ftpsvc.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
ServiceMain
#1 · 0x51c0
DllRegisterServer
#2 · 0x18110
DllUnregisterServer
#3 · 0x188e0
No function matches your filter.
Imported DLLs & functions 394
ADVAPI32.dll
47
AddAccessAllowedAce
0x18004e9d8
CheckTokenMembership
0x18004e9b8
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18004e9c0
CreateWellKnownSid
0x18004ea00
CryptAcquireContextW
0x18004ead0
CryptCreateHash
0x18004eac0
CryptDestroyHash
0x18004eaa8
CryptGetHashParam
0x18004eab0
CryptGetProvParam
0x18004e9e8
CryptHashData
0x18004eab8
CryptReleaseContext
0x18004eac8
DuplicateTokenEx
0x18004eae0
EqualSid
0x18004e9b0
EventRegister
0x18004ea98
EventSetInformation
0x18004eaa0
EventUnregister
0x18004ea90
EventWriteTransfer
0x18004ea88
GetLengthSid
0x18004e9c8
GetTokenInformation
0x18004e990
GetTraceLoggerHandle
0x18004ea78
ImpersonateLoggedOnUser
0x18004ead8
InitializeAcl
0x18004e9d0
InitializeSecurityDescriptor
0x18004ea60
LogonUserExW
0x18004e9a0
LookupAccountNameW
0x18004e9a8
MakeSelfRelativeSD
0x18004e9e0
OpenProcessToken
0x18004e998
RegCloseKey
0x18004ea38
RegCreateKeyExW
0x18004eaf8
RegDeleteKeyW
0x18004eae8
RegisterServiceCtrlHandlerExW
0x18004ea40
RegisterTraceGuidsW
0x18004ea70
RegOpenKeyExA
0x18004e9f0
RegOpenKeyExW
0x18004ea28
RegOpenKeyW
0x18004ea50
RegQueryValueExA
0x18004e9f8
RegQueryValueExW
0x18004ea30
RegSetValueExW
0x18004eaf0
RevertToSelf
0x18004ea80
SetEntriesInAclW
0x18004ea08
SetSecurityDescriptorDacl
0x18004ea20
SetSecurityDescriptorGroup
0x18004ea18
SetSecurityDescriptorOwner
0x18004ea10
SetServiceStatus
0x18004ea48
SetThreadToken
0x18004ea58
TraceEvent
0x18004ea68
UnregisterTraceGuids
0x18004e988
CRYPT32.dll
14
CertCloseStore
0x18004eb60
CertControlStore
0x18004eb68
CertDuplicateCertificateContext
0x18004eb10
CertFindCertificateInStore
0x18004eb28
CertFreeCertificateChain
0x18004eb48
CertFreeCertificateContext
0x18004eb18
CertGetCertificateChain
0x18004eb20
CertGetCertificateContextProperty
0x18004eb08
CertGetPublicKeyLength
0x18004eb50
CertNameToStrA
0x18004eb30
CertNameToStrW
0x18004eb58
CertOpenStore
0x18004eb70
CertVerifyCertificateChainPolicy
0x18004eb40
CryptAcquireCertificatePrivateKey
0x18004eb38
iisutil.dll
98
??0ALLOC_CACHE_HANDLER@@QEAA@PEBDPEBUALLOC_CACHE_CONFIGURATION@@H@Z
0x18004f190
??0BUFFER@@QEAA@PEAEK@Z
0x18004f128
??0BUFFER@@QEAA@XZ
0x18004f348
??0CEtwTracer@@QEAA@XZ
0x18004f330
??0CLKRHashTable_Iterator@@QEAA@AEBV0@@Z
0x18004f228
??0CLKRHashTable@@QEAA@PEBDP6A?B_KPEBX@ZP6AK_K@ZP6A_N33@ZP6AX1H@ZNKK_N@Z
0x18004f1c8
??0EVENT_LOG@@QEAA@PEBG@Z
