netapi32.dll

  • File Path: C:\Windows\system32\netapi32.dll
  • Description: Net Win32 API DLL

Hashes

Type Hash
MD5 51FB81F11CC3CB955A1572BFE86D1FCC
SHA1 85EC15AA43778E026A42F732AF9D9B39789F585C
SHA256 02FC3CF9AB7289B704BD04E3A896018E349C34FD90E1BDE1FEF6B4CDA5F95C85
SHA384 4986FD6ABF763FF88B672B6D303694BCAEBD2207EB891EAFBC3A6FB0E65AB87B3C6F0C1FA1546FA729E9726E8125FD3D
SHA512 BC20FE8F687818871BD201CA74BEF1DC544FA73A29F9E24D328DEA5C922693724FD484544F97D81C6CC4358100B290E1E3E0D2526D29B501D4CF16C974800330
SSDEEP 1536:Z3fxB1tszy6XCQ7LUrxtkYsX8tReRwPwAsjt:tDZ63Urxt+nRw2jt
IMP 7D4E1695394CF47BD397AFD45A40E55D
PESHA1 3AD9B36A65DA05E1BFBA85DB28A2C379383BD953
PE256 0490BFFEA677F3ABACD5D8D320269438AD3CD4CB90A5DFA89F81BFB5703892FA

DLL Exports:

