Architecture |
IMAGE_FILE_MACHINE_AMD64
|
---|---|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
Compilation Date | 2023-Jan-18 15:57:09 |
Detected languages |
English - United States
|
Debug artifacts |
sechost.pdb
|
CompanyName | Microsoft Corporation |
FileDescription | Host for SCM/SDDL/LSA Lookup APIs |
FileVersion | 10.0.22621.3296 (WinBuild.160101.0800) |
InternalName | sechost.dll |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | sechost.dll |
ProductName | Microsoft® Windows® Operating System |
ProductVersion | 10.0.22621.3296 |
Suspicious | Strings found in the binary may indicate undesirable behavior: |
May have dropper capabilities:
|
Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
Info | The PE is digitally signed. |
Signer: Microsoft Windows
Issuer: Microsoft Windows Production PCA 2011 |
Safe | VirusTotal score: 0/71 (Scanned on 2024-04-01 01:59:19) | All the AVs think this file is safe. |
e_magic | MZ |
---|---|
e_cblp | 0x90 |
e_cp | 0x3 |
e_crlc | 0 |
e_cparhdr | 0x4 |
e_minalloc | 0 |
e_maxalloc | 0xffff |
e_ss | 0 |
e_sp | 0xb8 |
e_csum | 0 |
e_ip | 0 |
e_cs | 0 |
e_ovno | 0 |
e_oemid | 0 |
e_oeminfo | 0 |
e_lfanew | 0xf0 |
Signature | PE |
---|---|
Machine |
IMAGE_FILE_MACHINE_AMD64
|
NumberofSections | 7 |
TimeDateStamp | 2023-Jan-18 15:57:09 |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xf0 |
Characteristics |
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Magic | PE32+ |
---|---|
LinkerVersion | 14.0 |
SizeOfCode | 0x70000 |
SizeOfInitializedData | 0x37000 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0x00000000000178E0 (Section: .text) |
BaseOfCode | 0x1000 |
ImageBase | 0x180000000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x1000 |
OperatingSystemVersion | A.0 |
ImageVersion | A.0 |
SubsystemVersion | A.0 |
Win32VersionValue | 0 |
SizeOfImage | 0xa8000 |
SizeOfHeaders | 0x1000 |
Checksum | 0xb0f27 |
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
SizeofStackReserve | 0x40000 |
SizeofStackCommit | 0x1000 |
SizeofHeapReserve | 0x100000 |
SizeofHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 16 |
api-ms-win-core-crt-l1-1-0.dll |
memset
_vsnwprintf_s memcpy memcmp memmove wcscmp memcpy_s towlower strnlen memmove_s wcsrchr strstr strrchr strchr _stricmp strncmp wcsncmp wcsnlen qsort_s wcsstr wcscat_s _i64tow_s _ui64tow_s _errno wcstok_s _ultow _wcstoi64 wcsncpy_s _wcstoui64 _wcsnicmp wcschr swprintf_s wcstoul iswctype _ultow_s wcscpy_s _wcsicmp |
---|---|
api-ms-win-core-crt-l2-1-0.dll |
_onexit
_initterm_e _initterm __dllonexit3 _purecall |
ntdll.dll |
RtlEqualPrefixSid
