msv1_0.dll
v10.0.19041.6328
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 19
SpInitialize
#1 · 0x19890
MsvIsLocalhostAliases
#2 · 0xa7b0
SpLsaModeInitialize
#3 · 0x29dc0
SpUserModeInitialize
#4 · 0x16330
DllMain
#5 · 0x2e350
LsaApCallPackage
#6 · 0x16700
LsaApCallPackagePassthrough
#7 · 0x47020
LsaApCallPackageUntrusted
#8 · 0x15ab0
LsaApInitializePackage
#9 · 0x18010
LsaApLogonTerminated
#10 · 0x257c0
LsaApLogonUserEx2
#11 · 0x1e8a0
Msv1_0ExportSubAuthenticationRoutine
#12 · 0x4b0d0
Msv1_0SubAuthenticationPresent
#13 · 0x4b160
MsvGetLogonAttemptCount
#14 · 0x4a010
MsvIsIpAddressLocal
#15 · 0x29b00
MsvSamLogoff
#16 · 0x326d0
MsvSamValidate
#17 · 0x2a240
MsvValidateTarget
#18 · 0x4a020
SpInstanceInit
#32 · 0x155e0
No function matches your filter.
Imported DLLs & functions 302
DebugBreak
0x4d167080
IsDebuggerPresent
0x4d16707c
OutputDebugStringW
0x4d167078
DelayLoadFailureHook
0x4d167088
ResolveDelayLoadedAPI
0x4d167090
GetLastError
0x4d1670a4
SetLastError
0x4d167098
SetUnhandledExceptionFilter
0x4d1670a0
UnhandledExceptionFilter
0x4d16709c
CompareFileTime
0x4d1670bc
CreateFileW
0x4d1670b0
FlushFileBuffers
0x4d1670ac
SetFilePointer
0x4d1670b8
WriteFile
0x4d1670b4
CloseHandle
0x4d1670c4
GetProcessHeap
0x4d1670cc
HeapAlloc
0x4d1670d0
HeapFree
0x4d1670d4
InitializeSListHead
0x4d1670e8
DisableThreadLibraryCalls
0x4d1670f4
FreeLibrary
0x4d167100
GetModuleFileNameA
0x4d1670fc
GetModuleFileNameW
0x4d16710c
GetModuleHandleExW
0x4d1670f0
GetModuleHandleW
0x4d167110
GetProcAddress
0x4d1670f8
LoadLibraryExA
0x4d167104
LoadLibraryExW
0x4d167108
VirtualAlloc
0x4d167128
VirtualProtect
0x4d167124
VirtualQuery
0x4d16712c
GetProfileIntW
0x4d167134
ExpandEnvironmentStringsW
0x4d16713c
GetCurrentProcess
0x4d16714c
GetCurrentProcessId
0x4d167158
GetCurrentThread
0x4d16715c
GetCurrentThreadId
0x4d167150
SetThreadStackGuarantee
0x4d167154
SetThreadToken
0x4d167144
TerminateProcess
0x4d167148
GetProcessMitigationPolicy
0x4d16716c
IsProcessorFeaturePresent
0x4d167168
OpenProcess
0x4d167164
QueryPerformanceCounter
0x4d167174
QueryFullProcessImageNameW
0x4d16717c
RegCloseKey
0x4d167188
RegDeleteValueW
0x4d167184
RegNotifyChangeKeyValue
0x4d167190
RegOpenKeyExA
0x4d16718c
RegOpenKeyExW
0x4d167198
RegQueryValueExA
0x4d167194
RegQueryValueExW
0x4d16719c
RtlCompareMemory
0x4d1671a4
AcquireSRWLockExclusive
0x4d1671bc
AcquireSRWLockShared
0x4d1671f0
CreateEventW
0x4d1671e4
CreateMutexExW
0x4d1671b0
CreateSemaphoreExW
0x4d1671ec