Function Name Ordinal Type
NetQueryServiceAccount 168 Exported Function
NetRegisterDomainNameChangeNotification 169 Exported Function
NetpwPathType 284 Exported Function
NetQueryDisplayInformation 167 Exported Function
NetRemoteComputerSupports 170 Exported Function
NetRemoveServiceAccount 173 Exported Function
NetRenameMachineInDomain 174 Exported Function
NetRemoteTOD 171 Exported Function
NetRemoveAlternateComputerName 172 Exported Function
NetProvisionComputerAccount 166 Exported Function
NetpSetFileSecurity 278 Exported Function
NetpNetBiosStatusToApiStatus 276 Exported Function
NetpOpenConfigData 277 Exported Function
NetpwNameCanonicalize 279 Exported Function
NetpwPathCanonicalize 282 Exported Function
NetpwPathCompare 283 Exported Function
NetpwNameCompare 280 Exported Function
NetpwNameValidate 281 Exported Function
NetReplExportDirAdd 175 Exported Function
NetReplImportDirLock 187 Exported Function
NetReplImportDirUnlock 188 Exported Function
NetReplImportDirEnum 185 Exported Function
NetReplImportDirGetInfo 186 Exported Function
NetReplSetInfo 189 Exported Function
NetScheduleJobAdd 192 Exported Function
NetScheduleJobDel 193 Exported Function
NetRequestOfflineDomainJoin 190 Exported Function
NetRequestProvisioningPackageInstall 191 Exported Function
NetReplExportDirGetInfo 178 Exported Function
NetReplExportDirLock 179 Exported Function
NetReplExportDirDel 176 Exported Function
NetReplExportDirEnum 177 Exported Function
NetReplExportDirSetInfo 180 Exported Function
NetReplImportDirAdd 183 Exported Function
NetReplImportDirDel 184 Exported Function
NetReplExportDirUnlock 181 Exported Function
NetReplGetInfo 182 Exported Function
NetLocalGroupSetMembers 158 Exported Function
NetLogonGetTimeServiceParentDomain 159 Exported Function
NetLocalGroupGetMembers 156 Exported Function
NetLocalGroupSetInfo 157 Exported Function
NetLogonSetServiceBits 160 Exported Function
NetMessageNameDel 163 Exported Function
NetMessageNameEnum 164 Exported Function
NetMessageBufferSend 161 Exported Function
NetMessageNameAdd 162 Exported Function
NetLocalGroupAddMember 149 Exported Function
NetLocalGroupAddMembers 150 Exported Function
NetJoinDomain 147 Exported Function
NetLocalGroupAdd 148 Exported Function
NetLocalGroupDel 151 Exported Function
NetLocalGroupEnum 154 Exported Function
NetLocalGroupGetInfo 155 Exported Function
NetLocalGroupDelMember 152 Exported Function
NetLocalGroupDelMembers 153 Exported Function
NetMessageNameGetInfo 165 Exported Function
NetpGetFileSecurity 269 Exported Function
NetpHexDump 270 Exported Function
NetpGetConfigTStrArray 267 Exported Function
NetpGetConfigValue 268 Exported Function
NetpInitFtinfoContext 271 Exported Function
NetpMergeFtinfo 274 Exported Function
NetpNetBiosReset 275 Exported Function
NetpIsRemote 272 Exported Function
NetpIsUncComputerNameValid 273 Exported Function
NetpAssertFailed 260 Exported Function
NetpCleanFtinfoContext 261 Exported Function
NetpAddTlnFtinfoEntry 258 Exported Function
NetpAllocFtinfoEntry 259 Exported Function
NetpCloseConfigData 262 Exported Function
NetpGetConfigBool 265 Exported Function
NetpGetConfigDword 266 Exported Function
NetpCopyFtinfoContext 263 Exported Function
NetpDbgPrint 264 Exported Function
NetUserModalsSet 242 Exported Function
NetUserSetGroups 243 Exported Function
NetUserGetLocalGroups 240 Exported Function
NetUserModalsGet 241 Exported Function
NetUserSetInfo 244 Exported Function
NetValidatePasswordPolicyFree 247 Exported Function
NetWkstaGetInfo 248 Exported Function
NetValidateName 245 Exported Function
NetValidatePasswordPolicy 246 Exported Function
NetUseGetInfo 233 Exported Function
NetUserAdd 234 Exported Function
NetUseDel 231 Exported Function
NetUseEnum 232 Exported Function
NetUserChangePassword 235 Exported Function
NetUserGetGroups 238 Exported Function
NetUserGetInfo 239 Exported Function
NetUserDel 236 Exported Function
NetUserEnum 237 Exported Function
NetWkstaSetInfo 249 Exported Function
RxNetAccessEnum 290 Exported Function
RxNetAccessGetInfo 291 Exported Function
RxNetAccessAdd 288 Exported Function
RxNetAccessDel 289 Exported Function
RxNetAccessGetUserPerms 292 Exported Function
RxNetUserPasswordSet 295 Exported Function
RxRemoteApi 296 Exported Function
RxNetAccessSetInfo 293 Exported Function
RxNetServerEnum 294 Exported Function
NetWkstaTransportEnum 252 Exported Function
NetWkstaUserEnum 253 Exported Function
