eapphost.dll

Description: Microsoft EAPHost Peer service

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: d3e2db7bfd556b4d34f02f3a67555dc1

File Size: 344.0 KB

Uploaded At: Dec. 1, 2025, 7:27 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

OnSessionChange (Ordinal: 1, Address: 0x2c90)
DllCanUnloadNow (Ordinal: 2, Address: 0x5e60)
DllGetClassObject (Ordinal: 3, Address: 0x5e80)
DllRegisterServer (Ordinal: 4, Address: 0x5dc0)
DllUnregisterServer (Ordinal: 5, Address: 0x5e10)
InitializeEapHost (Ordinal: 6, Address: 0x63b0)
StopServiceOnLowPower (Ordinal: 7, Address: 0x65f0)
UninitializeEapHost (Ordinal: 8, Address: 0x6410)

Imported DLLs & Functions

api-ms-win-core-com-midlproxystub-l1-1-0.dll

ObjectStublessClient10 (Address: 0x18003c838)
ObjectStublessClient11 (Address: 0x18003c870)
ObjectStublessClient12 (Address: 0x18003c858)
ObjectStublessClient13 (Address: 0x18003c830)
ObjectStublessClient14 (Address: 0x18003c868)
ObjectStublessClient15 (Address: 0x18003c890)
ObjectStublessClient16 (Address: 0x18003c860)
ObjectStublessClient3 (Address: 0x18003c878)
ObjectStublessClient4 (Address: 0x18003c888)
ObjectStublessClient5 (Address: 0x18003c828)
ObjectStublessClient6 (Address: 0x18003c850)
ObjectStublessClient7 (Address: 0x18003c840)
ObjectStublessClient8 (Address: 0x18003c848)
ObjectStublessClient9 (Address: 0x18003c880)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18003c8b0)
IsDebuggerPresent (Address: 0x18003c8b8)
OutputDebugStringA (Address: 0x18003c8a0)
OutputDebugStringW (Address: 0x18003c8a8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18003c8c8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18003c8d8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18003c8f0)
RaiseException (Address: 0x18003c900)
SetLastError (Address: 0x18003c908)
SetUnhandledExceptionFilter (Address: 0x18003c8f8)
UnhandledExceptionFilter (Address: 0x18003c8e8)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18003c918)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18003c928)
DuplicateHandle (Address: 0x18003c930)
GetHandleInformation (Address: 0x18003c938)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18003c958)
HeapAlloc (Address: 0x18003c950)
HeapFree (Address: 0x18003c960)
HeapSize (Address: 0x18003c948)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18003c978)
LocalFree (Address: 0x18003c970)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18003c9c8)
FindResourceExW (Address: 0x18003c988)
FreeLibrary (Address: 0x18003c9a8)
GetModuleFileNameA (Address: 0x18003c9d8)
GetModuleFileNameW (Address: 0x18003c998)
GetModuleHandleExW (Address: 0x18003c9d0)
GetModuleHandleW (Address: 0x18003c9b0)
GetProcAddress (Address: 0x18003c9b8)
LoadLibraryExW (Address: 0x18003c990)
LoadResource (Address: 0x18003c9a0)
SizeofResource (Address: 0x18003c9c0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18003c9e8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18003c9f8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18003ca10)
MapViewOfFile (Address: 0x18003ca08)
UnmapViewOfFile (Address: 0x18003ca18)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18003ca28)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18003ca50)
GetCurrentProcessId (Address: 0x18003ca38)
GetCurrentThreadId (Address: 0x18003ca40)
TerminateProcess (Address: 0x18003ca48)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18003ca60)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18003ca70)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18003ca88)
RegCreateKeyExW (Address: 0x18003cab8)
RegDeleteValueW (Address: 0x18003ca90)
RegEnumKeyExW (Address: 0x18003cab0)
RegLoadMUIStringW (Address: 0x18003caa8)
RegOpenKeyExW (Address: 0x18003ca98)
RegQueryInfoKeyW (Address: 0x18003ca80)
RegQueryValueExW (Address: 0x18003cac0)
RegSetValueExW (Address: 0x18003caa0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18003cad8)
WideCharToMultiByte (Address: 0x18003cad0)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x18003cae8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18003caf8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18003cb28)
AcquireSRWLockShared (Address: 0x18003cb38)
CreateMutexExW (Address: 0x18003cb68)
CreateSemaphoreExW (Address: 0x18003cb50)
DeleteCriticalSection (Address: 0x18003cb20)
EnterCriticalSection (Address: 0x18003cb48)
InitializeCriticalSection (Address: 0x18003cb10)
InitializeCriticalSectionAndSpinCount (Address: 0x18003cb18)
InitializeCriticalSectionEx (Address: 0x18003cb80)
LeaveCriticalSection (Address: 0x18003cb08)
OpenSemaphoreW (Address: 0x18003cb70)
ReleaseMutex (Address: 0x18003cb60)
ReleaseSemaphore (Address: 0x18003cb58)
ReleaseSRWLockExclusive (Address: 0x18003cb30)
ReleaseSRWLockShared (Address: 0x18003cb40)
WaitForSingleObject (Address: 0x18003cb88)
WaitForSingleObjectEx (Address: 0x18003cb78)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18003cb98)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18003cba8)
GetSystemInfo (Address: 0x18003cbb8)
GetSystemTimeAsFileTime (Address: 0x18003cbc0)
GetTickCount (Address: 0x18003cbc8)
GetVersionExW (Address: 0x18003cbb0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18003cbe8)
CreateThreadpoolTimer (Address: 0x18003cbf0)
SetThreadpoolTimer (Address: 0x18003cbd8)
WaitForThreadpoolTimerCallbacks (Address: 0x18003cbe0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18003cc08)
EncodePointer (Address: 0x18003cc00)