DeleteCriticalSection
0x4d1671d0
EnterCriticalSection
0x4d1671e0
InitializeCriticalSection
0x4d1671fc
InitializeCriticalSectionEx
0x4d1671c8
InitializeSRWLock
0x4d1671d8
LeaveCriticalSection
0x4d1671cc
OpenEventW
0x4d1671ac
OpenSemaphoreW
0x4d1671e8
ReleaseMutex
0x4d1671b8
ReleaseSemaphore
0x4d1671dc
ReleaseSRWLockExclusive
0x4d1671f8
ReleaseSRWLockShared
0x4d1671f4
SetEvent
0x4d1671b4
TryAcquireSRWLockExclusive
0x4d1671d4
WaitForSingleObject
0x4d1671c0
WaitForSingleObjectEx
0x4d1671c4
Sleep
0x4d167204
GetComputerNameExW
0x4d167224
GetLocalTime
0x4d167220
GetSystemInfo
0x4d167210
GetSystemTimeAsFileTime
0x4d167214
GetTickCount
0x4d167218
GetTickCount64
0x4d16720c
GetVersionExW
0x4d167228
GetWindowsDirectoryW
0x4d16721c
CloseThreadpoolTimer
0x4d16723c
CreateThreadpoolTimer
0x4d167234
SetThreadpoolTimer
0x4d167238
WaitForThreadpoolTimerCallbacks
0x4d167230
UnregisterWaitEx
0x4d167244
RegisterWaitForSingleObjectEx
0x4d16724c
__CxxFrameHandler3
0x4d1672f0
__std_terminate
0x4d1672ec
_CxxThrowException
0x4d1672b0
_except_handler4_common
0x4d1672ac
_o___std_exception_copy
0x4d1672e0
_o___std_exception_destroy
0x4d1672dc
_o___std_type_info_destroy_list
0x4d1672d8
_o___stdio_common_vsnprintf_s
0x4d1672d4
_o___stdio_common_vsnwprintf_s
0x4d1672d0
_o___stdio_common_vsprintf_s
0x4d1672cc
_o___stdio_common_vswprintf
0x4d1672c8
_o___stdio_common_vswprintf_s
0x4d1672c4
_o__callnewh
0x4d1672c0
_o__cexit
0x4d1672bc
_o__configure_narrow_argv
0x4d1672b8
_o__crt_atexit
0x4d1672b4
_o__errno
0x4d167254
_o__execute_onexit_table
0x4d167258
_o__initialize_narrow_environment
0x4d16725c
_o__initialize_onexit_table
0x4d167260
_o__invalid_parameter_noinfo
0x4d167264
_o__purecall
0x4d167268
_o__register_onexit_function
0x4d16726c
_o__seh_filter_dll
0x4d167270
_o__ultow
0x4d167274
_o__wcsicmp
0x4d16727c
_o__wcsnicmp
0x4d167280
_o__wsplitpath_s
0x4d167284
_o_free
0x4d167288
_o_malloc
0x4d16728c
_o_strcpy_s
0x4d167290
_o_toupper
0x4d167294
_o_towupper
0x4d167298
_o_wcscat_s
0x4d16729c
_o_wcscpy_s
0x4d1672a0
_o_wcsncat_s
0x4d1672a4
_o_wcsncpy_s
0x4d1672a8
memcmp
0x4d1672f4
memcpy
0x4d1672f8
memmove
0x4d167278
wcschr
0x4d1672e8
wcsrchr
0x4d1672e4
EventProviderEnabled
0x4d167320
EventRegister
0x4d167328
EventSetInformation
0x4d16732c
EventUnregister
0x4d16731c
EventWriteTransfer
0x4d167324
DsBindWithSpnExW
0x4d167334
DsCrackNamesW
0x4d16733c
DsFreeNameResultW
0x4d167340
DsUnBindW
0x4d167338
AdjustTokenPrivileges
0x4d167360
CheckTokenMembership
0x4d16735c