NetWkstaTransportAdd 250 Exported Function
NetWkstaTransportDel 251 Exported Function
NetWkstaUserGetInfo 254 Exported Function
NlBindingRemoveServerFromCache 286 Exported Function
NlBindingSetAuthInfo 287 Exported Function
NetWkstaUserSetInfo 255 Exported Function
NlBindingAddServerToCache 285 Exported Function
NetServerSetInfo 205 Exported Function
NetServerTransportAdd 206 Exported Function
NetServerEnumEx 203 Exported Function
NetServerGetInfo 204 Exported Function
NetServerTransportAddEx 207 Exported Function
NetServiceControl 210 Exported Function
NetServiceEnum 211 Exported Function
NetServerTransportDel 208 Exported Function
NetServerTransportEnum 209 Exported Function
NetServerAliasAdd 196 Exported Function
NetServerAliasDel 197 Exported Function
NetScheduleJobEnum 194 Exported Function
NetScheduleJobGetInfo 195 Exported Function
NetServerAliasEnum 198 Exported Function
NetServerDiskEnum 201 Exported Function
NetServerEnum 202 Exported Function
NetServerComputerNameAdd 199 Exported Function
NetServerComputerNameDel 200 Exported Function
NetServiceGetInfo 212 Exported Function
NetShareEnumSticky 224 Exported Function
NetShareGetInfo 225 Exported Function
NetShareDelSticky 222 Exported Function
NetShareEnum 223 Exported Function
NetShareSetInfo 226 Exported Function
NetUnregisterDomainNameChangeNotification 229 Exported Function
NetUseAdd 230 Exported Function
NetStatisticsGet 227 Exported Function
NetUnjoinDomain 228 Exported Function
NetSessionEnum 215 Exported Function
NetSessionGetInfo 216 Exported Function
NetServiceInstall 213 Exported Function
NetSessionDel 214 Exported Function
NetSetPrimaryComputerName 217 Exported Function
NetShareDel 220 Exported Function
NetShareDelEx 221 Exported Function
NetShareAdd 218 Exported Function
NetShareCheck 219 Exported Function
I_NetlogonComputeServerDigest 70 Exported Function
I_NetLogonControl 48 Exported Function
I_NetGetForestTrustInformation 47 Exported Function
I_NetlogonComputeClientDigest 69 Exported Function
I_NetLogonControl2 49 Exported Function
I_NetLogonSamLogon 52 Exported Function
I_NetLogonSamLogonEx 53 Exported Function
I_NetLogonGetDomainInfo 50 Exported Function
I_NetLogonSamLogoff 51 Exported Function
I_NetDatabaseDeltas 40 Exported Function
I_NetDatabaseRedo 41 Exported Function
I_NetChainSetClientAttributes 38 Exported Function
I_NetChainSetClientAttributes2 39 Exported Function
I_NetDatabaseSync 42 Exported Function
I_NetDfsIsThisADomainName 45 Exported Function
I_NetGetDCList 46 Exported Function
I_NetDatabaseSync2 43 Exported Function
I_NetDfsGetVersion 44 Exported Function
I_NetLogonSamLogonWithFlags 54 Exported Function
I_NetServerSetServiceBits 66 Exported Function
I_NetServerSetServiceBitsEx 67 Exported Function
I_NetServerPasswordSet2 64 Exported Function
I_NetServerReqChallenge 65 Exported Function
I_NetServerTrustPasswordsGet 68 Exported Function
NetAccessEnum 73 Exported Function
NetAccessGetInfo 74 Exported Function
NetAccessAdd 71 Exported Function
NetAccessDel 72 Exported Function
I_NetLogonUasLogon 57 Exported Function
I_NetServerAuthenticate 58 Exported Function
I_NetLogonSendToSam 55 Exported Function
I_NetLogonUasLogoff 56 Exported Function
I_NetServerAuthenticate2 59 Exported Function
I_NetServerPasswordGet 62 Exported Function
I_NetServerPasswordSet 63 Exported Function
I_NetServerAuthenticate3 60 Exported Function
I_NetServerGetTrustInfo 61 Exported Function
DsDeregisterDnsHostRecordsW 12 Exported Function
DsEnumerateDomainTrustsA 13 Exported Function
DsAddressToSiteNamesW 10 Exported Function
DsDeregisterDnsHostRecordsA 11 Exported Function
DsEnumerateDomainTrustsW 14 Exported Function
DsGetDcNameW 17 Exported Function
DsGetDcNameWithAccountA 18 Exported Function
DsGetDcCloseW 15 Exported Function
DsGetDcNameA 16 Exported Function
DavFlushFile 3 Exported Function
DavGetExtendedError 4 Exported Function
DavAddConnection 1 Exported Function
DavDeleteConnection 2 Exported Function
DavGetHTTPFromUNCPath 5 Exported Function
DsAddressToSiteNamesExA 8 Exported Function
DsAddressToSiteNamesExW 9 Exported Function
DavGetUNCFromHTTPPath 6 Exported Function
DsAddressToSiteNamesA 7 Exported Function
DsGetDcNameWithAccountW 19 Exported Function
DsRoleGetPrimaryDomainInformation 31 Exported Function
DsValidateSubnetNameA 32 Exported Function
DsMergeForestTrustInformationW 29 Exported Function
DsRoleFreeMemory 30 Exported Function
DsValidateSubnetNameW 33 Exported Function