api-ms-win-security-base-l1-1-0.dll

ImpersonateLoggedOnUser (Address: 0x18003cc20)
RevertToSelf (Address: 0x18003cc18)

api-ms-win-security-credentials-l1-1-0.dll

CredDeleteW (Address: 0x18003cc40)
CredFree (Address: 0x18003cc38)
CredProtectW (Address: 0x18003cc48)
CredReadW (Address: 0x18003cc30)

msvcrt.dll

___lc_codepage_func (Address: 0x18003ce30)
___lc_handle_func (Address: 0x18003cca0)
___mb_cur_max_func (Address: 0x18003ccb8)
__C_specific_handler (Address: 0x18003ce10)
__crtLCMapStringA (Address: 0x18003cd78)
__CxxFrameHandler3 (Address: 0x18003cdc0)
__dllonexit (Address: 0x18003cc80)
__pctype_func (Address: 0x18003cd20)
__RTtypeid (Address: 0x18003cd08)
__uncaught_exception (Address: 0x18003ccd8)
_amsg_exit (Address: 0x18003cc60)
_CxxThrowException (Address: 0x18003ccf0)
_errno (Address: 0x18003ccb0)
_initterm (Address: 0x18003cc70)
_ismbblead (Address: 0x18003cc68)
_lock (Address: 0x18003ccc8)
_onexit (Address: 0x18003cc98)
_purecall (Address: 0x18003ce28)
_unlock (Address: 0x18003ccc0)
_vsnprintf (Address: 0x18003cde0)
_vsnprintf_s (Address: 0x18003cdb0)
_vsnwprintf (Address: 0x18003cdd8)
_wcsdup (Address: 0x18003cc90)
_wcsicmp (Address: 0x18003cd50)
_wsetlocale (Address: 0x18003cd80)
_wtol (Address: 0x18003cd68)
_XcptFilter (Address: 0x18003cc58)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x18003cd38)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x18003cd28)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18003cd48)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18003cd58)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18003cd90)
??0exception@@QEAA@XZ (Address: 0x18003cda8)
??1bad_cast@@UEAA@XZ (Address: 0x18003cd30)
??1exception@@UEAA@XZ (Address: 0x18003cd98)
??1type_info@@UEAA@XZ (Address: 0x18003cca8)
?name@type_info@@QEBAPEBDXZ (Address: 0x18003cd10)
?terminate@@YAXXZ (Address: 0x18003cc78)
?what@exception@@UEBAPEBDXZ (Address: 0x18003cd60)
abort (Address: 0x18003ce08)
calloc (Address: 0x18003ccf8)
free (Address: 0x18003cdf8)
islower (Address: 0x18003cdd0)
isupper (Address: 0x18003cdc8)
localeconv (Address: 0x18003ce18)
malloc (Address: 0x18003cdf0)
memcmp (Address: 0x18003cda0)
memcpy (Address: 0x18003cce8)
memcpy_s (Address: 0x18003ce00)
memmove (Address: 0x18003cce0)
memmove_s (Address: 0x18003cd88)
memset (Address: 0x18003cc88)
realloc (Address: 0x18003cdb8)
setlocale (Address: 0x18003ccd0)
sprintf_s (Address: 0x18003cd40)
strcspn (Address: 0x18003cd18)
swprintf_s (Address: 0x18003cd70)
wcscpy_s (Address: 0x18003ce20)
wcsncpy_s (Address: 0x18003cde8)
wcsrchr (Address: 0x18003cd00)

