CapabilityAccessManager.dll
v10.0.19041.6093
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
ServiceMain
#1 · 0x4f20
DllCanUnloadNow
#2 · 0x3c30
DllGetClassObject
#3 · 0x3cc0
No function matches your filter.
Imported DLLs & functions 191
ApiSetQueryApiSetPresence
0x18004d380
CLSIDFromString
0x18004d390
CoAddRefServerProcess
0x18004d3f0
CoCreateFreeThreadedMarshaler
0x18004d398
CoCreateInstance
0x18004d3e0
CoDisconnectContext
0x18004d3d0
CoGetApartmentType
0x18004d3b0
CoImpersonateClient
0x18004d3a0
CoRegisterClassObject
0x18004d3d8
CoReleaseServerProcess
0x18004d3e8
CoResumeClassObjects
0x18004d3c8
CoRevertToSelf
0x18004d3a8
CoRevokeClassObject
0x18004d3c0
CoTaskMemAlloc
0x18004d3b8
CoTaskMemFree
0x18004d3f8
CoWaitForMultipleHandles
0x18004d400
DebugBreak
0x18004d420
IsDebuggerPresent
0x18004d410
OutputDebugStringW
0x18004d418
DelayLoadFailureHook
0x18004d430
ResolveDelayLoadedAPI
0x18004d440
GetLastError
0x18004d460
RaiseException
0x18004d458
SetLastError
0x18004d450
SetUnhandledExceptionFilter
0x18004d470
UnhandledExceptionFilter
0x18004d468
CloseHandle
0x18004d480
GetProcessHeap
0x18004d498
HeapAlloc
0x18004d4a0
HeapFree
0x18004d490
InitializeSListHead
0x18004d4c8
DisableThreadLibraryCalls
0x18004d4e8
GetModuleFileNameA
0x18004d4f0
GetModuleHandleExW
0x18004d4f8
GetModuleHandleW
0x18004d4e0
GetProcAddress
0x18004d4d8
FormatMessageW
0x18004d508
GetCurrentProcess
0x18004d518
GetCurrentProcessId
0x18004d540
GetCurrentThread
0x18004d538
GetCurrentThreadId
0x18004d528
OpenProcessToken
0x18004d520
OpenThreadToken
0x18004d548
TerminateProcess
0x18004d530
IsProcessorFeaturePresent
0x18004d560
OpenProcess
0x18004d558
QueryPerformanceCounter
0x18004d570
K32GetProcessImageFileNameW
0x18004d588
QueryFullProcessImageNameW
0x18004d580
QuirkIsEnabledForProcess
0x18004d598
RegCloseKey
0x18004d5d0
RegCreateKeyExW
0x18004d5b0
RegDeleteTreeW
0x18004d5e0
RegEnumKeyExW
0x18004d5c8
RegGetValueW
0x18004d5a8
RegOpenKeyExW
0x18004d5b8
RegQueryInfoKeyW
0x18004d5c0
RegSetValueExW
0x18004d5d8
RtlCaptureContext
0x18004d600
RtlLookupFunctionEntry
0x18004d5f8
RtlVirtualUnwind
0x18004d5f0
CompareStringOrdinal
0x18004d610
AcquireSRWLockExclusive
0x18004d670
AcquireSRWLockShared
0x18004d688
CreateEventExW
0x18004d628
CreateEventW
0x18004d6b0
CreateMutexExW
0x18004d6a0
CreateSemaphoreExW
0x18004d668
DeleteCriticalSection
0x18004d6b8
EnterCriticalSection
0x18004d680
InitializeCriticalSectionAndSpinCount
0x18004d658
InitializeCriticalSectionEx
0x18004d648
InitializeSRWLock
0x18004d650
LeaveCriticalSection
0x18004d6a8
OpenSemaphoreW
0x18004d660
ReleaseMutex
0x18004d638
ReleaseSemaphore
0x18004d698
ReleaseSRWLockExclusive
0x18004d630
ReleaseSRWLockShared
0x18004d678
SetEvent
0x18004d690
WaitForSingleObject
0x18004d620
WaitForSingleObjectEx
0x18004d640
InitOnceBeginInitialize
0x18004d6d0
InitOnceComplete
0x18004d6c8
InitOnceExecuteOnce
0x18004d6d8
GetSystemTimeAsFileTime
0x18004d6e8
CloseThreadpoolTimer
0x18004d720
CloseThreadpoolWait
0x18004d710