GetLengthSid
0x4d167348
GetTokenInformation
0x4d167354
ImpersonateAnonymousToken
0x4d16734c
IsValidSid
0x4d167358
RevertToSelf
0x4d167350
I_QueryTagInformation
0x4d167368
bcrypt.dll
15
BCryptCloseAlgorithmProvider
0x4d1673a8
BCryptCreateHash
0x4d167380
BCryptDecrypt
0x4d16737c
BCryptDestroyHash
0x4d167370
BCryptDestroyKey
0x4d167394
BCryptDuplicateKey
0x4d16738c
BCryptEncrypt
0x4d167388
BCryptExportKey
0x4d1673a4
BCryptFinishHash
0x4d1673a0
BCryptGenerateSymmetricKey
0x4d167384
BCryptGenRandom
0x4d167378
BCryptHashData
0x4d167374
BCryptImportKey
0x4d167390
BCryptKeyDerivation
0x4d167398
BCryptOpenAlgorithmProvider
0x4d16739c
ntdll.dll
102
DbgPrint
0x4d167454
EtwEventActivityIdControl
0x4d167460
EtwEventEnabled
0x4d1674f4
EtwEventRegister
0x4d167488
EtwEventUnregister
0x4d167484
EtwEventWrite
0x4d1674f8
EtwEventWriteTransfer
0x4d167428
EtwGetTraceEnableFlags
0x4d1673fc
EtwGetTraceEnableLevel
0x4d1673f4
EtwGetTraceLoggerHandle
0x4d1673f8
EtwLogTraceEvent
0x4d1673d8
EtwRegisterTraceGuidsW
0x4d1673f0
EtwTraceMessage
0x4d16753c
EtwUnregisterTraceGuids
0x4d167400
NtAllocateLocallyUniqueId
0x4d167404
NtClose
0x4d167510
NtCreateEvent
0x4d167430
NtCreateKey
0x4d16744c
NtDeleteValueKey
0x4d167448
NtDuplicateObject
0x4d1674a8
NtDuplicateToken
0x4d1674bc
NtFilterToken
0x4d167508
NtOpenEvent
0x4d167410
NtOpenKey
0x4d167468
NtOpenProcess
0x4d1674c4
NtOpenProcessToken
0x4d167494
NtOpenThreadToken
0x4d167440
NtQueryInformationProcess
0x4d1674c0
NtQueryInformationToken
0x4d16749c
NtQuerySystemInformation
0x4d167464
NtQuerySystemTime
0x4d1673b8
NtQueryValueKey
0x4d16745c
NtSetInformationThread
0x4d167524
NtSetSecurityObject
0x4d1674a0
NtSetValueKey
0x4d167458
NtWaitForSingleObject
0x4d167438
RtlAcquireResourceExclusive
0x4d1673ec
RtlAcquireResourceShared
0x4d16751c
RtlAddAccessAllowedAce
0x4d1674a4
RtlAllocateAndInitializeSid
0x4d167520
RtlAllocateHeap
0x4d1674fc
RtlAppendUnicodeStringToString
0x4d167408
RtlAppendUnicodeToString
0x4d16740c
RtlAvlInsertNodeEx
0x4d16743c
RtlAvlRemoveNode
0x4d167540
RtlCheckTokenMembershipEx
0x4d167424
RtlConvertSharedToExclusive
0x4d167434
RtlCopySid
0x4d16742c
RtlCopyUnicodeString
0x4d16741c
RtlCreateAcl
0x4d1674ac
RtlCreateSecurityDescriptor
0x4d1674b0
RtlCreateServiceSid
0x4d16746c
RtlDeleteElementGenericTable
0x4d1674c8
RtlDeleteResource
0x4d167444
RtlDowncaseUnicodeString
0x4d1673d4
RtlDuplicateUnicodeString
0x4d167538
RtlEnterCriticalSection
0x4d1674d0
RtlEqualDomainName
0x4d167420
RtlEqualSid