0x18004f378
??0MULTISZ@@QEAA@XZ
0x18004f2e0
??0STRA@@QEAA@PEADK@Z
0x18004f140
??0STRA@@QEAA@XZ
0x18004f2d8
??0STRU@@QEAA@PEAGK@Z
0x18004f2c8
??0STRU@@QEAA@XZ
0x18004f350
??1ALLOC_CACHE_HANDLER@@QEAA@XZ
0x18004f180
??1BUFFER@@QEAA@XZ
0x18004f220
??1CEtwTracer@@QEAA@XZ
0x18004f338
??1CLKRHashTable_Iterator@@QEAA@XZ
0x18004f250
??1CLKRHashTable@@QEAA@XZ
0x18004f290
??1CReaderWriterLock3@@QEAA@XZ
0x18004f1a0
??1CSmallSpinLock@@QEAA@XZ
0x18004f198
??1CSpinLock@@QEAA@XZ
0x18004f3a0
??1MULTISZ@@QEAA@XZ
0x18004f308
??1STRA@@QEAA@XZ
0x18004f1a8
??1STRU@@QEAA@XZ
0x18004f408
??9CLKRHashTable_Iterator@@QEBA_NAEBV0@@Z
0x18004f260
?Alloc@ALLOC_CACHE_HANDLER@@QEAAPEAXXZ
0x18004f2f0
?Append@MULTISZ@@QEAAHPEBG@Z
0x18004f3e8
?Append@MULTISZ@@QEAAHPEBGK@Z
0x18004f210
?Append@STRA@@QEAAJPEBD@Z
0x18004f3d8
?Append@STRA@@QEAAJPEBDK@Z
0x18004f3d0
?Append@STRU@@QEAAJG@Z
0x18004f328
?Append@STRU@@QEAAJPEBG@Z
0x18004f2f8
?Append@STRU@@QEAAJPEBGK@Z
0x18004f118
?AppendA@STRU@@QEAAJPEBD@Z
0x18004f1f8
?Apply@CLKRHashTable@@QEAAKP6A?AW4LK_ACTION@@PEBXPEAX@Z1W4LK_LOCKTYPE@@@Z
0x18004f230
?Begin@CLKRHashTable@@QEAA?AVCLKRHashTable_Iterator@@XZ
0x18004f240
?Clear@CLKRHashTable@@QEAAXXZ
0x18004f178
?ConvertSharedToExclusive@CReaderWriterLock3@@QEAAXXZ
0x18004f138
?Copy@STRA@@QEAAJPEBD@Z
0x18004f410
?Copy@STRA@@QEAAJPEBDK@Z
0x18004f3f8
?Copy@STRU@@QEAAJAEBV1@@Z
0x18004f3e0
?Copy@STRU@@QEAAJPEBG@Z
0x18004f298
?Copy@STRU@@QEAAJPEBGK@Z
0x18004f2c0
?Copy@STRU@@QEAAJPEBV1@@Z
0x18004f368
?CopyA@STRU@@QEAAJPEBD@Z
0x18004f1d8
?CopyW@STRA@@QEAAJPEBG@Z
0x18004f1f0
?CopyWToUTF8Unescaped@STRA@@QEAAJPEBG@Z
0x18004f1e8
?DeleteIf@CLKRHashTable@@QEAAKP6A?AW4LK_PREDICATE@@PEBXPEAX@Z1@Z
0x18004f238
?DeleteKey@CLKRHashTable@@QEAA?AW4LK_RETCODE@@_K@Z
0x18004f3b0
?DeleteRecord@CLKRHashTable@@QEAA?AW4LK_RETCODE@@PEBX@Z
0x18004f270
?End@CLKRHashTable@@QEAA?AVCLKRHashTable_Iterator@@XZ
0x18004f248
?Equals@STRA@@QEBA_NAEBV1@@Z
0x18004f148
?Equals@STRU@@QEBA_NAEBV1@@Z
0x18004f370
?EtwTraceEvent@CEtwTracer@@QEAAKPEAU_EVENT_TRACE_HEADER@@@Z
0x18004f358
?FindKey@CLKRHashTable@@QEBA?AW4LK_RETCODE@@_KPEAPEBX@Z
0x18004f278
?FindString@MULTISZ@@QEAAHPEBG@Z
0x18004f3f0
?Free@ALLOC_CACHE_HANDLER@@QEAAHPEAX@Z
0x18004f1b0
?Increment@CLKRHashTable_Iterator@@QEAA_NXZ
0x18004f258
?InsertRecord@CLKRHashTable@@QEAA?AW4LK_RETCODE@@PEBX_N@Z
0x18004f268
?IsValid@CLKRHashTable@@QEBA_NXZ
0x18004f1c0
?LogEvent@EVENT_LOG@@QEAAXKGQEAPEBGK@Z
0x18004f130
?ReadLock@CReaderWriterLock3@@QEAAXXZ
0x18004f150
?ReadLock@CSpinLock@@QEAAXXZ
0x18004f208
?ReadUnlock@CReaderWriterLock3@@QEAAXXZ
