AuthBroker.dll
v10.0.19041.6033
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 11
FindCallingThreadImmersiveWindow
#1 · 0x17cb0
AuthBrokerClearThreadClientContext
#2 · 0x1acd0
AuthBrokerCreateClientContext
#3 · 0x92b0
AuthBrokerFreeClientContext
#4 · 0x93b0
AuthBrokerSetThreadClientContext
#5 · 0x1ad90
DllCanUnloadNow
#6 · 0x17b80
DllGetActivationFactory
#7 · 0x17bc0
DllGetClassObject
#8 · 0x17be0
DllInstall
#9 · 0x1aea0
DllRegisterServer
#10 · 0x95c0
PurgeAuthHostSsoCache
#11 · 0x1af00
No function matches your filter.
Imported DLLs & functions 240
ApiSetQueryApiSetPresence
0x1002607c
CStdStubBuffer2_Connect
0x100260a4
CStdStubBuffer2_CountRefs
0x10026088
CStdStubBuffer2_Disconnect
0x10026084
CStdStubBuffer2_QueryInterface
0x1002608c
NdrProxyForwardingFunction3
0x1002609c
NdrProxyForwardingFunction4
0x10026090
NdrProxyForwardingFunction5
0x10026098
ObjectStublessClient10
0x100260b8
ObjectStublessClient11
0x100260a0
ObjectStublessClient12
0x100260d4
ObjectStublessClient13
0x100260e0
ObjectStublessClient14
0x100260d0
ObjectStublessClient15
0x100260e8
ObjectStublessClient16
0x100260a8
ObjectStublessClient17
0x100260c0
ObjectStublessClient18
0x100260ac
ObjectStublessClient19
0x100260d8
ObjectStublessClient20
0x100260b0
ObjectStublessClient21
0x100260b4
ObjectStublessClient3
0x100260bc
ObjectStublessClient4
0x10026094
ObjectStublessClient5
0x100260dc
ObjectStublessClient6
0x100260cc
ObjectStublessClient7
0x100260e4
ObjectStublessClient8
0x100260c8
ObjectStublessClient9
0x100260c4
DebugBreak
0x100260f0
IsDebuggerPresent
0x100260f4
OutputDebugStringW
0x100260f8
DelayLoadFailureHook
0x10026100
ResolveDelayLoadedAPI
0x10026108
GetLastError
0x10026120
RaiseException
0x10026118
SetLastError
0x1002611c
SetUnhandledExceptionFilter
0x10026114
UnhandledExceptionFilter
0x10026110
CreateFileW
0x10026128
GetProcessHeap
0x10026140
HeapAlloc
0x10026144
HeapFree
0x1002613c
LocalAlloc
0x10026154
LocalFree
0x10026150
LocalReAlloc
0x1002614c
GetModuleFileNameA
0x10026168
GetModuleHandleExW
0x10026164
GetModuleHandleW
0x1002616c
GetProcAddress
0x1002615c
LoadStringW
0x10026160
FormatMessageW
0x10026174
HWND_UserFree
0x1002617c
HWND_UserMarshal
0x10026188
HWND_UserSize
0x10026180
HWND_UserUnmarshal
0x10026184
CreateProcessW
0x100261a0
CreateThread
0x100261b4
DeleteProcThreadAttributeList
0x1002619c
GetCurrentProcess
0x100261d4
GetCurrentProcessId
0x100261cc
GetCurrentThread
0x100261c0
GetCurrentThreadId
0x100261c8
GetExitCodeProcess
0x10026190
GetProcessId
0x100261bc
GetProcessIdOfThread
0x100261e0
InitializeProcThreadAttributeList
0x100261a8
OpenProcessToken
0x10026198
OpenThread
0x100261e4
OpenThreadToken
0x100261c4
ResumeThread
0x100261b8
SetThreadToken
0x10026194
TerminateProcess
0x100261d8
TlsAlloc
0x100261ac
TlsFree
0x100261d0
TlsGetValue
0x100261b0
TlsSetValue
0x100261dc
UpdateProcThreadAttribute
0x100261a4
OpenProcess
0x100261ec
QueryPerformanceCounter
0x100261f4
RegCloseKey
0x1002620c
RegCreateKeyExW
0x10026210
RegDeleteValueW
0x1002621c
RegEnumKeyExW
0x10026204
RegGetValueW
0x10026218
RegOpenKeyExW
0x10026200
RegQueryInfoKeyW
0x10026208
RegQueryValueExW
0x100261fc
RegSetValueExW
0x10026214
AcquireSRWLockExclusive
0x10026224
AcquireSRWLockShared
0x10026244
CreateEventExW
0x1002622c
CreateEventW
0x1002625c
CreateMutexExW
0x10026240
CreateMutexW
0x1002623c
CreateSemaphoreExW
0x10026230
DeleteCriticalSection
0x10026250
EnterCriticalSection
0x10026268
InitializeCriticalSectionEx
0x10026264
LeaveCriticalSection
0x10026248
OpenSemaphoreW
0x10026238
ReleaseMutex
0x10026260
ReleaseSemaphore
0x10026228
ReleaseSRWLockExclusive
0x10026234
ReleaseSRWLockShared
0x10026270
SetEvent
0x10026258
WaitForMultipleObjectsEx
0x10026254
WaitForSingleObject
0x1002626c
WaitForSingleObjectEx
0x1002624c
InitOnceBeginInitialize
0x10026284
InitOnceComplete
0x10026278
InitOnceExecuteOnce
0x1002627c
Sleep
0x10026280
