msv1_0.dll
v10.0.26100.9278
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 20
SpInitialize
#1 · 0x4faa0
MsvIsLocalhostAliases
#2 · 0xf6a0
SpLsaModeInitialize
#3 · 0x4d6f0
SpUserModeInitialize
#4 · 0x1bfe0
DllMain
#5 · 0x1cbd0
LsaApCallPackage
#6 · 0x19aa0
LsaApCallPackagePassthrough
#7 · 0x33dd0
LsaApCallPackageUntrusted
#8 · 0x13b90
LsaApInitializePackage
#9 · 0x33e20
LsaApLogonTerminated
#10 · 0xa9e0
LsaApLogonUserEx2
#11 · 0x1dbe0
Msv1_0ExportSubAuthenticationRoutine
#12 · 0x38d90
Msv1_0ExportSubAuthenticationRoutineEx
#13 · 0x38e90
Msv1_0SubAuthenticationPresent
#14 · 0x38ea0
MsvGetLogonAttemptCount
#15 · 0x37a30
MsvIsIpAddressLocal
#16 · 0xf830
MsvSamLogoff
#17 · 0x30d10
MsvSamValidate
#18 · 0x15f30
MsvValidateTarget
#19 · 0x37a40
SpInstanceInit
#32 · 0x19d90
No function matches your filter.
Imported DLLs & functions 303
DebugBreak
0x180078d08
IsDebuggerPresent
0x180078d18
OutputDebugStringW
0x180078d10
DelayLoadFailureHook
0x180078d28
ResolveDelayLoadedAPI
0x180078d38
GetLastError
0x180078d60
SetLastError
0x180078d58
SetUnhandledExceptionFilter
0x180078d50
UnhandledExceptionFilter
0x180078d48
CompareFileTime
0x180078d70
CreateFileW
0x180078d90
FlushFileBuffers
0x180078d88
SetFilePointer
0x180078d78
WriteFile
0x180078d80
CloseHandle
0x180078da0
GetProcessHeap
0x180078db0
HeapAlloc
0x180078dc0
HeapFree
0x180078db8
InitializeSListHead
0x180078de8
RegisterWaitForSingleObject
0x180078df8
UnregisterWait
0x180078e00
DisableThreadLibraryCalls
0x180078e18
FreeLibrary
0x180078e30
GetModuleFileNameA
0x180078e38
GetModuleFileNameW
0x180078e50
GetModuleHandleExA
0x180078e28
GetModuleHandleExW
0x180078e20
GetModuleHandleW
0x180078e48
GetProcAddress
0x180078e10
LoadLibraryExA
0x180078e58
LoadLibraryExW
0x180078e40
VirtualAlloc
0x180078e80
VirtualProtect
0x180078e90
VirtualQuery
0x180078e88
GetProfileIntW
0x180078ea0
ExpandEnvironmentStringsW
0x180078eb0
GetCurrentProcess
0x180078ed8
GetCurrentProcessId
0x180078ef0
GetCurrentThread
0x180078ee8
GetCurrentThreadId
0x180078ee0
SetThreadStackGuarantee
0x180078ec0
SetThreadToken
0x180078ec8
TerminateProcess
0x180078ed0
GetProcessMitigationPolicy
0x180078f00
IsProcessorFeaturePresent
0x180078f08
OpenProcess
0x180078f10
QueryPerformanceCounter
0x180078f20
QueryFullProcessImageNameW
0x180078f30
RegCloseKey
0x180078f80
RegDeleteValueW
0x180078f60
RegGetValueW
0x180078f68
RegNotifyChangeKeyValue
0x180078f58
RegOpenKeyExA
0x180078f78
RegOpenKeyExW
0x180078f48
RegQueryValueExA
0x180078f40
RegQueryValueExW
0x180078f50
RegSetValueExW
0x180078f70
RtlCaptureContext
0x180078fa0
RtlLookupFunctionEntry
0x180078f98
RtlVirtualUnwind
0x180078f90
WideCharToMultiByte
0x180078fb0
AcquireSRWLockExclusive
0x180079048
AcquireSRWLockShared
0x180079060
CreateEventW
0x180078fc8
CreateMutexExW
0x180079020
CreateSemaphoreExW
0x180078fd0
DeleteCriticalSection
0x180079018
EnterCriticalSection
0x180078fd8
InitializeCriticalSection
0x180079030
InitializeCriticalSectionEx
0x180078fe8
InitializeSRWLock
0x180078ff8
LeaveCriticalSection
0x180078fe0
OpenEventW
0x180079008
OpenSemaphoreW
0x180079038
ReleaseMutex
0x180079050
ReleaseSemaphore
0x180078fc0
ReleaseSRWLockExclusive
0x180079058
ReleaseSRWLockShared
0x180078ff0
SetEvent
0x180079028
TryAcquireSRWLockExclusive
0x180079000
WaitForSingleObject
0x180079010
WaitForSingleObjectEx
0x180079040
InitOnceExecuteOnce
0x180079070
GetComputerNameExW
0x180079080
