Conduit.Environment.dll
v10.98.2504.14002
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 92
BrokerLauncher_Create
#1 · 0x1930
BrokerLauncher_DefaultConstruct
#2 · 0x1790
BrokerLauncher_Destroy
#3 · 0x1ad0
BrokerLauncher_LaunchBrokerAsync
#4 · 0x1c50
CallCollectionDeleter
#5 · 0x2adf0
CallWideStringDeleter
#6 · 0x2ae10
ComputeSystem_ContainsCurrentProcess
#7 · 0x8370
ComputeSystem_Create
#8 · 0x7dc0
ComputeSystem_Destroy
#9 · 0x7f70
ComputeSystem_GetConnectionAddress
#10 · 0x85b0
ComputeSystem_GetCredentialManager
#11 · 0x8240
ComputeSystem_GetHvSocketAddress
#12 · 0x8400
ComputeSystem_GetProcessFactory
#13 · 0x7fe0
ComputeSystem_GetUserManager
#14 · 0x8110
ConsoleOutputReader_Destroy
#15 · 0xa3e0
ConsoleOutputReader_Read
#16 · 0xa480
ConsoleOutputReader_ReadAsync
#17 · 0xa5f0
ConsoleOutputReader_ReadLineUtf16
#18 · 0xb200
ConsoleOutputReader_ReadLineUtf16Async
#19 · 0xb400
ConsoleOutputReader_ReadLineUtf8
#20 · 0xa7e0
ConsoleOutputReader_ReadLineUtf8Async
#21 · 0xa9d0
ConsoleOutputReader_ReadToEndUtf16
#22 · 0xb710
ConsoleOutputReader_ReadToEndUtf16Async
#23 · 0xb8f0
ConsoleOutputReader_ReadToEndUtf8
#24 · 0xace0
ConsoleOutputReader_ReadToEndUtf8Async
#25 · 0xaef0
ConvertErrorMessageToErrorInfo
#26 · 0x2ad10
CredentialManager_Create
#27 · 0x136e0
CredentialManager_DeleteCredential
#28 · 0x13a90
CredentialManager_Destroy
#29 · 0x138a0
CredentialManager_ReadCredential
#30 · 0x13910
CredentialManager_WriteCredential
#31 · 0x139f0
EnvironmentBroker_GetServerRpcIfHandle
#32 · 0x18750
LoggedInUser_Destroy
#33 · 0x2a4d0
LoggedInUser_GetSessionId
#34 · 0x2a7d0
LoggedInUser_GetUserToken
#35 · 0x2a540
ProcessFactory_Create
#36 · 0x2b7c0
ProcessFactory_Destroy
#37 · 0x2b980
ProcessFactory_LaunchProcessAsSystem
#38 · 0x2b9f0
ProcessFactory_LaunchProcessAsSystemWithProcessStartInfo
#39 · 0x2bae0
ProcessFactory_LaunchProcessAsUser
#40 · 0x2bb90
ProcessFactory_LaunchProcessAsUserWithProcessStartInfo
#41 · 0x2bcb0
ProcessStartInfo_Create
#42 · 0x2e5f0
ProcessStartInfo_Destroy
#43 · 0x2e7a0
ProcessStartInfo_GetArguments
#44 · 0x2e960
ProcessStartInfo_GetCreateNoWindow
#45 · 0x2ecc0
ProcessStartInfo_GetExecutablePath
#46 · 0x2e840
ProcessStartInfo_GetMachineTypeAttribute
#47 · 0x2edc0
ProcessStartInfo_GetStandardErrorConfig
#48 · 0x2eff0
ProcessStartInfo_GetStandardOutputConfig
#49 · 0x2eec0
ProcessStartInfo_GetWindowStyle
#50 · 0x2eba0
ProcessStartInfo_GetWorkingDirectory
#51 · 0x2ea80
ProcessStartInfo_SetArguments
#52 · 0x2e9f0
ProcessStartInfo_SetCreateNoWindow
#53 · 0x2ed40
ProcessStartInfo_SetExecutablePath
#54 · 0x2e8d0
ProcessStartInfo_SetMachineTypeAttribute
#55 · 0x2ee40
ProcessStartInfo_SetStandardErrorConfig
#56 · 0x2f070
ProcessStartInfo_SetStandardOutputConfig
#57 · 0x2ef40
ProcessStartInfo_SetWindowStyle
#58 · 0x2ec20
ProcessStartInfo_SetWorkingDirectory
#59 · 0x2eb10
Process_Destroy
#60 · 0x2afb0