WaitForMultipleObjects
0x1002628c
GetSystemTime
0x10026298
GetSystemTimeAsFileTime
0x1002629c
GetTickCount
0x10026294
CloseThreadpoolTimer
0x100262b4
CloseThreadpoolWork
0x100262b0
CreateThreadpoolTimer
0x100262ac
CreateThreadpoolWork
0x100262bc
FreeLibraryWhenCallbackReturns
0x100262b8
SetThreadpoolTimer
0x100262c0
SubmitThreadpoolWork
0x100262a4
WaitForThreadpoolTimerCallbacks
0x100262a8
ParseURLW
0x100262c8
GetRestrictedErrorInfo
0x100262dc
RoOriginateError
0x100262e0
RoOriginateErrorW
0x100262e4
RoTransformError
0x100262e8
SetRestrictedErrorInfo
0x100262ec
IsErrorPropagationEnabled
0x100262f4
RoGetMatchingRestrictedErrorInfo
0x100262fc
RoReportFailedDelegate
0x100262f8
RoActivateInstance
0x10026308
RoGetActivationFactory
0x10026310
RoInitialize
0x10026304
RoUninitialize
0x1002630c
HSTRING_UserFree
0x10026344
HSTRING_UserMarshal
0x1002633c
HSTRING_UserSize
0x10026340
HSTRING_UserUnmarshal
0x1002631c
WindowsCompareStringOrdinal
0x10026348
WindowsCreateString
0x10026338
WindowsCreateStringReference
0x10026318
WindowsDeleteString
0x10026328
WindowsDuplicateString
0x10026324
WindowsGetStringLen
0x10026320
WindowsGetStringRawBuffer
0x10026330
WindowsIsStringEmpty
0x1002632c
WindowsStringHasEmbeddedNull
0x10026334
IsWow64Process
0x10026358
Wow64DisableWow64FsRedirection
0x10026354
Wow64RevertWow64FsRedirection
0x10026350
GetTraceEnableFlags
0x10026360
GetTraceEnableLevel
0x10026374
GetTraceLoggerHandle
0x10026364
RegisterTraceGuidsW
0x10026368
TraceMessage
0x10026370
UnregisterTraceGuids
0x1002636c
EventActivityIdControl
0x1002637c
EventRegister
0x10026384
EventSetInformation
0x10026380
EventUnregister
0x10026388
EventWriteTransfer
0x1002638c
GetAppContainerNamedObjectPath
0x10026394
AllocateAndInitializeSid
0x100263b0
CopySid
0x100263ac
FreeSid
0x100263b4
GetLengthSid
0x100263a4
GetSidSubAuthorityCount
0x1002639c
GetTokenInformation
0x100263a8
ImpersonateLoggedOnUser
0x100263a0
CheckTokenCapability
0x100263bc
GetSecurityInfo
0x100263c4
AuthzAccessCheck
0x10026004
AuthzFreeContext
0x1002600c
AuthzFreeResourceManager
0x10026008
AuthzInitializeContextFromSid
0x10026000
AuthzInitializeResourceManager
0x10026010
0x100263cc
msvcrt.dll
19
__CxxFrameHandler3
0x100263d4
__dllonexit
0x100263f0
_amsg_exit
0x100263fc
_callnewh
0x10026418
_except_handler4_common
0x10026400
_initterm
0x10026414
_lock
0x100263f4
_onexit
0x100263ec
_purecall
0x1002640c
_unlock
0x10026408
_vsnwprintf
0x100263dc
_XcptFilter
0x100263d8
free
0x100263e0
malloc
0x100263f8
memcmp
0x100263e4
memcpy
0x100263e8
memcpy_s
0x10026410
memmove_s
0x10026404
memset
0x1002641c
NetApiBufferFree
0x10026424
ntdll.dll
13
_wcsicmp
0x10026448
_wcsnicmp
0x10026440
RtlAllocateAndInitializeSidEx
0x1002644c
RtlDeleteCriticalSection
0x1002642c
RtlDeriveCapabilitySidsFromName
0x10026450
RtlEnterCriticalSection
0x10026430
RtlEqualSid
0x10026438
RtlInitializeCriticalSection
0x10026458
RtlInitUnicodeString
0x10026454
RtlIsStateSeparationEnabled
0x10026444
RtlLeaveCriticalSection
0x10026434
wcstoul
0x1002645c
WinSqmAddToStream
0x1002643c
RPCRT4.dll
21
CStdStubBuffer_AddRef
0x10026050
CStdStubBuffer_Connect
0x10026034
CStdStubBuffer_CountRefs
0x10026030
CStdStubBuffer_DebugServerQueryInterface
0x10026060
CStdStubBuffer_DebugServerRelease
0x10026018
CStdStubBuffer_Disconnect
0x1002601c
CStdStubBuffer_Invoke
0x10026054
CStdStubBuffer_IsIIDSupported
0x10026058
CStdStubBuffer_QueryInterface
0x10026024
I_RpcBindingInqLocalClientPID
0x1002605c
IUnknown_AddRef_Proxy
0x1002602c
IUnknown_QueryInterface_Proxy
0x10026028
IUnknown_Release_Proxy
0x1002603c
NdrCStdStubBuffer_Release
0x1002604c
NdrCStdStubBuffer2_Release
0x10026040
NdrDllCanUnloadNow
0x10026048
NdrDllGetClassObject
0x10026044
NdrOleAllocate
0x10026020
NdrOleFree
0x10026068
NdrStubCall2
0x10026064
NdrStubForwardingFunction
0x10026038
NetGetJoinInformation
0x10026464
No function matches your filter.