schannel.dll
v10.0.19041.6328
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 36
SpLsaModeInitialize
#1 · 0x25f20
AcceptSecurityContext
#2 · 0x6db07
AcquireCredentialsHandleA
#3 · 0x6db3f
AcquireCredentialsHandleW
#4 · 0x6db7b
ApplyControlToken
#5 · 0x6dbaf
CompleteAuthToken
#6 · 0x6dbdb
DeleteSecurityContext
#7 · 0x6dc0b
EnumerateSecurityPackagesA
#8 · 0x6dc44
EnumerateSecurityPackagesW
#9 · 0x6dc82
FreeContextBuffer
#10 · 0x6dcb7
FreeCredentialsHandle
#11 · 0x6dce7
ImpersonateSecurityContext
#12 · 0x6dd20
InitSecurityInterfaceA
#13 · 0x6dd5a
InitSecurityInterfaceW
#14 · 0x6dd90
InitializeSecurityContextA
#15 · 0x6ddca
InitializeSecurityContextW
#16 · 0x6de08
MakeSignature
#17 · 0x6de39
QueryContextAttributesA
#18 · 0x6de67
QueryContextAttributesW
#19 · 0x6de9f
QuerySecurityPackageInfoA
#20 · 0x6ded9
QuerySecurityPackageInfoW
#21 · 0x6df15
RevertSecurityContext
#22 · 0x6df4d
SealMessage
#23 · 0x6df77
SpUserModeInitialize
#24 · 0x91c0
SslCrackCertificate
#25 · 0x3e520
SslEmptyCacheA
#26 · 0x42c40
SslEmptyCacheW
#27 · 0x42cb0
SslFreeCertificate
#28 · 0x3e760
SslFreeCustomBuffer
#29 · 0x3d750
SslGenerateRandomBits
#30 · 0x3e790
SslGetExtensions
#31 · 0x43f30
SslGetMaximumKeySize
#32 · 0x3e7b0
SslGetServerIdentity
#33 · 0x44330
SslLoadCertificate
#34 · 0x1c0c0
UnsealMessage
#35 · 0x6e06b
VerifySignature
#36 · 0x6e091
No function matches your filter.
Imported DLLs & functions 222
ApiSetQueryApiSetPresence
0x58871000
DebugBreak
0x58871008
IsDebuggerPresent
0x5887100c
OutputDebugStringW
0x58871010
DelayLoadFailureHook
0x58871018
ResolveDelayLoadedAPI
0x58871020
GetLastError
0x5887102c
SetLastError
0x58871028
SetUnhandledExceptionFilter
0x58871030
UnhandledExceptionFilter
0x58871034
MoveFileExW
0x58871048
CloseHandle
0x58871050
GetProcessHeap
0x5887105c
HeapAlloc
0x58871058
HeapFree
0x58871060
LocalAlloc
0x58871070
LocalFree
0x5887106c
LocalReAlloc
0x58871068
InitializeSListHead
0x5887107c
InterlockedFlushSList
0x58871080
InterlockedPopEntrySList
0x58871084
InterlockedPushEntrySList
0x58871078
DisableThreadLibraryCalls
0x58871090
FreeLibrary
0x588710a4
GetModuleFileNameA
0x58871098
GetModuleFileNameW
0x588710a0
GetModuleHandleExW
0x58871094
GetModuleHandleW
0x588710a8
GetProcAddress
0x5887108c
LoadLibraryExW
0x5887109c
FormatMessageW
0x588710b0
CreateFileMappingW
0x588710d4
MapViewOfFileEx
0x588710c8
OpenFileMappingW
0x588710b8
UnmapViewOfFile
0x588710c4
VirtualAlloc
0x588710cc
VirtualFree
0x588710c0
VirtualProtect
0x588710d0
VirtualQuery
0x588710bc
ExpandEnvironmentStringsW
0x588710e4
GetCurrentDirectoryW
0x588710dc
SetCurrentDirectoryW
0x588710e0