Process_GetExitCode
#61 · 0x2b290
Process_GetProcessId
#62 · 0x2b030
Process_GetRawWin32Handle
#63 · 0x2b560
Process_GetSessionId
#64 · 0x2b0d0
Process_GetStandardError
#65 · 0x2b490
Process_GetStandardOutput
#66 · 0x2b3c0
Process_Terminate
#67 · 0x2b330
Process_WaitForExit
#68 · 0x2b170
Process_WaitForExitWithTimeout
#69 · 0x2b1f0
Session_Destroy
#70 · 0x2f2b0
Session_GetDomainName
#71 · 0x2f4d0
Session_GetSessionId
#72 · 0x2f330
Session_GetSessionName
#73 · 0x2f3b0
Session_GetSessionUserToken
#74 · 0x2f5f0
Session_GetUserName
#75 · 0x2f440
Session_IsActive
#76 · 0x2f560
UserManager_Create
#77 · 0x2f840
UserManager_Destroy
#78 · 0x2fa00
UserManager_GetLoggedInUsers
#79 · 0x2fc00
UserManager_GetSessions
#80 · 0x2fa70
UserManager_IsUserEnumerationAvailable
#81 · 0x2fd90
UserManager_SupportsMultipleSessions
#82 · 0x2fe40
UserToken_Destroy
#83 · 0x30c80
UserToken_EnableUIAccess
#84 · 0x30d00
UserToken_ExpandEnvironmentVariablesForUser
#85 · 0x31130
UserToken_GetLinkedToken
#86 · 0x31090
UserToken_GetUserSid
#87 · 0x31210
UserToken_HasLinkedElevatedToken
#88 · 0x30ff0
UserToken_IsElevated
#89 · 0x30e10
UserToken_IsMemberOfGroup
#90 · 0x30eb0
UserToken_IsSameUserAs
#91 · 0x30f50
UserToken_SetIntegrityLevel
#92 · 0x30d80
No function matches your filter.
Imported DLLs & functions 221
ADVAPI32.dll
26
AdjustTokenPrivileges
0x180051018
AllocateAndInitializeSid
0x1800510c0
CheckTokenMembership
0x180051090
CopySid
0x180051078
CreateProcessAsUserW
0x180051048
CreateWellKnownSid
0x180051008
CredDeleteW
0x180051070
CredFree
0x180051058
CredReadW
0x180051060
CredWriteW
0x180051068
DuplicateTokenEx
0x1800510a0
EqualSid
0x180051088
EventActivityIdControl
0x180051098
EventRegister
0x180051038
EventUnregister
0x180051030
EventWriteTransfer
0x180051000
FreeSid
0x1800510c8
GetLengthSid
0x180051080
GetSidSubAuthorityCount
0x1800510b8
GetTokenInformation
0x1800510a8
ImpersonateSelf
0x180051028
LookupPrivilegeValueW
0x180051010
OpenProcessToken
0x180051050
OpenThreadToken
0x180051040
RevertToSelf
0x180051020
SetTokenInformation
0x1800510b0
_callnewh
0x1800515c0
calloc
0x1800515c8
free
0x1800515d8
malloc
0x1800515d0
___lc_codepage_func
0x180051620
___lc_locale_name_func
0x1800515e8
___mb_cur_max_func
0x1800515f8
__pctype_func
0x180051610
_lock_locales
0x180051618
_unlock_locales
0x180051600
localeconv
0x1800515f0
setlocale
0x180051608
_dsign
0x180051630
_cexit
0x180051648
_configure_narrow_argv
0x180051680
_crt_atexit
0x180051658
_errno
0x1800516a8
_execute_onexit_table
0x180051660
_initialize_narrow_environment
0x180051678
_initialize_onexit_table
0x180051670
_initterm
0x1800516a0
_initterm_e
0x180051650
_invalid_parameter_noinfo
0x180051698
_invalid_parameter_noinfo_noreturn
0x180051640
_register_onexit_function
0x180051668
_seh_filter_dll
0x180051688
abort
0x1800516b0
terminate
0x180051690
__stdio_common_vsprintf
0x1800516d8