GetLocalTime
0x180079088
GetSystemInfo
0x180079098
GetSystemTimeAsFileTime
0x1800790a8
GetTickCount
0x1800790a0
GetTickCount64
0x1800790b0
GetVersionExW
0x180079090
GetWindowsDirectoryW
0x1800790b8
CloseThreadpoolTimer
0x1800790d8
CreateThreadpoolTimer
0x1800790d0
SetThreadpoolTimer
0x1800790c8
WaitForThreadpoolTimerCallbacks
0x1800790e0
UnregisterWaitEx
0x1800790f0
RegisterWaitForSingleObjectEx
0x180079100
__C_specific_handler
0x180079260
__CxxFrameHandler3
0x1800791c0
__CxxFrameHandler4
0x180079258
__std_terminate
0x180079238
_CxxThrowException
0x1800791c8
_o___std_exception_copy
0x180079250
_o___std_exception_destroy
0x180079248
_o___std_type_info_destroy_list
0x180079240
_o___stdio_common_vsnprintf_s
0x180079210
_o___stdio_common_vsnwprintf_s
0x180079208
_o___stdio_common_vsprintf_s
0x1800791f8
_o___stdio_common_vswprintf
0x1800791f0
_o___stdio_common_vswprintf_s
0x1800791e0
_o__callnewh
0x180079220
_o__cexit
0x180079218
_o__configure_narrow_argv
0x180079200
_o__crt_atexit
0x1800791e8
_o__errno
0x1800791d8
_o__execute_onexit_table
0x1800791d0
_o__initialize_narrow_environment
0x180079110
_o__initialize_onexit_table
0x180079118
_o__invalid_parameter_noinfo
0x180079120
_o__purecall
0x180079128
_o__register_onexit_function
0x180079130
_o__seh_filter_dll
0x180079138
_o__ultow
0x180079140
_o__ultow_s
0x180079148
_o__wcsicmp
0x180079150
_o__wcsnicmp
0x180079158
_o__wsplitpath_s
0x180079168
_o_free
0x180079170
_o_iswspace
0x180079178
_o_malloc
0x180079180
_o_strcpy_s
0x180079188
_o_towlower
0x180079190
_o_towupper
0x180079198
_o_wcscat_s
0x1800791a0
_o_wcscpy_s
0x1800791a8
_o_wcsncat_s
0x1800791b0
_o_wcsncpy_s
0x1800791b8
memcmp
0x180079268
memcpy
0x180079270
memmove
0x180079160
wcschr
0x180079230
wcsrchr
0x180079228
memset
0x1800792a0
strncmp
0x1800792b0
wcscmp
0x1800792a8
wcsncmp
0x180079298
TraceMessage
0x1800792c0
EventRegister
0x1800792e8
EventSetInformation
0x1800792d0
EventUnregister
0x1800792d8
EventWriteTransfer
0x1800792e0
DsBindWithSpnExW
0x180079308
DsCrackNamesW
0x180079300
DsFreeNameResultW
0x180079310
DsUnBindW
0x1800792f8
AdjustTokenPrivileges
0x180079320
CheckTokenMembership
0x180079338
GetLengthSid
0x180079328
GetTokenInformation
0x180079350
ImpersonateAnonymousToken
0x180079348
IsValidSid
0x180079330
RevertToSelf
0x180079340
I_QueryTagInformation
0x180079360
ntdll.dll
104
DbgPrint
0x1800794b8
EtwEventActivityIdControl
0x1800794d0
EtwEventEnabled
0x1800795f0
EtwEventRegister
0x180079520
EtwEventUnregister
0x180079518
EtwEventWrite
0x1800795f8
EtwEventWriteTransfer
0x180079460
EtwGetTraceEnableFlags
0x180079408
EtwGetTraceEnableLevel
0x1800793f8
EtwGetTraceLoggerHandle
0x180079400
EtwLogTraceEvent
0x1800793c0
EtwRegisterTraceGuidsW
0x1800793f0
EtwTraceMessage
0x180079630
EtwUnregisterTraceGuids
0x180079410
NtAllocateLocallyUniqueId
0x180079418
NtClose
0x180079658
NtCreateEvent
0x180079470
NtCreateKey
0x1800794a8
NtDeleteValueKey
0x1800794a0
NtDuplicateObject
0x180079560
NtDuplicateToken
0x180079588
NtFilterToken
0x180079648
NtOpenEvent
0x180079430
NtOpenKey
0x1800794e0
NtOpenProcess
0x180079598
NtOpenProcessToken
0x180079538
NtOpenThreadToken
0x180079640
NtQueryInformationProcess
0x180079590
NtQueryInformationToken
0x180079548
NtQuerySystemInformation
0x1800794d8
NtQuerySystemTime
0x180079380
NtQueryValueKey
0x1800794c8
NtSetInformationThread
0x180079680
NtSetSecurityObject
0x180079550