I_NetAccountDeltas 36 Exported Function
I_NetAccountSync 37 Exported Function
I_BrowserSetNetlogonState 34 Exported Function
I_DsUpdateReadOnlyServerDnsRecords 35 Exported Function
DsGetDcOpenA 22 Exported Function
DsGetDcOpenW 23 Exported Function
DsGetDcNextA 20 Exported Function
DsGetDcNextW 21 Exported Function
DsGetDcSiteCoverageA 24 Exported Function
DsGetSiteNameA 27 Exported Function
DsGetSiteNameW 28 Exported Function
DsGetDcSiteCoverageW 25 Exported Function
DsGetForestTrustInformationW 26 Exported Function
NetEnumerateComputerNames 121 Exported Function
NetEnumerateServiceAccounts 122 Exported Function
NetDfsSetSecurity 119 Exported Function
NetDfsSetStdContainerSecurity 120 Exported Function
NetEnumerateTrustedDomains 123 Exported Function
NetErrorLogWrite 126 Exported Function
NetFileClose 127 Exported Function
NetErrorLogClear 124 Exported Function
NetErrorLogRead 125 Exported Function
NetDfsRemoveFtRootForced 112 Exported Function
NetDfsRemoveRootTarget 113 Exported Function
NetDfsRemove 110 Exported Function
NetDfsRemoveFtRoot 111 Exported Function
NetDfsRemoveStdRoot 114 Exported Function
NetDfsSetFtContainerSecurity 117 Exported Function
NetDfsSetInfo 118 Exported Function
NetDfsRename 115 Exported Function
NetDfsSetClientInfo 116 Exported Function
NetFileEnum 128 Exported Function
NetGroupDelUser 140 Exported Function
NetGroupEnum 141 Exported Function
NetGroupAddUser 138 Exported Function
NetGroupDel 139 Exported Function
NetGroupGetInfo 142 Exported Function
NetGroupSetUsers 145 Exported Function
NetIsServiceAccount 146 Exported Function
NetGroupGetUsers 143 Exported Function
NetGroupSetInfo 144 Exported Function
NetGetAadJoinInformation 131 Exported Function
NetGetAnyDCName 132 Exported Function
NetFileGetInfo 129 Exported Function
NetFreeAadJoinInformation 130 Exported Function
NetGetDCName 133 Exported Function
NetGetJoinInformation 135 Exported Function
NetGroupAdd 137 Exported Function
NetGetDisplayInformationIndex 134 Exported Function
NetGetJoinableOUs 136 Exported Function
NetAuditClear 85 Exported Function
NetAuditRead 86 Exported Function
NetApiBufferSize 84 Exported Function
NetapipBufferAllocate 256 Exported Function
NetAuditWrite 87 Exported Function
NetConfigGetAll 89 Exported Function
NetConfigSet 90 Exported Function
Netbios 257 Exported Function
NetConfigGet 88 Exported Function
NetAddAlternateComputerName 77 Exported Function
NetAddServiceAccount 78 Exported Function
NetAccessGetUserPerms 75 Exported Function
NetAccessSetInfo 76 Exported Function
NetAlertRaise 79 Exported Function
NetApiBufferFree 82 Exported Function
NetApiBufferReallocate 83 Exported Function
NetAlertRaiseEx 80 Exported Function
NetApiBufferAllocate 81 Exported Function
NetConnectionEnum 91 Exported Function
NetDfsGetSecurity 103 Exported Function
NetDfsGetStdContainerSecurity 104 Exported Function
NetDfsGetFtContainerSecurity 101 Exported Function
NetDfsGetInfo 102 Exported Function
NetDfsGetSupportedNamespaceVersion 105 Exported Function
NetDfsManagerSendSiteInfo 108 Exported Function
NetDfsMove 109 Exported Function
NetDfsManagerGetConfigInfo 106 Exported Function
NetDfsManagerInitialize 107 Exported Function
NetDfsAddFtRoot 94 Exported Function
NetDfsAddRootTarget 95 Exported Function
NetCreateProvisioningPackage 92 Exported Function
NetDfsAdd 93 Exported Function
NetDfsAddStdRoot 96 Exported Function
NetDfsGetClientInfo 99 Exported Function
NetDfsGetDcAddress 100 Exported Function
NetDfsAddStdRootForced 97 Exported Function
NetDfsEnum 98 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NetApi32.DLL
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/02fc3cf9ab7289b704bd04e3a896018e349c34fd90e1bde1fef6b4cda5f95c85/detection/

Possible Misuse

The following table contains possible examples of netapi32.dll being misused. While netapi32.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma image_load_mimikatz_inmemory_detection.yml - 'netapi32.dll' DRL 1.0
malware-ioc signsight-misp-event.json "value": "netapi32.dll\|989334094ec5ba8e0e8f2238cdf34d5c57c283f2", © ESET 2014-2018
signature-base apt_lazarus_dec20.yar $s4 = “Load Netapi32.dll Error “ fullword ascii CC BY-NC 4.0
signature-base cn_pentestset_tools.yar $s2 = “@Netapi32.dll” fullword ascii CC BY-NC 4.0
signature-base crime_ransom_darkside.yar $knownDLLs3 = “NETAPI32.dll” fullword CC BY-NC 4.0

MIT License. Copyright (c) 2020-2021 Strontic.