dssvc.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
InitializeService
#1 · 0x65e0
ServiceMain
#2 · 0x6b30
SvchostPushServiceGlobals
#3 · 0x6890
DSSCreateSharedFileTokenEx
#4 · 0x9660
DSSFreeToken
#5 · 0x9c60
No function matches your filter.
Imported DLLs & functions 200
GetPackageFullNameFromToken
0x18001ad58
ApiSetQueryApiSetPresence
0x18001ad68
CLSIDFromString
0x18001ad88
CoCreateGuid
0x18001ad78
CoCreateInstance
0x18001ad98
CoTaskMemFree
0x18001ad90
StringFromGUID2
0x18001ad80
DebugBreak
0x18001ada8
IsDebuggerPresent
0x18001adb0
OutputDebugStringW
0x18001adb8
DelayLoadFailureHook
0x18001adc8
ResolveDelayLoadedAPI
0x18001add8
GetLastError
0x18001ae08
RaiseException
0x18001adf0
SetLastError
0x18001ae00
SetUnhandledExceptionFilter
0x18001ade8
UnhandledExceptionFilter
0x18001adf8
CompareFileTime
0x18001ae38
CreateDirectoryW
0x18001ae50
CreateFileW
0x18001ae40
DeleteFileW
0x18001ae68
FindClose
0x18001ae78
FindFirstFileW
0x18001ae58
FindNextFileW
0x18001ae70
GetFileAttributesW
0x18001ae30
GetFileInformationByHandle
0x18001ae60
GetFinalPathNameByHandleW
0x18001ae48
RemoveDirectoryW
0x18001ae18
SetFileAttributesW
0x18001ae20
SetFileInformationByHandle
0x18001ae28
GetProcessHeap
0x18001aec8
HeapAlloc
0x18001aec0
HeapFree
0x18001aeb8
DisableThreadLibraryCalls
0x18001af08
FreeLibrary
0x18001aef0
GetModuleFileNameA
0x18001aef8
GetModuleHandleExW
0x18001af10
GetModuleHandleW
0x18001af00
GetProcAddress
0x18001af18
FormatMessageW
0x18001af28
PathAllocCanonicalize
0x18001af60
PathAllocCombine
0x18001af48
PathCchRemoveBackslash
0x18001af38
PathCchRemoveFileSpec
0x18001af40
PathCchSkipRoot
0x18001af50
PathIsUNCEx
0x18001af58
GetCurrentProcess
0x18001af78
GetCurrentProcessId
0x18001af80
GetCurrentThread
0x18001af88
GetCurrentThreadId
0x18001af70
OpenThreadToken
0x18001af98
TerminateProcess
0x18001af90
OpenProcess
0x18001afa8
QueryPerformanceCounter
0x18001afb8
QueryFullProcessImageNameW
0x18001afc8
RegCloseKey
0x18001afd8
RegOpenKeyExW
0x18001afe0
RegQueryValueExW
0x18001afe8
RtlCaptureContext
0x18001aff8
RtlLookupFunctionEntry
0x18001b008
RtlVirtualUnwind
0x18001b000
AcquireSRWLockExclusive
0x18001b038
CreateEventW
0x18001b020
CreateMutexExW
0x18001b050
CreateMutexW
0x18001b058
CreateSemaphoreExW
0x18001b068
DeleteCriticalSection
0x18001b098
EnterCriticalSection
0x18001b040
InitializeCriticalSectionEx
0x18001b088
InitializeSRWLock
0x18001b048
LeaveCriticalSection
0x18001b078
OpenSemaphoreW
0x18001b060
ReleaseMutex
0x18001b030
ReleaseSemaphore
0x18001b080
ReleaseSRWLockExclusive
0x18001b018
SetEvent
0x18001b028
WaitForSingleObject
0x18001b090
WaitForSingleObjectEx
0x18001b070
InitOnceBeginInitialize
0x18001b0b8
InitOnceComplete
0x18001b0b0
Sleep
0x18001b0a8
GetSystemTime
0x18001b0d8
GetSystemTimeAsFileTime
0x18001b0c8
GetTickCount
0x18001b0d0
CloseThreadpoolWork
0x18001b0f0
CreateThreadpoolWork
0x18001b0e8
SubmitThreadpoolWork
0x18001b0f8
UnregisterWaitEx
0x18001b108
FileTimeToSystemTime
0x18001b118
SystemTimeToFileTime
0x18001b120
EventActivityIdControl
