LogonController.dll
v10.0.19041.5915
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x2c1c0
DllGetActivationFactory
#2 · 0x2ed00
DllGetClassObject
#3 · 0x2f700
No function matches your filter.
Imported DLLs & functions 364
ApiSetQueryApiSetPresence
0x1800a2c00
CLSIDFromString
0x1800a2c10
CoCancelCall
0x1800a2c60
CoCreateFreeThreadedMarshaler
0x1800a2c88
CoCreateGuid
0x1800a2c78
CoCreateInstance
0x1800a2c38
CoDecrementMTAUsage
0x1800a2c18
CoDisableCallCancellation
0x1800a2c70
CoEnableCallCancellation
0x1800a2c68
CoGetMalloc
0x1800a2cb8
CoIncrementMTAUsage
0x1800a2c48
CoInitializeEx
0x1800a2c20
CoMarshalInterface
0x1800a2c58
CoReleaseMarshalData
0x1800a2c30
CoTaskMemAlloc
0x1800a2c40
CoTaskMemFree
0x1800a2ca0
CoTaskMemRealloc
0x1800a2c90
CoUninitialize
0x1800a2c28
CoWaitForMultipleHandles
0x1800a2ca8
CreateStreamOnHGlobal
0x1800a2c50
PropVariantClear
0x1800a2c98
StringFromCLSID
0x1800a2c80
StringFromGUID2
0x1800a2cb0
RoGetAgileReference
0x1800a2cc8
IsProcessInJob
0x1800a2cd8
CreateFileMappingW
0x1800a2d00
MapViewOfFile
0x1800a2d10
UnmapViewOfFile
0x1800a2d08
GetCurrentThread
0x1800a2d50
GetProcessId
0x1800a2d48
OpenProcessToken
0x1800a2d40
OpenThreadToken
0x1800a2d38
RegCloseKey
0x1800a2da8
RegCreateKeyExW
0x1800a2d70
RegDeleteValueW
0x1800a2d68
RegEnumKeyExW
0x1800a2d80
RegEnumValueW
0x1800a2db0
RegGetValueW
0x1800a2d78
RegNotifyChangeKeyValue
0x1800a2db8
RegOpenCurrentUser
0x1800a2d90
RegOpenKeyExW
0x1800a2d98
RegQueryInfoKeyW
0x1800a2d88
RegQueryValueExW
0x1800a2da0
RegSetValueExW
0x1800a2d60
RegDeleteKeyValueW
0x1800a2dc8
RegDeleteKeyW
0x1800a2dd8
UnregisterWaitEx
0x1800a2de8
VerQueryValueW
0x1800a2df8
GetFileVersionInfoSizeW
0x1800a2e10
GetFileVersionInfoW
0x1800a2e08
GetRestrictedErrorInfo
0x1800a2e28
RoOriginateError
0x1800a2e30
RoOriginateErrorW
0x1800a2e20
RoTransformError
0x1800a2e38
SetRestrictedErrorInfo
0x1800a2e40
IsErrorPropagationEnabled
0x1800a2e60
RoGetMatchingRestrictedErrorInfo
0x1800a2e58
RoReportFailedDelegate
0x1800a2e50
RoActivateInstance
0x1800a2e70
RoGetActivationFactory
0x1800a2e78
WindowsCompareStringOrdinal
0x1800a2e98
WindowsCreateString
0x1800a2eb0
WindowsCreateStringReference
0x1800a2e90
WindowsDeleteString
0x1800a2ec8
WindowsDuplicateString
0x1800a2eb8
WindowsGetStringLen
0x1800a2e88
WindowsGetStringRawBuffer
0x1800a2ec0
WindowsIsStringEmpty
0x1800a2ea8
WindowsStringHasEmbeddedNull
0x1800a2ea0
GetTraceEnableFlags
0x1800a2ef8
GetTraceEnableLevel
0x1800a2f00
GetTraceLoggerHandle
0x1800a2ef0
RegisterTraceGuidsW
0x1800a2f08
UnregisterTraceGuids
0x1800a2f10
EventActivityIdControl
0x1800a2f30
EventProviderEnabled
0x1800a2f20
EventRegister
0x1800a2f28
EventSetInformation
0x1800a2f48
EventUnregister
0x1800a2f38
EventWriteTransfer
0x1800a2f40
CopyRect
0x1800a2f58
GetSystemMetrics
0x1800a2f68
SystemParametersInfoW