__stdio_common_vsprintf_s
0x1800516d0
__stdio_common_vswprintf
0x1800516c8
__stdio_common_vswprintf_s
0x1800516c0
_stricmp
0x180051718
isalnum
0x180051708
isspace
0x180051700
strcpy_s
0x180051720
strncpy_s
0x180051710
wcscpy_s
0x1800516f8
wcsncmp
0x1800516f0
wcsncpy_s
0x1800516e8
BrokerConnector_CreateBrokerRpcConnectionAsync
0x180051140
BrokerConnector_Destroy
0x180051158
BrokerConnector_GetConnectionString
0x180051148
BrokerManager_DefaultConstruct
0x180051110
BrokerManager_Destroy
0x180051118
BrokerManager_GetConnectedClient
0x180051108
BrokerManagerClient_Create
0x1800510f0
BrokerManagerClient_CreateBrokerRpcConnection
0x1800510d8
BrokerManagerClient_CreateNewReference
0x180051138
BrokerManagerClient_Destroy
0x180051180
BrokerManagerClient_GetServerAddress
0x180051128
BrokerManagerClient_MapPath
0x180051120
BrokerManagerClient_PrepareForExternalBrokerLaunch
0x180051130
BrokerManagerClient_RepresentsLocalComputeSystem
0x1800510e8
BrokerRpcConnection_Destroy
0x180051188
BrokerRpcConnection_GetConnectionAddress
0x180051168
BrokerRpcConnection_GetConnectionAddressToBrokerManagerFromBroker
0x180051160
BrokerRpcConnection_GetHvSocketAddress
0x1800510f8
BrokerRpcConnection_GetRpcBindingHandle
0x1800510e0
BrokerRpcConnection_IsConnectedToSameBroker
0x180051100
ConnectionAddress_CreateHvSocketAddress
0x180051198
ConnectionAddress_CreateLocalAddress
0x180051190
ConnectionAddress_Destroy
0x180051150
ConnectionAddress_GetAddressType
0x180051178
ConnectionAddress_GetHvSocketAddress
0x180051170
KERNEL32.dll
102
AcquireSRWLockExclusive
0x180051428
AcquireSRWLockShared
0x180051468
AreFileApisANSI
0x180051300
CancelSynchronousIo
0x1800511d8
CloseHandle
0x180051390
CloseThreadpoolCleanupGroup
0x1800513c8
CloseThreadpoolCleanupGroupMembers
0x1800513d8
CloseThreadpoolWait
0x180051498
CloseThreadpoolWork
0x1800513a8
CreateFileW
0x180051408
CreatePipe
0x180051210
CreateProcessW
0x180051380
CreateThread
0x180051320
CreateThreadpoolCleanupGroup
0x1800513e0
CreateThreadpoolWait
0x180051490
CreateThreadpoolWork
0x1800513c0
DecodePointer
0x1800513e8
DeleteCriticalSection
0x1800513f0
DeleteProcThreadAttributeList
0x180051378
DisassociateCurrentThreadFromCallback
0x1800514b0
DuplicateHandle
0x1800511f8
EncodePointer
0x1800512b8
EnterCriticalSection
0x1800512c8
FindClose
0x180051458
FindFirstFileW
0x180051450
FormatMessageA
0x1800514c8
FreeLibrary
0x180051330
FreeLibraryAndExitThread
0x180051250
GetCurrentProcess
0x180051200
GetCurrentProcessId
0x180051270
GetCurrentThread
0x180051208
GetCurrentThreadId
0x1800514b8
GetExitCodeProcess
0x180051230
GetFileAttributesExW
0x180051440
GetFileInformationByHandleEx
0x1800512f8
GetLastError
0x180051398
GetLocaleInfoEx
0x1800514d0
GetModuleFileNameW
0x180051318
GetModuleHandleA
0x1800511e0
GetModuleHandleExW
0x180051388
GetModuleHandleW
0x1800513f8
GetProcAddress
0x180051368
GetProcessHeap
0x180051350
