iphlpsvc.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
IphlpsvcSysprepGeneralize
#1 · 0x30150
ServiceMain
#2 · 0x14620
SvchostPushServiceGlobals
#3 · 0x16af0
No function matches your filter.
Imported DLLs & functions 325
ApiSetQueryApiSetPresence
0x180078478
DebugBreak
0x180078488
IsDebuggerPresent
0x180078490
OutputDebugStringW
0x180078498
DelayLoadFailureHook
0x1800784a8
ResolveDelayLoadedAPI
0x1800784b8
GetLastError
0x1800784d8
RaiseException
0x1800784d0
SetLastError
0x1800784e8
SetUnhandledExceptionFilter
0x1800784e0
UnhandledExceptionFilter
0x1800784c8
CreateFileW
0x180078500
GetFileInformationByHandle
0x180078518
ReadFile
0x1800784f8
SetEndOfFile
0x180078508
WriteFile
0x180078510
CloseHandle
0x180078528
GetProcessHeap
0x180078548
HeapAlloc
0x180078538
HeapCreate
0x180078558
HeapDestroy
0x180078550
HeapFree
0x180078540
InitializeSListHead
0x180078590
InterlockedPopEntrySList
0x180078588
InterlockedPushEntrySList
0x180078598
QueryDepthSList
0x180078580
BindIoCompletionCallback
0x1800785c8
GetComputerNameW
0x1800785c0
GetNumaProcessorNodeEx
0x1800785d8
DisableThreadLibraryCalls
0x180078638
FindResourceExW
0x180078608
FreeLibrary
0x1800785f0
GetModuleFileNameA
0x180078618
GetModuleFileNameW
0x180078630
GetModuleHandleExW
0x180078620
GetModuleHandleW
0x180078628
GetProcAddress
0x1800785e8
LoadLibraryExW
0x180078640
LoadResource
0x180078600
LoadStringW
0x1800785f8
SizeofResource
0x180078610
FormatMessageW
0x180078650
VirtualFree
0x180078660
VirtualAllocExNuma
0x180078670
PerfCreateInstance
0x180078698
PerfDeleteInstance
0x1800786a8
PerfSetCounterRefValue
0x180078680
PerfSetCounterSetInfo
0x180078688
PerfSetULongCounterValue
0x1800786a0
PerfSetULongLongCounterValue
0x1800786b8
PerfStartProviderEx
0x180078690
PerfStopProvider
0x1800786b0
ExpandEnvironmentStringsW
0x1800786c8
CreateRemoteThreadEx
0x180078708
DeleteProcThreadAttributeList
0x1800786f8
GetCurrentProcess
0x1800786e0
GetCurrentProcessId
0x180078720
GetCurrentThread
0x1800786d8
GetCurrentThreadId
0x1800786e8
InitializeProcThreadAttributeList
0x180078718
OpenThreadToken
0x1800786f0
TerminateProcess
0x180078700
UpdateProcThreadAttribute
0x180078710
IsProcessorFeaturePresent
0x180078738
OpenProcess
0x180078730
SetThreadGroupAffinity
0x180078748
GetActiveProcessorCount
0x180078758
SetThreadAffinityMask
0x180078760
GetActiveProcessorGroupCount
0x180078770
QueryPerformanceCounter
0x180078780
QueryFullProcessImageNameW
0x180078790
QueryUnbiasedInterruptTime
0x1800787a0
RegCloseKey
0x180078808
RegCreateKeyExW
0x1800787f8
RegDeleteKeyExW
0x1800787f0
RegDeleteTreeW
0x1800787d0
RegDeleteValueW
0x180078810
RegEnumKeyExW
0x180078800
RegEnumValueW
0x1800787c0
RegGetValueW
0x1800787b0
RegOpenKeyExA
0x1800787b8
RegOpenKeyExW
0x1800787e0
RegQueryInfoKeyW
0x1800787d8
RegQueryValueExW
0x1800787c8
RegSetValueExW
0x1800787e8
RtlCaptureContext
0x180078828
RtlCompareMemory
0x180078830
RtlLookupFunctionEntry
0x180078838
RtlVirtualUnwind
0x180078820
MultiByteToWideChar
0x180078848
CharNextW
0x180078858
lstrcmpiW
0x180078868
AcquireSRWLockExclusive
0x1800788e8
AcquireSRWLockShared
0x180078878
CreateEventExW
0x180078910
CreateEventW
0x1800788d0
CreateMutexExW
0x180078898
CreateMutexW
0x180078908
CreateSemaphoreExW
0x1800788d8
DeleteCriticalSection
0x180078918
EnterCriticalSection
0x180078928
InitializeCriticalSection
0x180078930
InitializeCriticalSectionAndSpinCount
0x1800788c0
InitializeSRWLock
0x180078938
LeaveCriticalSection
0x180078920