RtlEqualUnicodeString RtlEqualSid RtlValidAcl RtlSetSaclSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlInitializeSid RtlGetControlSecurityDescriptor RtlAddAuditAccessObjectAce RtlSubAuthoritySid RtlSetDaclSecurityDescriptor NtTerminateProcess RtlConvertSidToUnicodeString RtlGetAce RtlAddAuditAccessAceEx RtlxAnsiStringToUnicodeSize RtlAddAccessAllowedAceEx RtlGetOwnerSecurityDescriptor RtlSubAuthorityCountSid RtlAddAce RtlGetGroupSecurityDescriptor RtlAbsoluteToSelfRelativeSD RtlMultiByteToUnicodeN RtlAddAccessDeniedAceEx RtlAddAccessAllowedObjectAce RtlAddAccessDeniedObjectAce RtlFirstFreeAce RtlSetGroupSecurityDescriptor RtlCreateSecurityDescriptor RtlGetDaclSecurityDescriptor RtlCaptureContext RtlInitializeCriticalSectionEx NtOpenProcessTokenEx RtlLengthSecurityDescriptor RtlLengthRequiredSid RtlAddAccessAllowedAce RtlAddMandatoryAce RtlCreateAcl RtlAllocateHeap RtlCopySecurityDescriptor NtOpenKey RtlFreeHeap NtQueryValueKey RtlCapabilityCheckForSingleSessionSku RtlCheckTokenMembership RtlCheckTokenMembershipEx RtlCapabilityCheck RtlCheckTokenCapability RtlMakeSelfRelativeSD RtlSetThreadSubProcessTag DbgPrintEx NtSetInformationThread RtlCreateServiceSid LdrQueryModuleServiceTags NtQueryInformationThread RtlInitializeSRWLock RtlReleaseSRWLockExclusive NtQueryInformationToken RtlAcquireSRWLockShared RtlReleaseSRWLockShared RtlRunOnceExecuteOnce RtlCompareUnicodeString RtlSubscribeWnfStateChangeNotification NtQueueApcThread RtlQueryWnfStateData RtlUnsubscribeWnfNotificationWaitForCompletion RtlSetLastWin32Error NtQueryInformationFile NtQueryLicenseValue NtCancelIoFile NtTraceControl RtlFreeAnsiString RtlGetPersistedStateLocation RtlQueryRegistryValueWithFallback RtlValidRelativeSecurityDescriptor EtwDeliverDataBlock EtwSendNotification EtwEnumerateProcessRegGuids NtSetSystemInformation NtSetIntervalProfile NtQuerySystemInformation NtQueryIntervalProfile RtlQueryTimeZoneInformation EtwpGetCpuSpeed RtlQueryPerformanceFrequency NtWaitForMultipleObjects NtAllocateVirtualMemoryEx NtFreeVirtualMemory RtlGetNativeSystemInformation RtlInitializeBitMap RtlInterlockedSetBitRun NtQueryPerformanceCounter RtlInterlockedClearBitRun EtwEventWriteTransfer RtlGetCompressionWorkSpaceSize RtlDecompressBufferEx RtlGetCurrentServiceSessionId EtwProcessPrivateLoggerRequest NtSetEvent RtlGetNtProductType RtlxUnicodeStringToAnsiSize RtlInitUnicodeStringEx LdrResSearchResource RtlAllocateAndInitializeSid RtlDeriveCapabilitySidsFromName _vsnwprintf RtlLookupFunctionEntry RtlVirtualUnwind RtlUnhandledExceptionFilter __C_specific_handler NtOpenProcessToken RtlNtStatusToDosError RtlUnicodeToMultiByteSize RtlCopySid RtlInitAnsiString RtlUnicodeStringToAnsiString RtlLengthSid RtlCopyUnicodeString RtlFreeUnicodeString RtlAnsiStringToUnicodeString RtlInitUnicodeString RtlGUIDFromString RtlValidSid NtOpenThreadToken RtlDllShutdownInProgress RtlNtStatusToDosErrorNoTeb RtlUnsubscribeWnfStateChangeNotification NtClose RtlAcquireSRWLockExclusive RtlDeleteCriticalSection RtlGetSaclSecurityDescriptor |
api-ms-win-core-libraryloader-l1-2-0.dll |
GetModuleHandleW
GetModuleHandleExW GetModuleFileNameA DisableThreadLibraryCalls FreeLibrary GetProcAddress LoadLibraryExW GetModuleFileNameW |
api-ms-win-core-debug-l1-1-0.dll |
DebugBreak
IsDebuggerPresent OutputDebugStringW |
api-ms-win-core-errorhandling-l1-1-0.dll |
SetLastError
RaiseException GetLastError |
