easwrt.dll - Online Dependency Analysis & Download

Description

Exchange ActiveSync Windows Runtime DLL

Authors

File size

180.0 KB

Uploaded

2025-12-01 07:27

Views

106

SHA-256

34b3f8b6d7b061f315d3b79257afcb13

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 9

DllCanUnloadNow #1 · 0x5610

DllGetActivationFactory #2 · 0x5670

DllGetClassObject #3 · 0x56b0

EasClientSecurityPolicyApply #4 · 0x4430

EasClientSecurityPolicyCheckCompliance #5 · 0x44d0

EasGetClientDeviceInformation #6 · 0x4570

EasRegisterEncryptionProvider #7 · 0x128e0

EasShowConsentDialog #8 · 0x4590

EasUnRegisterEncryptionProvider #9 · 0x12970

Imported DLLs & functions 268

ADVAPI32.dll 12

AllocateAndInitializeSid 0x18001e1d0

CloseServiceHandle 0x18001e1c0

FreeSid 0x18001e178

OpenSCManagerW 0x18001e1c8

OpenServiceW 0x18001e180

QueryServiceStatus 0x18001e1b8

RegCloseKey 0x18001e198

RegCreateKeyExW 0x18001e1b0

RegDeleteValueW 0x18001e188

RegOpenKeyExW 0x18001e190

RegSetValueExW 0x18001e1a0

StartServiceW 0x18001e1a8

api-ms-win-core-apiquery-l1-1-0.dll 1

ApiSetQueryApiSetPresence 0x18001e3e0

api-ms-win-core-com-l1-1-0.dll 12

CoCreateFreeThreadedMarshaler 0x18001e408

CoCreateInstance 0x18001e428

CoGetCallContext 0x18001e3f0

CoGetCallerTID 0x18001e430

CoGetInterfaceAndReleaseStream 0x18001e410

CoMarshalInterface 0x18001e418

CoMarshalInterThreadInterfaceInStream 0x18001e438

CoReleaseMarshalData 0x18001e448

CoTaskMemAlloc 0x18001e420

CoTaskMemFree 0x18001e400

CreateStreamOnHGlobal 0x18001e440

StringFromGUID2 0x18001e3f8

api-ms-win-core-com-l1-1-1.dll 1

RoGetAgileReference 0x18001e458

api-ms-win-core-com-midlproxystub-l1-1-0.dll 26

CStdStubBuffer2_Connect 0x18001e470

CStdStubBuffer2_CountRefs 0x18001e488

CStdStubBuffer2_Disconnect 0x18001e4b8

CStdStubBuffer2_QueryInterface 0x18001e4e8

NdrProxyForwardingFunction3 0x18001e4c0

NdrProxyForwardingFunction4 0x18001e508

NdrProxyForwardingFunction5 0x18001e530

ObjectStublessClient10 0x18001e4f8

ObjectStublessClient11 0x18001e490

ObjectStublessClient12 0x18001e4a0

ObjectStublessClient13 0x18001e4e0

ObjectStublessClient14 0x18001e498

ObjectStublessClient15 0x18001e4a8

ObjectStublessClient16 0x18001e4d8

ObjectStublessClient17 0x18001e500

ObjectStublessClient18 0x18001e520

ObjectStublessClient19 0x18001e4f0

ObjectStublessClient20 0x18001e468

ObjectStublessClient21 0x18001e4c8

ObjectStublessClient22 0x18001e480

ObjectStublessClient23 0x18001e4b0

ObjectStublessClient3 0x18001e478

ObjectStublessClient6 0x18001e528

ObjectStublessClient7 0x18001e4d0

ObjectStublessClient8 0x18001e518

ObjectStublessClient9 0x18001e510

api-ms-win-core-debug-l1-1-0.dll 3

DebugBreak 0x18001e540

IsDebuggerPresent 0x18001e548

OutputDebugStringW 0x18001e550

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x18001e560

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x18001e570

api-ms-win-core-errorhandling-l1-1-0.dll 5

GetLastError 0x18001e590

RaiseException 0x18001e598

SetLastError 0x18001e5a0

SetUnhandledExceptionFilter 0x18001e588

UnhandledExceptionFilter 0x18001e580

api-ms-win-core-handle-l1-1-0.dll 1

CloseHandle 0x18001e5b0

api-ms-win-core-heap-l1-1-0.dll 3

GetProcessHeap 0x18001e5d0

HeapAlloc 0x18001e5c0

HeapFree 0x18001e5c8

api-ms-win-core-heap-l2-1-0.dll 2

LocalAlloc 0x18001e5e0

LocalFree 0x18001e5e8

api-ms-win-core-libraryloader-l1-2-0.dll 7

DisableThreadLibraryCalls 0x18001e608

FreeLibrary 0x18001e5f8

GetModuleFileNameA 0x18001e628

GetModuleHandleExW 0x18001e600

