Windows 8 DLL File Information - negoexts.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 8, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	NegoExtender Security Package
File Version:	6.2.9200.16384 (win8_rtm.120725-1247)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	96 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	82,944 Bytes	83.9%	Read, Execute	Code
.data	0x00016000	2,560 Bytes	2.6%	Write, Read	Initialized Data
.idata	0x00019000	6,144 Bytes	6.2%	Read	Initialized Data
.rsrc	0x0001b000	1,536 Bytes	1.6%	Read	Initialized Data
.reloc	0x0001c000	4,608 Bytes	4.7%	Read, Discardable	Initialized Data

Static Linking

negoexts.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
CRYPTBASE.dll
api-ms-win-core-interlocked-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
cryptdll.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-memory-l1-1-1.dll
api-ms-win-core-file-l2-1-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-threadpool-private-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-privateprofile-l1-1-0.dll

This means that when negoexts.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, negoexts.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	2	1,152 Bytes	1.2%
Total	2	1,152 Bytes	1.2%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 200 dialogs)

No dialog resources in this file.

String resources in this dll (up to 200 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

SpLsaModeInitialize

SpUserModeInitialize

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _XcptFilter	_amsg_exit
  _except_handler4_common	_initterm
  _snprintf_s	_snwprintf_s
  _strcmpi	_strnicmp
  _vsnprintf_s	free
  malloc	memcmp
  memcpy	memset
  strcat_s	strchr
  strcpy_s	strrchr
  tolower	void * __cdecl operator new(unsigned int)
  wcscat_s	wcschr
  wcsncat_s	wcsncpy_s
  wcsrchr

• ntdll.dll:
  

  EtwUnregisterTraceGuids	NtClose	NtCreateEvent
  NtDuplicateObject	NtOpenEvent	NtQueryInformationToken
  NtQuerySystemInformation	NtQuerySystemTime	NtSetEvent
  NtWaitForSingleObject	RtlAcquireResourceExclusive	RtlAcquireResourceShared
  RtlAllocateHeap	RtlAnsiStringToUnicodeString	RtlCompareUnicodeString
  RtlConvertSharedToExclusive	RtlDeleteCriticalSection	RtlDeleteElementGenericTable
  RtlDeleteElementGenericTableAvl	RtlDeleteResource	RtlDuplicateUnicodeString
  RtlEnterCriticalSection	RtlEnumerateGenericTable	RtlEnumerateGenericTableAvl
  RtlEqualUnicodeString	RtlFreeAnsiString	RtlFreeHeap
  RtlGUIDFromString	RtlGetElementGenericTable	RtlImageNtHeader
  RtlInitUnicodeString	RtlInitializeCriticalSection	RtlInitializeGenericTable
  RtlInitializeGenericTableAvl	RtlInitializeResource	RtlInsertElementGenericTable
  RtlInsertElementGenericTableAvl	RtlIpv6StringToAddressExW	RtlLeaveCriticalSection
  RtlLookupElementGenericTable	RtlLookupElementGenericTableAvl	RtlNtStatusToDosError
  RtlNumberGenericTableElements	RtlNumberGenericTableElementsAvl	RtlReleaseResource

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

  KernelBase!GetCurrentDirectoryW

  KernelBase!SetCurrentDirectoryW

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FreeLibrary	KernelBase!GetModuleFileNameA
  KernelBase!GetModuleFileNameW	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegNotifyChangeKeyValue	KernelBase!RegOpenKeyExW
  KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• CRYPTBASE.dll:
  

  SystemFunction036

• api-ms-win-core-interlocked-l1-2-0.dll:
  

  KernelBase!InterlockedCompareExchange	KernelBase!InterlockedDecrement	KernelBase!InterlockedExchange
  KernelBase!InterlockedExchangeAdd	KernelBase!InterlockedIncrement

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventW	KernelBase!Sleep	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!OpenProcessToken	KernelBase!SetThreadToken	kernel32!GetCurrentProcess
  kernel32!GetCurrentProcessId	kernel32!GetCurrentThreadId	kernel32!SetThreadStackGuarantee
  kernel32!TerminateProcess

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetComputerNameExW	KernelBase!GetLocalTime	KernelBase!GetSystemDirectoryW
  KernelBase!GetSystemInfo	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
  KernelBase!GetVersionExW	KernelBase!GetWindowsDirectoryW

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!SetUnhandledExceptionFilter	KernelBase!UnhandledExceptionFilter
  ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!LocalFree

• cryptdll.dll:
  

  CDLocateCSystem

  CDLocateCheckSum

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  KernelBase!ControlTraceW

  KernelBase!EnableTraceEx2

  KernelBase!StartTraceW

• api-ms-win-core-memory-l1-1-1.dll:
  

  KernelBase!CreateFileMappingW	KernelBase!MapViewOfFileEx	KernelBase!OpenFileMappingW	KernelBase!UnmapViewOfFile
  KernelBase!VirtualAlloc	KernelBase!VirtualProtect	KernelBase!VirtualQuery

• api-ms-win-core-file-l2-1-0.dll:
  

  KernelBase!MoveFileExW

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateDirectoryW

  KernelBase!CreateFileA

  KernelBase!WriteFile

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!DebugBreak

  KernelBase!IsDebuggerPresent

  KernelBase!OutputDebugStringA

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!GetTokenInformation

  KernelBase!RevertToSelf

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!ChangeTimerQueueTimer

  KernelBase!CreateTimerQueueTimer

  KernelBase!UnregisterWaitEx

• api-ms-win-core-threadpool-private-l1-1-0.dll:
  

  KernelBase!RegisterWaitForSingleObjectEx

• api-ms-win-core-delayload-l1-1-1.dll:
  

  kernel32!DelayLoadFailureHook

  ntdll!LdrResolveDelayLoadedAPI

• api-ms-win-core-privateprofile-l1-1-0.dll:
  

  kernel32!GetProfileStringA