AcSpecfc.dll
v10.0.19041.3636
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
GetHookAPIs
#1 · 0x1dff0
NotifyShims
#2 · 0x1e490
StiCreateInstanceA
#3 · 0x51750
CleanupIS
#4 · 0x2c4b0
No function matches your filter.
Imported DLLs & functions 413
ADVAPI32.dll
23
CloseServiceHandle
0x79668030
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x79668008
DeregisterEventSource
0x79668020
EventWriteTransfer
0x79668004
GetNamedSecurityInfoW
0x79668000
LookupPrivilegeValueW
0x79668028
LsaFreeMemory
0x79668050
LsaOpenPolicy
0x79668048
LsaQueryInformationPolicy
0x7966804c
OpenProcessToken
0x79668024
OpenSCManagerW
0x79668034
OpenServiceW
0x7966803c
QueryServiceStatus
0x79668054
RegDeleteKeyA
0x79668014
RegEnumKeyW
0x79668010
RegisterEventSourceW
0x79668018
RegOpenKeyA
0x79668058
ReportEventW
0x7966801c
SetEntriesInAclW
0x79668044
SetNamedSecurityInfoW
0x7966800c
StartServiceCtrlDispatcherA
0x7966802c
StartServiceCtrlDispatcherW
0x79668040
StartServiceW
0x79668038
ApiSetQueryApiSetPresence
0x796684d8
RegCloseKey
0x79668500
RegCreateKeyExA
0x79668518
RegCreateKeyExW
0x796684fc
RegDeleteValueA
0x796684e4
RegDeleteValueW
0x79668504
RegEnumKeyExW
0x796684f8
RegEnumValueW
0x79668514
RegGetValueW
0x796684f0
RegOpenKeyExA
0x796684e0
RegOpenKeyExW
0x79668508
RegQueryInfoKeyW
0x796684f4
RegQueryValueExA
0x79668510
RegQueryValueExW
0x796684ec
RegSetValueExA
0x796684e8
RegSetValueExW
0x7966850c
timeGetTime
0x79668520
AccessCheck
0x79668530
AdjustTokenPrivileges
0x79668540
AllocateAndInitializeSid
0x79668534
CheckTokenMembership
0x79668538
CreateWellKnownSid
0x79668528
FreeSid
0x79668544
GetSecurityDescriptorDacl
0x7966852c
GetTokenInformation
0x7966854c
InitializeSecurityDescriptor
0x79668548
SetTokenInformation
0x7966853c
SE_CALLBACK_AddHook
0x79668554
SE_CALLBACK_Lookup
0x79668558
SE_COM_AddHook
0x7966855c
SE_COM_AddServer
0x79668560
SE_COM_HookInterface
0x7966856c
SE_COM_HookObject
0x79668564
SE_COM_Lookup
0x79668568
SE_GetShimId
0x79668574
SE_ShimDPF
0x79668570
COMCTL32.dll
14
0x79668064
0x79668068
0x7966806c
0x79668074
0x79668078
0x7966807c
0x79668090
0x79668094
ImageList_Add
0x79668084
ImageList_Create
0x79668070
ImageList_Destroy
0x79668060
ImageList_Remove
0x79668080
ImageList_Replace
0x7966808c
ImageList_ReplaceIcon
0x79668088
GetFileTitleA
0x7966809c
DirectDrawCreate
0x796680a4
DwmIsCompositionEnabled
0x7966857c
GDI32.dll
17
BitBlt
0x796680cc
CreateCompatibleBitmap
0x796680e4
CreateCompatibleDC
0x796680ec
CreateDIBSection
0x796680ac
CreatePalette
0x796680e0
DeleteDC
0x796680c4
DeleteObject
0x796680c8
GdiIsScreenDC
0x796680dc
GetStockObject
0x796680e8
GetSystemPaletteEntries
0x796680c0
RealizePalette
0x796680b4
SelectObject
0x796680d0
SelectPalette
0x796680b8
SetMapMode
0x796680d8
SetSystemPaletteUse
0x796680b0
SetViewportExtEx