ncrypt.dll

NCryptFreeObject (Address: 0x18003ce48)
NCryptOpenStorageProvider (Address: 0x18003ce50)
NCryptSetProperty (Address: 0x18003ce40)

netutils.dll

NetApiBufferFree (Address: 0x18003ce60)

ntdll.dll

DbgPrint (Address: 0x18003ce88)
EtwEventEnabled (Address: 0x18003cea8)
EtwEventRegister (Address: 0x18003cee0)
EtwEventSetInformation (Address: 0x18003ced8)
EtwEventUnregister (Address: 0x18003cee8)
EtwEventWriteTransfer (Address: 0x18003cef0)
EtwGetTraceEnableFlags (Address: 0x18003cec0)
EtwGetTraceEnableLevel (Address: 0x18003cec8)
EtwGetTraceLoggerHandle (Address: 0x18003ced0)
EtwRegisterTraceGuidsW (Address: 0x18003ceb8)
EtwTraceMessage (Address: 0x18003ce90)
EtwUnregisterTraceGuids (Address: 0x18003ceb0)
RtlCaptureContext (Address: 0x18003ce80)
RtlLookupFunctionEntry (Address: 0x18003ce78)
RtlVirtualUnwind (Address: 0x18003ce70)
WinSqmAddToStream (Address: 0x18003cea0)
WinSqmSetDWORD (Address: 0x18003ce98)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18003c7f8)
CStdStubBuffer_Connect (Address: 0x18003c818)
CStdStubBuffer_CountRefs (Address: 0x18003c810)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18003c7e8)
CStdStubBuffer_DebugServerRelease (Address: 0x18003c798)
CStdStubBuffer_Disconnect (Address: 0x18003c790)
CStdStubBuffer_Invoke (Address: 0x18003c7a0)
CStdStubBuffer_IsIIDSupported (Address: 0x18003c7c0)
CStdStubBuffer_QueryInterface (Address: 0x18003c7d0)
IUnknown_AddRef_Proxy (Address: 0x18003c7a8)
IUnknown_QueryInterface_Proxy (Address: 0x18003c788)
IUnknown_Release_Proxy (Address: 0x18003c800)
NdrCStdStubBuffer_Release (Address: 0x18003c7e0)
NdrDllCanUnloadNow (Address: 0x18003c7b8)
NdrDllGetClassObject (Address: 0x18003c808)
NdrDllRegisterProxy (Address: 0x18003c7c8)
NdrDllUnregisterProxy (Address: 0x18003c7d8)
NdrOleAllocate (Address: 0x18003c7b0)
NdrOleFree (Address: 0x18003c7f0)

wkscli.dll

NetGetJoinInformation (Address: 0x18003cf00)