api-ms-win-core-handle-l1-1-0.dll |
CloseHandle
|
api-ms-win-core-heap-l1-1-0.dll |
HeapFree
HeapAlloc GetProcessHeap HeapReAlloc |
api-ms-win-core-processthreads-l1-1-0.dll |
UpdateProcThreadAttribute
ResumeThread SetThreadPriority TerminateThread GetThreadPriority CreateThread InitializeProcThreadAttributeList CreateProcessAsUserW OpenProcessToken GetCurrentProcess TlsSetValue GetProcessTimes GetCurrentThread OpenThreadToken CreateProcessW OpenThread GetCurrentProcessId TlsAlloc GetCurrentThreadId TlsGetValue |
api-ms-win-core-synch-l1-1-0.dll |
InitializeCriticalSectionEx
DeleteCriticalSection OpenSemaphoreW WaitForSingleObjectEx ReleaseSRWLockExclusive CreateEventA InitializeSRWLock ReleaseSRWLockShared ResetEvent AcquireSRWLockShared ReleaseMutex CreateSemaphoreExW ReleaseSemaphore WaitForMultipleObjectsEx CreateMutexExW WaitForSingleObject AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection SetEvent OpenEventW CreateEventExW CreateEventW SleepEx |
api-ms-win-core-util-l1-1-0.dll |
DecodePointer
EncodePointer |
api-ms-win-eventing-provider-l1-1-0.dll |
EventWriteTransfer
EventRegister EventSetInformation EventUnregister |
api-ms-win-core-localization-l1-2-0.dll |
FormatMessageW
|
api-ms-win-core-registry-l1-1-0.dll |
RegOpenKeyExA
RegQueryValueExA RegSetValueExW RegNotifyChangeKeyValue RegCloseKey RegDeleteValueW RegEnumKeyExW RegOpenKeyExW RegQueryValueExW |
api-ms-win-core-heap-l2-1-0.dll |
LocalFree
LocalReAlloc LocalAlloc |
api-ms-win-security-base-l1-1-0.dll |
GetSidSubAuthority
GetSidSubAuthorityCount GetSecurityDescriptorDacl FreeSid IsValidSid AdjustTokenGroups InitializeSecurityDescriptor EqualSid SetKernelObjectSecurity SetSecurityDescriptorDacl EqualDomainSid GetLengthSid AddAccessDeniedAce GetSecurityDescriptorSacl AddAccessAllowedAce AdjustTokenPrivileges GetTokenInformation CreateRestrictedToken IsValidSecurityDescriptor AllocateAndInitializeSid GetAclInformation SetSecurityDescriptorSacl |
api-ms-win-core-string-l1-1-0.dll |
CompareStringW
CompareStringOrdinal |
api-ms-win-core-wow64-l1-1-1.dll |
IsWow64Process2
|
api-ms-win-core-synch-l1-2-0.dll |
SleepConditionVariableSRW
WakeConditionVariable Sleep |
api-ms-win-core-threadpool-l1-2-0.dll |
CloseThreadpoolTimer
CreateThreadpoolTimer CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork WaitForThreadpoolTimerCallbacks SetThreadpoolTimer |
api-ms-win-core-sysinfo-l1-1-0.dll |
GetComputerNameExW
GetSystemDirectoryW |
api-ms-win-core-file-l1-1-0.dll |
CreateFileW
GetFullPathNameA GetFullPathNameW ReadFile GetDiskFreeSpaceExW GetFileAttributesExW |
api-ms-win-core-memory-l1-1-0.dll |
VirtualFree
VirtualAllocEx VirtualFreeEx |
api-ms-win-core-io-l1-1-0.dll |
DeviceIoControl
GetOverlappedResult |
bcrypt.dll |
BCryptGenerateSymmetricKey
BCryptCreateHash BCryptSetProperty BCryptHashData BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptFinishHash BCryptOpenAlgorithmProvider BCryptDecrypt BCryptGetProperty BCryptDestroyKey BCryptEncrypt BCryptGenRandom |
