| filename | sspicli.dll | |
|---|---|---|
| size | 104960 (0x19a00) | |
| md5 | 2bd37e490b7e8deb27fdf8eda0917af9 | |
| type | PE32 executable (DLL) (console) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xe8 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 147 | 30729 | 4 |
| 205 | 65501 | 2 |
| 206 | 65501 | 8 |
| 203 | 65501 | 37 |
| 1 | 0 | 130 |
| 202 | 65501 | 1 |
| 211 | 65501 | 31 |
| 201 | 65501 | 1 |
| 204 | 65501 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x16457 | 0x16600 | R-X CODE | |
| .data | 0x18000 | 0x8a0 | 0x400 | RW- IDATA | |
| .idata | 0x19000 | 0x1266 | 0x1400 | R-- IDATA | |
| .rsrc | 0x1b000 | 0x418 | 0x600 | R-- IDATA | |
| .reloc | 0x1c000 | 0x1050 | 0x1200 | R-- IDATA DISCARDABLE |
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| api-ms-win-core-crt-l1-1-0.dll | 51 | memcpy | |
| api-ms-win-core-crt-l1-1-0.dll | 55 | memset | |
| api-ms-win-core-crt-l1-1-0.dll | 67 | strncpy_s | |
| api-ms-win-core-crt-l1-1-0.dll | 24 | _wcsicmp | |
| api-ms-win-core-crt-l1-1-0.dll | 53 | memmove | |
| api-ms-win-core-crt-l1-1-0.dll | 62 | strcpy_s | |
| api-ms-win-core-crt-l1-1-0.dll | 22 | _vsnprintf_s | |
| api-ms-win-core-crt-l1-1-0.dll | 94 | wcsstr | |
| api-ms-win-core-crt-l1-1-0.dll | 93 | wcsrchr | |
| api-ms-win-core-crt-l1-1-0.dll | 83 | wcschr | |
| api-ms-win-core-crt-l1-1-0.dll | 50 | memcmp | |
| api-ms-win-core-crt-l1-1-0.dll | 3 | _except_handler4_common | |
| api-ms-win-core-crt-l2-1-0.dll | 6 | _initterm | |
| api-ms-win-core-crt-l2-1-0.dll | 7 | _initterm_e | |
| ntdll.dll | 329 | NtFreeVirtualMemory | |
| ntdll.dll | 302 | NtDeviceIoControlFile | |
| ntdll.dll | 1007 | RtlInitUnicodeString | |
| ntdll.dll | 603 | NtWaitForSingleObject | |
| ntdll.dll | 539 | NtSetInformationThread | |
| ntdll.dll | 400 | NtOpenThreadTokenEx | |
| ntdll.dll | 235 | NtClose | |
| ntdll.dll | 377 | NtOpenEvent | |
| ntdll.dll | 748 | RtlCopySid | |
| ntdll.dll | 751 | RtlCopyUnicodeString | |
| ntdll.dll | 1096 | RtlLengthSid | |
| ntdll.dll | 436 | NtQueryInformationThread | |
| ntdll.dll | 176 | NlsMbCodePageTag | |
| ntdll.dll | 196 | NtAllocateLocallyUniqueId | |
| ntdll.dll | 1377 | RtlValidSid | |
| ntdll.dll | 306 | NtDuplicateObject | |
| ntdll.dll | 707 | RtlCheckTokenMembershipEx | |
| ntdll.dll | 1006 | RtlInitString | |
| ntdll.dll | 865 | RtlEqualSid | |
| ntdll.dll | 635 | RtlAcquireResourceShared | |
| ntdll.dll | 963 | RtlGetNtProductType | |
| ntdll.dll | 1216 | RtlReleaseResource | |
| ntdll.dll | 723 | RtlCompareUnicodeString | |
| ntdll.dll | 811 | RtlDeleteResource | |
| ntdll.dll | 634 | RtlAcquireResourceExclusive | |
| ntdll.dll | 1024 | RtlInitializeResource | |
| ntdll.dll | 671 | RtlAllocateHeap | |
| ntdll.dll | 917 | RtlFreeHeap | |
| ntdll.dll | 1014 | RtlInitializeCriticalSection | |
| ntdll.dll | 379 | NtOpenFile | |
| ntdll.dll | 437 | NtQueryInformationToken | |
| ntdll.dll | 720 | RtlCompareMemory | |
| ntdll.dll | 391 | NtOpenProcessToken | |
| ntdll.dll | 1093 | RtlLeaveCriticalSection | |
| ntdll.dll | 804 | RtlDeleteCriticalSection | |
| ntdll.dll | 427 | NtQueryEvent | |
| ntdll.dll | 399 | NtOpenThreadToken | |
| ntdll.dll | 853 | RtlEnterCriticalSection | |
| ntdll.dll | 34 | DbgPrintEx | |
| ntdll.dll | 779 | RtlCreateUnicodeStringFromAsciiz | |
| ntdll.dll | 1444 | RtlxUnicodeStringToAnsiSize | |
| ntdll.dll | 1135 | RtlNtStatusToDosErrorNoTeb | |
| ntdll.dll | 1134 | RtlNtStatusToDosError | |
| ntdll.dll | 1442 | RtlxAnsiStringToUnicodeSize | |
| ntdll.dll | 922 | RtlFreeUnicodeString | |
| ntdll.dll | 867 | RtlEqualUnicodeString | |
| ntdll.dll | 1336 | RtlUnicodeStringToAnsiString | |
| ntdll.dll | 677 | RtlAnsiStringToUnicodeString | |
| ntdll.dll | 1301 | RtlStringFromGUID | |
| RPCRT4.dll | 66 | I_RpcMapWin32Status | |
| RPCRT4.dll | 379 | RpcBindingUnbind | |
| RPCRT4.dll | 358 | RpcBindingFromStringBindingW | |
| RPCRT4.dll | 48 | I_RpcExceptionFilter | |
| RPCRT4.dll | 513 | RpcStringFreeW | |
| RPCRT4.dll | 290 | NdrServerCall2 | |
| RPCRT4.dll | 156 | NdrClientCall2 | |
| RPCRT4.dll | 498 | RpcSsDestroyClientContext | |
| RPCRT4.dll | 509 | RpcStringBindingComposeW | |
