PasswordEnrollmentManager.dll
v10.0.26100.7824
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x8bf0
DllGetActivationFactory
#2 · 0x8c20
DllGetClassObject
#3 · 0x8c60
No function matches your filter.
Imported DLLs & functions 197
ApiSetQueryApiSetPresence
0x180024960
CoCreateFreeThreadedMarshaler
0x1800249a0
CoCreateInstance
0x180024980
CoGetInterfaceAndReleaseStream
0x180024998
CoMarshalInterface
0x180024988
CoReleaseMarshalData
0x1800249c0
CoTaskMemAlloc
0x1800249b0
CoTaskMemFree
0x1800249a8
CoTaskMemRealloc
0x180024970
CoWaitForMultipleHandles
0x180024990
CreateStreamOnHGlobal
0x180024978
PropVariantClear
0x1800249b8
RoGetAgileReference
0x1800249d0
DebugBreak
0x1800249e0
IsDebuggerPresent
0x1800249f0
OutputDebugStringW
0x1800249e8
DelayLoadFailureHook
0x180024a00
ResolveDelayLoadedAPI
0x180024a10
GetLastError
0x180024a40
RaiseException
0x180024a30
SetLastError
0x180024a38
SetUnhandledExceptionFilter
0x180024a20
UnhandledExceptionFilter
0x180024a28
CloseHandle
0x180024a50
GetProcessHeap
0x180024a68
HeapAlloc
0x180024a70
HeapFree
0x180024a60
InitializeSListHead
0x180024a98
DisableThreadLibraryCalls
0x180024ac0
FindResourceExW
0x180024ad8
GetModuleFileNameA
0x180024aa8
GetModuleHandleExW
0x180024ab0
GetModuleHandleW
0x180024ab8
GetProcAddress
0x180024ae0
LoadResource
0x180024ad0
LockResource
0x180024ac8
FormatMessageW
0x180024af0
GetCurrentProcess
0x180024b28
GetCurrentProcessId
0x180024b20
GetCurrentThread
0x180024b10
GetCurrentThreadId
0x180024b08
OpenProcessToken
0x180024b18
OpenThreadToken
0x180024b00
TerminateProcess
0x180024b30
IsProcessorFeaturePresent
0x180024b40
OpenProcess
0x180024b48
QueryPerformanceCounter
0x180024b58
RegCloseKey
0x180024b78
RegCreateKeyExW
0x180024b98
RegEnumValueW
0x180024ba0
RegGetValueW
0x180024b88
RegOpenKeyExW
0x180024b70
RegQueryInfoKeyW
0x180024b90
RegQueryValueExW
0x180024b80
RegSetValueExW
0x180024b68
RtlCaptureContext
0x180024bc0
RtlLookupFunctionEntry
0x180024bb0
RtlVirtualUnwind
0x180024bb8
StrChrW
0x180024bd0
lstrcmpiW
0x180024bf8
AcquireSRWLockExclusive
0x180024c10
AcquireSRWLockShared
0x180024c48
CreateEventExW
0x180024c30
CreateEventW
0x180024c58
CreateMutexExW
0x180024c40
CreateSemaphoreExW
0x180024ca8
DeleteCriticalSection
0x180024c20
EnterCriticalSection
0x180024cb0
InitializeCriticalSectionAndSpinCount
0x180024c28
InitializeCriticalSectionEx
0x180024ca0
InitializeSRWLock
0x180024c90
LeaveCriticalSection
0x180024c50
OpenEventW
0x180024cb8
OpenSemaphoreW
0x180024c60
ReleaseMutex
0x180024c78
ReleaseSemaphore
0x180024c98
ReleaseSRWLockExclusive
0x180024c08
ReleaseSRWLockShared
0x180024c18
ResetEvent
0x180024c80
SetEvent
0x180024c38
TryAcquireSRWLockExclusive
0x180024c70
WaitForSingleObject
0x180024c88
WaitForSingleObjectEx
0x180024c68
InitOnceBeginInitialize
0x180024cd8
InitOnceComplete
0x180024cd0
InitOnceExecuteOnce
0x180024cc8
GetComputerNameExW
0x180024cf8
GetSystemTimeAsFileTime
0x180024ce8
GetVersionExW
0x180024cf0
CloseThreadpoolTimer
0x180024d08
CreateThreadpoolTimer