api-ms-win-core-rtlsupport-l1-1-0.dll |
RtlCompareMemory
|
api-ms-win-core-processthreads-l1-1-1.dll |
GetProcessMitigationPolicy
|
api-ms-win-core-delayload-l1-1-1.dll |
ResolveDelayLoadedAPI
|
api-ms-win-core-delayload-l1-1-0.dll |
DelayLoadFailureHook
|
api-ms-win-core-apiquery-l1-1-0.dll |
ApiSetQueryApiSetPresence
|
RPCRT4.dll (delay-loaded) |
RpcStringFreeW
RpcBindingFree UuidFromStringW UuidToStringW RpcBindingCreateW RpcBindingBind RpcServerUseProtseqW RpcServerRegisterIf3 RpcBindingSetAuthInfoExW RpcRevertToSelfEx RpcImpersonateClient RpcBindingFromStringBindingW RpcRevertToSelf RpcAsyncInitializeHandle RpcAsyncCompleteCall RpcAsyncCancelCall UuidEqual UuidIsNil RpcSmDestroyClientContext UuidCreate NdrClientCall2 NdrAsyncClientCall RpcBindingSetAuthInfoW NdrClientCall3 RpcStringBindingComposeW I_RpcExceptionFilter I_RpcMapWin32Status RpcBindingSetOption RpcSsDestroyClientContext RpcSsGetContextBinding RpcServerInqCallAttributesA RpcBindingServerFromClient RpcStringBindingParseW RpcBindingToStringBindingW |
Attributes | 0x1 |
---|---|
Name | RPCRT4.dll |
ModuleHandle | 0x9d150 |
DelayImportAddressTable | 0xa3030 |
DelayImportNameTable | 0x94ab8 |
BoundDelayImportTable | 0x95248 |
UnloadDelayImportTable | 0 |
TimeStamp | 1970-Jan-01 00:00:00 |
Ordinal | 1000 |
---|---|
Address | 0x4ffe0 |
Ordinal | 1001 |
---|---|
Address | 0x50c70 |
Ordinal | 1002 |
---|---|
Address | 0x50c80 |
Ordinal | 1003 |
---|---|
Address | 0x49d60 |
Ordinal | 1004 |
---|---|
Address | 0x49d90 |
Ordinal | 1005 |
---|---|
Address | 0x58180 |
Ordinal | 1006 |
---|---|
Address | 0x583a0 |
Ordinal | 1007 |
---|---|
Address | 0x584f0 |
Ordinal | 1008 |
---|---|
Address | 0x58580 |
Ordinal | 1009 |
---|---|
Address | 0x2d240 |
Ordinal | 1010 |
---|---|
Address | 0x586f0 |
Ordinal | 1011 |
---|---|
Address | 0x58870 |
Ordinal | 1012 |
---|---|
Address | 0x589f0 |
Ordinal | 1013 |
---|---|
Address | 0x58a60 |
Ordinal | 1014 |
---|---|
Address | 0x58b20 |
Ordinal | 1015 |
---|---|
Address | 0x58bf0 |
Ordinal | 1016 |
---|---|
Address | 0x58cb0 |
Ordinal | 1017 |
---|---|
Address | 0x58d20 |
Ordinal | 1018 |
---|---|
Address | 0x58dd0 |
Ordinal | 1019 |
---|---|
Address | 0x58f30 |
Ordinal | 1020 |
---|---|
Address | 0x31970 |
Ordinal | 1021 |
---|---|
Address | 0x31990 |
Ordinal | 1022 |
---|---|
Address | 0x13f40 |
Ordinal | 1023 |
---|---|
Address | 0x49650 |
Ordinal | 1024 |
---|---|
Address | 0x49f50 |
Ordinal | 1025 |
---|---|
Address | 0x4a110 |
Ordinal | 1026 |
---|---|
Address | 0x4a1f0 |
Ordinal | 1027 |
---|---|
Address | 0x16de0 |
Ordinal | 1028 |
---|---|
Address | 0x9a20 |
Ordinal | 1029 |
---|---|
Address | 0x107e0 |
Ordinal | 1030 |
---|---|
Address | 0x1f1a0 |
Ordinal | 1031 |
---|---|
Address | 0x4a4d0 |
Ordinal | 1032 |
---|---|
Address | 0x16b80 |
Ordinal | 1033 |
---|---|
Address | 0x14030 |
Ordinal | 1034 |
---|---|
Address | 0xa080 |
Ordinal | 1035 |
---|---|
Address | 0x2d260 |
Ordinal | 1036 |
---|---|
Address | 0x2410 |
Ordinal | 1037 |
---|---|
