CapabilityAccessHandlers.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x15d0
DllGetClassObject
#2 · 0x1620
No function matches your filter.
Imported DLLs & functions 109
GetPackageFamilyName
0x18000b948
CLSIDFromString
0x18000b958
CoCreateInstance
0x18000b980
CoTaskMemAlloc
0x18000b978
CoTaskMemFree
0x18000b960
StringFromCLSID
0x18000b970
StringFromGUID2
0x18000b968
DebugBreak
0x18000b9a0
IsDebuggerPresent
0x18000b990
OutputDebugStringW
0x18000b998
DelayLoadFailureHook
0x18000b9b0
ResolveDelayLoadedAPI
0x18000b9c0
GetLastError
0x18000b9d0
RaiseException
0x18000b9f0
SetLastError
0x18000b9e8
SetUnhandledExceptionFilter
0x18000b9e0
UnhandledExceptionFilter
0x18000b9d8
CloseHandle
0x18000ba00
GetProcessHeap
0x18000ba18
HeapAlloc
0x18000ba20
HeapFree
0x18000ba10
InitializeSListHead
0x18000ba48
DisableThreadLibraryCalls
0x18000ba60
GetModuleFileNameA
0x18000ba58
GetModuleHandleExW
0x18000ba78
GetModuleHandleW
0x18000ba70
GetProcAddress
0x18000ba68
FormatMessageW
0x18000ba88
GetCurrentProcess
0x18000baa8
GetCurrentProcessId
0x18000ba98
GetCurrentThreadId
0x18000bab8
OpenProcessToken
0x18000baa0
TerminateProcess
0x18000bab0
IsProcessorFeaturePresent
0x18000bad0
OpenProcess
0x18000bac8
QueryPerformanceCounter
0x18000bae0
K32EnumProcesses
0x18000baf0
RegCloseKey
0x18000bb10
RegGetValueW
0x18000bb00
RegOpenKeyExW
0x18000bb08
RtlCaptureContext
0x18000bb30
RtlLookupFunctionEntry
0x18000bb28
RtlVirtualUnwind
0x18000bb20
CompareStringOrdinal
0x18000bb40
AcquireSRWLockExclusive
0x18000bb90
AcquireSRWLockShared
0x18000bb80
CreateMutexExW
0x18000bba0
CreateSemaphoreExW
0x18000bb60
OpenSemaphoreW
0x18000bb50
ReleaseMutex
0x18000bb70
ReleaseSemaphore
0x18000bb58
ReleaseSRWLockExclusive
0x18000bb98
ReleaseSRWLockShared
0x18000bb88
WaitForSingleObject
0x18000bb68
WaitForSingleObjectEx
0x18000bb78
InitOnceExecuteOnce
0x18000bbb0
GetSystemTimeAsFileTime
0x18000bbc0
RoOriginateError
0x18000bbe8
RoGetActivationFactory
0x18000bbf8
WindowsCreateStringReference
0x18000bc08
__C_specific_handler
0x18000bc80
__CxxFrameHandler3
0x18000bc88
__CxxFrameHandler4
0x18000bcd8
_CxxThrowException
0x18000bc90
_o___std_exception_copy
0x18000bcd0
_o___std_exception_destroy
0x18000bcc8
_o___std_type_info_destroy_list
0x18000bcc0
_o___stdio_common_vsnprintf_s
0x18000bcb0
_o___stdio_common_vswprintf
0x18000bca8
_o__callnewh
0x18000bca0
_o__cexit
0x18000bc98
_o__configure_narrow_argv
0x18000bcb8
_o__crt_atexit
0x18000bc60
_o__errno
0x18000bc18
_o__execute_onexit_table
0x18000bc20
_o__initialize_narrow_environment
0x18000bc28
_o__initialize_onexit_table
0x18000bc30
_o__invalid_parameter_noinfo
0x18000bc38
_o__purecall
0x18000bc40
_o__register_onexit_function
0x18000bc48
_o__seh_filter_dll
0x18000bc50
_o_free
0x18000bc68
_o_malloc
0x18000bc70
_o_memcpy_s
0x18000bc78
memcpy
0x18000bc58
memset
0x18000bd00
CM_Get_Device_Interface_PropertyW
0x18000bd10
DevFreeObjectProperties
0x18000bd20
DevFreeObjects
0x18000bd30
DevGetObjectProperties
0x18000bd28
DevGetObjects
0x18000bd38
DevGetObjectPropertiesEx
0x18000bd48
DuplicateTokenEx
0x18000bd68
EqualSid
0x18000bd58
GetTokenInformation
0x18000bd60
CheckTokenCapability
0x18000bd78
CapabilityCheck
0x18000bd88
ConvertSidToStringSidW
0x18000bda0
ConvertStringSidToSidW
0x18000bd98
NtSetInformationProcess
0x18000bdc8
RtlDeriveCapabilitySidsFromName
0x18000bdb0
RtlGUIDFromString
0x18000bdc0
RtlInitUnicodeString
0x18000bdb8
No function matches your filter.