OpenEventW
0x180078880
OpenSemaphoreW
0x1800788a0
ReleaseMutex
0x1800788b8
ReleaseSemaphore
0x1800788a8
ReleaseSRWLockExclusive
0x180078900
ReleaseSRWLockShared
0x180078890
ResetEvent
0x1800788f8
SetEvent
0x1800788e0
TryAcquireSRWLockExclusive
0x180078888
WaitForMultipleObjectsEx
0x1800788c8
WaitForSingleObject
0x1800788b0
WaitForSingleObjectEx
0x1800788f0
Sleep
0x180078948
WaitForMultipleObjects
0x180078958
GetSystemDirectoryW
0x180078980
GetSystemInfo
0x180078978
GetSystemTimeAsFileTime
0x180078970
GetTickCount
0x180078968
GetTickCount64
0x180078988
GetNumaNodeProcessorMaskEx
0x180078998
CancelThreadpoolIo
0x1800789c0
CloseThreadpool
0x180078a10
CloseThreadpoolCleanupGroup
0x180078a20
CloseThreadpoolCleanupGroupMembers
0x180078a28
CloseThreadpoolIo
0x1800789b0
CloseThreadpoolTimer
0x1800789f0
CloseThreadpoolWait
0x1800789d0
CloseThreadpoolWork
0x1800789a8
CreateThreadpool
0x180078a38
CreateThreadpoolCleanupGroup
0x180078a30
CreateThreadpoolIo
0x1800789c8
CreateThreadpoolTimer
0x180078a08
CreateThreadpoolWait
0x180078a40
CreateThreadpoolWork
0x180078a18
SetThreadpoolTimer
0x180078a00
SetThreadpoolWait
0x1800789e0
StartThreadpoolIo
0x1800789b8
SubmitThreadpoolWork
0x1800789e8
TrySubmitThreadpoolCallback
0x180078a48
WaitForThreadpoolTimerCallbacks
0x1800789f8
WaitForThreadpoolWaitCallbacks
0x1800789d8
UnregisterWaitEx
0x180078a58
GetEnabledXStateFeatures
0x180078a68
__C_specific_handler
0x180078b80
__CxxFrameHandler3
0x180078ae8
__std_terminate
0x180078b68
_CxxThrowException
0x180078af0
_o___std_exception_copy
0x180078b40
_o___std_exception_destroy
0x180078b38
_o___std_type_info_destroy_list
0x180078b30
_o___stdio_common_vsnwprintf_s
0x180078b00
_o___stdio_common_vswprintf
0x180078af8
_o__callnewh
0x180078b60
_o__cexit
0x180078b58
_o__configure_narrow_argv
0x180078b50
_o__crt_atexit
0x180078b48
_o__errno
0x180078b10
_o__execute_onexit_table
0x180078b08
_o__initialize_narrow_environment
0x180078b28
_o__initialize_onexit_table
0x180078b20
_o__invalid_parameter_noinfo
0x180078b18
_o__recalloc
0x180078a78
_o__register_onexit_function
0x180078a80
_o__seh_filter_dll
0x180078a88
_o__stricmp
0x180078a90
_o__wcsicmp
0x180078a98
_o__wcsnicmp
0x180078aa0
_o__wtoi
0x180078ab0
_o_free
0x180078ab8
_o_malloc
0x180078ac0
_o_memcpy_s
0x180078ac8
_o_wcscpy_s
0x180078ad0
_o_wcsncpy_s
0x180078ad8
_o_wcstok_s
0x180078ae0
memcmp
0x180078b88
memcpy
0x180078b90
memmove
0x180078aa8
wcschr
0x180078b78
wcsstr
0x180078b70
memset
0x180078bb8
wcscmp
0x180078bc8
wcsncmp
0x180078bc0
wcsnlen
0x180078bd0
_time64
0x180078be0
TraceMessage
0x180078bf0
EventRegister
0x180078c00
EventSetInformation
0x180078c10
EventUnregister
0x180078c08
EventWriteTransfer
0x180078c18
AllocateAndInitializeSid
0x180078c28
CheckTokenMembership
0x180078c30
CreateWellKnownSid
0x180078c50
FreeSid
0x180078c38
InitializeSecurityDescriptor
0x180078c48
SetSecurityDescriptorDacl
0x180078c40
RpcClientCapabilityCheck
0x180078c60
LookupAccountNameW
0x180078c70
ControlService
0x180078c80
FWIndicatePortInUse
0x1800781d8
FWIndicateTupleInUse
0x1800781e0
FWResetIndicatedPortInUse
0x1800781d0
FWResetIndicatedTupleInUse
0x1800781e8
fwpuclnt.dll
17
FwpmEngineClose0
0x180078cc0
FwpmEngineOpen0
0x180078cd8
FwpmFilterAdd0
0x180078cd0
FwpmFilterCreateEnumHandle0
0x180078cb8
FwpmFilterDeleteById0
0x180078cf8
FwpmFilterDestroyEnumHandle0
0x180078ca8
FwpmFilterEnum0
0x180078cb0
FwpmFilterGetByKey0
0x180078ca0
FwpmFilterSubscribeChanges0
0x180078cc8
