dpapisrv.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
InitializeLsaExtension
#1 · 0xdfe0
QueryLsaInterface
#2 · 0xe6a0
No function matches your filter.
Imported DLLs & functions 251
DebugBreak
0x1800347b8
IsDebuggerPresent
0x1800347c0
OutputDebugStringW
0x1800347b0
DelayLoadFailureHook
0x1800347d0
ResolveDelayLoadedAPI
0x1800347e0
GetLastError
0x180034808
SetLastError
0x1800347f8
SetUnhandledExceptionFilter
0x180034800
UnhandledExceptionFilter
0x1800347f0
CompareFileTime
0x180034860
CreateFileW
0x180034848
DeleteFileW
0x180034858
FindClose
0x180034840
FindFirstFileW
0x180034818
FindNextFileW
0x180034838
FlushFileBuffers
0x180034868
GetFileSize
0x180034820
ReadFile
0x180034850
SetEndOfFile
0x180034828
SetFilePointer
0x180034870
WriteFile
0x180034830
GetProcessHeap
0x180034898
HeapAlloc
0x1800348a0
HeapFree
0x1800348a8
LocalAlloc
0x1800348b8
LocalFree
0x1800348c0
LocalReAlloc
0x1800348c8
LocalSize
0x1800348d8
InitializeSListHead
0x1800348e8
DisableThreadLibraryCalls
0x180034918
GetModuleFileNameA
0x180034908
GetModuleFileNameW
0x180034910
GetModuleHandleExW
0x180034920
GetModuleHandleW
0x1800348f8
GetProcAddress
0x180034900
FormatMessageW
0x180034930
CreateFileMappingW
0x180034940
MapViewOfFile
0x180034948
UnmapViewOfFile
0x180034950
VirtualQuery
0x180034958
GetCurrentProcess
0x180034988
GetCurrentProcessId
0x180034980
GetCurrentThread
0x180034970
GetCurrentThreadId
0x180034978
OpenProcessToken
0x180034990
OpenThreadToken
0x180034998
SetThreadToken
0x180034968
TerminateProcess
0x1800349a0
IsProcessorFeaturePresent
0x1800349b0
OpenProcess
0x1800349b8
QueryPerformanceCounter
0x1800349c8
RegCloseKey
0x180034a10
RegCreateKeyExW
0x180034a00
RegLoadKeyW
0x1800349f0
RegNotifyChangeKeyValue
0x1800349f8
RegOpenKeyExW
0x1800349e0
RegQueryValueExW
0x180034a08
RegSetValueExW
0x1800349d8
RegUnLoadKeyW
0x1800349e8
RtlCaptureContext
0x180034a30
RtlLookupFunctionEntry
0x180034a28
RtlVirtualUnwind
0x180034a20
lstrlenW
0x180034a58
AcquireSRWLockExclusive
0x180034b10
AcquireSRWLockShared
0x180034a98
CreateEventW
0x180034ac0
CreateMutexExW
0x180034aa8
CreateMutexW
0x180034a70
CreateSemaphoreExW
0x180034ae0
DeleteCriticalSection
0x180034a90
EnterCriticalSection
0x180034ac8
InitializeCriticalSection
0x180034b18
InitializeCriticalSectionEx
0x180034a78
InitializeSRWLock
0x180034ae8
LeaveCriticalSection
0x180034a88
OpenEventW
0x180034ab8
OpenMutexW
0x180034a80
OpenSemaphoreW
0x180034af0
ReleaseMutex
0x180034aa0
ReleaseSemaphore
0x180034ab0
ReleaseSRWLockExclusive
0x180034b00
ReleaseSRWLockShared
0x180034ad8
SetEvent
0x180034ad0
TryAcquireSRWLockExclusive
0x180034af8
WaitForSingleObject
0x180034a68
WaitForSingleObjectEx
0x180034b08
GetComputerNameExW
0x180034b50
GetSystemDirectoryW
0x180034b58
GetSystemTime
0x180034b48
GetSystemTimeAsFileTime
0x180034b40
GetTickCount
0x180034b60
CloseThreadpoolTimer
0x180034b78
CloseThreadpoolWork
0x180034b80
CreateThreadpoolTimer
0x180034b98
CreateThreadpoolWork
0x180034b90
SetThreadpoolTimer
0x180034b70
SubmitThreadpoolWork
0x180034ba0
WaitForThreadpoolTimerCallbacks
0x180034b88
QueueUserWorkItem
0x180034bb0
SystemTimeToFileTime
0x180034bc0
__C_specific_handler
0x180034c50
__CxxFrameHandler4
0x180034c60
__std_terminate
0x180034c58
_CxxThrowException
0x180034c88
_o___std_exception_copy
0x180034c90
_o___std_exception_destroy
0x180034c80
_o___std_type_info_destroy_list
0x180034c78
_o___stdio_common_vsnprintf_s
0x180034c70
_o___stdio_common_vswprintf
0x180034c68
_o__cexit
0x180034c48
_o__configure_narrow_argv
0x180034c40
_o__crt_atexit
0x180034c38
_o__errno
0x180034c30
_o__execute_onexit_table
0x180034c28
_o__initialize_narrow_environment
0x180034bd0
_o__initialize_onexit_table
0x180034bd8
_o__invalid_parameter_noinfo
0x180034be0
_o__purecall
0x180034be8
_o__register_onexit_function
