L2SecHC.dll

Description: Layer 2 Security Diagnostics Helper Classes

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: cf13cae6b3e0148cadb7a92ba11407c2

File Size: 159.0 KB

Uploaded At: Dec. 1, 2025, 7:59 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x5330)
DllGetClassObject (Ordinal: 2, Address: 0x5360)
DllRegisterServer (Ordinal: 3, Address: 0x5390)
DllUnregisterServer (Ordinal: 4, Address: 0x53f0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x10025088)
CoTaskMemAlloc (Address: 0x10025094)
CoTaskMemFree (Address: 0x10025090)
CoTaskMemRealloc (Address: 0x1002508c)
StringFromGUID2 (Address: 0x10025084)

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringA (Address: 0x1002509c)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100250a8)
RaiseException (Address: 0x100250b4)
SetLastError (Address: 0x100250b0)
SetUnhandledExceptionFilter (Address: 0x100250a4)
UnhandledExceptionFilter (Address: 0x100250ac)

api-ms-win-core-file-l1-1-0.dll

FileTimeToLocalFileTime (Address: 0x100250bc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100250c4)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100250cc)
HeapAlloc (Address: 0x100250dc)
HeapDestroy (Address: 0x100250e0)
HeapFree (Address: 0x100250d8)
HeapReAlloc (Address: 0x100250d0)
HeapSize (Address: 0x100250d4)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100250e8)
LocalFree (Address: 0x100250ec)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x100250f4)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1002510c)
FindResourceExW (Address: 0x10025100)
FreeLibrary (Address: 0x10025120)
GetModuleFileNameA (Address: 0x10025110)
GetModuleFileNameW (Address: 0x100250fc)
GetModuleHandleW (Address: 0x1002512c)
GetProcAddress (Address: 0x1002511c)
LoadLibraryExA (Address: 0x10025128)
LoadLibraryExW (Address: 0x10025124)
LoadResource (Address: 0x10025104)
LoadStringW (Address: 0x10025114)
LockResource (Address: 0x10025118)
SizeofResource (Address: 0x10025108)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10025138)
GetThreadLocale (Address: 0x1002513c)
SetThreadLocale (Address: 0x10025134)

