XboxNetApiSvc.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 1
ServiceMain
#1 · 0x5990
No function matches your filter.
Imported DLLs & functions 302
GetApplicationUserModelId
0x1801111d0
GetPackageFullName
0x1801111d8
GetStagedPackagePathByFullName
0x1801111e8
CoAddRefServerProcess
0x180111248
CoCreateFreeThreadedMarshaler
0x1801111f8
CoCreateGuid
0x180111220
CoCreateInstance
0x180111240
CoDisconnectContext
0x180111260
CoInitializeEx
0x180111228
CoRegisterClassObject
0x180111210
CoReleaseServerProcess
0x180111250
CoResumeClassObjects
0x180111218
CoRevokeClassObject
0x180111208
CoTaskMemAlloc
0x180111200
CoTaskMemFree
0x180111238
CoUninitialize
0x180111258
CoWaitForMultipleHandles
0x180111230
RoGetAgileReference
0x180111270
DelayLoadFailureHook
0x180111280
ResolveDelayLoadedAPI
0x180111290
GetLastError
0x1801112b8
RaiseException
0x1801112a0
SetUnhandledExceptionFilter
0x1801112a8
UnhandledExceptionFilter
0x1801112b0
CreateFileW
0x1801112c8
GetFileAttributesW
0x1801112d8
ReadFile
0x1801112d0
DisableThreadLibraryCalls
0x180111328
GetModuleHandleW
0x180111320
LoadStringW
0x180111318
CreateThread
0x180111338
GetCurrentProcess
0x180111368
GetCurrentProcessId
0x180111378
GetCurrentThread
0x180111350
GetCurrentThreadId
0x180111348
GetExitCodeThread
0x180111370
OpenProcessToken
0x180111340
OpenThreadToken
0x180111360
TerminateProcess
0x180111358
OpenProcess
0x180111388
QueryPerformanceCounter
0x180111398
QueryPerformanceFrequency
0x1801113a0
QueryFullProcessImageNameW
0x1801113b0
RegCloseKey
0x1801113c8
RegDeleteValueW
0x1801113e0
RegGetValueW
0x1801113d0
RegOpenKeyExW
0x1801113d8
RegQueryValueExW
0x1801113c0
RegSetValueExW
0x1801113e8
AcquireSRWLockExclusive
0x180111468
AcquireSRWLockShared
0x180111428
CreateEventW
0x180111458
CreateWaitableTimerExW
0x180111440
DeleteCriticalSection
0x180111418
EnterCriticalSection
0x180111470
InitializeCriticalSection
0x180111430
InitializeSRWLock
0x180111420
LeaveCriticalSection
0x180111480
ReleaseSRWLockExclusive
0x180111460
ReleaseSRWLockShared
0x180111478
ResetEvent
0x180111488
SetEvent
0x180111448
SetWaitableTimer
0x180111410
WaitForMultipleObjectsEx
0x180111438
WaitForSingleObject
0x180111450
GetComputerNameExW
0x1801114d0
GetSystemTimeAsFileTime
0x1801114c0
GetTickCount
0x1801114b8
GetTickCount64
0x1801114c8
GetVersionExW
0x1801114b0
GetTimeZoneInformation
0x1801114e0
GetRestrictedErrorInfo
0x180111508
RoOriginateError
0x180111530
RoOriginateErrorW
0x180111510
RoSetErrorReportingFlags
0x180111518
RoTransformError
0x180111528
SetRestrictedErrorInfo
0x180111520
IsErrorPropagationEnabled
0x180111540
RoGetMatchingRestrictedErrorInfo
0x180111548
RoReportFailedDelegate
0x180111550
RoActivateInstance
0x180111570
RoGetActivationFactory
0x180111588
RoInitialize
0x180111580
RoRegisterActivationFactories
0x180111578
RoRevokeActivationFactories
0x180111568
RoUninitialize
0x180111560
RoGetBufferMarshaler
0x180111598
WindowsCompareStringOrdinal
0x1801115d0
WindowsCreateString
0x1801115a8
WindowsCreateStringReference
0x1801115c8
WindowsDeleteString
0x1801115e0
WindowsDuplicateString
0x1801115c0
WindowsGetStringRawBuffer