0x796680bc
SetWindowExtEx
0x796680d4
ImmGetContext
0x796680f4
KERNEL32.dll
131
AcquireSRWLockExclusive
0x796681dc
CloseHandle
0x796682f0
CompareStringA
0x79668248
CompareStringW
0x79668188
CopyFileW
0x796682e4
CreateDirectoryW
0x796682e8
CreateEventW
0x79668144
CreateFileA
0x79668278
CreateFileMappingA
0x7966819c
CreateFileW
0x796681a8
CreateProcessA
0x7966829c
CreateProcessW
0x796682f4
CreateThread
0x796681f8
DeleteCriticalSection
0x79668218
DeleteFileA
0x7966817c
DeleteFileW
0x79668238
EnterCriticalSection
0x79668264
ExitProcess
0x79668298
ExpandEnvironmentStringsA
0x7966824c
ExpandEnvironmentStringsW
0x79668118
FindClose
0x796682f8
FindFirstFileW
0x79668304
FindNextFileW
0x796682fc
FindResourceW
0x79668258
FlushViewOfFile
0x79668194
FreeLibrary
0x79668294
GetACP
0x7966813c
GetCommandLineA
0x79668288
GetCommandLineW
0x796682b0
GetCurrentDirectoryW
0x79668174
GetCurrentProcess
0x796682d8
GetCurrentProcessId
0x79668234
GetCurrentThread
0x79668158
GetCurrentThreadId
0x7966822c
GetEnvironmentVariableW
0x7966820c
GetExitCodeProcess
0x796681b8
GetFileAttributesA
0x79668180
GetFileAttributesW
0x796681b4
GetFullPathNameW
0x796681c8
GetLastError
0x79668300
GetLocaleInfoW
0x796681cc
GetLocalTime
0x79668124
GetLongPathNameW
0x796681c4
GetModuleFileNameA
0x796682ac
GetModuleFileNameW
0x7966826c
GetModuleHandleA
0x79668110
GetModuleHandleExW
0x79668228
GetModuleHandleW
0x796682d0
GetOverlappedResultEx
0x79668104
GetProcAddress
0x796682a0
GetProcessHeap
0x79668280
GetShortPathNameW
0x796681c0
GetSystemDefaultUILanguage
0x796682c0
GetSystemDirectoryA
0x79668290
GetSystemDirectoryW
0x796682a8
GetSystemTimeAsFileTime
0x796681ec
GetSystemWindowsDirectoryA
0x79668168
GetSystemWindowsDirectoryW
0x7966814c
GetTempFileNameA
0x796681a0
GetTempPathA
0x796681a4
GetTickCount
0x796681f0
GetVersion
0x79668108
GetVersionExW
0x79668120
GetWindowsDirectoryA
0x796681b0
GetWindowsDirectoryW
0x79668150
GlobalFree
0x79668170
HeapAlloc
0x79668284
HeapCreate
0x79668220
HeapFree
0x7966827c
HeapReAlloc
0x79668224
InitializeCriticalSection
0x7966821c
InitializeCriticalSectionAndSpinCount
0x7966825c
IsBadReadPtr
0x79668270
IsBadStringPtrA
0x796682cc
IsBadStringPtrW
0x796682c8
IsWow64Process
0x796682dc
K32EnumProcesses
0x79668200
K32GetModuleBaseNameW
0x79668134
K32GetModuleFileNameExW
0x7966823c
K32GetModuleInformation
0x79668154
K32GetProcessImageFileNameW
0x79668204
LeaveCriticalSection
0x79668260
LoadLibraryA
0x7966828c
LoadLibraryW
0x796682a4
LoadResource
0x79668254
LocalAlloc
0x79668210
LocalFree
0x796682e0
LockResource
0x79668250
lstrcmpA
0x7966812c
lstrcmpiW
0x7966816c
lstrcmpW
0x7966811c
lstrlenA
0x79668164
lstrlenW
0x79668214
MapViewOfFile
0x79668198
MoveFileExW
0x79668178
MoveFileW
0x79668244
MultiByteToWideChar
0x79668274
OpenFileMappingA
0x79668190