Address | 0x4710 |
Ordinal | 1038 |
---|---|
Address | 0x2d2e0 |
Ordinal | 1039 |
---|---|
Address | 0x2d420 |
Ordinal | 1040 |
---|---|
Address | 0x2d4f0 |
Ordinal | 1041 |
---|---|
Address | 0x1de0 |
Ordinal | 1042 |
---|---|
Address | 0x4a80 |
Ordinal | 1043 |
---|---|
Address | 0x6b030 |
Ordinal | 1044 |
---|---|
Address | 0x6b0c0 |
Ordinal | 1045 |
---|---|
Address | 0x4a630 |
Ordinal | 1046 |
---|---|
Address | 0x4ad90 |
Ordinal | 1047 |
---|---|
Address | 0x4b290 |
Ordinal | 1048 |
---|---|
Address | 0x59230 |
Ordinal | 1049 |
---|---|
Address | 0x593d0 |
Ordinal | 1050 |
---|---|
Address | 0x594c0 |
Ordinal | 1051 |
---|---|
Address | 0x5ab30 |
Ordinal | 1052 |
---|---|
Address | 0x595b0 |
Ordinal | 1053 |
---|---|
Address | 0x59710 |
Ordinal | 1054 |
---|---|
Address | 0x59870 |
Ordinal | 1055 |
---|---|
Address | 0x599c0 |
Ordinal | 1056 |
---|---|
Address | 0x2d240 |
Ordinal | 1057 |
---|---|
Address | 0x59b10 |
Ordinal | 1058 |
---|---|
Address | 0x59ba0 |
Ordinal | 1059 |
---|---|
Address | 0x59ce0 |
Ordinal | 1060 |
---|---|
Address | 0x1fb90 |
Ordinal | 1061 |
---|---|
Address | 0x5ab60 |
Ordinal | 1062 |
---|---|
Address | 0x14d00 |
Ordinal | 1063 |
---|---|
Address | 0x5ac00 |
Ordinal | 1064 |
---|---|
Address | 0x5ac80 |
Ordinal | 1065 |
---|---|
Address | 0x200c0 |
Ordinal | 1066 |
---|---|
Address | 0x59e20 |
Ordinal | 1067 |
---|---|
Address | 0x59eb0 |
Ordinal | 1068 |
---|---|
Address | 0x59f40 |
Ordinal | 1069 |
---|---|
Address | 0x5ae70 |
Ordinal | 1070 |
---|---|
Address | 0x5aff0 |
Ordinal | 1071 |
---|---|
Address | 0x1fbd0 |
Ordinal | 1072 |
---|---|
Address | 0x59fd0 |
Ordinal | 1073 |
---|---|
Address | 0x5a120 |
Ordinal | 1074 |
---|---|
Address | 0x5a270 |
Ordinal | 1075 |
---|---|
Address | 0x5a3d0 |
Ordinal | 1076 |
---|---|
Address | 0x1fa40 |
Ordinal | 1077 |
---|---|
Address | 0x5a540 |
Ordinal | 1078 |
---|---|
Address | 0x5b180 |
Ordinal | 1079 |
---|---|
Address | 0x14d70 |
Ordinal | 1080 |
---|---|
Address | 0x5b230 |
Ordinal | 1081 |
---|---|
Address | 0x5b3d0 |
Ordinal | 1082 |
---|---|
Address | 0x1fbf0 |
Ordinal | 1083 |
---|---|
Address | 0x5a6c0 |
Ordinal | 1084 |
---|---|
Address | 0x5a7a0 |
Ordinal | 1085 |
---|---|
Address | 0x5a8d0 |
Ordinal | 1086 |
---|---|
Address | 0x5aa00 |
Ordinal | 1087 |
---|---|
Address | 0x5b5e0 |
Ordinal | 1088 |
---|---|
Address | 0x1fec0 |
Ordinal | 1089 |
---|---|
Address | 0x5b9a0 |
Ordinal | 1090 |
---|---|
Address | 0x1ffe0 |
Ordinal | 1091 |
---|---|
Address | 0x20030 |
Ordinal | 1092 |
---|---|
Address | 0x5bf20 |
Ordinal | 1093 |
---|---|
Address | 0x2db80 |
Ordinal | 1094 |
---|---|
Address | 0x6b130 |
Ordinal | 1095 |
---|---|
Address | 0x4b750 |
Ordinal | 1096 |
---|---|
Address | 0xa5c0 |
Ordinal | 1097 |
---|---|
Address | 0x2de30 |
Ordinal | 1098 |
---|---|
Address | 0x4b7e0 |
Ordinal | 1099 |
---|---|
Address | 0x8b30 |
Ordinal | 1100 |
---|---|
Address | 0x13470 |
Ordinal | 1101 |
---|---|
Address | 0x1f730 |
Ordinal | 1102 |
---|---|
Address | 0x50cc0 |