0x18004f2d0
?ReadUnlock@CSpinLock@@QEAAXXZ
0x18004f200
?Register@CEtwTracer@@QEAAKPEBU_GUID@@PEAG1@Z
0x18004f2b8
?Reset@MULTISZ@@QEAAXXZ
0x18004f2e8
?Resize@BUFFER@@QEAA_NK@Z
0x18004f340
?Resize@STRA@@QEAAJK@Z
0x18004f3c8
?Resize@STRU@@QEAAJK@Z
0x18004f400
?SetLen@STRU@@QEAA_NK@Z
0x18004f108
?Size@CLKRHashTable@@QEBAKXZ
0x18004f280
?SyncWithBuffer@STRA@@QEAAXXZ
0x18004f1e0
?SyncWithBuffer@STRU@@QEAAXXZ
0x18004f120
?UnRegister@CEtwTracer@@QEAAKXZ
0x18004f168
?WriteLock@CReaderWriterLock3@@QEAAXXZ
0x18004f158
?WriteLock@CSmallSpinLock@@QEAAXXZ
0x18004f3c0
?WriteLock@CSpinLock@@QEAAXXZ
0x18004f218
?WriteUnlock@CReaderWriterLock3@@QEAAXXZ
0x18004f160
?WriteUnlock@CSmallSpinLock@@QEAAXXZ
0x18004f3b8
?WriteUnlock@CSpinLock@@QEAAXXZ
0x18004f1b8
AllocateAndCreateWellKnownSid
0x18004f320
DestroyRefTraceLog
0x18004f188
DisableTokenBackupPrivilege
0x18004f3a8
FreeWellKnownSid
0x18004f318
GetCurrentTimeInSeconds
0x18004f310
HandleMigration
0x18004f2b0
IISGetPlatformType
0x18004f388
InitializeLocalRequest
0x18004f2a0
IsLocalRequest
0x18004f1d0
IsStringEqualOrdinalIgnoreCase
0x18004f288
MakePathCanonicalizationProof
0x18004f110
PuCreateDebugPrintsObject
0x18004f398
PuDbgPrint
0x18004f2a8
PuDbgPrintError
0x18004f360
PuDeleteDebugPrintsObject
0x18004f380
PuLoadDebugFlagsFromRegStr
0x18004f390
TerminateLocalRequest
0x18004f170
WriteRefTraceLog
0x18004f300
KERNEL32.dll
93
AcquireSRWLockExclusive
0x18004ee28
AcquireSRWLockShared
0x18004ee18
CheckRemoteDebuggerPresent
0x18004ebd8
CloseHandle
0x18004ed68
CreateDirectoryW
0x18004ec60
CreateEventW
0x18004ecb8
CreateFileW
0x18004ec50
CreateIoCompletionPort
0x18004ee08
CreateRemoteThreadEx
0x18004ed20
CreateThread
0x18004ecd8
CreateTimerQueueTimer
0x18004ec68
DeleteCriticalSection
0x18004ed10
DeleteFileW
0x18004ebb0
DeleteProcThreadAttributeList
0x18004edc0
DeleteTimerQueueTimer
0x18004ed00
DisableThreadLibraryCalls
0x18004ed80
EnterCriticalSection
0x18004ecb0
ExpandEnvironmentStringsW
0x18004ece0
FileTimeToLocalFileTime
0x18004ed58
FileTimeToSystemTime
0x18004ed50
FindClose
0x18004ec40
FindFirstFileW
0x18004ec30
FindNextFileW
0x18004ec28
FormatMessageA
0x18004ee58
FreeLibrary
0x18004ecf0
FreeLibraryAndExitThread
0x18004eda8
GetComputerNameExW
0x18004ee38
GetCurrentProcess
0x18004ec18
GetCurrentProcessId
0x18004ebf0
GetCurrentThread
0x18004edf8
GetCurrentThreadId
0x18004ebf8
GetDiskFreeSpaceExW
0x18004eb88
GetExitCodeThread
0x18004ecc8
GetFileAttributesExW
0x18004eb90
GetFileInformationByHandle
0x18004ec48
GetFileSizeEx
0x18004ebe8
GetFileType
0x18004eba8