OpenMutexW
0x79668114
OpenProcess
0x79668240
ProcessIdToSessionId
0x79668148
QueryDosDeviceW
0x796680fc
QueryPerformanceCounter
0x796681e8
ReleaseMutex
0x79668130
ReleaseSRWLockExclusive
0x796681d8
ResetEvent
0x796681f4
SearchPathW
0x796681bc
SetCurrentDirectoryW
0x79668268
SetEnvironmentVariableW
0x79668208
SetEvent
0x7966810c
SetFileAttributesW
0x79668140
SetLastError
0x796681ac
SetLocaleInfoA
0x79668128
SetThreadContext
0x79668230
SetUnhandledExceptionFilter
0x79668184
Sleep
0x796681fc
SleepConditionVariableSRW
0x796681e4
SwitchToThread
0x7966815c
TerminateProcess
0x796681d4
TlsAlloc
0x796682b8
TlsFree
0x796682b4
TlsGetValue
0x796682c4
TlsSetValue
0x796682bc
TrySubmitThreadpoolCallback
0x79668160
UnhandledExceptionFilter
0x796681d0
UnmapViewOfFile
0x7966818c
VirtualAlloc
0x79668100
VirtualProtect
0x796682d4
WaitForSingleObject
0x796682ec
WakeAllConditionVariable
0x796681e0
WideCharToMultiByte
0x79668138
GetCountColorProfileElements
0x79668584
msi.dll
1
0x7966858c
msvcrt.dll
51
__CxxFrameHandler3
0x79668594
__dllonexit
0x7966862c
_amsg_exit
0x7966864c
_CxxThrowException
0x79668600
_except_handler4_common
0x79668624
_initterm
0x79668640
_itow_s
0x79668608
_lock
0x79668634
_onexit
0x79668628
_stricmp
0x796685a0
_strlwr
0x796685b0
_strnicmp
0x796685d0
_unlock
0x79668630
_vscprintf
0x79668620
_vscwprintf
0x7966861c
_vsnprintf
0x796685b4
_vsnwprintf
0x796685e8
_wcsicmp
0x79668598
_wcslwr
0x79668618
_wcsnicmp
0x7966859c
_wcsupr
0x79668614
_wsplitpath_s
0x79668654
_wtoi
0x796685bc
_wtol
0x796685a8
_XcptFilter
0x79668650
??1type_info@@UAE@XZ
0x79668638
?terminate@@YAXXZ
0x7966863c
free
0x79668648
isalpha
0x796685d8
iswctype
0x796685f0
iswspace
0x79668658
malloc
0x79668644
memcmp
0x796685c4
memcpy
0x796685c0
memmove
0x79668604
memset
0x7966865c
strcat_s
0x796685cc
strcpy_s
0x796685d4
strncmp
0x796685a4
strrchr
0x796685b8
strstr
0x796685ac
towlower
0x796685f4
towupper
0x796685f8
wcscat_s
0x796685e4
wcschr
0x7966860c
wcsncmp
0x796685fc
wcspbrk
0x79668610
wcsrchr
0x796685c8
wcsspn
0x796685ec
wcsstr
0x796685dc
wcstol
0x796685e0
ntdll.dll
24
LdrEnumerateLoadedModules
0x79668698
LdrFindEntryForAddress
0x79668668
NtClose
0x79668694
NtCreateKey
0x796686ac
NtDeleteKey
0x796686b0
NtEnumerateKey
0x796686b4
NtOpenKey
0x796686bc
NtProtectVirtualMemory
0x79668684
NtQueryInformationFile
0x7966869c
NtQueryInformationThread
0x79668690
NtQueryObject
0x796686a0
NtQueryValueKey
0x796686b8
NtSetValueKey
0x796686a4
RtlAllocateHeap
0x796686a8
RtlCreateUnicodeStringFromAsciiz
0x79668688
RtlFormatCurrentUserKeyPath
0x796686c0
RtlFreeHeap
0x79668664
RtlFreeUnicodeString
0x7966868c
RtlGetDaclSecurityDescriptor
0x7966867c
RtlGetNtSystemRoot
0x79668680
RtlGUIDFromString
0x79668670
RtlInitUnicodeString
0x7966866c
RtlSubAuthorityCountSid
0x79668674