Ordinal | 1103 |
---|---|
Address | 0x50d10 |
Ordinal | 1104 |
---|---|
Address | 0x50f60 |
Ordinal | 1105 |
---|---|
Address | 0x5d9d0 |
Ordinal | 1106 |
---|---|
Address | 0x2df80 |
Ordinal | 1107 |
---|---|
Address | 0x6290 |
Ordinal | 1108 |
---|---|
Address | 0x2e2d0 |
Ordinal | 1109 |
---|---|
Address | 0x2a9a0 |
Ordinal | 1110 |
---|---|
Address | 0x2e380 |
Ordinal | 1111 |
---|---|
Address | 0x5da20 |
Ordinal | 1112 |
---|---|
Address | 0x13de0 |
Ordinal | 1113 |
---|---|
Address | 0x2aa10 |
Ordinal | 1114 |
---|---|
Address | 0x1e430 |
Ordinal | 1115 |
---|---|
Address | 0x2e520 |
Ordinal | 1116 |
---|---|
Address | 0x2ebc0 |
Ordinal | 1117 |
---|---|
Address | 0x2ed90 |
Ordinal | 1118 |
---|---|
Address | 0x2edc0 |
Ordinal | 1119 |
---|---|
Address | 0x2f000 |
Ordinal | 1120 |
---|---|
Address | 0x4b990 |
Ordinal | 1121 |
---|---|
Address | 0x4ba30 |
Ordinal | 1122 |
---|---|
Address | 0x4bb20 |
Ordinal | 1123 |
---|---|
Address | 0x1f230 |
Ordinal | 1124 |
---|---|
Address | 0x17130 |
Ordinal | 1125 |
---|---|
Address | 0x4bc10 |
Ordinal | 1126 |
---|---|
Address | 0x4bcb0 |
Ordinal | 1127 |
---|---|
Address | 0x88d0 |
Ordinal | 1128 |
---|---|
Address | 0x17020 |
Ordinal | 1129 |
---|---|
Address | 0x4bd40 |
Ordinal | 1130 |
---|---|
Address | 0x4cb30 |
Ordinal | 1131 |
---|---|
Address | 0x15bb0 |
Ordinal | 1132 |
---|---|
Address | 0x9120 |
Ordinal | 1133 |
---|---|
Address | 0x15740 |
Ordinal | 1134 |
---|---|
Address | 0x4be30 |
Ordinal | 1135 |
---|---|
Address | 0x4bf00 |
Ordinal | 1136 |
---|---|
Address | 0x4da30 |
Ordinal | 1137 |
---|---|
Address | 0x4da40 |
Ordinal | 1138 |
---|---|
Address | 0x9610 |
Ordinal | 1139 |
---|---|
Address | 0x4bd40 |
Ordinal | 1140 |
---|---|
Address | 0x16450 |
Ordinal | 1141 |
---|---|
Address | 0x15c10 |
Ordinal | 1142 |
---|---|
Address | 0x2f830 |
Ordinal | 1143 |
---|---|
Address | 0x2f910 |
Ordinal | 1144 |
---|---|
Address | 0x1e970 |
Ordinal | 1145 |
---|---|
Address | 0x2f970 |
Ordinal | 1146 |
---|---|
Address | 0x1cd0 |
Ordinal | 1147 |
---|---|
Address | 0x307d0 |
Ordinal | 1148 |
---|---|
Address | 0x30810 |
Ordinal | 1149 |
---|---|
Address | 0x49840 |
Ordinal | 1150 |
---|---|
Address | 0x499f0 |
Ordinal | 1151 |
---|---|
Address | 0x1e520 |
Ordinal | 1152 |
---|---|
Address | 0x5710 |
Ordinal | 1153 |
---|---|
Address | 0x1e6a0 |
Ordinal | 1154 |
---|---|
Address | 0x5c20 |
Ordinal | 1155 |
---|---|
Address | 0x55d90 |
Ordinal | 1156 |
---|---|
Address | 0x123b0 |
Ordinal | 1157 |
---|---|
Address | 0x56a00 |
Ordinal | 1158 |
---|---|
Address | 0x560b0 |
Ordinal | 1159 |
---|---|
Address | 0x55e30 |
Ordinal | 1160 |
---|---|
Address | 0x55f20 |
Ordinal | 1161 |
---|---|
Address | 0x14cb0 |
Ordinal | 1162 |
---|---|
Address | 0x11af0 |
Ordinal | 1163 |
---|---|
Address | 0x56150 |
Ordinal | 1164 |
---|---|
Address | 0x12160 |
Ordinal | 1165 |
---|---|
Address | 0x56360 |
Ordinal | 1166 |
---|---|
Address | 0x61b0 |
Ordinal | 1167 |
---|---|
Address | 0x14cb0 |
Ordinal | 1168 |
