Family.Authentication.dll

Description: Family.Authentication DLL

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 927c7fa6118663e1cc121ab288268d46

File Size: 101.5 KB

Uploaded At: Dec. 1, 2025, 7:27 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3f10)
DllGetActivationFactory (Ordinal: 2, Address: 0x3c00)
DllGetClassObject (Ordinal: 3, Address: 0x3de0)

Imported DLLs & Functions

ADVAPI32.dll

EventActivityIdControl (Address: 0x1800144f8)
EventRegister (Address: 0x1800144e8)
EventSetInformation (Address: 0x180014510)
EventUnregister (Address: 0x1800144e0)
EventWriteTransfer (Address: 0x1800144f0)
GetTokenInformation (Address: 0x180014508)
OpenProcessToken (Address: 0x180014500)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180014768)
CoCreateInstance (Address: 0x180014738)
CoGetApartmentType (Address: 0x180014748)
CoGetInterfaceAndReleaseStream (Address: 0x180014758)
CoMarshalInterface (Address: 0x180014750)
CoReleaseMarshalData (Address: 0x180014760)
CoTaskMemAlloc (Address: 0x180014740)
CreateStreamOnHGlobal (Address: 0x180014730)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180014778)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1800147a0)
CStdStubBuffer2_CountRefs (Address: 0x1800147d0)
CStdStubBuffer2_Disconnect (Address: 0x1800147c0)
CStdStubBuffer2_QueryInterface (Address: 0x1800147b0)
NdrProxyForwardingFunction3 (Address: 0x1800147a8)
NdrProxyForwardingFunction4 (Address: 0x180014798)
NdrProxyForwardingFunction5 (Address: 0x180014790)
ObjectStublessClient3 (Address: 0x1800147c8)
ObjectStublessClient6 (Address: 0x180014788)
ObjectStublessClient7 (Address: 0x1800147b8)
ObjectStublessClient8 (Address: 0x1800147d8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800147f0)
RegGetValueW (Address: 0x1800147f8)
RegOpenKeyExW (Address: 0x1800147e8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180014810)
RoOriginateError (Address: 0x180014820)
RoOriginateErrorW (Address: 0x180014818)
RoTransformError (Address: 0x180014828)
SetRestrictedErrorInfo (Address: 0x180014808)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180014838)
RoGetMatchingRestrictedErrorInfo (Address: 0x180014840)
RoReportFailedDelegate (Address: 0x180014848)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180014858)
RoGetActivationFactory (Address: 0x180014860)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x180014890)
HSTRING_UserFree64 (Address: 0x1800148a0)
HSTRING_UserMarshal (Address: 0x1800148c8)
HSTRING_UserMarshal64 (Address: 0x180014888)
HSTRING_UserSize (Address: 0x1800148d0)
HSTRING_UserSize64 (Address: 0x180014898)
HSTRING_UserUnmarshal (Address: 0x180014880)
HSTRING_UserUnmarshal64 (Address: 0x1800148b8)
WindowsCreateString (Address: 0x1800148a8)
WindowsCreateStringReference (Address: 0x1800148b0)
WindowsDeleteString (Address: 0x180014878)
WindowsDuplicateString (Address: 0x180014870)
WindowsGetStringRawBuffer (Address: 0x1800148c0)
WindowsIsStringEmpty (Address: 0x1800148d8)
WindowsStringHasEmbeddedNull (Address: 0x1800148e0)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1800148f0)
SHTaskPoolQueueTask (Address: 0x1800148f8)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800145b0)
AcquireSRWLockShared (Address: 0x180014670)
CloseHandle (Address: 0x1800145d0)
CreateMutexExW (Address: 0x180014558)
CreateSemaphoreExW (Address: 0x180014548)
DebugBreak (Address: 0x180014608)
DecodePointer (Address: 0x180014588)
DisableThreadLibraryCalls (Address: 0x180014590)
EncodePointer (Address: 0x180014540)
FormatMessageW (Address: 0x180014638)
GetCurrentProcess (Address: 0x180014520)
GetCurrentProcessId (Address: 0x180014560)
GetCurrentThreadId (Address: 0x180014630)
GetLastError (Address: 0x1800145f0)
GetModuleFileNameA (Address: 0x180014610)
GetModuleHandleExW (Address: 0x180014678)
GetModuleHandleW (Address: 0x180014600)
GetProcAddress (Address: 0x1800145f8)
GetProcessHeap (Address: 0x180014620)
GetSystemTimeAsFileTime (Address: 0x180014648)
GetTickCount (Address: 0x180014650)
HeapAlloc (Address: 0x180014628)
HeapFree (Address: 0x180014618)
InitializeSRWLock (Address: 0x180014658)
InitOnceBeginInitialize (Address: 0x180014578)
InitOnceComplete (Address: 0x180014568)
InitOnceExecuteOnce (Address: 0x180014570)
IsDebuggerPresent (Address: 0x1800145e8)
OpenProcess (Address: 0x180014668)
OpenSemaphoreW (Address: 0x180014598)
OutputDebugStringW (Address: 0x1800145e0)
QueryPerformanceCounter (Address: 0x1800145a8)
RaiseException (Address: 0x180014660)
ReleaseMutex (Address: 0x1800145c0)
ReleaseSemaphore (Address: 0x1800145c8)
ReleaseSRWLockExclusive (Address: 0x180014580)
ReleaseSRWLockShared (Address: 0x180014550)
SetLastError (Address: 0x1800145d8)
SetUnhandledExceptionFilter (Address: 0x180014528)
Sleep (Address: 0x180014538)
TerminateProcess (Address: 0x180014640)
UnhandledExceptionFilter (Address: 0x180014530)
WaitForSingleObject (Address: 0x1800145a0)
WaitForSingleObjectEx (Address: 0x1800145b8)