0x1800a2f70
PowerDeterminePlatformRoleEx
0x1800a2f80
PowerRegisterSuspendResumeNotification
0x1800a2f90
PowerUnregisterSuspendResumeNotification
0x1800a2f88
PowerSettingRegisterNotification
0x1800a2fa0
RegisterPowerSettingNotification
0x1800a2fb8
UnregisterPowerSettingNotification
0x1800a2fb0
MsgWaitForMultipleObjectsEx
0x1800a2fc8
CreateWindowExW
0x1800a3008
DefWindowProcW
0x1800a3030
DestroyWindow
0x1800a3010
DispatchMessageW
0x1800a2ff0
FindWindowW
0x1800a3038
GetClassInfoW
0x1800a3050
GetDesktopWindow
0x1800a2fd8
GetWindowLongPtrW
0x1800a3028
GetWindowThreadProcessId
0x1800a3058
PeekMessageW
0x1800a2fe0
PostMessageW
0x1800a3040
PostThreadMessageW
0x1800a3020
RegisterClassW
0x1800a3048
SendNotifyMessageW
0x1800a2ff8
SetWindowLongPtrW
0x1800a3000
TranslateMessage
0x1800a2fe8
UnregisterClassW
0x1800a3018
CheckTokenMembership
0x1800a3078
CopySid
0x1800a3088
CreateWellKnownSid
0x1800a3080
GetLengthSid
0x1800a3070
GetTokenInformation
0x1800a3090
IsWellKnownSid
0x1800a3068
LookupAccountNameLocalW
0x1800a30c0
LookupAccountSidLocalW
0x1800a30b8
LsaLookupUserAccountType
0x1800a30d0
LsaClose
0x1800a30e8
LsaFreeMemory
0x1800a30f8
LsaOpenPolicy
0x1800a30f0
LsaQueryInformationPolicy
0x1800a3100
LsaRetrievePrivateData
0x1800a30e0
LsaStorePrivateData
0x1800a3108
ConvertSidToStringSidW
0x1800a3128
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1800a3118
ConvertStringSidToSidW
0x1800a3120
CloseServiceHandle
0x1800a3148
OpenSCManagerW
0x1800a3138
OpenServiceW
0x1800a3140
QueryServiceConfigW
0x1800a3158
GetPersistedRegistryLocationW
0x1800a3168
dxgi.dll
1
DXGIDeclareAdapterRemovalSupport
0x1800a3178
KERNEL32.dll
117
AcquireSRWLockExclusive
0x1800a2790
AcquireSRWLockShared
0x1800a2798
CheckRemoteDebuggerPresent
0x1800a2a20
CloseHandle
0x1800a2770
CloseThreadpoolTimer
0x1800a28c8
CloseThreadpoolWait
0x1800a2958
CompareStringOrdinal
0x1800a28b0
CompareStringW
0x1800a2a28
CopyFileW
0x1800a29d0
CreateEventExW
0x1800a2888
CreateEventW
0x1800a28d8
CreateFileW
0x1800a2980
CreateMutexExW
0x1800a27e8
CreateProcessW
0x1800a2a40
CreateSemaphoreExW
0x1800a27f8
CreateThread
0x1800a2950
CreateThreadpoolTimer
0x1800a28c0
CreateThreadpoolWait
0x1800a2998
CreateTimerQueueTimer
0x1800a2a08
DebugBreak
0x1800a2738
DecodePointer
0x1800a27b8
DelayLoadFailureHook
0x1800a26c8
DeleteCriticalSection
0x1800a2928
DeleteFileW
0x1800a29b8
DeleteTimerQueueTimer
0x1800a2a10
DisableThreadLibraryCalls
0x1800a27b0
DuplicateHandle
0x1800a29d8
EncodePointer
0x1800a2800
EnterCriticalSection
0x1800a2910
ExpandEnvironmentStringsW
0x1800a2948
FindClose
0x1800a29a8
FindFirstFileExW
0x1800a29b0
FindNextFileW
0x1800a29c0
FindResourceExW
0x1800a2908
FormatMessageW
0x1800a2700
FreeLibrary
0x1800a28a0
GetComputerNameW
0x1800a2a30
GetCurrentProcess
0x1800a2840
GetCurrentProcessId
0x1800a27e0