GetModuleHandleW 0x18001e620

GetProcAddress 0x18001e618

LoadLibraryExW 0x18001e610

api-ms-win-core-localization-l1-2-0.dll 1

FormatMessageW 0x18001e638

api-ms-win-core-processthreads-l1-1-0.dll 8

GetCurrentProcess 0x18001e648

GetCurrentProcessId 0x18001e680

GetCurrentThread 0x18001e678

GetCurrentThreadId 0x18001e660

GetProcessId 0x18001e658

OpenProcessToken 0x18001e670

OpenThreadToken 0x18001e668

TerminateProcess 0x18001e650

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x18001e690

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x18001e6a0

api-ms-win-core-registry-l1-1-0.dll 4

RegDeleteTreeW 0x18001e6b8

RegEnumValueW 0x18001e6b0

RegGetValueW 0x18001e6c0

RegQueryInfoKeyW 0x18001e6c8

api-ms-win-core-rtlsupport-l1-1-0.dll 3

RtlCaptureContext 0x18001e6e8

RtlLookupFunctionEntry 0x18001e6d8

RtlVirtualUnwind 0x18001e6e0

api-ms-win-core-string-l1-1-0.dll 1

CompareStringOrdinal 0x18001e6f8

api-ms-win-core-synch-l1-1-0.dll 13

AcquireSRWLockExclusive 0x18001e748

AcquireSRWLockShared 0x18001e760

CreateMutexExW 0x18001e720

CreateSemaphoreExW 0x18001e738

DeleteCriticalSection 0x18001e758

InitializeCriticalSection 0x18001e728

OpenSemaphoreW 0x18001e718

ReleaseMutex 0x18001e708

ReleaseSemaphore 0x18001e740

ReleaseSRWLockExclusive 0x18001e768

ReleaseSRWLockShared 0x18001e750

WaitForSingleObject 0x18001e710

WaitForSingleObjectEx 0x18001e730

api-ms-win-core-synch-l1-2-0.dll 2

InitOnceExecuteOnce 0x18001e780

Sleep 0x18001e778

api-ms-win-core-sysinfo-l1-1-0.dll 3

GetSystemTimeAsFileTime 0x18001e798

GetTickCount 0x18001e7a0

GetVersionExW 0x18001e790

api-ms-win-core-util-l1-1-0.dll 2

DecodePointer 0x18001e7b0

EncodePointer 0x18001e7b8

api-ms-win-core-winrt-error-l1-1-0.dll 5

GetRestrictedErrorInfo 0x18001e7e8

RoOriginateError 0x18001e7e0

RoOriginateErrorW 0x18001e7d0

RoTransformError 0x18001e7c8

SetRestrictedErrorInfo 0x18001e7d8

api-ms-win-core-winrt-error-l1-1-1.dll 3

IsErrorPropagationEnabled 0x18001e800

RoGetMatchingRestrictedErrorInfo 0x18001e7f8

RoReportFailedDelegate 0x18001e808

api-ms-win-core-winrt-l1-1-0.dll 1

RoGetActivationFactory 0x18001e818

api-ms-win-core-winrt-string-l1-1-0.dll 5

WindowsCreateString 0x18001e838

WindowsCreateStringReference 0x18001e828

WindowsGetStringRawBuffer 0x18001e840

WindowsIsStringEmpty 0x18001e830

WindowsStringHasEmbeddedNull 0x18001e848

api-ms-win-eventing-classicprovider-l1-1-0.dll 6

GetTraceEnableFlags 0x18001e858

GetTraceEnableLevel 0x18001e880

GetTraceLoggerHandle 0x18001e860

RegisterTraceGuidsW 0x18001e868

TraceMessage 0x18001e878

UnregisterTraceGuids 0x18001e870

api-ms-win-eventing-provider-l1-1-0.dll 5

EventProviderEnabled 0x18001e890

EventRegister 0x18001e898

EventSetInformation 0x18001e8a0

EventUnregister 0x18001e8b0

EventWriteTransfer 0x18001e8a8

api-ms-win-security-base-l1-1-0.dll 9

CheckTokenMembership 0x18001e8f0

CopySid 0x18001e8e8

CreateWellKnownSid 0x18001e8f8

DuplicateToken 0x18001e8d0

EqualSid 0x18001e8c8

GetLengthSid 0x18001e8d8

GetSecurityDescriptorDacl 0x18001e8e0

GetTokenInformation 0x18001e8c0

PrivilegeCheck 0x18001e900

api-ms-win-security-lsapolicy-l1-1-0.dll 5

LsaClose 0x18001e920

LsaFreeMemory 0x18001e910

LsaLookupSids 0x18001e930

LsaOpenPolicy 0x18001e928

LsaQueryInformationPolicy 0x18001e918

api-ms-win-security-sddl-l1-1-0.dll 1

ConvertSidToStringSidW 0x18001e940

api-ms-win-shcore-taskpool-l1-1-0.dll 2

SHTaskPoolAllowThreadReuse 0x18001e950

SHTaskPoolQueueTask 0x18001e958

AUTHZ.dll 6

