GRPSSUPW64.dll

Description: GRPSSUP.dll

Version: 8.1.0.0

Architecture: 64-bit

Operating System: Windows NT

SHA256: d1fc53555d6e02590c90b71efa09f4a7

File Size: 151.5 KB

Uploaded At: March 24, 2026, 11:04 p.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

RtlGetOSVersion (Ordinal: 1, Address: 0x6d50)
RtlGetLastError (Ordinal: 2, Address: 0x6d60)
RtlQueryPermission (Ordinal: 3, Address: 0x10870)
RtlRebootSystem (Ordinal: 4, Address: 0xfa20)
RtlGetDLLVersion (Ordinal: 5, Address: 0x6db0)
RtlInstallPrinterModel (Ordinal: 11, Address: 0xd660)
RtlUninstallPrinterModel (Ordinal: 12, Address: 0xcb50)
RtlExistPrinterModel (Ordinal: 13, Address: 0xe450)
RtlExistPrinterModelEx (Ordinal: 14, Address: 0xe480)
RtlEnumPrinterName (Ordinal: 21, Address: 0xab00)
RtlValidPrinterName (Ordinal: 22, Address: 0xb250)
RtlInstallPrinter (Ordinal: 23, Address: 0xb390)
RtlInstallPrinterEx (Ordinal: 24, Address: 0xad70)
RtlUninstallPrinter (Ordinal: 25, Address: 0xb420)
RtlUpdatePnPPrinter (Ordinal: 26, Address: 0xaa00)
RtlExistPnPPrinter (Ordinal: 27, Address: 0xaaf0)
RtlEnumPortName (Ordinal: 31, Address: 0x8420)
RtlValidPortName (Ordinal: 32, Address: 0x8ee0)
RtlInstallPort (Ordinal: 33, Address: 0x86e0)
RtlUninstallPort (Ordinal: 34, Address: 0x8fc0)
RtlEnumPortMonitorName (Ordinal: 41, Address: 0x9f50)
RtlGetPortMonitorName (Ordinal: 42, Address: 0x9540)
RtlExistPortMonitor (Ordinal: 43, Address: 0x9fc0)
RtlInstallPortMonitor (Ordinal: 44, Address: 0xa560)
RtlUninstallPortMonitor (Ordinal: 45, Address: 0xa0c0)
RtlExistWdmUsb (Ordinal: 51, Address: 0x121e0)
RtlInstallWdmUsb (Ordinal: 52, Address: 0x12bd0)
RtlUpdateWdmUsb (Ordinal: 53, Address: 0x12430)
RtlUninstallWdmUsb (Ordinal: 54, Address: 0x12610)
RtlEnumPrintProcessorName (Ordinal: 61, Address: 0xede0)
RtlGetPrintProcessorName (Ordinal: 62, Address: 0xe4c0)
RtlSetPrintProcessor (Ordinal: 63, Address: 0xe5d0)
RtlExistPrintProcessor (Ordinal: 64, Address: 0xef50)
RtlInstallPrintProcessor (Ordinal: 65, Address: 0xf990)
RtlUninstallPrintProcessor (Ordinal: 66, Address: 0xf630)
RtlEnumPrintProcessorDataType (Ordinal: 67, Address: 0xf030)
RtlGetPrintProcessorDataType (Ordinal: 68, Address: 0xe750)
RtlValidShareName (Ordinal: 71, Address: 0xc150)
RtlGetPrinterModelDirectory (Ordinal: 72, Address: 0xc260)
RtlGetJobNum (Ordinal: 73, Address: 0x11950)
RtlInstallInfFile (Ordinal: 74, Address: 0x10890)
RtlUninstallPrinterInf (Ordinal: 75, Address: 0xc200)
RtlUninstallWdmInf (Ordinal: 76, Address: 0x12280)
RtlCheckService (Ordinal: 77, Address: 0x11520)
RtlStopService (Ordinal: 78, Address: 0x104a0)
RtlStartService (Ordinal: 79, Address: 0x10680)
RtlEnumDependentServices (Ordinal: 80, Address: 0x116a0)
RtlExistMonitor (Ordinal: 81, Address: 0x7d00)
RtlInstallMonitor (Ordinal: 82, Address: 0x77d0)
RtlUninstallMonitor (Ordinal: 83, Address: 0x77f0)
RtlFreeMemory (Ordinal: 91, Address: 0x10090)
RtlIsDeviceStageSupport (Ordinal: 92, Address: 0x1070)
RtlExistDeviceMetadata (Ordinal: 93, Address: 0x16b0)
RtlInstallDeviceMetadata (Ordinal: 94, Address: 0x1940)
RtlUninstallDeviceMetadata (Ordinal: 95, Address: 0x1760)
RtlExtractFilesFromCab (Ordinal: 101, Address: 0x3360)
RtlDeleteExtractFiles (Ordinal: 102, Address: 0x34f0)
RtlRemoveDeviceInstance (Ordinal: 103, Address: 0xc880)