GetCurrentProcess
0x588710fc
GetCurrentProcessId
0x588710ec
GetCurrentThread
0x588710f8
GetCurrentThreadId
0x588710f0
OpenThreadToken
0x58871104
SetThreadStackGuarantee
0x588710f4
TerminateProcess
0x58871100
IsProcessorFeaturePresent
0x58871110
OpenProcess
0x5887110c
QueryPerformanceCounter
0x58871118
QueryPerformanceFrequency
0x5887111c
QueryFullProcessImageNameW
0x58871124
RegCloseKey
0x58871130
RegCreateKeyExW
0x58871134
RegFlushKey
0x5887112c
RegNotifyChangeKeyValue
0x5887113c
RegOpenKeyExA
0x58871140
RegOpenKeyExW
0x58871138
RegQueryValueExW
0x58871144
RegSetValueExW
0x58871148
RtlCompareMemory
0x58871150
lstrlenW
0x58871164
AcquireSRWLockExclusive
0x588711b4
AcquireSRWLockShared
0x5887119c
CreateEventA
0x588711ac
CreateEventW
0x5887117c
CreateMutexExW
0x58871194
CreateSemaphoreExW
0x588711c4
DeleteCriticalSection
0x58871188
EnterCriticalSection
0x58871180
InitializeCriticalSection
0x588711c0
InitializeCriticalSectionAndSpinCount
0x58871184
InitializeCriticalSectionEx
0x588711b8
InitializeSRWLock
0x588711bc
LeaveCriticalSection
0x58871198
OpenSemaphoreW
0x58871190
ReleaseMutex
0x58871178
ReleaseSemaphore
0x58871174
ReleaseSRWLockExclusive
0x588711a0
ReleaseSRWLockShared
0x5887116c
ResetEvent
0x588711a4
SetEvent
0x58871170
TryAcquireSRWLockExclusive
0x588711a8
WaitForSingleObject
0x5887118c
WaitForSingleObjectEx
0x588711b0
Sleep
0x588711cc
GetComputerNameExW
0x588711e0
GetSystemInfo
0x588711ec
GetSystemTimeAsFileTime
0x588711d8
GetTickCount
0x588711e4
GetTickCount64
0x588711e8
GetVersionExW
0x588711dc
GetWindowsDirectoryW
0x588711d4
CloseThreadpoolTimer
0x588711f8
CreateThreadpoolTimer
0x588711f4
SetThreadpoolTimer
0x588711fc
WaitForThreadpoolTimerCallbacks
0x58871200
ChangeTimerQueueTimer
0x58871214
CreateTimerQueueTimer
0x58871208
DeleteTimerQueueTimer
0x5887120c
UnregisterWaitEx
0x58871210
RegisterWaitForSingleObjectEx
0x5887121c
GetFileVersionInfoExW
0x58871228
GetFileVersionInfoSizeExW
0x5887122c
VerQueryValueW
0x58871224
GetSystemWow64DirectoryW
0x58871234
__CxxFrameHandler3
0x588712ac
_except_handler4_common
0x58871284
_o___std_type_info_destroy_list
0x5887129c
_o___stdio_common_vsnwprintf_s
0x58871298
_o___stdio_common_vswprintf
0x58871294
_o__callnewh
0x58871290
_o__cexit
0x5887128c
_o__configure_narrow_argv
0x58871288
_o__crt_atexit
0x5887123c
_o__execute_onexit_table
0x58871240
_o__initialize_narrow_environment
0x58871244
_o__initialize_onexit_table
0x58871248
_o__purecall
0x5887124c
_o__register_onexit_function
0x58871250
_o__seh_filter_dll
0x58871254
_o__stricmp
0x58871258
_o__wcsicmp
0x58871260
_o__wcsnicmp
0x58871264
_o__wsplitpath_s