msvcrt.dll

__C_specific_handler (Address: 0x180014958)
__CxxFrameHandler3 (Address: 0x180014918)
__dllonexit (Address: 0x180014980)
_amsg_exit (Address: 0x180014988)
_callnewh (Address: 0x180014908)
_initterm (Address: 0x180014950)
_lock (Address: 0x180014968)
_onexit (Address: 0x180014940)
_purecall (Address: 0x180014928)
_unlock (Address: 0x180014970)
_vsnwprintf (Address: 0x180014978)
_XcptFilter (Address: 0x180014938)
free (Address: 0x180014930)
malloc (Address: 0x180014948)
memcmp (Address: 0x180014910)
memcpy_s (Address: 0x180014960)
memset (Address: 0x180014990)
realloc (Address: 0x180014920)

ntdll.dll

_wcstoui64 (Address: 0x1800149b8)
memmove_s (Address: 0x1800149c0)
RtlCaptureContext (Address: 0x1800149b0)
RtlLookupFunctionEntry (Address: 0x1800149a8)
RtlVirtualUnwind (Address: 0x1800149a0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1800146d8)
CStdStubBuffer_Connect (Address: 0x180014688)
CStdStubBuffer_CountRefs (Address: 0x1800146c8)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800146e8)
CStdStubBuffer_DebugServerRelease (Address: 0x1800146b0)
CStdStubBuffer_Disconnect (Address: 0x1800146a8)
CStdStubBuffer_Invoke (Address: 0x180014700)
CStdStubBuffer_IsIIDSupported (Address: 0x180014690)
CStdStubBuffer_QueryInterface (Address: 0x1800146c0)
IUnknown_AddRef_Proxy (Address: 0x1800146f0)
IUnknown_QueryInterface_Proxy (Address: 0x1800146a0)
IUnknown_Release_Proxy (Address: 0x1800146d0)
NdrCStdStubBuffer_Release (Address: 0x180014708)
NdrCStdStubBuffer2_Release (Address: 0x1800146e0)
NdrDllCanUnloadNow (Address: 0x180014710)
NdrDllGetClassObject (Address: 0x180014718)
NdrOleAllocate (Address: 0x1800146b8)
NdrOleFree (Address: 0x180014720)
NdrStubCall3 (Address: 0x180014698)
NdrStubForwardingFunction (Address: 0x1800146f8)