NtSetValueKey
0x1800794c0
NtWaitForSingleObject
0x180079480
RtlAcquireResourceExclusive
0x1800793e8
RtlAcquireResourceShared
0x180079670
RtlAddAccessAllowedAce
0x180079558
RtlAllocateAndInitializeSid
0x180079678
RtlAllocateHeap
0x180079610
RtlAppendUnicodeStringToString
0x180079420
RtlAppendUnicodeToString
0x180079428
RtlAvlInsertNodeEx
0x180079488
RtlAvlRemoveNode
0x1800796a8
RtlCheckTokenMembershipEx
0x180079458
RtlConvertSharedToExclusive
0x180079478
RtlCopySid
0x180079468
RtlCopyUnicodeString
0x180079448
RtlCreateAcl
0x180079568
RtlCreateSecurityDescriptor
0x180079570
RtlCreateServiceSid
0x1800794e8
RtlDeleteElementGenericTable
0x1800795a0
RtlDeleteResource
0x180079498
RtlDowncaseUnicodeString
0x1800793b8
RtlDuplicateUnicodeString
0x180079490
RtlEnterCriticalSection
0x1800795b0
RtlEqualDomainName
0x180079638
RtlEqualSid
0x1800793c8
RtlEqualString
0x1800795e0
RtlEqualUnicodeString
0x180079690
RtlEraseUnicodeString
0x180079378
RtlFreeHeap
0x180079618
RtlFreeOemString
0x180079500
RtlFreeSid
0x180079650
RtlFreeUnicodeString
0x180079688
RtlGetElementGenericTable
0x1800795c8
RtlGetNtProductType
0x180079440
RtlIdentifierAuthoritySid
0x180079398
RtlImageNtHeader
0x180079628
RtlImpersonateSelf
0x180079370
RtlInitializeCriticalSection
0x180079508
RtlInitializeGenericTable
0x180079580
RtlInitializeResource
0x1800793e0
RtlInitializeSid
0x180079388
RtlInitString
0x180079698
RtlInitUnicodeString
0x1800796a0
RtlInsertElementGenericTable
0x1800795b8
RtlIntegerToChar
0x1800793d8
RtlIntegerToUnicodeString
0x1800794b0
RtlIpv4AddressToStringExW
0x180079600
RtlIpv6AddressToStringExW
0x180079608
RtlIpv6StringToAddressExW
0x180079578
RtlLeaveCriticalSection
0x1800795c0
RtlLengthRequiredSid
0x1800793b0
RtlLengthSid
0x1800793a8
RtlLookupElementGenericTable
0x1800795d0
RtlNtStatusToDosError
0x180079530
RtlNumberGenericTableElements
0x1800795a8
RtlOemStringToUnicodeString
0x180079528
RtlPrefixUnicodeString
0x180079450
RtlQueryElevationFlags
0x180079620
RtlReleaseResource
0x180079660
RtlRunDecodeUnicodeString
0x180079668
RtlSetDaclSecurityDescriptor
0x180079540
RtlSubAuthorityCountSid
0x1800793a0
RtlSubAuthoritySid
0x180079390
RtlSystemTimeToLocalTime
0x1800795d8
RtlTimeToTimeFields
0x1800795e8
RtlUpcaseUnicodeString
0x180079438
RtlUpcaseUnicodeStringToOemString
0x180079510
RtlUpperChar
0x1800794f0
WinSqmIncrementDWORD
0x1800793d0
WinSqmSetDWORD
0x1800794f8
MsvpAvlAdd
0x180078c30
MsvpAvlGet
0x180078c48
MsvpAvlGetFlags
0x180078ca0
MsvpAvlGetTimestamp
0x180078c90
MsvpAvlInit
0x180078c50
MsvpAvlLen
0x180078c38
MsvpAvlSetFlags
0x180078c88
MsvpAvlSetTimestamp
0x180078ca8
MsvpAvlToString
0x180078c98
MsvpCachePasswordsToCredential
0x180078c18
MsvpCalculateNtlm2Challenge
0x180078c20
MsvpCalculateNtlm2SessionKeys
0x180078c58
MsvpCompareCredentials
0x180078cc0
MsvpComputeSaltedHashedPassword
0x180078c10
MsvpCredentialToCachePasswords
0x180078cd0
MsvpDecryptDpapiMasterKey
0x180078cb8
MsvpDeriveSecureCredKey
0x180078cc8
MsvpGMSACred
0x180078ce0
MsvpLm20GetNtlm3ChallengeResponse
0x180078cb0
MsvpLm3Response
0x180078c08
MsvpMakeSecretPasswordNT5
0x180078c68
MsvpPasswordValidate
0x180078c40
MsvpPutClearOwfsInPrimaryCredential
0x180078c60
MsvpUpdateSharedConfiguration
0x180078cd8
MsvpValidateSupplementalCreds
0x180078c28
NtLmAlterRtlEqualUnicodeString
0x180078c80
NtlmSharedFree
0x180078c70
NtlmSharedInit
0x180078c78
No function matches your filter.