0x58871268
_o_free
0x5887126c
_o_malloc
0x58871270
_o_memcpy_s
0x58871274
_o_wcscat_s
0x58871278
_o_wcscpy_s
0x5887127c
_o_wcsncpy_s
0x58871280
memcmp
0x588712a4
memcpy
0x588712a8
memmove
0x5887125c
wcschr
0x588712a0
wcsrchr
0x588712b0
wcsstr
0x588712b4
memmove_s
0x588712d4
memset
0x588712c8
wcsncmp
0x588712d0
wcsnlen
0x588712cc
_time32
0x588712dc
TraceMessage
0x588712e4
EventRegister
0x588712f0
EventSetInformation
0x588712f4
EventUnregister
0x588712f8
EventWriteTransfer
0x588712ec
AllocateLocallyUniqueId
0x58871304
CreateWellKnownSid
0x5887130c
EqualSid
0x58871310
GetLengthSid
0x58871308
GetTokenInformation
0x58871300
RevertToSelf
0x58871314
ntdll.dll
61
EtwEventRegister
0x58871394
EtwEventUnregister
0x58871390
EtwEventWrite
0x5887138c
EtwEventWriteTransfer
0x588713b8
EtwGetTraceEnableFlags
0x58871354
EtwGetTraceEnableLevel
0x58871358
EtwGetTraceLoggerHandle
0x5887135c
EtwRegisterTraceGuidsW
0x588713f8
EtwTraceMessage
0x588713bc
EtwUnregisterTraceGuids
0x588713f4
NtAllocateVirtualMemory
0x588713dc
NtClose
0x588713a4
NtCreateEvent
0x58871334
NtDuplicateObject
0x588713a8
NtEnumerateKey
0x588713c0
NtFreeVirtualMemory
0x588713e0
NtOpenEvent
0x58871330
NtOpenKey
0x5887131c
NtQuerySystemInformation
0x5887132c
NtQuerySystemTime
0x58871328
NtQueryValueKey
0x58871324
NtSetEvent
0x58871338
NtSetInformationThread
0x588713d8
NtWaitForSingleObject
0x58871340
RtlAcquireResourceExclusive
0x58871388
RtlAcquireResourceShared
0x5887139c
RtlAllocateHeap
0x58871360
RtlAnsiStringToUnicodeString
0x588713b4
RtlAppendUnicodeToString
0x588713d4
RtlCompareUnicodeString
0x588713c4
RtlConvertSharedToExclusive
0x588713c8
RtlCopySid
0x58871374
RtlDeleteCriticalSection
0x588713f0
RtlDeleteResource
0x588713e4
RtlDeregisterWait
0x58871408
RtlDuplicateUnicodeString
0x5887133c
RtlEnterCriticalSection
0x588713ec
RtlEqualUnicodeString
0x5887136c
RtlFreeHeap
0x58871320
RtlFreeUnicodeString
0x58871350
RtlGetNtProductType
0x58871370
RtlImageNtHeader
0x5887134c
RtlInitAnsiString
0x5887140c
RtlInitializeCriticalSection
0x58871364
RtlInitializeResource
0x58871368
RtlInitializeSid
0x58871380
RtlInitString
0x58871384
RtlInitUnicodeString
0x588713b0
RtlIpv4StringToAddressExW
0x588713d0
RtlIpv6StringToAddressExW
0x588713cc
RtlLeaveCriticalSection
0x588713e8
RtlLengthSid
0x58871378
RtlNtStatusToDosError
0x588713ac
RtlNtStatusToDosErrorNoTeb
0x588713a0
RtlPublishWnfStateData
0x588713fc
RtlRegisterWait
0x58871404
RtlReleaseResource
0x58871398
RtlSubAuthorityCountSid
0x58871348
RtlSubAuthoritySid
0x5887137c
RtlValidSid
0x58871344
WinSqmSetDWORD
0x58871400
No function matches your filter.