---|---|
Address | 0x5b80 |
Ordinal | 1169 |
---|---|
Address | 0x16820 |
Ordinal | 1170 |
---|---|
Address | 0x11a80 |
Ordinal | 1171 |
---|---|
Address | 0x6110 |
Ordinal | 1172 |
---|---|
Address | 0x11fb0 |
Ordinal | 1173 |
---|---|
Address | 0x1fa30 |
Ordinal | 1174 |
---|---|
Address | 0x59c0 |
Ordinal | 1175 |
---|---|
Address | 0x7530 |
Ordinal | 1176 |
---|---|
Address | 0x16240 |
Ordinal | 1177 |
---|---|
Address | 0x12a70 |
Ordinal | 1178 |
---|---|
Address | 0x56b70 |
Ordinal | 1179 |
---|---|
Address | 0x11e70 |
Ordinal | 1180 |
---|---|
Address | 0x56ce0 |
Ordinal | 1181 |
---|---|
Address | 0x56000 |
Ordinal | 1182 |
---|---|
Address | 0x57000 |
Ordinal | 1183 |
---|---|
Address | 0x565b0 |
Ordinal | 1184 |
---|---|
Address | 0x572c0 |
Ordinal | 1185 |
---|---|
Address | 0x57530 |
Ordinal | 1186 |
---|---|
Address | 0x14e10 |
Ordinal | 1187 |
---|---|
Address | 0x4ea10 |
Ordinal | 1188 |
---|---|
Address | 0x14e10 |
Ordinal | 1189 |
---|---|
Address | 0x9750 |
Ordinal | 1190 |
---|---|
Address | 0x9910 |
Ordinal | 1191 |
---|---|
Address | 0x17040 |
Ordinal | 1192 |
---|---|
Address | 0x97e0 |
Ordinal | 1193 |
---|---|
Address | 0x50060 |
Ordinal | 1194 |
---|---|
Address | 0x50160 |
Ordinal | 1195 |
---|---|
Address | 0x50290 |
Ordinal | 1196 |
---|---|
Address | 0x502c0 |
Ordinal | 1197 |
---|---|
Address | 0xff20 |
Ordinal | 1198 |
---|---|
Address | 0x104a0 |
Ordinal | 1199 |
---|---|
Address | 0x504b0 |
Ordinal | 1200 |
---|---|
Address | 0x505e0 |
Ordinal | 1201 |
---|---|
Address | 0x506b0 |
Ordinal | 1202 |
---|---|
Address | 0x51180 |
Ordinal | 1203 |
---|---|
Address | 0x51190 |
Ordinal | 1204 |
---|---|
Address | 0x19b0 |
Ordinal | 1205 |
---|---|
Address | 0x4bfc0 |
Ordinal | 1206 |
---|---|
Address | 0x15d00 |
Ordinal | 1207 |
---|---|
Address | 0x16930 |
Ordinal | 1208 |
---|---|
Address | 0x92f0 |
Ordinal | 1209 |
---|---|
Address | 0x4cb50 |
Ordinal | 1210 |
---|---|
Address | 0x4c430 |
Ordinal | 1211 |
---|---|
Address | 0x8ea0 |
Ordinal | 1212 |
---|---|
Address | 0x9080 |
Ordinal | 1213 |
---|---|
Address | 0x50760 |
Ordinal | 1214 |
---|---|
Address | 0x6570 |
Ordinal | 1215 |
---|---|
Address | 0x8f00 |
Ordinal | 1216 |
---|---|
Address | 0x16a40 |
Ordinal | 1217 |
---|---|
Address | 0x4cbf0 |
Ordinal | 1218 |
---|---|
Address | 0x4cc60 |
Ordinal | 1219 |
---|---|
Address | 0xb970 |
Ordinal | 1220 |
---|---|
Address | 0x171a0 |
Ordinal | 1221 |
---|---|
Address | 0x97174 |
ForwardName | NTDLL.EtwRegisterTraceGuidsA |
Ordinal | 1222 |
---|---|
Address | 0x13d40 |
Ordinal | 1223 |
---|---|
Address | 0x50a40 |
Ordinal | 1224 |
---|---|
Address | 0x4c510 |
Ordinal | 1225 |
---|---|
Address | 0x13e60 |
Ordinal | 1226 |
---|---|
Address | 0x49b00 |
Ordinal | 1227 |
---|---|
Address | 0x49bf0 |
Ordinal | 1228 |
---|---|
Address | 0x4c5a0 |
Ordinal | 1229 |
---|---|
Address | 0x91e0 |
Ordinal | 1230 |
---|---|
Address | 0x50b40 |
Ordinal | 1231 |
---|---|
Address | 0x4c710 |
Ordinal | 1232 |
---|---|