GetCurrentThreadId
0x1800a2708
GetExitCodeProcess
0x1800a2a48
GetLastError
0x1800a2750
GetModuleFileNameA
0x1800a2730
GetModuleHandleExW
0x1800a2728
GetModuleHandleW
0x1800a2740
GetProcAddress
0x1800a2748
GetProcessHeap
0x1800a2718
GetProductInfo
0x1800a28f0
GetSystemDirectoryW
0x1800a29c8
GetSystemPreferredUILanguages
0x1800a2970
GetSystemTimeAsFileTime
0x1800a2858
GetSystemWindowsDirectoryW
0x1800a2a18
GetTickCount
0x1800a2860
GetTickCount64
0x1800a28e0
GetVersionExW
0x1800a29f0
GetWindowsDirectoryW
0x1800a2978
HeapAlloc
0x1800a2710
HeapFree
0x1800a2720
HeapSetInformation
0x1800a28e8
HeapSize
0x1800a2808
InitializeCriticalSection
0x1800a2a50
InitializeCriticalSectionEx
0x1800a2920
InitializeSRWLock
0x1800a2890
InitOnceBeginInitialize
0x1800a27c8
InitOnceComplete
0x1800a27d8
InitOnceExecuteOnce
0x1800a27d0
IsDebuggerPresent
0x1800a2758
K32GetProcessImageFileNameW
0x1800a2990
LeaveCriticalSection
0x1800a2918
LoadLibraryExW
0x1800a2988
LoadLibraryW
0x1800a28a8
LoadResource
0x1800a2900
LocalAlloc
0x1800a29a0
LocalFree
0x1800a26b0
LocalReAlloc
0x1800a26e8
LocalSize
0x1800a2a38
LockResource
0x1800a28f8
lstrlenW
0x1800a26f0
OpenEventW
0x1800a2870
OpenProcess
0x1800a2898
OpenSemaphoreW
0x1800a27a8
OutputDebugStringW
0x1800a2760
QueryFullProcessImageNameW
0x1800a2940
QueryPerformanceCounter
0x1800a2850
QueueUserWorkItem
0x1800a29e0
RaiseException
0x1800a2868
RegisterWaitForSingleObject
0x1800a2a00
ReleaseMutex
0x1800a2780
ReleaseSemaphore
0x1800a2778
ReleaseSRWLockExclusive
0x1800a27c0
ReleaseSRWLockShared
0x1800a27f0
ResolveDelayLoadedAPI
0x1800a26d0
RtlCaptureContext
0x1800a2818
RtlLookupFunctionEntry
0x1800a2820
RtlVirtualUnwind
0x1800a2828
SetEvent
0x1800a2880
SetLastError
0x1800a2768
SetThreadpoolTimer
0x1800a28b8
SetThreadpoolWait
0x1800a2968
SetUnhandledExceptionFilter
0x1800a2838
Sleep
0x1800a2810
SleepConditionVariableSRW
0x1800a26b8
TerminateProcess
0x1800a2848
TryAcquireSRWLockExclusive
0x1800a26f8
UnhandledExceptionFilter
0x1800a2830
UnregisterWait
0x1800a29f8
VerifyVersionInfoW
0x1800a26d8
VerSetConditionMask
0x1800a26e0
WaitForMultipleObjects
0x1800a29e8
WaitForMultipleObjectsEx
0x1800a2878
WaitForSingleObject
0x1800a27a0
WaitForSingleObjectEx
0x1800a2788
WaitForThreadpoolTimerCallbacks
0x1800a28d0
WaitForThreadpoolWaitCallbacks
0x1800a2960
WakeAllConditionVariable
0x1800a26c0
WerRegisterCustomMetadata
0x1800a2930
WerUnregisterCustomMetadata
0x1800a2938
msvcrt.dll
36
__C_specific_handler
0x1800a3210
__CxxFrameHandler3
0x1800a3258
__dllonexit
0x1800a31f8
_amsg_exit
0x1800a3228
_callnewh
0x1800a3188
_CxxThrowException
0x1800a3198
_get_errno
0x1800a3270
_initterm
0x1800a3218
_lock
0x1800a3208
_onexit
0x1800a31f0
_purecall
0x1800a3240
_set_errno
0x1800a3278
_unlock
0x1800a3200
_vsnprintf_s
0x1800a31d0
_vsnwprintf
0x1800a3290
