFunction001 0x18001f578

SystemFunction003 0x18001f570

SystemFunction036 0x18001f568

msvcrt.dll 13

__C_specific_handler 0x18001f848

_amsg_exit 0x18001f858

_initterm 0x18001f838

_purecall 0x18001f840

_vsnwprintf 0x18001f880

_wcsicmp 0x18001f878

_XcptFilter 0x18001f870

free 0x18001f828

malloc 0x18001f830

memcmp 0x18001f868

memcpy 0x18001f860

memmove 0x18001f850

memset 0x18001f888

ntdll.dll 69

DbgPrintEx 0x18001f8d0

NtAdjustPrivilegesToken 0x18001f950

NtClose 0x18001f8a8

NtCreateKey 0x18001f8b8

NtDeleteKey 0x18001f998

NtDeleteValueKey 0x18001f970

NtDuplicateToken 0x18001f9c8

NtFlushKey 0x18001faa0

NtLoadKey 0x18001fab0

NtOpenKey 0x18001f898

NtOpenProcessToken 0x18001f9d0

NtOpenThreadToken 0x18001f9a8

NtQueryInformationToken 0x18001f9b0

NtQueryKey 0x18001f9a0

NtQuerySystemInformation 0x18001f9c0

NtQuerySystemTime 0x18001fa80

NtQueryValueKey 0x18001f958

NtSetInformationThread 0x18001f9b8

NtSetSecurityObject 0x18001f978

NtSetValueKey 0x18001f960

NtUnloadKey2 0x18001fa98

RtlAbsoluteToSelfRelativeSD 0x18001fa08

RtlAddAccessAllowedAce 0x18001fa10

RtlAddAuditAccessAce 0x18001fa00

RtlAllocateAndInitializeSid 0x18001fa18

RtlAllocateHeap 0x18001f8e0

RtlAppendUnicodeStringToString 0x18001f948

RtlAppendUnicodeToString 0x18001f918

RtlCaptureContext 0x18001f908

RtlCompareUnicodeString 0x18001f9d8

RtlConvertSidToUnicodeString 0x18001fa68

RtlCopySid 0x18001f8b0

RtlCopyUnicodeString 0x18001f938

RtlCreateAcl 0x18001f9f8

RtlCreateSecurityDescriptor 0x18001f9e8

RtlDosPathNameToRelativeNtPathName_U_WithStatus 0x18001faa8

RtlEqualSid 0x18001fa88

RtlFindMessage 0x18001f910

RtlFormatCurrentUserKeyPath 0x18001f8f0

RtlFreeHeap 0x18001fa90

RtlFreeUnicodeString 0x18001fa60

RtlGetAce 0x18001fa20

RtlGetDaclSecurityDescriptor 0x18001f9e0

RtlGetGroupSecurityDescriptor 0x18001f968

RtlGetOwnerSecurityDescriptor 0x18001f980

RtlGetSaclSecurityDescriptor 0x18001f988

RtlIdentifierAuthoritySid 0x18001f940

RtlImageNtHeader 0x18001f8c0

RtlInitializeRXact 0x18001fab8

RtlInitializeSid 0x18001fa38

RtlInitUnicodeString 0x18001f8a0

RtlIntegerToUnicodeString 0x18001f920

RtlLengthRequiredSid 0x18001f930

RtlLengthSid 0x18001fa50

RtlLookupFunctionEntry 0x18001f900

RtlMapGenericMask 0x18001fa30

RtlpNtEnumerateSubKey 0x18001f990

RtlRaiseStatus 0x18001f8e8

RtlReAllocateHeap 0x18001f8d8

RtlSetDaclSecurityDescriptor 0x18001fa28

RtlSetGroupSecurityDescriptor 0x18001f9f0

RtlSetOwnerSecurityDescriptor 0x18001fa40

RtlSetSaclSecurityDescriptor 0x18001fa48

RtlSubAuthorityCountSid 0x18001fa58

RtlSubAuthoritySid 0x18001fa70

RtlUpcaseUnicodeChar 0x18001f8c8

RtlUpcaseUnicodeStringToOemString 0x18001f928

RtlValidSid 0x18001fa78

RtlVirtualUnwind 0x18001f8f8

offlinelsa.dll 7

LsaOfflineClose 0x18001fae0

LsaOfflineFreeMemory 0x18001faf0

LsaOfflineOpenPolicy 0x18001fac8

LsaOfflineOpenPolicyExternal 0x18001fad8

LsaOfflineOpenPolicyForInstaller 0x18001fad0

LsaOfflineQueryInformationPolicy 0x18001faf8

LsaOfflineSyskeyRequest 0x18001fae8

RPCRT4.dll 3

RpcStringFreeW 0x18001f588

UuidCreate 0x18001f598

UuidToStringW 0x18001f590