winlogonext.dll

Description: WinLogon Utility Extension DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7c2811e14b42377e448012a0251df317

File Size: 85.0 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 4

Exported Functions

  • ConfigureUserArso (Ordinal: 1, Address: 0x1040)
  • EnableDisableElevationForSessionWorker (Ordinal: 2, Address: 0x1010)
  • NotifyInteractiveSessionLogoff (Ordinal: 3, Address: 0x1030)
  • UpdateUserTokenSessionId (Ordinal: 4, Address: 0x1050)
  • WinLogonExt (Ordinal: 5, Address: 0x1060)

Imported DLLs & Functions

api-ms-win-core-errorhandling-l1-1-0.dll
  • SetUnhandledExceptionFilter (Address: 0x18000d5e0)
  • UnhandledExceptionFilter (Address: 0x18000d5e8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18000d5f8)
  • GetCurrentProcessId (Address: 0x18000d608)
  • GetCurrentThreadId (Address: 0x18000d600)
  • TerminateProcess (Address: 0x18000d610)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18000d620)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18000d638)
  • RtlLookupFunctionEntry (Address: 0x18000d630)
  • RtlVirtualUnwind (Address: 0x18000d640)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x18000d650)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18000d668)
  • GetTickCount (Address: 0x18000d660)
api-ms-win-security-base-l1-1-0.dll
  • CreateWellKnownSid (Address: 0x18000d678)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x18000d698)
  • OpenSCManagerW (Address: 0x18000d690)
  • OpenServiceW (Address: 0x18000d688)
  • StartServiceW (Address: 0x18000d6a0)
api-ms-win-service-winsvc-l1-1-0.dll
  • QueryServiceStatus (Address: 0x18000d6b0)
KERNEL32.dll
  • GetComputerNameExW (Address: 0x18000d558)
  • GetLastError (Address: 0x18000d568)
  • LocalFree (Address: 0x18000d560)
KERNELBASE.dll
  • LocalAlloc (Address: 0x18000d578)
msvcrt.dll
  • __C_specific_handler (Address: 0x18000d6e8)
  • _amsg_exit (Address: 0x18000d6d8)
  • _initterm (Address: 0x18000d6d0)
  • _wcsnicmp (Address: 0x18000d6c0)
  • _XcptFilter (Address: 0x18000d6e0)
  • free (Address: 0x18000d6f0)
  • malloc (Address: 0x18000d6c8)
  • memcpy (Address: 0x18000d6f8)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x18000d5b8)
  • I_RpcMapWin32Status (Address: 0x18000d5a0)
  • NdrClientCall3 (Address: 0x18000d588)
  • RpcBindingBind (Address: 0x18000d5a8)
  • RpcBindingCreateW (Address: 0x18000d5c8)
  • RpcBindingFree (Address: 0x18000d590)
  • RpcBindingFromStringBindingW (Address: 0x18000d5d0)
  • RpcBindingSetAuthInfoExW (Address: 0x18000d5b0)
  • RpcStringBindingComposeW (Address: 0x18000d5c0)
  • RpcStringFreeW (Address: 0x18000d598)