sppsvc.exe
v10.0.26100.9711
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 0
No exported functions.
No function matches your filter.
Imported DLLs & functions 301
ADVAPI32.dll
58
AllocateAndInitializeSid
0x1403df0c8
CheckTokenMembership
0x1403df0c0
CloseServiceHandle
0x1403df1d8
ConvertSidToStringSidW
0x1403df200
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1403df090
ConvertStringSidToSidW
0x1403df0b8
CryptAcquireContextW
0x1403df150
CryptCreateHash
0x1403df188
CryptDecrypt
0x1403df258
CryptDestroyHash
0x1403df178
CryptDestroyKey
0x1403df170
CryptEncrypt
0x1403df158
CryptExportKey
0x1403df248
CryptGenKey
0x1403df160
CryptGenRandom
0x1403df138
CryptGetHashParam
0x1403df250
CryptHashData
0x1403df180
CryptImportKey
0x1403df168
CryptReleaseContext
0x1403df148
CryptSignHashA
0x1403df238
CryptVerifySignatureA
0x1403df240
DeregisterEventSource
0x1403df140
EqualSid
0x1403df220
EventRegister
0x1403df190
EventSetInformation
0x1403df198
EventUnregister
0x1403df1a0
EventWriteTransfer
0x1403df110
FreeSid
0x1403df0b0
GetTokenInformation
0x1403df218
LookupAccountNameW
0x1403df208
LsaClose
0x1403df1f8
LsaFreeMemory
0x1403df1c8
LsaOpenPolicy
0x1403df1f0
LsaQueryInformationPolicy
0x1403df1e8
NotifyServiceStatusChangeW
0x1403df210
OpenProcessToken
0x1403df228
OpenSCManagerW
0x1403df1c0
OpenServiceW
0x1403df1b8
OpenThreadToken
0x1403df098
QueryServiceStatusEx
0x1403df1e0
RegCloseKey
0x1403df0a0
RegCreateKeyExW
0x1403df0f8
RegDeleteKeyW
0x1403df100
RegDeleteValueW
0x1403df0a8
RegEnumKeyExW
0x1403df230
RegEnumKeyW
0x1403df0e8
RegFlushKey
0x1403df1a8
RegisterEventSourceW
0x1403df128
RegisterServiceCtrlHandlerW
0x1403df120
RegOpenKeyExW
0x1403df0f0
RegOpenKeyW
0x1403df1b0
RegQueryInfoKeyW
0x1403df0e0
RegQueryValueExW
0x1403df0d0
RegSetValueExW
0x1403df0d8
ReportEventW
0x1403df130
SetServiceStatus
0x1403df108
StartServiceCtrlDispatcherW
0x1403df118
StartServiceW
0x1403df1d0
CoInitializeEx
0x1403df7a8
CoInitializeSecurity
0x1403df7c0
CoUninitialize
0x1403df7b8
CreateStreamOnHGlobal
0x1403df7b0
SetUnhandledExceptionFilter
0x1403df7d8
UnhandledExceptionFilter
0x1403df7d0
RtlCaptureContext
0x1403df7f8
RtlLookupFunctionEntry
0x1403df7f0
RtlVirtualUnwind
0x1403df7e8
SleepConditionVariableSRW
0x1403df810
WakeAllConditionVariable
0x1403df808
GetTickCount
0x1403df820
GetFileVersionInfoExW
0x1403df838
GetFileVersionInfoSizeExW
0x1403df830
VerQueryValueW
0x1403df840
TraceMessage
0x1403df850
BCryptCloseAlgorithmProvider
0x1403df878
BCryptCreateHash
0x1403df868
BCryptDestroyHash
0x1403df898
BCryptDestroyKey
0x1403df890
BCryptFinishHash
0x1403df8a0
BCryptGenRandom
0x1403df888
BCryptGetProperty
0x1403df880
BCryptHashData
0x1403df860
BCryptOpenAlgorithmProvider
0x1403df870
CertFreeCertificateContext
0x1403df268
CryptImportPublicKeyInfoEx2
0x1403df270
CryptQueryObject
0x1403df278
CryptXmlClose
0x1403df2b8
CryptXmlGetDocContext
0x1403df290
CryptXmlGetReference
0x1403df2b0
CryptXmlGetSignature
0x1403df2a8
CryptXmlGetStatus
0x1403df2a0
CryptXmlOpenToDecode
