services.exe - Services and Controller app

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	services.exe
size	333312 (0x51600)
md5	575fb4211bb07db7d2179b1b05fe7efd

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
187	30716	3
185	30716	53
1	0	330
198	30716	45
188	30716	8
183	30716	1
186	30716	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5010ade9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	10.10
SizeOfCode	0x42c00
SizeOfInitializedData	0xe600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x18659
BaseOfCode	0x1000
BaseOfData	0x45000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.2
ImageVersion	6.2
SubsystemVersion	6.2
Reserved1	0
SizeOfImage	0x54000
SizeOfHeaders	0x400
CheckSum	0x563cc
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x8000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x42afd	0x42c00	R-X CODE
.data	0x44000	0xd00	0xe00	RW- IDATA
.idata	0x45000	0x2b12	0x2c00	R-- IDATA
.rsrc	0x48000	0x5620	0x5800	R-- IDATA
.reloc	0x4e000	0x5210	0x5400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4555c	0x21c
RESOURCE	0x48000	0x5620
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x4e000	0x5210
DEBUG	0x43a98	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x1cfc0	0x40
Bound_IAT	0	0
IAT	0x45000	0x55c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	240
WEVT_TEMPLATE	#1	19822
VERSION	#1	932
MANIFEST	#1	696

module_name	hint	ord	function_name
api-ms-win-core-crt-l1-1-0.dll	2074		memcpy
api-ms-win-core-crt-l1-1-0.dll	2124		wcschr
api-ms-win-core-crt-l1-1-0.dll	2026		_wcslwr_s
api-ms-win-core-crt-l1-1-0.dll	2137		wcsrchr
api-ms-win-core-crt-l1-1-0.dll	2123		wcscat_s
api-ms-win-core-crt-l1-1-0.dll	2078		memset
api-ms-win-core-crt-l1-1-0.dll	2073		memcmp
api-ms-win-core-crt-l1-1-0.dll	2022		_vsnwprintf_s
api-ms-win-core-crt-l1-1-0.dll	2027		_wcsnicmp
api-ms-win-core-crt-l1-1-0.dll	2143		wcstoul
api-ms-win-core-crt-l1-1-0.dll	1988		_ltow_s
api-ms-win-core-crt-l1-1-0.dll	2128		wcscspn
api-ms-win-core-crt-l1-1-0.dll	2139		wcsstr
api-ms-win-core-crt-l1-1-0.dll	2024		_wcsicmp
api-ms-win-core-crt-l1-1-0.dll	2038		_wtol
api-ms-win-core-crt-l1-1-0.dll	2132		wcsncmp
api-ms-win-core-crt-l1-1-0.dll	2017		_ultow_s
api-ms-win-core-crt-l1-1-0.dll	1970		_except_handler4_common
api-ms-win-core-crt-l2-1-0.dll	1385		exit
api-ms-win-core-crt-l2-1-0.dll	1378		_initterm
api-ms-win-core-crt-l2-1-0.dll	1379		_initterm_e
RPCRT4.dll	442		RpcServerInqCallAttributesA
RPCRT4.dll	353		RpcBindingFree
RPCRT4.dll	343		RpcAsyncAbortCall
RPCRT4.dll	524		UuidFromStringW
RPCRT4.dll	144		NdrAsyncServerCall
RPCRT4.dll	287		NdrServerCall2
RPCRT4.dll	37		I_RpcBindingIsClientLocal
RPCRT4.dll	104		I_RpcSessionStrictContextHandle
RPCRT4.dll	31		I_RpcBindingInqLocalClientPID
RPCRT4.dll	440		RpcServerInqBindingHandle
RPCRT4.dll	403		RpcImpersonateClient
RPCRT4.dll	437		RpcRevertToSelf
RPCRT4.dll	345		RpcAsyncCompleteCall
RPCRT4.dll	443		RpcServerInqCallAttributesW