FwpmFilterUnsubscribeChanges0
0x180078d10
FwpmFreeMemory0
0x180078c90
FwpmProviderAdd0
0x180078d08
FwpmProviderDeleteByKey0
0x180078c98
FwpmSubLayerAdd0
0x180078ce0
FwpmTransactionAbort0
0x180078ce8
FwpmTransactionBegin0
0x180078cf0
FwpmTransactionCommit0
0x180078d00
IPHLPAPI.DLL
39
CancelMibChangeNotify2
0x1800782c8
ConvertCompartmentIdToGuid
0x180078270
ConvertGuidToStringA
0x180078238
ConvertGuidToStringW
0x1800782c0
ConvertInterfaceGuidToLuid
0x180078208
ConvertInterfaceIndexToLuid
0x180078280
ConvertInterfaceLuidToAlias
0x180078220
ConvertInterfaceLuidToGuid
0x180078230
ConvertInterfaceLuidToIndex
0x180078290
ConvertStringToGuidW
0x180078240
CreateIpForwardEntry2
0x1800782a0
DeleteIpForwardEntry2
0x180078298
FreeMibTable
0x180078218
GetAdaptersAddresses
0x180078278
GetBestInterface
0x1800782e8
GetBestInterfaceEx
0x180078300
GetBestRoute2
0x180078318
GetIfEntry2
0x180078200
GetIfTable2
0x180078248
GetIpAddrTable
0x180078268
GetIpForwardEntry2
0x180078210
GetIpForwardTable2
0x1800781f8
GetIpInterfaceTable
0x1800782a8
GetIpNetEntry2
0x180078310
GetUnicastIpAddressEntry
0x1800782e0
GetUnicastIpAddressTable
0x180078308
Icmp6CreateFile
0x180078250
Icmp6SendEcho2
0x180078258
IcmpCloseHandle
0x180078260
InitializeIpForwardEntry
0x1800782b0
InitializeIpInterfaceEntry
0x1800782f8
InternalSetIpInterfaceEntry
0x1800782f0
InternalSetTeredoPort
0x180078228
NotifyIpInterfaceChange
0x1800782d0
NotifyRouteChange2
0x1800782b8
NotifyUnicastIpAddressChange
0x1800782d8
ParseNetworkString
0x180078288
ResolveIpNetEntry2
0x180078320
SetCurrentThreadCompartmentId
0x180078328
NetSetupClose
0x180078388
NetSetupCommit
0x180078398
NetSetupCreateObject
0x1800783b0
NetSetupDeleteObject
0x1800783a0
NetSetupFreeObjects
0x180078390
NetSetupGetObjects
0x1800783b8
NetSetupInitialize
0x1800783a8
NSI.dll
6
NsiAllocateAndGetTable
0x180078360
NsiFreeTable
0x180078368
NsiGetAllParameters
0x180078370
NsiGetParameter
0x180078378
NsiSetAllParameters
0x180078358
NsiSetParameter
0x180078350
ntdll.dll
21
EtwEventActivityIdControl
0x180078d90
EtwTraceMessageVa
0x180078d88
RtlCreateHashTable
0x180078dc0
RtlDeleteHashTable
0x180078d40
RtlEndEnumerationHashTable
0x180078d80
RtlEnumerateEntryHashTable
0x180078d38
RtlGetDeviceFamilyInfoEnum
0x180078d60
RtlGetNextEntryHashTable
0x180078d28
RtlGetVersion
0x180078db8
RtlInitEnumerationHashTable
0x180078db0
RtlInsertEntryHashTable
0x180078d20
RtlIpv4AddressToStringW
0x180078d70
RtlIpv4StringToAddressExW
0x180078da8
RtlIpv4StringToAddressW
0x180078d68
RtlIpv6AddressToStringW
0x180078d98
RtlIpv6StringToAddressW
0x180078d58
RtlLookupEntryHashTable
0x180078d30
RtlNtStatusToDosError
0x180078d78
RtlRemoveEntryHashTable
0x180078d48
WinSqmIncrementDWORD
0x180078d50
WinSqmSetIfMaxDWORD
0x180078da0
RPCRT4.dll
16
I_RpcBindingInqLocalClientPID
0x1800783e8
NdrServerCall2
0x1800783e0
NdrServerCallAll
0x1800783d8
RpcBindingVectorFree
0x180078440
RpcEpRegisterW
0x180078410
RpcEpUnregister
0x180078418
RpcImpersonateClient
0x180078408
RpcRevertToSelf
0x1800783f8
RpcRevertToSelfEx
0x1800783f0
RpcServerInqBindings
0x180078438
RpcServerRegisterIf3
0x180078400
RpcServerRegisterIfEx
0x180078430
RpcServerUnregisterIfEx
0x180078420
RpcServerUseProtseqIfW
0x1800783d0
RpcServerUseProtseqW
0x180078428
UuidCreate
0x1800783c8
NsiConnectToServer
0x180078460
NsiDisconnectFromServer
0x180078450
NsiRpcDeregisterChangeNotification
0x180078458
NsiRpcRegisterChangeNotification
0x180078468
No function matches your filter.