Imported DLLs & Functions

ADVAPI32.dll

RegCloseKey (Address: 0x18001b000)
RegEnumKeyExW (Address: 0x18001b010)
RegOpenKeyExW (Address: 0x18001b020)
RegQueryInfoKeyW (Address: 0x18001b008)
RegQueryValueExW (Address: 0x18001b018)

KERNEL32.dll

CloseHandle (Address: 0x18001b080)
CompareFileTime (Address: 0x18001b0c0)
CopyFileW (Address: 0x18001b168)
CreateDirectoryW (Address: 0x18001b0b8)
CreateFileW (Address: 0x18001b0a0)
DeleteCriticalSection (Address: 0x18001b128)
DeleteFileW (Address: 0x18001b170)
EnterCriticalSection (Address: 0x18001b110)
ExitProcess (Address: 0x18001b278)
FindClose (Address: 0x18001b068)
FindFirstFileW (Address: 0x18001b078)
FindNextFileW (Address: 0x18001b060)
FlsAlloc (Address: 0x18001b270)
FlsFree (Address: 0x18001b228)
FlsGetValue (Address: 0x18001b338)
FlsSetValue (Address: 0x18001b2b0)
FreeEnvironmentStringsA (Address: 0x18001b248)
FreeEnvironmentStringsW (Address: 0x18001b238)
FreeLibrary (Address: 0x18001b0d0)
GetACP (Address: 0x18001b318)
GetCommandLineA (Address: 0x18001b2b8)
GetCPInfo (Address: 0x18001b310)
GetCurrentProcess (Address: 0x18001b138)
GetCurrentProcessId (Address: 0x18001b200)
GetCurrentThreadId (Address: 0x18001b2a8)
GetEnvironmentStrings (Address: 0x18001b240)
GetEnvironmentStringsW (Address: 0x18001b220)
GetFileAttributesW (Address: 0x18001b0b0)
GetFileSize (Address: 0x18001b098)
GetFileTime (Address: 0x18001b0a8)
GetFileType (Address: 0x18001b260)
GetLastError (Address: 0x18001b050)
GetLocaleInfoA (Address: 0x18001b1d0)
GetModuleFileNameA (Address: 0x18001b250)
GetModuleHandleA (Address: 0x18001b330)
GetOEMCP (Address: 0x18001b320)
GetPrivateProfileSectionW (Address: 0x18001b198)
GetProcAddress (Address: 0x18001b0e0)
GetProcessHeap (Address: 0x18001b2d0)
GetStartupInfoA (Address: 0x18001b258)
GetStdHandle (Address: 0x18001b288)
GetStringTypeA (Address: 0x18001b1e0)
GetStringTypeW (Address: 0x18001b1d8)
GetSystemDirectoryW (Address: 0x18001b150)
GetSystemTimeAsFileTime (Address: 0x18001b1f8)
GetTempFileNameW (Address: 0x18001b1a8)
GetTempPathW (Address: 0x18001b1b0)
GetTickCount (Address: 0x18001b208)
GetVersionExA (Address: 0x18001b120)
GetWindowsDirectoryW (Address: 0x18001b180)
HeapAlloc (Address: 0x18001b2c8)
HeapCreate (Address: 0x18001b2a0)
HeapDestroy (Address: 0x18001b298)
HeapFree (Address: 0x18001b2c0)
HeapReAlloc (Address: 0x18001b038)
HeapSetInformation (Address: 0x18001b348)
HeapSize (Address: 0x18001b030)
InitializeCriticalSection (Address: 0x18001b130)
IsDebuggerPresent (Address: 0x18001b2f0)
IsValidCodePage (Address: 0x18001b328)
LCMapStringA (Address: 0x18001b1f0)
LCMapStringW (Address: 0x18001b1e8)
LeaveCriticalSection (Address: 0x18001b108)
LoadLibraryA (Address: 0x18001b1c0)
LoadLibraryW (Address: 0x18001b0d8)
LocalAlloc (Address: 0x18001b1b8)
LocalFree (Address: 0x18001b160)
lstrcatW (Address: 0x18001b048)
lstrcmpiW (Address: 0x18001b0f0)
lstrcmpW (Address: 0x18001b058)
lstrcpynW (Address: 0x18001b158)
lstrcpyW (Address: 0x18001b040)
lstrlenW (Address: 0x18001b070)
MoveFileExW (Address: 0x18001b1a0)
MultiByteToWideChar (Address: 0x18001b118)
OpenProcess (Address: 0x18001b140)
QueryPerformanceCounter (Address: 0x18001b210)
ReadFile (Address: 0x18001b088)
RemoveDirectoryW (Address: 0x18001b178)
RtlCaptureContext (Address: 0x18001b308)
RtlLookupFunctionEntry (Address: 0x18001b300)
RtlUnwindEx (Address: 0x18001b218)
RtlVirtualUnwind (Address: 0x18001b2f8)
SetFileAttributesW (Address: 0x18001b0c8)
SetFilePointer (Address: 0x18001b090)
SetHandleCount (Address: 0x18001b290)
SetLastError (Address: 0x18001b0e8)
SetUnhandledExceptionFilter (Address: 0x18001b2e8)
Sleep (Address: 0x18001b148)
TerminateProcess (Address: 0x18001b2d8)
TlsFree (Address: 0x18001b340)
TlsSetValue (Address: 0x18001b268)
UnhandledExceptionFilter (Address: 0x18001b2e0)
VerifyVersionInfoW (Address: 0x18001b0f8)
VerSetConditionMask (Address: 0x18001b100)
WideCharToMultiByte (Address: 0x18001b230)
WriteFile (Address: 0x18001b1c8)
WritePrivateProfileSectionW (Address: 0x18001b190)
WritePrivateProfileStringW (Address: 0x18001b188)
WriteProfileStringW (Address: 0x18001b280)

