edputil.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 54
EdpAddAppClipboardConsentInCache
#1 · 0x77b0
EdpAuditAction
#2 · 0x77c0
EdpCanCallerAccessWin32Clipboard
#3 · 0x9960
EdpCheckAccess
#4 · 0xd840
EdpCheckAccessForContext
#5 · 0xd930
EdpCheckIsDpapiNgEntId
#6 · 0x7c20
EdpCheckIsRmsEntId
#7 · 0x7c30
EdpClearClipboardMetaData
#8 · 0x7c40
EdpConvertProtectorToExternalId
#9 · 0x7c50
EdpFreeContext
#10 · 0xd950
EdpGetAppLockerUniqueAppIdentifier
#11 · 0x7c70
EdpGetAppLockerUniqueAppIdentifierByToken
#12 · 0x7e40
EdpGetAppLockerUniqueAppIdentifierByTokenEx
#13 · 0x7e60
EdpGetClipboardAccessDeniedData
#14 · 0x9bc0
EdpGetContextForBinaryPath
#15 · 0xda20
EdpGetContextForImpersonatedToken
#16 · 0xda30
EdpGetContextForPackageFullName
#17 · 0xdcc0
EdpGetContextForProcess
#18 · 0xdce0
EdpGetContextForWindow
#19 · 0xdf80
EdpGetDataInfoFromDataObject
#20 · 0x9e80
EdpGetDataInfoFromWin32Clipboard
#21 · 0xa100
EdpGetEnterpriseIdForClipboard
#22 · 0x7fb0
EdpGetEnterpriseIdForDataObject
#23 · 0xa230
EdpGetEnterpriseIdForUIEnforcement
#24 · 0x7fc0
EdpGetEnterpriseIdForUIEnforcementFromProcess
#25 · 0x7fd0
EdpGetFilePathsForDataObject
#26 · 0xa410
EdpGetIsManaged
#27 · 0x1230
EdpGetPersonalEnterpriseIdString
#28 · 0x8370
EdpGetPrimaryIdentities
#29 · 0x8500
EdpGetPrimaryIdentityIfManaged
#30 · 0x8510
EdpGetSourceAppIdForClipboard
#31 · 0x8530
EdpGetSourceIsEnlightenedForClipboard
#32 · 0x8540
EdpGetWindowFromThreadId
#33 · 0x8550
EdpIsAppClipboardConsentCached
#34 · 0x86f0
EdpIsContextExemptOrEnlightenedAllowed
#35 · 0xe320
EdpIsFileAccessAllowed
#36 · 0x8700
EdpIsUIPolicyEvaluationEnabledForThread
#37 · 0x8710
EdpIsValidSubjectForEncryption
#38 · 0x8730
EdpRequestAccess
#39 · 0xe450
EdpRequestAccessForContext
#40 · 0xe590
EdpSetEnterpriseIdForClipboard
#41 · 0x88d0
EdpSetSourceAppIdForClipboard
#42 · 0x8910
EdpSetSourceIsEnlightenedForClipboard
#43 · 0x8920
EdpShouldShowEnterpriseIndicator
#44 · 0x8930
EdpUtilCreateEnterpriseContextFromEnterpriseId
#45 · 0x8ac0
EdpUtilFreeEnterpriseContext
#46 · 0x8c00
EdpUtilGetEnterpriseContextByName
#47 · 0x8c10
EdpUtilGetEnterpriseContextByProcess
#48 · 0x8c20
EdpUtilGetEnterpriseContextByWindowHandle
#49 · 0x8e50
EdpUtilGetEnterpriseContextForCurrentView
#50 · 0x8e60
EdpUtilGetEnterpriseContextForView
#51 · 0x8e50
EdpUtilIsAppEnlightened
#52 · 0x8e70
EdpUtilQueryPolicy
#53 · 0x8e80
GetProcessUniqueIdFromToken
#54 · 0x8ee0
No function matches your filter.