0x180034bf0
_o__seh_filter_dll
0x180034bf8
_o__wcsicmp
0x180034c08
_o_wcscat_s
0x180034c10
_o_wcscpy_s
0x180034c18
_o_wcsncat_s
0x180034c20
memcmp
0x180034c98
memcpy
0x180034ca0
memmove
0x180034c00
memset
0x180034cc8
EventRegister
0x180034cf0
EventSetInformation
0x180034ce8
EventUnregister
0x180034cd8
EventWriteTransfer
0x180034ce0
AdjustTokenPrivileges
0x180034d00
AllocateAndInitializeSid
0x180034d08
AllocateLocallyUniqueId
0x180034d80
CheckTokenMembership
0x180034d78
CopySid
0x180034d58
CreateWellKnownSid
0x180034d48
DuplicateToken
0x180034d88
DuplicateTokenEx
0x180034d20
EqualSid
0x180034d40
FreeSid
0x180034d38
GetLengthSid
0x180034d18
GetSidSubAuthorityCount
0x180034d30
GetTokenInformation
0x180034d28
ImpersonateLoggedOnUser
0x180034d68
ImpersonateSelf
0x180034d10
IsValidSid
0x180034d70
RevertToSelf
0x180034d60
SetTokenInformation
0x180034d50
bcrypt.dll
18
BCryptCloseAlgorithmProvider
0x180034dd8
BCryptCreateHash
0x180034de8
BCryptDecrypt
0x180034de0
BCryptDeriveKeyCapi
0x180034df8
BCryptDestroyHash
0x180034dc8
BCryptDestroyKey
0x180034db0
BCryptEncrypt
0x180034db8
BCryptExportKey
0x180034e18
BCryptFinalizeKeyPair
0x180034e08
BCryptFinishHash
0x180034dc0
BCryptGenerateKeyPair
0x180034e10
BCryptGenerateSymmetricKey
0x180034d98
BCryptGenRandom
0x180034da0
BCryptGetProperty
0x180034da8
BCryptHashData
0x180034dd0
BCryptImportKeyPair
0x180034e00
BCryptKeyDerivation
0x180034df0
BCryptOpenAlgorithmProvider
0x180034e20
LsaGetInterface
0x180034e30
?_Xlength_error@std@@YAXPEBD@Z
0x180034e40
NCryptCreatePersistedKey
0x180034e60
NCryptFinalizeKey
0x180034e58
NCryptFreeObject
0x180034e70
NCryptOpenStorageProvider
0x180034e50
NCryptSetProperty
0x180034e68
ntdll.dll
34
EtwEventActivityIdControl
0x180034f18
EtwEventRegister
0x180034f78
EtwEventUnregister
0x180034ee0
EtwEventWriteTransfer
0x180034f10
EtwGetTraceEnableFlags
0x180034ed0
EtwGetTraceEnableLevel
0x180034ec0
EtwGetTraceLoggerHandle
0x180034ec8
EtwRegisterTraceGuidsW
0x180034eb8
EtwTraceMessage
0x180034f50
EtwUnregisterTraceGuids
0x180034ed8
NtClose
0x180034f70
NtCreateEvent
0x180034e90
NtCreateFile
0x180034eb0
NtOpenEvent
0x180034e88
NtOpenThreadToken
0x180034f68
NtPrivilegeCheck
0x180034f60
NtQueryInformationProcess
0x180034f08
NtQueryInformationToken
0x180034f80
RtlDeleteCriticalSection
0x180034ef8
RtlDosPathNameToRelativeNtPathName_U
0x180034e98
RtlEnterCriticalSection
0x180034ee8
RtlEqualDomainName
0x180034f20
RtlEqualSid
0x180034f88
RtlFreeHeap
0x180034ea8
RtlFreeUnicodeString
0x180034f30
RtlGetCurrentServiceSessionId
0x180034f00
RtlImageNtHeader
0x180034ef0
RtlInitializeCriticalSection
0x180034f58
RtlInitUnicodeString
0x180034f40
RtlIsStateSeparationEnabled
0x180034f48
RtlLeaveCriticalSection
0x180034e80
RtlNtStatusToDosError
0x180034f28
RtlReleaseRelativeName
0x180034ea0
RtlUpcaseUnicodeString
0x180034f38
RPCRT4.dll
28
NdrClientCall3
0x180034788
NdrServerCall2
0x180034790
NdrServerCallAll
0x180034798
RpcBindingFree
0x180034728
RpcBindingFromStringBindingW
0x180034758
RpcBindingInqAuthClientW
0x1800346d0
RpcBindingSetAuthInfoExW
0x180034748
RpcBindingToStringBindingW
0x180034718
RpcEpResolveBinding
0x180034730
RpcImpersonateClient
0x180034778
RpcNetworkIsProtseqValidW
0x180034740
RpcRevertToSelf
0x1800346e8
RpcRevertToSelfEx
0x180034780
RpcServerInqCallAttributesW
0x1800346e0
RpcServerInqDefaultPrincNameW
0x1800346c8
RpcServerRegisterAuthInfoW
0x1800346f0
RpcServerRegisterIf3
0x180034708
RpcServerRegisterIfEx
0x1800346d8
RpcServerUnregisterIf
0x180034710
RpcServerUnregisterIfEx
0x180034768
RpcServerUseProtseqEpW
0x180034720
RpcStringBindingComposeW
0x180034750
RpcStringBindingParseW
0x180034770
RpcStringFreeW
0x180034738
UuidCompare
0x180034760
UuidCreate
0x1800346f8
UuidFromStringW
0x180034700
UuidToStringW
0x1800347a0
No function matches your filter.