0x1403df288
CryptXmlVerifySignature
0x1403df298
KERNEL32.dll
123
AcquireSRWLockExclusive
0x1403df698
AcquireSRWLockShared
0x1403df618
ChangeTimerQueueTimer
0x1403df448
CloseHandle
0x1403df660
CloseThreadpoolTimer
0x1403df690
CompareFileTime
0x1403df3e8
CopyFileW
0x1403df528
CreateDirectoryW
0x1403df460
CreateEventW
0x1403df2f8
CreateFileW
0x1403df360
CreateMutexExW
0x1403df628
CreateMutexW
0x1403df5c0
CreateSemaphoreExW
0x1403df4d0
CreateSemaphoreW
0x1403df300
CreateThreadpoolTimer
0x1403df640
CreateTimerQueue
0x1403df380
CreateTimerQueueTimer
0x1403df320
DebugBreak
0x1403df670
DecodePointer
0x1403df358
DeleteCriticalSection
0x1403df4b8
DeleteFileW
0x1403df3f0
DeleteTimerQueue
0x1403df3b0
DeleteTimerQueueEx
0x1403df378
DeleteTimerQueueTimer
0x1403df2f0
DeviceIoControl
0x1403df540
DuplicateHandle
0x1403df5a0
EncodePointer
0x1403df310
EnterCriticalSection
0x1403df4e8
ExpandEnvironmentStringsW
0x1403df330
FileTimeToSystemTime
0x1403df480
FlushFileBuffers
0x1403df518
FormatMessageW
0x1403df608
FreeLibrary
0x1403df3c0
GetComputerNameW
0x1403df548
GetCurrentProcess
0x1403df598
GetCurrentProcessId
0x1403df588
GetCurrentThread
0x1403df5a8
GetCurrentThreadId
0x1403df5f8
GetEnvironmentVariableW
0x1403df388
GetFileAttributesW
0x1403df400
GetFileSize
0x1403df368
GetFileSizeEx
0x1403df440
GetLastError
0x1403df610
GetLocaleInfoW
0x1403df578
GetLocalTime
0x1403df4f8
GetModuleFileNameA
0x1403df4c8
GetModuleFileNameW
0x1403df338
GetModuleHandleA
0x1403df520
GetModuleHandleExW
0x1403df5d0
GetModuleHandleW
0x1403df678
GetNativeSystemInfo
0x1403df558
GetProcAddress
0x1403df630
GetProcessHeap
0x1403df538
GetSystemDefaultUILanguage
0x1403df568
GetSystemDirectoryW
0x1403df450
GetSystemFirmwareTable
0x1403df570
GetSystemInfo
0x1403df2e8
GetSystemTime
0x1403df550
GetSystemTimeAsFileTime
0x1403df468
GetThreadPriority
0x1403df438
GetUserDefaultUILanguage
0x1403df560
GetVersionExA
0x1403df458
GetVersionExW
0x1403df2e0
GlobalAlloc
0x1403df428
GlobalFree
0x1403df420
GlobalLock
0x1403df430
GlobalUnlock
0x1403df5c8
HeapAlloc
0x1403df638
HeapFree
0x1403df4d8
HeapSetInformation
0x1403df3a0
InitializeCriticalSection
0x1403df4a0
InitializeCriticalSectionAndSpinCount
0x1403df308
InitializeCriticalSectionEx
0x1403df5e0
InitializeSRWLock
0x1403df508
IsDebuggerPresent
0x1403df4c0
K32GetProcessImageFileNameW
0x1403df478
LCMapStringW
0x1403df2d8
LeaveCriticalSection
0x1403df5d8
LoadLibraryExW
0x1403df3c8
LocalAlloc
0x1403df620
LocalFree
0x1403df318
MoveFileExW
0x1403df530
MultiByteToWideChar
0x1403df3d0
OpenMutexW
0x1403df5b8
OpenProcess
0x1403df408
OpenSemaphoreW
0x1403df668
OpenThread
0x1403df5b0
OutputDebugStringW
0x1403df688
QueryPerformanceCounter
0x1403df2c8
QueryPerformanceFrequency
0x1403df2d0
QueueUserWorkItem
0x1403df3f8
RaiseException
0x1403df340
RaiseFailFastException
0x1403df4a8
ReadFile
0x1403df3d8
RegisterWaitForSingleObject
0x1403df3a8
ReleaseMutex
0x1403df600
ReleaseSemaphore
0x1403df4f0
ReleaseSRWLockExclusive
0x1403df658
ReleaseSRWLockShared
0x1403df648