AuthzAccessCheck 0x18001e1f8

AuthzAddSidsToContext 0x18001e208

AuthzFreeContext 0x18001e1f0

AuthzFreeResourceManager 0x18001e1e0

AuthzInitializeContextFromSid 0x18001e200

AuthzInitializeResourceManager 0x18001e1e8

combase.dll 2

0x18001e968

0x18001e970

KERNEL32.dll 2

CreateFileW 0x18001e218

GetSystemWindowsDirectoryW 0x18001e220

msvcrt.dll 21

__C_specific_handler 0x18001ea18

__CxxFrameHandler3 0x18001ea10

__dllonexit 0x18001e9a0

_amsg_exit 0x18001e9b8

_callnewh 0x18001e9d8

_initterm 0x18001e9b0

_lock 0x18001e980

_onexit 0x18001e9a8

_purecall 0x18001e9f0

_unlock 0x18001ea00

_vsnwprintf 0x18001e988

_wtoi 0x18001ea08

_XcptFilter 0x18001e9c0

free 0x18001e9e8

malloc 0x18001e9e0

memcmp 0x18001e9f8

memcpy 0x18001e9d0

memcpy_s 0x18001e990

memmove 0x18001e9c8

memset 0x18001ea20

toupper 0x18001e998

netutils.dll 1

NetApiBufferFree 0x18001ea30

ntdll.dll 24

NtClose 0x18001ea60

NtDuplicateToken 0x18001ea68

NtGetCachedSigningLevel 0x18001ea80

NtOpenProcessToken 0x18001ea70

NtOpenThreadToken 0x18001ea58

NtQueryInformationToken 0x18001ea98

NtQuerySystemInformation 0x18001ea90

NtSetCachedSigningLevel 0x18001ea88

RtlAcquireResourceExclusive 0x18001ea48

RtlCopySid 0x18001eac8

RtlDeleteResource 0x18001eaf8

RtlEqualSid 0x18001eaf0

RtlGetDeviceFamilyInfoEnum 0x18001eae0

RtlGetNtProductType 0x18001eab8

RtlInitializeResource 0x18001ea40

RtlInitializeSid 0x18001eaa8

RtlInitUnicodeString 0x18001eaa0

RtlIsMultiSessionSku 0x18001ead0

RtlLengthSid 0x18001eac0

RtlNtStatusToDosError 0x18001eae8

RtlReleaseResource 0x18001ea50

RtlSubAuthorityCountSid 0x18001ead8

RtlSubAuthoritySid 0x18001eab0

WinSqmSetString 0x18001ea78

ole32.dll 1

CoGetObject 0x18001eb08

OLEAUT32.dll 2

VariantClear 0x18001e230

VariantInit 0x18001e238

RPCRT4.dll 30

CStdStubBuffer_AddRef 0x18001e2d0

CStdStubBuffer_Connect 0x18001e2d8

CStdStubBuffer_CountRefs 0x18001e330

CStdStubBuffer_DebugServerQueryInterface 0x18001e2b8

CStdStubBuffer_DebugServerRelease 0x18001e300

CStdStubBuffer_Disconnect 0x18001e2f8

CStdStubBuffer_Invoke 0x18001e280

CStdStubBuffer_IsIIDSupported 0x18001e2e0

CStdStubBuffer_QueryInterface 0x18001e318

I_RpcExceptionFilter 0x18001e2c8

I_RpcMapWin32Status 0x18001e250

IUnknown_AddRef_Proxy 0x18001e2b0

IUnknown_QueryInterface_Proxy 0x18001e2f0

IUnknown_Release_Proxy 0x18001e328

NdrClientCall3 0x18001e290

NdrCStdStubBuffer_Release 0x18001e278

NdrCStdStubBuffer2_Release 0x18001e260

NdrDllCanUnloadNow 0x18001e270

NdrDllGetClassObject 0x18001e268

NdrOleAllocate 0x18001e310

NdrOleFree 0x18001e308

NdrStubCall3 0x18001e2e8

NdrStubForwardingFunction 0x18001e288

RpcBindingBind 0x18001e258

RpcBindingCreateW 0x18001e320

RpcBindingFree 0x18001e298

RpcBindingFromStringBindingW 0x18001e2a8

RpcBindingSetAuthInfoExW 0x18001e248

RpcStringBindingComposeW 0x18001e2c0

RpcStringFreeW 0x18001e2a0

samcli.dll 1

NetUserGetInfo 0x18001eb18

SAMLIB.dll 8

SamCloseHandle 0x18001e348

SamConnect 0x18001e378

SamFreeMemory 0x18001e358

SamOpenDomain 0x18001e340

SamOpenUser 0x18001e368

SamQueryInformationDomain 0x18001e370

SamQueryInformationUser 0x18001e360

SamQuerySecurityObject 0x18001e350

twinapi.appcore.dll 4

0x18001eb28

0x18001eb30

0x18001eb38

0x18001eb40

USER32.dll 10

0x18001e390

0x18001e3a0

EnableWindow 0x18001e3c0

GetAncestor 0x18001e3b8

GetClassNameW 0x18001e3b0

GetWindow 0x18001e388

GetWindowThreadProcessId 0x18001e398

IsWindow 0x18001e3a8

SystemParametersInfoW 0x18001e3c8

UpdatePerUserSystemParameters 0x18001e3d0