0x18001b158
EventProviderEnabled
0x18001b138
EventRegister
0x18001b140
EventSetInformation
0x18001b148
EventUnregister
0x18001b150
EventWriteTransfer
0x18001b130
FreeTransientObjectSecurityDescriptor
0x18001b168
QueryTransientObjectSecurityDescriptor
0x18001b170
CopySid
0x18001b1b0
FreeSid
0x18001b180
GetLengthSid
0x18001b1a0
GetTokenInformation
0x18001b1a8
ImpersonateLoggedOnUser
0x18001b188
IsValidSid
0x18001b198
RevertToSelf
0x18001b190
CapabilityCheck
0x18001b1c0
ConvertSidToStringSidW
0x18001b1d0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18001b1e0
ConvertStringSidToSidW
0x18001b1d8
RegisterServiceCtrlHandlerExW
0x18001b1f0
SetServiceStatus
0x18001b1f8
ESENT.dll
30
JetAddColumnW
0x18001ac48
JetAttachDatabaseW
0x18001acb8
JetBeginSessionW
0x18001acc0
JetBeginTransaction
0x18001ac58
JetCloseDatabase
0x18001aca0
JetCloseTable
0x18001ac78
JetCommitTransaction
0x18001ac80
JetCreateDatabaseW
0x18001acb0
JetCreateIndex2W
0x18001ac38
JetCreateInstanceW
0x18001acd0
JetCreateTableColumnIndexW
0x18001ac68
JetDelete
0x18001ac20
JetDetachDatabaseW
0x18001ac98
JetEndSession
0x18001ac90
JetGetErrorInfoW
0x18001ace0
JetGetTableColumnInfoW
0x18001ac50
JetInit
0x18001acc8
JetMakeKey
0x18001ac10
JetMove
0x18001ac00
JetOpenDatabaseW
0x18001aca8
JetOpenTableW
0x18001ac70
JetPrepareUpdate
0x18001ac30
JetRetrieveColumns
0x18001ac18
JetRollback
0x18001ac60
JetSeek
0x18001ac08
JetSetColumns
0x18001abf8
JetSetCurrentIndexW
0x18001ac40
JetSetSystemParameterW
0x18001acd8
JetTerm
0x18001ac88
JetUpdate
0x18001ac28
msvcrt.dll
33
__C_specific_handler
0x18001b2c0
__CxxFrameHandler3
0x18001b228
__dllonexit
0x18001b218
_amsg_exit
0x18001b2b0
_CxxThrowException
0x18001b210
_errno
0x18001b250
_initterm
0x18001b240
_lock
0x18001b220
_onexit
0x18001b2f8
_purecall
0x18001b2d0
_unlock
0x18001b208
_vsnprintf_s
0x18001b288
_vsnwprintf
0x18001b2c8
_vsnwprintf_s
0x18001b248
_wcsdup
0x18001b2f0
_wcsicmp
0x18001b2d8
_XcptFilter
0x18001b2b8
??0exception@@QEAA@AEBV0@@Z
0x18001b280
??0exception@@QEAA@XZ
0x18001b278
??1exception@@UEAA@XZ
0x18001b270
??1type_info@@UEAA@XZ
0x18001b2a0
?terminate@@YAXXZ
0x18001b298
free
0x18001b2e0
malloc
0x18001b2e8
memcpy
0x18001b230
memcpy_s
0x18001b300
memmove
0x18001b238
memset
0x18001b308
swprintf_s
0x18001b258
toupper
0x18001b290
wcschr
0x18001b268
wcsncmp
0x18001b2a8
wcsstr
0x18001b260
NtOpenThreadToken
0x18001b320
RtlAllocateHeap
0x18001b348
RtlDeleteCriticalSection
0x18001b338
RtlFreeHeap
0x18001b340
RtlNtStatusToDosErrorNoTeb
0x18001b350
WinSqmAddToStreamEx
0x18001b330
WinSqmEndSession
0x18001b328
WinSqmStartSession
0x18001b318
RPCRT4.dll
12
I_RpcBindingInqLocalClientPID
0x18001ad30
NdrServerCall2
0x18001ad40
NdrServerCallAll
0x18001ad38
RpcBindingVectorFree
0x18001ad48
RpcEpRegisterW
0x18001ad00
RpcEpUnregister
0x18001ad08
RpcImpersonateClient
0x18001ad18
RpcRevertToSelf
0x18001ad10
RpcServerInqBindings
0x18001acf8
RpcServerRegisterIf3
0x18001ad28
RpcServerUnregisterIfEx
0x18001acf0
RpcServerUseProtseqW
0x18001ad20
No function matches your filter.