Imported DLLs & functions 145
ApiSetQueryApiSetPresence
0x180016ce8
CoTaskMemAlloc
0x180016d08
CoTaskMemFree
0x180016d00
CoTaskMemRealloc
0x180016cf8
DebugBreak
0x180016d18
IsDebuggerPresent
0x180016d28
OutputDebugStringW
0x180016d20
GetLastError
0x180016d48
RaiseException
0x180016d50
SetLastError
0x180016d40
SetUnhandledExceptionFilter
0x180016d38
UnhandledExceptionFilter
0x180016d58
CloseHandle
0x180016d68
GetProcessHeap
0x180016d78
HeapAlloc
0x180016d80
HeapFree
0x180016d88
GlobalAlloc
0x180016da0
GlobalFree
0x180016db0
LocalAlloc
0x180016da8
LocalFree
0x180016d98
GlobalLock
0x180016dd0
GlobalSize
0x180016dc8
GlobalUnlock
0x180016dc0
DisableThreadLibraryCalls
0x180016de0
FindResourceExW
0x180016e38
FreeLibrary
0x180016de8
GetModuleFileNameA
0x180016e00
GetModuleHandleExW
0x180016e20
GetModuleHandleW
0x180016df8
GetProcAddress
0x180016e18
LoadLibraryExA
0x180016e10
LoadResource
0x180016e30
LoadStringA
0x180016e08
LoadStringW
0x180016df0
LockResource
0x180016e28
GetCurrentProcess
0x180016e80
GetCurrentProcessId
0x180016eb0
GetCurrentThread
0x180016ec0
GetCurrentThreadId
0x180016ea8
OpenProcessToken
0x180016e90
OpenThreadToken
0x180016eb8
TerminateProcess
0x180016e98
TlsAlloc
0x180016e88
TlsFree
0x180016e78
TlsGetValue
0x180016ec8
TlsSetValue
0x180016ea0
OpenProcess
0x180016ed8
QueryPerformanceCounter
0x180016ee8
QueryPerformanceFrequency
0x180016ef0
RegCloseKey
0x180016f00
RegGetValueW
0x180016f10
RegOpenCurrentUser
0x180016f08
RtlCaptureContext
0x180016f20
RtlCompareMemory
0x180016f38
RtlLookupFunctionEntry
0x180016f30
RtlVirtualUnwind
0x180016f28
CompareStringOrdinal
0x180016f48
AcquireSRWLockExclusive
0x180016f80
CreateMutexExW
0x180016f78
CreateSemaphoreExW
0x180016f58
InitializeSRWLock
0x180016fa0
OpenSemaphoreW
0x180016f68
ReleaseMutex
0x180016f70
ReleaseSemaphore
0x180016f90
ReleaseSRWLockExclusive
0x180016f88
WaitForSingleObject
0x180016f98
WaitForSingleObjectEx
0x180016f60
InitOnceBeginInitialize
0x180016fb0
InitOnceComplete
0x180016fc0
Sleep
0x180016fb8
GetSystemInfo
0x180016fd8
GetSystemTimeAsFileTime
0x180016fd0
GetTickCount
0x180016fe0
RoGetActivationFactory
0x180016ff0
WindowsCreateStringReference
0x180017000
WindowsDeleteString
0x180017010
WindowsGetStringLen
0x180017018
WindowsGetStringRawBuffer
0x180017008
EventActivityIdControl
0x180017040
EventProviderEnabled
0x180017030
EventRegister
0x180017028
EventSetInformation
0x180017038
EventUnregister
0x180017050
EventWriteTransfer
0x180017048
CopySid
0x180017060
GetLengthSid
0x180017068
GetTokenInformation
0x180017070
IsValidSid
0x180017078
ConvertStringSidToSidW
0x180017088
msvcrt.dll
37
__C_specific_handler
0x1800170a8
__CxxFrameHandler3
0x180017198
__dllonexit
0x1800171a0
_amsg_exit
0x1800170c8
_callnewh
0x1800171a8
_CxxThrowException
0x180017148
_initterm
0x1800170b0
_lock
0x1800170a0
_onexit
0x180017118
_purecall
0x180017178
_unlock
0x1800171b0
_vsnwprintf
0x180017190
_wcsicmp
0x1800170e0
_wcsnicmp
0x1800170e8
_XcptFilter
0x1800170d0
??0exception@@QEAA@AEBQEBD@Z
0x180017120
??0exception@@QEAA@AEBQEBDH@Z
0x180017128
??0exception@@QEAA@AEBV0@@Z
0x180017130
??1exception@@UEAA@XZ
0x180017138
??1type_info@@UEAA@XZ
0x180017160
??3@YAXPEAX@Z
0x180017180
?what@exception@@UEBAPEBDXZ
0x180017140
free
0x1800170c0
malloc
0x1800170b8
memcmp
0x180017098
memcpy
0x180017150
memcpy_s
0x180017188
memmove
0x180017158
memset
0x1800171b8
toupper
0x180017110
wcschr
0x180017108
wcsncmp
0x1800170f8
wcsncpy_s
0x1800170d8
wcsnlen
0x180017170
wcsrchr
0x180017168
wcsstr
0x1800170f0
wcstok_s
0x180017100
ntdll.dll
13
NtQuerySecurityAttributesToken
0x180017220
NtQueryWnfStateData
0x180017210
NtUpdateWnfStateData
0x1800171e8
RtlAllocateHeap
0x1800171d0
RtlAppendUnicodeStringToString
0x1800171e0
RtlAppendUnicodeToString
0x1800171d8
RtlCompareUnicodeString
0x180017200
RtlCopyUnicodeString
0x1800171c8
RtlFreeHeap
0x180017208
RtlInitUnicodeString
0x180017228
RtlNtStatusToDosError
0x180017218
RtlNtStatusToDosErrorNoTeb
0x1800171f0
ZwQueryWnfStateData
0x1800171f8
SysFreeString
0x180016cc8
UuidFromStringW
0x180016cd8
No function matches your filter.