Family.Authentication.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x3f10
DllGetActivationFactory
#2 · 0x3c00
DllGetClassObject
#3 · 0x3de0
No function matches your filter.
Imported DLLs & functions 144
EventActivityIdControl
0x1800144f8
EventRegister
0x1800144e8
EventSetInformation
0x180014510
EventUnregister
0x1800144e0
EventWriteTransfer
0x1800144f0
GetTokenInformation
0x180014508
OpenProcessToken
0x180014500
CoCreateFreeThreadedMarshaler
0x180014768
CoCreateInstance
0x180014738
CoGetApartmentType
0x180014748
CoGetInterfaceAndReleaseStream
0x180014758
CoMarshalInterface
0x180014750
CoReleaseMarshalData
0x180014760
CoTaskMemAlloc
0x180014740
CreateStreamOnHGlobal
0x180014730
RoGetAgileReference
0x180014778
CStdStubBuffer2_Connect
0x1800147a0
CStdStubBuffer2_CountRefs
0x1800147d0
CStdStubBuffer2_Disconnect
0x1800147c0
CStdStubBuffer2_QueryInterface
0x1800147b0
NdrProxyForwardingFunction3
0x1800147a8
NdrProxyForwardingFunction4
0x180014798
NdrProxyForwardingFunction5
0x180014790
ObjectStublessClient3
0x1800147c8
ObjectStublessClient6
0x180014788
ObjectStublessClient7
0x1800147b8
ObjectStublessClient8
0x1800147d8
RegCloseKey
0x1800147f0
RegGetValueW
0x1800147f8
RegOpenKeyExW
0x1800147e8
GetRestrictedErrorInfo
0x180014810
RoOriginateError
0x180014820
RoOriginateErrorW
0x180014818
RoTransformError
0x180014828
SetRestrictedErrorInfo
0x180014808
IsErrorPropagationEnabled
0x180014838
RoGetMatchingRestrictedErrorInfo
0x180014840
RoReportFailedDelegate
0x180014848
RoActivateInstance
0x180014858
RoGetActivationFactory
0x180014860
HSTRING_UserFree
0x180014890
HSTRING_UserFree64
0x1800148a0
HSTRING_UserMarshal
0x1800148c8
HSTRING_UserMarshal64
0x180014888
HSTRING_UserSize
0x1800148d0
HSTRING_UserSize64
0x180014898
HSTRING_UserUnmarshal
0x180014880
HSTRING_UserUnmarshal64
0x1800148b8
WindowsCreateString
0x1800148a8
WindowsCreateStringReference
0x1800148b0
WindowsDeleteString
0x180014878
WindowsDuplicateString
0x180014870
WindowsGetStringRawBuffer
0x1800148c0
WindowsIsStringEmpty
0x1800148d8
WindowsStringHasEmbeddedNull
0x1800148e0
SHTaskPoolAllowThreadReuse
0x1800148f0
SHTaskPoolQueueTask
0x1800148f8
KERNEL32.dll
44
AcquireSRWLockExclusive
0x1800145b0
AcquireSRWLockShared
0x180014670
CloseHandle
0x1800145d0
CreateMutexExW
0x180014558
CreateSemaphoreExW
0x180014548
DebugBreak
0x180014608
DecodePointer
0x180014588
DisableThreadLibraryCalls
0x180014590
EncodePointer
0x180014540
FormatMessageW
0x180014638
GetCurrentProcess
0x180014520
GetCurrentProcessId
0x180014560
GetCurrentThreadId
0x180014630
GetLastError
0x1800145f0
GetModuleFileNameA
0x180014610
GetModuleHandleExW
0x180014678
GetModuleHandleW
0x180014600
GetProcAddress
0x1800145f8
GetProcessHeap
0x180014620
GetSystemTimeAsFileTime
0x180014648
GetTickCount
0x180014650
HeapAlloc
0x180014628
HeapFree
0x180014618
InitializeSRWLock
0x180014658
InitOnceBeginInitialize
0x180014578
InitOnceComplete
0x180014568
InitOnceExecuteOnce
0x180014570
IsDebuggerPresent
0x1800145e8
OpenProcess
0x180014668
OpenSemaphoreW
0x180014598
OutputDebugStringW
0x1800145e0
QueryPerformanceCounter
0x1800145a8
RaiseException
0x180014660
ReleaseMutex
0x1800145c0
ReleaseSemaphore
0x1800145c8
ReleaseSRWLockExclusive
0x180014580
ReleaseSRWLockShared
0x180014550
SetLastError
0x1800145d8
SetUnhandledExceptionFilter
0x180014528
Sleep
0x180014538
TerminateProcess
0x180014640
UnhandledExceptionFilter
0x180014530
WaitForSingleObject
0x1800145a0
WaitForSingleObjectEx
0x1800145b8
msvcrt.dll
18
__C_specific_handler
0x180014958
__CxxFrameHandler3
0x180014918
__dllonexit
0x180014980
_amsg_exit
0x180014988
_callnewh
0x180014908
_initterm
0x180014950
_lock
0x180014968
_onexit
0x180014940
_purecall
0x180014928
_unlock
0x180014970
_vsnwprintf
0x180014978
_XcptFilter
0x180014938
free
0x180014930
malloc
0x180014948
memcmp
0x180014910
memcpy_s
0x180014960
memset
0x180014990
realloc
0x180014920
_wcstoui64
0x1800149b8
memmove_s
0x1800149c0
RtlCaptureContext
0x1800149b0
RtlLookupFunctionEntry
0x1800149a8
RtlVirtualUnwind
0x1800149a0
RPCRT4.dll
20
CStdStubBuffer_AddRef
0x1800146d8
CStdStubBuffer_Connect
0x180014688
CStdStubBuffer_CountRefs
0x1800146c8
CStdStubBuffer_DebugServerQueryInterface
0x1800146e8
CStdStubBuffer_DebugServerRelease
0x1800146b0
CStdStubBuffer_Disconnect
0x1800146a8
CStdStubBuffer_Invoke
0x180014700
CStdStubBuffer_IsIIDSupported
0x180014690
CStdStubBuffer_QueryInterface
0x1800146c0
IUnknown_AddRef_Proxy
0x1800146f0
IUnknown_QueryInterface_Proxy
0x1800146a0
IUnknown_Release_Proxy
0x1800146d0
NdrCStdStubBuffer_Release
0x180014708
NdrCStdStubBuffer2_Release
0x1800146e0
NdrDllCanUnloadNow
0x180014710
NdrDllGetClassObject
0x180014718
NdrOleAllocate
0x1800146b8
NdrOleFree
0x180014720
NdrStubCall3
0x180014698
NdrStubForwardingFunction
0x1800146f8
No function matches your filter.