0x180024d18
SetThreadpoolTimer
0x180024d10
WaitForThreadpoolTimerCallbacks
0x180024d20
GetRestrictedErrorInfo
0x180024d48
RoOriginateError
0x180024d60
RoOriginateErrorW
0x180024d50
RoTransformError
0x180024d58
SetRestrictedErrorInfo
0x180024d68
IsErrorPropagationEnabled
0x180024d78
RoGetMatchingRestrictedErrorInfo
0x180024d88
RoReportFailedDelegate
0x180024d80
RoActivateInstance
0x180024d98
RoGetActivationFactory
0x180024da0
WindowsCompareStringOrdinal
0x180024db8
WindowsCreateString
0x180024dd0
WindowsCreateStringReference
0x180024db0
WindowsDeleteString
0x180024dc0
WindowsDuplicateString
0x180024dc8
WindowsGetStringRawBuffer
0x180024dd8
WindowsIsStringEmpty
0x180024de8
WindowsStringHasEmbeddedNull
0x180024de0
__C_specific_handler
0x180024e58
__current_exception
0x180024e60
__current_exception_context
0x180024e68
__CxxFrameHandler3
0x180024ec8
__CxxFrameHandler4
0x180024ee0
__std_terminate
0x180024ed8
_CxxThrowException
0x180024ed0
_o___std_exception_copy
0x180024e90
_o___std_exception_destroy
0x180024e88
_o___std_type_info_destroy_list
0x180024e70
_o___stdio_common_vswprintf
0x180024ea0
_o__callnewh
0x180024eb8
_o__cexit
0x180024eb0
_o__configure_narrow_argv
0x180024ea8
_o__crt_atexit
0x180024e98
_o__errno
0x180024e80
_o__execute_onexit_table
0x180024e78
_o__initialize_narrow_environment
0x180024df8
_o__initialize_onexit_table
0x180024e00
_o__invalid_parameter_noinfo
0x180024e08
_o__purecall
0x180024e10
_o__register_onexit_function
0x180024e18
_o__seh_filter_dll
0x180024e20
_o__wtoi
0x180024e38
_o_free
0x180024e40
_o_malloc
0x180024e48
_o_terminate
0x180024e50
memcmp
0x180024e28
memcpy
0x180024ee8
memmove
0x180024e30
wcschr
0x180024ec0
memset
0x180024f10
EventActivityIdControl
0x180024f38
EventRegister
0x180024f40
EventSetInformation
0x180024f20
EventUnregister
0x180024f30
EventWriteTransfer
0x180024f28
EnumDisplayDevicesW
0x180024f50
GetSystemMetrics
0x180024f58
PowerDeterminePlatformRoleEx
0x180024f68
CheckTokenMembership
0x180024f88
CopySid
0x180024f80
GetSidSubAuthority
0x180024f90
GetSidSubAuthorityCount
0x180024f78
GetTokenInformation
0x180024f98
IsValidSid
0x180024fa0
LsaLookupUserAccountType
0x180024fb0
LsaClose
0x180024fc0
LsaFreeMemory
0x180024fd0
LsaLookupSids
0x180024fd8
LsaOpenPolicy
0x180024fc8
ConvertSidToStringSidW
0x180024fe8
ConvertStringSidToSidW
0x180024ff0
IsOS
0x180025000
SHTaskPoolAllowThreadReuse
0x180025018
SHTaskPoolQueueTask
0x180025010
NetApiBufferFree
0x180025028
RtlAcquireResourceExclusive
0x180025050
RtlDeleteResource
0x180025070
RtlInitializeResource
0x180025038
RtlInitString
0x180025060
RtlIsMultiSessionSku
0x180025040
RtlIsMultiUsersInSessionSku
0x180025068
RtlNtStatusToDosError
0x180025048
RtlReleaseResource
0x180025058
NetUserGetInfo
0x180025080
0x180024918
GetUserNameExW
0x180024938
LsaCallAuthenticationPackage
0x180024940
LsaConnectUntrusted
0x180024950
LsaDeregisterLogonProcess
0x180024948
LsaFreeReturnBuffer
0x180024930
LsaLookupAuthenticationPackage
0x180024928
No function matches your filter.