GetLastError
0x18004ed08
GetLocalTime
0x18004ee40
GetLogicalProcessorInformationEx
0x18004edb8
GetModuleFileNameW
0x18004ed88
GetModuleHandleW
0x18004ec80
GetNumaHighestNodeNumber
0x18004ed28
GetNumaNodeProcessorMaskEx
0x18004edd8
GetProcAddress
0x18004ec78
GetProcessAffinityMask
0x18004ec20
GetProcessHeap
0x18004edd0
GetQueuedCompletionStatus
0x18004ede8
GetSystemInfo
0x18004ed70
GetSystemTime
0x18004ebc0
GetSystemTimeAsFileTime
0x18004eb98
GetTickCount
0x18004ec00
GetTickCount64
0x18004ec38
GetUserDefaultLCID
0x18004ec70
GlobalMemoryStatus
0x18004ee00
HeapAlloc
0x18004edc8
HeapFree
0x18004ed18
InitializeCriticalSection
0x18004ecf8
InitializeCriticalSectionAndSpinCount
0x18004ecc0
InitializeProcThreadAttributeList
0x18004ed90
InitializeSRWLock
0x18004ee20
LeaveCriticalSection
0x18004eca8
LoadLibraryExW
0x18004ede0
LoadLibraryW
0x18004ed38
LocalAlloc
0x18004ed40
LocalFree
0x18004ed60
MoveFileExW
0x18004ebb8
MultiByteToWideChar
0x18004ee48
OpenProcess
0x18004ebd0
OutputDebugStringA
0x18004ed78
PostQueuedCompletionStatus
0x18004edf0
QueryPerformanceCounter
0x18004ee50
ReadFile
0x18004ec88
RegisterWaitForSingleObject
0x18004ed48
ReleaseSRWLockExclusive
0x18004ee30
ReleaseSRWLockShared
0x18004ee10
RemoveDirectoryW
0x18004ec58
SetEndOfFile
0x18004eb80
SetEvent
0x18004eca0
SetFilePointerEx
0x18004ed98
SetFileTime
0x18004eba0
SetUnhandledExceptionFilter
0x18004ec10
Sleep
0x18004ecd0
SystemTimeToFileTime
0x18004ebc8
TerminateProcess
0x18004ebe0
UnhandledExceptionFilter
0x18004ec08
UnregisterWaitEx
0x18004ed30
UpdateProcThreadAttribute
0x18004edb0
WaitForMultipleObjects
0x18004ec98
WaitForMultipleObjectsEx
0x18004eda0
WaitForSingleObject
0x18004ece8
WideCharToMultiByte
0x18004ee60
WriteFile
0x18004ec90
msvcrt.dll
50
__C_specific_handler
0x18004f508
__CxxFrameHandler3
0x18004f4b8
__dllonexit
0x18004f4e8
_amsg_exit
0x18004f518
_callnewh
0x18004f528
_i64toa_s
0x18004f498
_initterm
0x18004f510
_itoa_s
0x18004f4a0
_itow
0x18004f460
_lock
0x18004f4f8
_memicmp
0x18004f450
_onexit
0x18004f4e0
_purecall
0x18004f588
_stricmp
0x18004f458
_strnicmp
0x18004f428
_strtoui64
0x18004f5a0
_ultow
0x18004f548
_unlock
0x18004f4f0
_vsnprintf
0x18004f440
_wcsicmp
0x18004f590
_wcslwr
0x18004f488
_wcsnicmp
0x18004f560
_wcsupr
0x18004f540
_XcptFilter
0x18004f520
?terminate@@YAXXZ
0x18004f500
atol
0x18004f448
free
0x18004f538
isdigit
0x18004f420
malloc
0x18004f530
memcmp
0x18004f4c0
memcpy
0x18004f4c8
memcpy_s
0x18004f550
memmove
0x18004f4d0
memset
0x18004f4d8
sprintf_s
0x18004f598
strchr
0x18004f4a8
strncmp
0x18004f430