LZ32.dll

GetExpandedNameW (Address: 0x18001b358)
LZClose (Address: 0x18001b370)
LZCopy (Address: 0x18001b368)
LZOpenFileW (Address: 0x18001b360)

ole32.dll

CoCreateGuid (Address: 0x18001b498)
CoTaskMemFree (Address: 0x18001b4a0)
StringFromGUID2 (Address: 0x18001b490)

SETUPAPI.dll

SetupIterateCabinetW (Address: 0x18001b380)

USER32.dll

ExitWindowsEx (Address: 0x18001b390)
GetDesktopWindow (Address: 0x18001b398)
wsprintfW (Address: 0x18001b3a0)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x18001b3c0)
GetFileVersionInfoW (Address: 0x18001b3b0)
VerQueryValueW (Address: 0x18001b3b8)

WINSPOOL.DRV

AddMonitorW (Address: 0x18001b410)
AddPortW (Address: 0x18001b428)
AddPrinterDriverW (Address: 0x18001b418)
AddPrinterW (Address: 0x18001b3f8)
AddPrintProcessorW (Address: 0x18001b468)
ClosePrinter (Address: 0x18001b440)
DeleteMonitorW (Address: 0x18001b480)
DeletePortW (Address: 0x18001b420)
DeletePrinter (Address: 0x18001b3f0)
DeletePrinterDriverW (Address: 0x18001b3d8)
DeletePrintProcessorW (Address: 0x18001b460)
EnumJobsW (Address: 0x18001b470)
EnumMonitorsW (Address: 0x18001b450)
EnumPortsW (Address: 0x18001b448)
EnumPrinterDriversW (Address: 0x18001b3e8)
EnumPrintersW (Address: 0x18001b408)
EnumPrintProcessorDatatypesW (Address: 0x18001b400)
EnumPrintProcessorsW (Address: 0x18001b3d0)
GetPrinterDriverDirectoryW (Address: 0x18001b3e0)
GetPrinterW (Address: 0x18001b478)
GetPrintProcessorDirectoryW (Address: 0x18001b458)
OpenPrinterW (Address: 0x18001b430)
SetPrinterW (Address: 0x18001b438)