_wcsicmp
0x1800a3260
_wtoi
0x1800a31b0
_XcptFilter
0x1800a3230
??0exception@@QEAA@AEBV0@@Z
0x1800a31d8
??0exception@@QEAA@XZ
0x1800a31e0
??1exception@@UEAA@XZ
0x1800a3250
??1type_info@@UEAA@XZ
0x1800a3298
?terminate@@YAXXZ
0x1800a31a8
free
0x1800a3238
malloc
0x1800a3220
memcmp
0x1800a31c0
memcpy
0x1800a31c8
memcpy_s
0x1800a3248
memmove
0x1800a31e8
memmove_s
0x1800a3288
memset
0x1800a32a0
realloc
0x1800a3280
swscanf
0x1800a31a0
toupper
0x1800a3190
wcschr
0x1800a3268
wcstoul
0x1800a31b8
ntdll.dll
27
NtClose
0x1800a32e0
NtOpenKey
0x1800a32c0
NtOpenProcess
0x1800a32d0
NtOpenProcessToken
0x1800a32e8
NtPowerInformation
0x1800a3350
NtQueryInformationToken
0x1800a32d8
NtQuerySystemInformation
0x1800a3370
NtQueryValueKey
0x1800a3380
NtQueryWnfStateData
0x1800a3378
NtSetInformationJobObject
0x1800a3328
NtSetInformationProcess
0x1800a3330
RtlAcquireResourceExclusive
0x1800a3300
RtlDeleteResource
0x1800a32f0
RtlGetDeviceFamilyInfoEnum
0x1800a3310
RtlGetNtProductType
0x1800a32b8
RtlInitializeResource
0x1800a3308
RtlInitString
0x1800a3318
RtlInitUnicodeString
0x1800a3338
RtlIsMultiSessionSku
0x1800a3340
RtlIsMultiUsersInSessionSku
0x1800a3320
RtlNtStatusToDosError
0x1800a3348
RtlPublishWnfStateData
0x1800a3368
RtlReleaseResource
0x1800a32f8
RtlRunOnceExecuteOnce
0x1800a32b0
RtlSubscribeWnfStateChangeNotification
0x1800a3358
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800a3360
RtlUnsubscribeWnfStateChangeNotification
0x1800a32c8
RPCRT4.dll
14
I_RpcBindingInqLocalClientPID
0x1800a2ac0
I_RpcBindingIsClientLocal
0x1800a2ab8
NdrServerCall2
0x1800a2aa0
NdrServerCallAll
0x1800a2aa8
RpcBindingInqAuthClientW
0x1800a2ac8
RpcBindingVectorFree
0x1800a2a90
RpcEpRegisterW
0x1800a2a78
RpcEpUnregister
0x1800a2a60
RpcServerInqBindings
0x1800a2a88
RpcServerListen
0x1800a2a70
RpcServerRegisterIfEx
0x1800a2a98
RpcServerUnregisterIf
0x1800a2a68
RpcServerUseProtseqW
0x1800a2ab0
UuidFromStringW
0x1800a2a80
SHCORE.dll
10
0x1800a2af0
CreateRandomAccessStreamOverStream
0x1800a2ad8
IsOS
0x1800a2b20
SHCreateMemStream
0x1800a2af8
SHCreateThread
0x1800a2b18
SHCreateThreadWithHandle
0x1800a2ae8
SHDeleteValueW
0x1800a2b00
SHTaskPoolAllowThreadReuse
0x1800a2ae0
SHTaskPoolGetUniqueContext
0x1800a2b08
SHTaskPoolQueueTask
0x1800a2b10
SLC.dll
1
SLGetWindowsInformationDWORD
0x1800a2b48
USER32.dll
15
ActivateKeyboardLayout
0x1800a2b98
CloseDesktop
0x1800a2bc8
GetDC
0x1800a2bb0
GetRawInputDeviceList
0x1800a2b90
GetUserObjectInformationW
0x1800a2b88
LoadCursorW
0x1800a2b78
LoadKeyboardLayoutW
0x1800a2ba0
OpenDesktopW
0x1800a2bd8
OpenInputDesktop
0x1800a2be0
RegisterBSDRWindow
0x1800a2b70
ReleaseDC
0x1800a2b80
SetSysColors
0x1800a2bc0
SetThreadDesktop
0x1800a2bd0
ShowCursor
0x1800a2bb8
UnloadKeyboardLayout
0x1800a2ba8
GetProfilesDirectoryW
0x1800a2bf0
No function matches your filter.