GetProcessId
0x180051220
GetStdHandle
0x180051358
GetSystemInfo
0x180051430
GetSystemTimeAsFileTime
0x1800512d0
GetTickCount64
0x180051460
GetVersion
0x1800511e8
HeapAlloc
0x180051348
HeapFree
0x180051340
InitializeCriticalSectionAndSpinCount
0x180051248
InitializeCriticalSectionEx
0x180051240
InitializeProcThreadAttributeList
0x180051360
InitializeSListHead
0x1800512b0
InitOnceBeginInitialize
0x1800512d8
InitOnceComplete
0x1800512e0
InterlockedFlushSList
0x180051260
IsDebuggerPresent
0x180051278
IsProcessorFeaturePresent
0x180051280
LeaveCriticalSection
0x1800512c0
LoadLibraryExA
0x180051418
LoadLibraryExW
0x180051338
LocalFree
0x1800513d0
MultiByteToWideChar
0x180051308
OpenProcess
0x180051328
ProcessIdToSessionId
0x180051228
QueryPerformanceCounter
0x1800512f0
QueryPerformanceFrequency
0x1800512e8
RaiseException
0x180051400
ReadFile
0x1800511d0
ReleaseSRWLockExclusive
0x180051420
ReleaseSRWLockShared
0x180051470
RtlCaptureContext
0x1800512a8
RtlLookupFunctionEntry
0x1800512a0
RtlPcToFileHeader
0x180051258
RtlUnwindEx
0x180051268
RtlVirtualUnwind
0x180051298
SetLastError
0x1800511f0
SetThreadpoolWait
0x1800514a0
SetUnhandledExceptionFilter
0x180051288
SleepConditionVariableSRW
0x180051478
SleepEx
0x180051448
SubmitThreadpoolWork
0x1800513a0
TerminateProcess
0x180051238
TlsAlloc
0x1800511a8
TlsFree
0x1800511c0
TlsGetValue
0x1800511b0
TlsSetValue
0x1800511b8
TryAcquireSRWLockExclusive
0x1800514c0
UnhandledExceptionFilter
0x180051290
UpdateProcThreadAttribute
0x180051370
VerifyVersionInfoW
0x1800513b8
VerSetConditionMask
0x1800513b0
VirtualProtect
0x180051410
VirtualQuery
0x180051438
WaitForSingleObject
0x180051218
WaitForThreadpoolWaitCallbacks
0x1800514a8
WaitForThreadpoolWorkCallbacks
0x1800511c8
WakeAllConditionVariable
0x180051480
WakeConditionVariable
0x180051488
WideCharToMultiByte
0x180051310
RtlAnsiStringToUnicodeString
0x180051730
RtlFreeUnicodeString
0x180051738
RtlInitAnsiString
0x180051740
SysAllocString
0x1800514e0
RPCRT4.dll
21
Ndr64AsyncClientCall
0x180051580
Ndr64AsyncServerCallAll
0x180051558
NdrAsyncServerCall
0x180051560
NdrClientCall3
0x180051588
NdrServerCall2
0x180051568
NdrServerCallAll
0x180051590
RpcAsyncCancelCall
0x180051528
RpcAsyncCompleteCall
0x180051530
RpcAsyncInitializeHandle
0x180051520
RpcBindingToStringBindingW
0x180051508
RpcErrorEndEnumeration
0x180051548
RpcErrorGetNextRecord
0x180051538
RpcErrorStartEnumeration
0x180051540
RpcExceptionFilter
0x180051578
RpcServerInqBindingHandle
0x1800514f0
RpcServerInqCallAttributesW
0x1800514f8
RpcServerSubscribeForNotification
0x180051518
RpcServerUnsubscribeForNotification
0x180051570
RpcSsDestroyClientContext
0x180051550
RpcStringBindingParseW
0x180051500
RpcStringFreeW
0x180051510
CreateEnvironmentBlock
0x1800515a8
DestroyEnvironmentBlock
0x1800515a0
ExpandEnvironmentStringsForUserW
0x1800515b0
No function matches your filter.