api-ms-win-core-memory-l1-1-0.dll

VirtualProtect (Address: 0x10025144)
VirtualQuery (Address: 0x10025148)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1002515c)
GetCurrentProcessId (Address: 0x10025158)
GetCurrentThreadId (Address: 0x10025150)
TerminateProcess (Address: 0x10025154)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x10025164)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002516c)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcessModules (Address: 0x10025174)
K32GetModuleBaseNameW (Address: 0x10025178)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10025184)
RegCreateKeyExW (Address: 0x1002519c)
RegDeleteValueW (Address: 0x10025188)
RegEnumKeyExW (Address: 0x1002518c)
RegOpenKeyExW (Address: 0x10025194)
RegQueryInfoKeyW (Address: 0x10025180)
RegQueryValueExW (Address: 0x10025190)
RegSetValueExW (Address: 0x10025198)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x100251a4)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x100251ac)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x100251b4)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100251c8)
CreateEventW (Address: 0x100251c0)
DeleteCriticalSection (Address: 0x100251dc)
EnterCriticalSection (Address: 0x100251d4)
InitializeCriticalSection (Address: 0x100251cc)
LeaveCriticalSection (Address: 0x100251d8)
ReleaseSRWLockExclusive (Address: 0x100251c4)
SetEvent (Address: 0x100251bc)
WaitForSingleObject (Address: 0x100251d0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x100251e4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x100251ec)
GetSystemTime (Address: 0x100251f4)
GetSystemTimeAsFileTime (Address: 0x100251f0)
GetTickCount (Address: 0x100251f8)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x10025200)
SystemTimeToFileTime (Address: 0x10025204)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x10025218)
GetTraceEnableLevel (Address: 0x1002521c)
GetTraceLoggerHandle (Address: 0x10025220)
RegisterTraceGuidsW (Address: 0x1002520c)
TraceMessage (Address: 0x10025214)
UnregisterTraceGuids (Address: 0x10025210)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x10025234)
EventRegister (Address: 0x10025228)
EventSetInformation (Address: 0x10025238)
EventUnregister (Address: 0x10025230)
EventWriteTransfer (Address: 0x1002522c)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x10025240)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100252e0)
__dllonexit (Address: 0x1002528c)
_amsg_exit (Address: 0x100252b8)
_callnewh (Address: 0x10025250)
_CxxThrowException (Address: 0x1002526c)
_errno (Address: 0x10025248)
_except_handler4_common (Address: 0x10025274)
_initterm (Address: 0x100252bc)
_lock (Address: 0x10025284)
_onexit (Address: 0x10025290)
_purecall (Address: 0x100252ac)
_unlock (Address: 0x10025288)
_vscwprintf (Address: 0x1002527c)
_vsnwprintf (Address: 0x100252a0)
_wcsupr (Address: 0x100252b0)
_XcptFilter (Address: 0x10025298)
??_V@YAXPAX@Z (Address: 0x100252d4)
??0exception@@QAE@ABQBD@Z (Address: 0x10025254)
??0exception@@QAE@ABQBDH@Z (Address: 0x10025258)
??0exception@@QAE@ABV0@@Z (Address: 0x10025260)
??1exception@@UAE@XZ (Address: 0x10025264)
??1type_info@@UAE@XZ (Address: 0x1002525c)
??3@YAXPAX@Z (Address: 0x100252a4)
?terminate@@YAXXZ (Address: 0x100252e8)
?what@exception@@UBEPBDXZ (Address: 0x10025268)
free (Address: 0x100252c8)
malloc (Address: 0x100252cc)
memcmp (Address: 0x10025294)
memcpy (Address: 0x10025270)
memcpy_s (Address: 0x100252c4)
memmove (Address: 0x100252e4)
memmove_s (Address: 0x10025280)
memset (Address: 0x100252ec)
realloc (Address: 0x1002524c)
toupper (Address: 0x100252dc)
vswprintf_s (Address: 0x10025278)
wcscat_s (Address: 0x100252b4)
wcscpy_s (Address: 0x100252c0)
wcsncmp (Address: 0x100252a8)
wcsncpy_s (Address: 0x100252d0)
wcsnlen (Address: 0x100252d8)
wcsstr (Address: 0x1002529c)

ntdll.dll

EtwEventWriteTransfer (Address: 0x10025300)
EtwTraceMessage (Address: 0x100252fc)
NtOpenFile (Address: 0x100252f4)
RtlInitUnicodeString (Address: 0x10025304)
RtlNtStatusToDosError (Address: 0x100252f8)

OLEAUT32.dll

LoadTypeLib (Address: 0x10025010)
RegisterTypeLib (Address: 0x10025000)
SysAllocString (Address: 0x10025008)
SysFreeString (Address: 0x10025014)
SysStringLen (Address: 0x10025018)
UnRegisterTypeLib (Address: 0x1002500c)
VarUI4FromStr (Address: 0x10025004)

RPCRT4.dll

NdrClientCall4 (Address: 0x10025044)
RpcBindingFree (Address: 0x10025048)
RpcBindingFromStringBindingW (Address: 0x1002503c)
RpcBindingSetAuthInfoExW (Address: 0x10025034)
RpcBindingSetOption (Address: 0x10025040)
RpcEpResolveBinding (Address: 0x10025030)
RpcExceptionFilter (Address: 0x1002504c)
RpcMgmtInqServerPrincNameW (Address: 0x1002502c)
RpcStringBindingComposeW (Address: 0x10025038)
RpcStringFreeW (Address: 0x10025024)
UuidFromStringW (Address: 0x10025028)
UuidToStringW (Address: 0x10025020)

SETUPAPI.dll

SetupDiCallClassInstaller (Address: 0x10025064)
SetupDiCreateDeviceInfoListExW (Address: 0x10025070)
SetupDiDestroyDeviceInfoList (Address: 0x10025074)
SetupDiEnumDeviceInfo (Address: 0x10025054)
SetupDiGetClassDevsW (Address: 0x10025058)
SetupDiGetDeviceInstallParamsW (Address: 0x10025060)
SetupDiGetDeviceInstanceIdW (Address: 0x1002507c)
SetupDiGetDeviceRegistryPropertyW (Address: 0x1002505c)
SetupDiOpenDeviceInfoW (Address: 0x1002506c)
SetupDiOpenDevRegKey (Address: 0x10025078)
SetupDiSetClassInstallParamsW (Address: 0x10025068)