0x4d1673dc
RtlEqualString
0x4d1674ec
RtlEqualUnicodeString
0x4d16752c
RtlEraseUnicodeString
0x4d1673b4
RtlExtendedMagicDivide
0x4d1674e4
RtlFreeHeap
0x4d167500
RtlFreeOemString
0x4d167478
RtlFreeSid
0x4d16750c
RtlFreeUnicodeString
0x4d167528
RtlGetElementGenericTable
0x4d1674dc
RtlGetNtProductType
0x4d167418
RtlIdentifierAuthoritySid
0x4d1673c4
RtlImageNtHeader
0x4d167504
RtlImpersonateSelf
0x4d1673b0
RtlInitializeCriticalSection
0x4d16747c
RtlInitializeGenericTable
0x4d1674b8
RtlInitializeResource
0x4d1673e8
RtlInitializeSid
0x4d1673bc
RtlInitString
0x4d167530
RtlInitUnicodeString
0x4d167534
RtlInsertElementGenericTable
0x4d1674d4
RtlIntegerToChar
0x4d1673e4
RtlIntegerToUnicodeString
0x4d167450
RtlIpv6StringToAddressExW
0x4d1674b4
RtlLeaveCriticalSection
0x4d1674d8
RtlLengthRequiredSid
0x4d1673d0
RtlLengthSid
0x4d1673cc
RtlLookupElementGenericTable
0x4d1674e0
RtlNtStatusToDosError
0x4d167490
RtlNumberGenericTableElements
0x4d1674cc
RtlOemStringToUnicodeString
0x4d16748c
RtlPrefixUnicodeString
0x4d167544
RtlReleaseResource
0x4d167514
RtlRunDecodeUnicodeString
0x4d167518
RtlSetDaclSecurityDescriptor
0x4d167498
RtlSubAuthorityCountSid
0x4d1673c8
RtlSubAuthoritySid
0x4d1673c0
RtlSystemTimeToLocalTime
0x4d1674e8
RtlTimeToTimeFields
0x4d1674f0
RtlUpcaseUnicodeString
0x4d167414
RtlUpcaseUnicodeStringToOemString
0x4d167480
RtlUpperChar
0x4d167470
WinSqmIncrementDWORD
0x4d1673e0
WinSqmSetDWORD
0x4d167474
MsvpCachePasswordsToCredential
0x4d16703c
MsvpCalculateNtlm2ChallengeNew
0x4d167004
MsvpCalculateNtlm2SessionKeysNew
0x4d167040
MsvpCompareCredentials
0x4d167024
MsvpComputeSaltedHashedPassword
0x4d167038
MsvpCredentialToCachePasswords
0x4d16702c
MsvpDecryptDpapiMasterKey
0x4d167020
MsvpDeriveSecureCredKey
0x4d167028
MsvpGMSACred
0x4d167034
MsvpLm20GetNtlm3ChallengeResponse
0x4d16701c
MsvpLm3Response
0x4d167008
MsvpLm3ResponseNew
0x4d167048
MsvpMakeSecretPasswordNT5
0x4d16700c
MsvpPasswordValidate
0x4d16704c
MsvpPutClearOwfsInPrimaryCredential
0x4d167044
MsvpUpdateSharedConfiguration
0x4d167030
MsvpValidateSupplementalCreds
0x4d167000
NtLmAlterRtlEqualUnicodeString
0x4d167018
NtlmSharedFree
0x4d167010
NtlmSharedInit
0x4d167014
I_RpcMapWin32Status
0x4d16705c
MesBufferHandleReset
0x4d167068
MesDecodeBufferHandleCreate
0x4d167070
MesEncodeDynBufferHandleCreate
0x4d167064
MesHandleFree
0x4d167060
NdrMesTypeAlignSize2
0x4d167054
NdrMesTypeDecode2
0x4d167058
NdrMesTypeEncode2
0x4d16706c
No function matches your filter.