CreateThreadpoolTimer
0x18004d718
CreateThreadpoolWait
0x18004d700
SetThreadpoolTimer
0x18004d728
SetThreadpoolWait
0x18004d708
TrySubmitThreadpoolCallback
0x18004d730
WaitForThreadpoolTimerCallbacks
0x18004d6f8
RoOriginateError
0x18004d760
RoOriginateErrorW
0x18004d768
RoTransformError
0x18004d758
RoActivateInstance
0x18004d798
RoGetActivationFactory
0x18004d7a0
RoInitialize
0x18004d790
RoRegisterActivationFactories
0x18004d788
RoRevokeActivationFactories
0x18004d778
RoUninitialize
0x18004d780
WindowsCreateString
0x18004d7b0
WindowsCreateStringReference
0x18004d7b8
WindowsDeleteString
0x18004d7d0
WindowsDuplicateString
0x18004d7c0
WindowsGetStringRawBuffer
0x18004d7c8
WindowsIsStringEmpty
0x18004d7d8
WindowsStringHasEmbeddedNull
0x18004d7e0
ceilf
0x18004d7f0
__C_specific_handler
0x18004d878
__CxxFrameHandler3
0x18004d880
__CxxFrameHandler4
0x18004d8f0
__std_terminate
0x18004d8d8
_CxxThrowException
0x18004d888
_o___std_exception_copy
0x18004d8f8
_o___std_exception_destroy
0x18004d8e8
_o___std_type_info_destroy_list
0x18004d8e0
_o___stdio_common_vsnprintf_s
0x18004d8d0
_o___stdio_common_vswprintf
0x18004d8c0
_o__callnewh
0x18004d8b8
_o__cexit
0x18004d8b0
_o__configure_narrow_argv
0x18004d8a8
_o__crt_atexit
0x18004d8a0
_o__errno
0x18004d898
_o__execute_onexit_table
0x18004d890
_o__initialize_narrow_environment
0x18004d800
_o__initialize_onexit_table
0x18004d808
_o__invalid_parameter_noinfo
0x18004d810
_o__invalid_parameter_noinfo_noreturn
0x18004d818
_o__purecall
0x18004d820
_o__register_onexit_function
0x18004d828
_o__seh_filter_dll
0x18004d830
_o__wcsicmp
0x18004d840
_o__wcsnicmp
0x18004d848
_o_free
0x18004d850
_o_malloc
0x18004d858
_o_realloc
0x18004d860
_o_terminate
0x18004d868
_o_towlower
0x18004d870
memcmp
0x18004d900
memcpy
0x18004d908
memmove
0x18004d838
wcschr
0x18004d8c8
memset
0x18004d930
GetTraceEnableFlags
0x18004d968
GetTraceEnableLevel
0x18004d960
GetTraceLoggerHandle
0x18004d958
RegisterTraceGuidsW
0x18004d950
TraceMessage
0x18004d940
UnregisterTraceGuids
0x18004d948
EventRegister
0x18004d978
EventSetInformation
0x18004d988
EventUnregister
0x18004d980
EventWriteTransfer
0x18004d990
LsaLookupClose
0x18004d9a0
LsaLookupFreeMemory
0x18004d9b0
LsaLookupGetDomainInfo
0x18004d9b8
LsaLookupOpenLocalPolicy
0x18004d9a8
RegisterServiceCtrlHandlerExW
0x18004d9c8
SetServiceStatus
0x18004d9d0
?_Xlength_error@std@@YAXPEBD@Z
0x18004da18
?_Xout_of_range@std@@YAXPEBD@Z
0x18004da20
ntdll.dll
14
NtQueryInformationToken
0x18004da30
RtlAllocateHeap
0x18004da50
RtlCapabilityCheck
0x18004da48
RtlCompareUnicodeString
0x18004da88
RtlDeriveCapabilitySidsFromName
0x18004da68
RtlEqualSid
0x18004da78
RtlFreeHeap
0x18004da38
RtlFreeSid
0x18004da70
RtlGetDeviceFamilyInfoEnum
0x18004da60
RtlGetPersistedStateLocation
0x18004da90
RtlInitUnicodeString
0x18004da40
RtlNtStatusToDosErrorNoTeb
0x18004da58
RtlPublishWnfStateData
0x18004da80
RtlQueryPackageClaims
0x18004da98
RpcServerInqCallAttributesW
0x18004d370
No function matches your filter.