RtlSubAuthoritySid
0x79668678
CoCreateInstance
0x796686c8
CoGetObjectContext
0x796686d8
CoInitialize
0x796686dc
CoTaskMemAlloc
0x796686e0
CoTaskMemFree
0x796686cc
CoUninitialize
0x796686d4
StringFromCLSID
0x796686d0
VariantInit
0x79668318
RPCRT4.dll
10
I_RpcExceptionFilter
0x79668344
NdrAsyncClientCall
0x79668320
RpcAsyncCancelCall
0x79668328
RpcAsyncCompleteCall
0x79668334
RpcAsyncInitializeHandle
0x79668338
RpcBindingFree
0x79668324
RpcBindingFromStringBindingW
0x7966833c
RpcBindingSetAuthInfoExW
0x79668330
RpcStringBindingComposeW
0x79668340
RpcStringFreeW
0x7966832c
0x79668350
0x79668354
CommandLineToArgvW
0x7966834c
SHChangeNotify
0x79668358
ShellExecuteExW
0x79668360
SHGetFolderPathA
0x7966835c
SHGetFolderPathW
0x79668364
SHGetSpecialFolderPathW
0x79668368
GetUserNameExW
0x7966837c
USER32.dll
72
AllowSetForegroundWindow
0x79668444
BeginPaint
0x79668394
CallNextHookEx
0x796683bc
CallWindowProcA
0x7966844c
ChangeDisplaySettingsA
0x79668490
CopyIcon
0x79668470
CreateWindowExA
0x79668408
DefWindowProcA
0x79668478
DefWindowProcW
0x79668410
DestroyWindow
0x796683d0
DispatchMessageA
0x79668488
DispatchMessageW
0x79668400
EnableWindow
0x79668438
EndPaint
0x79668390
EnumChildWindows
0x79668474
EnumDisplaySettingsW
0x7966845c
EnumWindows
0x7966849c
FillRect
0x796683a0
FindWindowA
0x79668480
FindWindowExA
0x796683d8
FindWindowW
0x796683fc
GetAncestor
0x79668434
GetClassInfoA
0x796683e4
GetClassLongA
0x79668404
GetClassNameA
0x7966838c
GetClassNameW
0x79668494
GetClientRect
0x796683a4
GetCursorPos
0x79668484
GetDC
0x7966839c
GetDesktopWindow
0x796683ec
GetGUIThreadInfo
0x79668388
GetMonitorInfoW
0x7966841c
GetParent
0x796683f0
GetProcessWindowStation
0x79668430
GetPropW
0x79668468
GetSystemMetrics
0x79668454
GetThreadDesktop
0x79668418
GetUpdateRect
0x79668384
GetUserObjectInformationW
0x79668428
GetWindowInfo
0x796684a0
GetWindowLongA
0x796683e8
GetWindowLongW
0x796683e0
GetWindowRect
0x796683f8
GetWindowTextW
0x796683d4
GetWindowThreadProcessId
0x796683cc
InvalidateRect
0x796683dc
IsZoomed
0x79668458
LoadCursorW
0x7966846c
mouse_event
0x796683ac
MsgWaitForMultipleObjects
0x79668414
PeekMessageW
0x796683c0
PostMessageA
0x7966848c
PostQuitMessage
0x7966842c
RegisterClassA
0x79668498
RegisterWindowMessageW
0x7966847c
ReleaseDC
0x79668398
RemovePropW
0x79668464
SendMessageTimeoutW
0x79668448
SendMessageW
0x796683b0
SendNotifyMessageW
0x796683c4
SetActiveWindow
0x79668440
SetCursor
0x79668424
SetCursorPos
0x796683f4
SetForegroundWindow
0x796683a8
SetPropW
0x79668460
SetWindowLongA
0x79668450
SetWindowLongW
0x796683c8
SetWindowsHookExW
0x796683b8
ShowCursor
0x7966843c
TranslateMessage
0x79668420
UnhookWindowsHookEx
0x796683b4
ValidateRect
0x7966840c
mciSendCommandA
0x796684b4
WSASetLastError
0x796684d0
No function matches your filter.