0x1801115b8
WindowsIsStringEmpty
0x1801115b0
WindowsStringHasEmbeddedNull
0x1801115d8
MulDiv
0x1801115f0
GetTraceEnableFlags
0x180111628
GetTraceEnableLevel
0x180111608
GetTraceLoggerHandle
0x180111600
RegisterTraceGuidsW
0x180111618
TraceMessage
0x180111620
UnregisterTraceGuids
0x180111610
EventRegister
0x180111640
EventSetInformation
0x180111648
EventUnregister
0x180111638
EventWriteTransfer
0x180111650
CopySid
0x180111678
CreateWellKnownSid
0x180111680
EqualSid
0x180111670
GetLengthSid
0x180111668
GetTokenInformation
0x180111660
CryptAcquireContextA
0x1801116b0
CryptDestroyKey
0x1801116a0
CryptExportKey
0x180111698
CryptGetProvParam
0x1801116a8
CryptReleaseContext
0x180111690
ConvertSidToStringSidW
0x1801116c0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1801116c8
RegisterServiceCtrlHandlerExW
0x1801116e0
SetServiceStatus
0x1801116d8
EnumServicesStatusExW
0x1801116f0
CloseServiceHandle
0x180111710
OpenSCManagerW
0x180111700
OpenServiceW
0x180111708
QueryServiceConfig2W
0x180111720
QueryServiceStatusEx
0x180111728
CRYPT32.dll
28
CertAddCertificateContextToStore
0x180110f28
CertCloseStore
0x180110f18
CertCreateCertificateChainEngine
0x180110ed0
CertCreateCertificateContext
0x180110f30
CertDeleteCertificateFromStore
0x180110f10
CertEnumCertificatesInStore
0x180110f38
CertFindCertificateInStore
0x180110ea0
CertFreeCertificateChain
0x180110ec8
CertFreeCertificateChainEngine
0x180110f20
CertFreeCertificateContext
0x180110ed8
CertGetCertificateChain
0x180110e70
CertGetCertificateContextProperty
0x180110ea8
CertGetEnhancedKeyUsage
0x180110eb0
CertGetNameStringW
0x180110ec0
CertIsRDNAttrsInCertificateName
0x180110ef0
CertOpenStore
0x180110eb8
CertStrToNameW
0x180110e88
CertVerifyCertificateChainPolicy
0x180110e78
CertVerifyTimeValidity
0x180110f40
CryptAcquireCertificatePrivateKey
0x180110e68
CryptBinaryToStringW
0x180110f08
CryptDecodeObject
0x180110e80
CryptExportPublicKeyInfo
0x180110ee8
CryptFindCertificateKeyProvInfo
0x180110ee0
CryptSignAndEncodeCertificate
0x180110ef8
CryptStringToBinaryW
0x180110f00
PFXImportCertStore
0x180110e90
PFXIsPFXBlob
0x180110e98
FWAddAuthenticationSet
0x180110fc0
FWAddCryptoSet
0x180110f78
FWAddFirewallRule
0x180110fa8
FWAddSecurityRealm
0x180110f68
FWClosePolicyStore
0x180110f90
FWDeleteAuthenticationSet
0x180110f60
FWDeleteCryptoSet
0x180110f80
FWDeleteFirewallRule
0x180110fb0
FWDeleteSecurityRealm
0x180110f50
FWEnumProducts
0x180110f88
FWFreeProducts
0x180110fc8
FWGetConfig
0x180110fb8
FWGetGlobalConfig
0x180110fa0
FWOpenPolicyStore
0x180110f70
FWRevertTransaction
0x180110f98
FWSetAuthenticationSet
0x180110f58
fwpuclnt.dll
24
FwpmEngineClose0
0x180111770
FwpmEngineOpen0
0x180111750
FwpmFilterAdd0
0x1801117b0
FwpmFilterDeleteById0
0x1801117b8
FwpmFreeMemory0
0x180111778
FwpmProviderAdd0
0x180111760
FwpmProviderContextAdd2
0x180111798
FwpmProviderContextDeleteByKey0
0x1801117a0
FwpmProviderContextGetById2
0x1801117a8
FwpmProviderDeleteByKey0
0x180111768
FwpmProviderGetByKey0
0x180111758
FwpmTransactionAbort0
0x180111790
FwpmTransactionBegin0
0x180111780
FwpmTransactionCommit0
0x180111788
FwppGetMD5HashBytes
0x180111740