Address | 0x4cce0 |
Ordinal | 1233 |
---|---|
Address | 0x8350 |
Ordinal | 1234 |
---|---|
Address | 0x7dd0 |
Ordinal | 1235 |
---|---|
Address | 0x14530 |
Ordinal | 1236 |
---|---|
Address | 0x83f0 |
Ordinal | 1237 |
---|---|
Address | 0x511b0 |
Ordinal | 1238 |
---|---|
Address | 0x8da0 |
Ordinal | 1239 |
---|---|
Address | 0x10da0 |
Ordinal | 1240 |
---|---|
Address | 0x511d0 |
Ordinal | 1241 |
---|---|
Address | 0x16200 |
Ordinal | 1242 |
---|---|
Address | 0x15510 |
Signature | 0xfeef04bd |
---|---|
StructVersion | 0x10000 |
FileVersion | 10.0.22621.3296 |
ProductVersion | 10.0.22621.3296 |
FileFlags | (EMPTY) |
FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
FileType |
VFT_APP
|
Language | English - United States |
CompanyName | Microsoft Corporation |
FileDescription | Host for SCM/SDDL/LSA Lookup APIs |
FileVersion (#2) | 10.0.22621.3296 (WinBuild.160101.0800) |
InternalName | sechost.dll |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | sechost.dll |
ProductName | Microsoft® Windows® Operating System |
ProductVersion (#2) | 10.0.22621.3296 |
Resource LangID | English - United States |
---|
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Jan-18 15:57:09 |
Version | 0.0 |
SizeofData | 36 |
AddressOfRawData | 0x8f4a0 |
PointerToRawData | 0x8f4a0 |
Referenced File | sechost.pdb |
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Jan-18 15:57:09 |
Version | 0.0 |
SizeofData | 1308 |
AddressOfRawData | 0x8f4c4 |
PointerToRawData | 0x8f4c4 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Jan-18 15:57:09 |
Version | 0.0 |
SizeofData | 36 |
AddressOfRawData | 0x8f9e0 |
PointerToRawData | 0x8f9e0 |
Characteristics |
0
|
---|---|
TimeDateStamp | 2023-Jan-18 15:57:09 |
Version | 0.0 |
SizeofData | 4 |
AddressOfRawData | 0x8fa04 |
PointerToRawData | 0x8fa04 |
Size | 0x140 |
---|---|
TimeDateStamp | 1970-Jan-01 00:00:00 |
Version | 0.0 |
GlobalFlagsClear | (EMPTY) |
GlobalFlagsSet | (EMPTY) |
CriticalSectionDefaultTimeout | 0 |
DeCommitFreeBlockThreshold | 0 |
DeCommitTotalFreeThreshold | 0 |
LockPrefixTable | 0 |
MaximumAllocationSize | 0 |
VirtualMemoryThreshold | 0 |
ProcessAffinityMask | 0 |
ProcessHeapFlags | (EMPTY) |
CSDVersion | 0 |
Reserved1 | 0x800 |
EditList | 0 |
SecurityCookie | 0x18009a900 |
GuardCFCheckFunctionPointer | 6442967672 |
GuardCFDispatchFunctionPointer | 0 |
GuardCFFunctionTable | 0 |
GuardCFFunctionCount | 0 |
GuardFlags | (EMPTY) |
CodeIntegrity.Flags | 0 |
CodeIntegrity.Catalog | 0 |
CodeIntegrity.CatalogOffset | 0 |
CodeIntegrity.Reserved | 0 |
GuardAddressTakenIatEntryTable | 0 |
GuardAddressTakenIatEntryCount | 0 |
GuardLongJumpTargetTable | 0 |
GuardLongJumpTargetCount | 0 |
XOR Key | 0x94d373c9 |
---|---|
Unmarked objects | 0 |
Imports (30795) | 2 |
C++ objects (30795) | 2 |
Imports (VS2008 SP1 build 30729) | 65 |
Total imports | 399 |
C objects (30795) | 12 |
ASM objects (30795) | 4 |
Exports (30795) | 1 |
C objects (POGO O) (30795) | 87 |
Resource objects (30795) | 1 |
Linker (30795) | 1 |