strstr
0x18004f438
strtoul
0x18004f468
swprintf_s
0x18004f578
towupper
0x18004f4b0
wcschr
0x18004f570
wcscmp
0x18004f5a8
wcscpy_s
0x18004f558
wcscspn
0x18004f490
wcsncpy_s
0x18004f580
wcspbrk
0x18004f470
wcsrchr
0x18004f478
wcsstr
0x18004f480
wcstoul
0x18004f568
IdnToAscii
0x18004eea8
NtQueryInformationThread
0x18004f5c0
NtQuerySystemInformation
0x18004f5b8
RtlCaptureContext
0x18004f5d0
RtlLookupFunctionEntry
0x18004f5d8
RtlVirtualUnwind
0x18004f5e0
WinSqmSetDWORD
0x18004f5c8
ole32.dll
11
CoCreateInstance
0x18004f600
CoDisconnectObject
0x18004f628
CoInitializeEx
0x18004f610
CoInitializeSecurity
0x18004f640
CoRegisterClassObject
0x18004f5f8
CoRevokeClassObject
0x18004f620
CoTaskMemAlloc
0x18004f5f0
CoTaskMemFree
0x18004f618
CoUninitialize
0x18004f608
StringFromGUID2
0x18004f630
StringFromIID
0x18004f638
OLEAUT32.dll
14
GetErrorInfo
0x18004eec8
GetRecordInfoFromGuids
0x18004eed0
SafeArrayAccessData
0x18004ef18
SafeArrayCreateVectorEx
0x18004eed8
SafeArrayDestroy
0x18004eef8
SafeArrayGetLBound
0x18004ef10
SafeArrayGetUBound
0x18004eef0
SafeArrayUnaccessData
0x18004eee0
SysAllocString
0x18004eee8
SysFreeString
0x18004eec0
SysStringLen
0x18004ef08
VariantChangeType
0x18004eeb8
VariantClear
0x18004ef00
VariantInit
0x18004ef20
RpcStringFreeW
0x18004ef38
UuidCreate
0x18004ef48
UuidCreateSequential
0x18004ef40
UuidToStringW
0x18004ef30
Secur32.dll
12
AcceptSecurityContext
0x18004ef90
AcquireCredentialsHandleW
0x18004ef68
ApplyControlToken
0x18004ef70
DecryptMessage
0x18004ef80
DeleteSecurityContext
0x18004ef78
EncryptMessage
0x18004efa8
FreeContextBuffer
0x18004ef98
FreeCredentialsHandle
0x18004ef60
GetUserNameExW
0x18004efb0
LsaFreeReturnBuffer
0x18004efa0
QueryContextAttributesW
0x18004ef88
QuerySecurityContextToken
0x18004ef58
WLDAP32.dll
15
0x18004f030
0x18004f028
0x18004f020
0x18004f018
0x18004f010
0x18004f008
0x18004f000
0x18004eff8
0x18004efc0
0x18004efc8
0x18004efd0
0x18004efd8
0x18004efe0
0x18004efe8
0x18004eff0
WS2_32.dll
24
bind
0x18004f0a8
closesocket
0x18004f0c0
freeaddrinfo
0x18004f050
FreeAddrInfoW
0x18004f078
getaddrinfo
0x18004f048
GetAddrInfoW
0x18004f058
GetHostNameW
0x18004f0e0
getnameinfo
0x18004f040
GetNameInfoW
0x18004f068
getpeername
0x18004f090
getsockname
0x18004f0a0
htons
0x18004f060
listen
0x18004f098
ntohs
0x18004f070
send
0x18004f088
setsockopt
0x18004f0b0
shutdown
0x18004f080
socket
0x18004f0d8
WSACleanup
0x18004f0f8
WSAGetLastError
0x18004f0d0
WSAIoctl
0x18004f0c8
WSASocketW
0x18004f0b8
WSAStartup
0x18004f0f0
WSAStringToAddressW
0x18004f0e8
No function matches your filter.