IkeextSaCreateEnumHandle0
0x1801117f0
IkeextSaDestroyEnumHandle0
0x180111738
IkeextSaEnum2
0x180111748
IPsecSaContextCreateEnumHandle0
0x1801117d0
IPsecSaContextDeleteById0
0x1801117c0
IPsecSaContextDestroyEnumHandle0
0x1801117e0
IPsecSaContextEnum1
0x1801117d8
IPsecSaContextGetById1
0x1801117c8
IPsecSaInitiateAsync0
0x1801117e8
IPHLPAPI.DLL
11
CancelMibChangeNotify2
0x180111010
DeleteIpNetEntry2
0x180110ff8
FreeMibTable
0x180110ff0
GetAdaptersAddresses
0x180110fe8
GetBestRoute2
0x180111020
GetIpForwardTable2
0x180110fe0
GetIpNetEntry2
0x180110fd8
InitializeIpForwardEntry
0x180111000
NotifyIpInterfaceChange
0x180111028
NotifyRouteChange2
0x180111018
NotifyUnicastIpAddressChange
0x180111008
msvcrt.dll
31
__C_specific_handler
0x1801118b8
__CxxFrameHandler3
0x180111800
__dllonexit
0x180111898
_amsg_exit
0x1801118d8
_initterm
0x1801118c0
_lock
0x1801118a8
_onexit
0x180111890
_purecall
0x1801118e8
_snwprintf_s
0x180111860
_ultow_s
0x180111820
_unlock
0x1801118a0
_vsnprintf_s
0x180111838
_vsnwprintf
0x180111810
_wcsicmp
0x180111870
_wcstoui64
0x180111878
_XcptFilter
0x1801118e0
?terminate@@YAXXZ
0x1801118b0
free
0x1801118d0
malloc
0x1801118c8
memcmp
0x180111840
memcpy
0x180111880
memcpy_s
0x180111808
memmove
0x180111888
memmove_s
0x180111848
memset
0x1801118f0
realloc
0x180111828
strtoul
0x180111868
swprintf_s
0x180111858
vswprintf_s
0x180111830
wcschr
0x180111818
wcscpy_s
0x180111850
NCryptCreatePersistedKey
0x180111918
NCryptDeleteKey
0x180111900
NCryptExportKey
0x180111908
NCryptFinalizeKey
0x180111928
NCryptFreeObject
0x180111930
NCryptOpenStorageProvider
0x180111920
NCryptSetProperty
0x180111910
NSI.dll
1
NsiGetAllParameters
0x180111038
RtlCaptureContext
0x180111958
RtlCreateServiceSid
0x180111960
RtlInitUnicodeString
0x180111940
RtlLookupFunctionEntry
0x180111950
RtlVirtualUnwind
0x180111948
SysAllocString
0x180111048
SysFreeString
0x180111058
VariantChangeType
0x180111060
VariantClear
0x180111050
VariantInit
0x180111068
PowerSettingRegisterNotification
0x180111078
PowerSettingUnregisterNotification
0x180111080
NdrClientCall3
0x180111098
RpcBindingBind
0x1801110a8
RpcBindingCreateW
0x1801110a0
RpcBindingFree
0x1801110b8
RpcBindingUnbind
0x1801110b0
RpcServerInqCallAttributesW
0x180111090
WinHttpCloseHandle
0x1801110f8
WinHttpConnect
0x1801110e0
WinHttpOpen
0x1801110c8
WinHttpOpenRequest
0x1801110d8
WinHttpQueryHeaders
0x1801110f0
WinHttpQueryOption
0x180111100
WinHttpReadData
0x180111108
WinHttpReceiveResponse
0x1801110e8
WinHttpSendRequest
0x1801110d0
NsiConnectToServer
0x180111128
NsiDisconnectFromServer
0x180111130
NsiRpcDeregisterChangeNotification
0x180111120
NsiRpcRegisterChangeNotification
0x180111118
WS2_32.dll
17
bind
0x180111148
closesocket
0x1801111c0
freeaddrinfo
0x1801111b0
FreeAddrInfoW
0x180111188
getaddrinfo
0x1801111a8
GetAddrInfoW
0x180111198
GetNameInfoW
0x1801111a0
getsockname
0x180111140
ntohs
0x1801111b8
setsockopt
0x180111150
WSACleanup
0x180111170
WSAGetLastError
0x180111158
WSAGetOverlappedResult
0x180111178
WSARecvFrom
0x180111190
WSASendTo
0x180111180
WSASocketW
0x180111160
WSAStartup
0x180111168
No function matches your filter.