| RPCRT4.dll | 356 | RpcBindingFree | |
| CRYPTBASE.dll | 10 | SystemFunction041 | |
| CRYPTBASE.dll | 9 | SystemFunction040 | |
| api-ms-win-security-lsalookup-l1-1-1.dll | 12 | LsaLookupOpenLocalPolicy | |
| api-ms-win-security-lsalookup-l1-1-1.dll | 8 | LsaLookupClose | |
| api-ms-win-security-lsalookup-l1-1-1.dll | 10 | LsaLookupGetDomainInfo | |
| api-ms-win-security-lsalookup-l1-1-1.dll | 9 | LsaLookupFreeMemory | |
| api-ms-win-security-lsapolicy-l1-1-0.dll | 5 | LsaFreeMemory | |
| api-ms-win-security-lsapolicy-l1-1-0.dll | 1 | LsaClose | |
| api-ms-win-security-lsapolicy-l1-1-0.dll | 15 | LsaQueryInformationPolicy | |
| api-ms-win-security-lsapolicy-l1-1-0.dll | 13 | LsaOpenPolicy | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 11 | UnhandledExceptionFilter | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 3 | GetLastError | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 9 | SetLastError | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 10 | SetUnhandledExceptionFilter | |
| api-ms-win-core-file-l1-2-1.dll | 5 | CreateFileW | |
| api-ms-win-core-file-l1-2-1.dll | 41 | GetFileTime | |
| api-ms-win-core-handle-l1-1-0.dll | CloseHandle | ||
| api-ms-win-core-heap-l1-2-0.dll | GetProcessHeap | ||
| api-ms-win-core-heap-l1-2-0.dll | 6 | HeapFree | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 10 | FreeLibrary | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 19 | GetProcAddress | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 14 | GetModuleFileNameW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 1 | DisableThreadLibraryCalls | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 21 | LoadLibraryExW | |
| api-ms-win-core-registry-l1-1-0.dll | 5 | RegDeleteKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 31 | RegQueryInfoKeyW | |
| api-ms-win-core-registry-l1-1-0.dll | 28 | RegOpenKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 40 | RegSetValueExW | |
| api-ms-win-core-registry-l1-1-0.dll | 3 | RegCreateKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 14 | RegEnumValueW | |
| api-ms-win-core-registry-l1-1-0.dll | RegCloseKey | ||
| api-ms-win-core-registry-l1-1-0.dll | 33 | RegQueryValueExW | |
| api-ms-win-core-synch-l1-2-0.dll | 43 | Sleep | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 8 | LocalAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 12 | LocalReAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 10 | LocalFree | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 8 | lstrlenA | |
| api-ms-win-core-processthreads-l1-1-2.dll | 67 | TlsAlloc | |
| api-ms-win-core-processthreads-l1-1-2.dll | 68 | TlsFree | |
| api-ms-win-core-processthreads-l1-1-2.dll | 70 | TlsSetValue | |
| api-ms-win-core-processthreads-l1-1-2.dll | 15 | GetCurrentThread | |
| api-ms-win-core-processthreads-l1-1-2.dll | 11 | GetCurrentProcess | |
| api-ms-win-core-processthreads-l1-1-2.dll | 65 | TerminateProcess | |
| api-ms-win-core-processthreads-l1-1-2.dll | 16 | GetCurrentThreadId | |
| api-ms-win-core-processthreads-l1-1-2.dll | 12 | GetCurrentProcessId | |
| api-ms-win-core-processthreads-l1-1-2.dll | 69 | TlsGetValue | |
| api-ms-win-core-profile-l1-1-0.dll | QueryPerformanceCounter | ||
| api-ms-win-core-sysinfo-l1-2-1.dll | 17 | GetSystemTimeAsFileTime | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 14 | GetSystemInfo | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 21 | GetTickCount | |
| api-ms-win-core-util-l1-1-0.dll | 1 | DecodePointer | |
| api-ms-win-core-util-l1-1-0.dll | 3 | EncodePointer |
StringTable 040904B0
| CompanyName | Microsoft Corporation |
| FileDescription | Security Support Provider Interface |
| FileVersion | 6.3.9600.17415 (winblue_r4.141028-1500) |
| InternalName | security.dll |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | security.dll |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 6.3.9600.17415 |
VS_FIXEDFILEINFO
| FileVersion | 6.3.9600.17415 |
| ProductVersion | 6.3.9600.17415 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 0x40004 |
| FileType | 2 |
| FileSubtype | 0 |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
everything is OK