RtlAddFunctionTable
0x1403df498
RtlDeleteFunctionTable
0x1403df4b0
SetEnvironmentVariableW
0x1403df390
SetEvent
0x1403df348
SetFileAttributesW
0x1403df410
SetFilePointer
0x1403df510
SetLastError
0x1403df4e0
SetThreadpoolTimer
0x1403df650
SetThreadPriority
0x1403df590
Sleep
0x1403df328
SleepEx
0x1403df580
SystemTimeToFileTime
0x1403df3e0
TerminateProcess
0x1403df398
TryAcquireSRWLockExclusive
0x1403df500
UnmapViewOfFile
0x1403df370
UnregisterWaitEx
0x1403df3b8
VirtualAlloc
0x1403df490
VirtualFree
0x1403df488
VirtualQuery
0x1403df350
WaitForSingleObject
0x1403df5f0
WaitForSingleObjectEx
0x1403df680
WaitForThreadpoolTimerCallbacks
0x1403df5e8
WideCharToMultiByte
0x1403df470
WriteFile
0x1403df418
msvcrt.dll
46
__C_specific_handler
0x1403df9e8
__dllonexit
0x1403df8f8
__set_app_type
0x1403df940
__setusermatherr
0x1403dfa10
__wgetmainargs
0x1403df948
_aligned_free
0x1403df9a8
_aligned_malloc
0x1403df9a0
_amsg_exit
0x1403df950
_cexit
0x1403df928
_commode
0x1403df910
_errno
0x1403df998
_exit
0x1403df930
_fmode
0x1403df918
_initterm
0x1403df920
_itow
0x1403df8d8
_lock
0x1403df908
_onexit
0x1403df8f0
_purecall
0x1403df9f8
_ui64tow_s
0x1403df8d0
_unlock
0x1403df900
_vsnwprintf
0x1403dfa08
_wcsicmp
0x1403df9d8
_wcsnicmp
0x1403df960
_wtof
0x1403df9b0
_wtoi
0x1403df9c0
_XcptFilter
0x1403df958
?terminate@@YAXXZ
0x1403df8e8
exit
0x1403df938
free
0x1403df9d0
malloc
0x1403df9c8
memchr
0x1403df8c8
memcmp
0x1403df8c0
memcpy
0x1403df8b8
memcpy_s
0x1403dfa00
memmove
0x1403df8b0
memmove_s
0x1403df9f0
memset
0x1403df8e0
sscanf_s
0x1403df978
swscanf
0x1403df9e0
swscanf_s
0x1403df988
towlower
0x1403df968
wcschr
0x1403df970
wcscmp
0x1403dfa18
wcsncmp
0x1403df980
wcsstr
0x1403df9b8
wcstoul
0x1403df990
NtLockProductActivationKeys
0x1403dfa40
NtQueryInformationThread
0x1403dfa28
NtQueryObject
0x1403dfa60
NtQuerySystemInformation
0x1403dfa48
NtSetInformationThread
0x1403dfa30
RtlEqualUnicodeString
0x1403dfa50
RtlInitUnicodeString
0x1403dfa58
RtlQueryPackageClaims
0x1403dfa38
CoCreateInstance
0x1403dfa70
OLEAUT32.dll
12
GetErrorInfo
0x1403df6e8
SafeArrayAccessData
0x1403df6b8
SafeArrayCreateVector
0x1403df6b0
SafeArrayDestroy
0x1403df6d8
SafeArrayUnaccessData
0x1403df6c0
SysAllocString
0x1403df6e0
SysAllocStringLen
0x1403df6f0
SysFreeString
0x1403df6a8
SysStringLen
0x1403df6f8
VariantClear
0x1403df6d0
VariantCopy
0x1403df6c8
VariantInit
0x1403df700
IsDefaultPKey
0x1403dfa80
RPCRT4.dll
16
I_RpcBindingInqLocalClientPID
0x1403df778
I_RpcMapWin32Status
0x1403df738
NdrServerCall2
0x1403df760
NdrServerCallAll
0x1403df718
RpcImpersonateClient
0x1403df758
RpcNetworkIsProtseqValidW
0x1403df768
RpcRaiseException
0x1403df788
RpcRevertToSelfEx
0x1403df750
RpcServerInqCallAttributesW
0x1403df720
RpcServerInterfaceGroupActivate
0x1403df710
RpcServerInterfaceGroupClose
0x1403df770
RpcServerInterfaceGroupCreateW
0x1403df780
RpcStringFreeW
0x1403df730
UuidCreate
0x1403df748
UuidFromStringW
0x1403df740
UuidToStringW
0x1403df728
CreateXmlReader
0x1403df798
No function matches your filter.