RPCRT4.dll	66		I_RpcMapWin32Status
RPCRT4.dll	473		RpcServerUseProtseqEpW
RPCRT4.dll	458		RpcServerRegisterIf3
RPCRT4.dll	459		RpcServerRegisterIfEx
RPCRT4.dll	480		RpcServerUseProtseqW
RPCRT4.dll	441		RpcServerInqBindings
RPCRT4.dll	375		RpcBindingToStringBindingW
RPCRT4.dll	508		RpcStringBindingParseW
RPCRT4.dll	510		RpcStringFreeW
RPCRT4.dll	386		RpcEpRegisterW
RPCRT4.dll	388		RpcEpUnregister
RPCRT4.dll	445		RpcServerInqDefaultPrincNameW
RPCRT4.dll	455		RpcServerRegisterAuthInfoW
RPCRT4.dll	377		RpcBindingVectorFree
RPCRT4.dll	460		RpcServerSubscribeForNotification
RPCRT4.dll	464		RpcServerUnsubscribeForNotification
RPCRT4.dll	522		UuidEqual
RPCRT4.dll	520		UuidCreateNil
RPCRT4.dll	519		UuidCreate
SspiCli.dll	33		LogonUserExExW
ntdll.dll	1198		RtlReleaseSRWLockExclusive
ntdll.dll	674		RtlAreAllAccessesGranted
ntdll.dll	853		RtlEqualSid
ntdll.dll	951		RtlGetOwnerSecurityDescriptor
ntdll.dll	624		RtlAcquireResourceShared
ntdll.dll	805		RtlDeregisterWait
ntdll.dll	236		NtCloseObjectAuditAlarm
ntdll.dll	1000		RtlInitializeCriticalSection
ntdll.dll	303		NtDisplayString
ntdll.dll	1465		TpReleaseWait
ntdll.dll	994		RtlInitUnicodeStringEx
ntdll.dll	1436		TpAllocWait
ntdll.dll	300		NtDeleteWnfStateName
ntdll.dll	1139		RtlPublishWnfStateData
ntdll.dll	285		NtCreateWnfStateName
ntdll.dll	396		NtOpenThread
ntdll.dll	469		NtQueueApcThread
ntdll.dll	89		EvtIntReportEventAndSourceAsync
ntdll.dll	59		EtwEventWrite
ntdll.dll	56		EtwEventRegister
ntdll.dll	1310		RtlUnhandledExceptionFilter
ntdll.dll	905		RtlFreeHeap
ntdll.dll	524		NtSetEvent
ntdll.dll	1475		TpSetWait
ntdll.dll	389		NtOpenProcessToken
ntdll.dll	1253		RtlSetProcessIsCritical
ntdll.dll	535		NtSetInformationProcess
ntdll.dll	429		NtQueryInformationFile
ntdll.dll	531		NtSetInformationFile
ntdll.dll	668		RtlAppendUnicodeStringToString
ntdll.dll	669		RtlAppendUnicodeToString
ntdll.dll	1197		RtlReleaseResource
ntdll.dll	421		NtQueryDirectoryFile
ntdll.dll	294		NtDeleteFile
ntdll.dll	739		RtlCopyUnicodeString
ntdll.dll	316		NtFilterToken
ntdll.dll	658		RtlAllocateHeap
ntdll.dll	619		RtlAbsoluteToSelfRelativeSD
ntdll.dll	1237		RtlSetDaclSecurityDescriptor
ntdll.dll	633		RtlAddAccessDeniedAce
ntdll.dll	914		RtlGetAce
ntdll.dll	296		NtDeleteObjectAuditAlarm
ntdll.dll	742		RtlCreateAcl
ntdll.dll	926		RtlGetDaclSecurityDescriptor
ntdll.dll	1243		RtlSetGroupSecurityDescriptor
ntdll.dll	938		RtlGetGroupSecurityDescriptor
ntdll.dll	1250		RtlSetOwnerSecurityDescriptor
ntdll.dll	760		RtlCreateSecurityDescriptor
ntdll.dll	435		NtQueryInformationToken
ntdll.dll	192		NtAdjustPrivilegesToken
ntdll.dll	306		NtDuplicateToken
ntdll.dll	181		NtAccessCheckAndAuditAlarm
ntdll.dll	180		NtAccessCheck
ntdll.dll	409		NtPrivilegeObjectAuditAlarm
ntdll.dll	408		NtPrivilegeCheck
ntdll.dll	1102		RtlMapGenericMask
ntdll.dll	1258		RtlSetSecurityObject
ntdll.dll	397		NtOpenThreadToken
ntdll.dll	1351		RtlValidRelativeSecurityDescriptor
ntdll.dll	1164		RtlQuerySecurityObject
ntdll.dll	1282		RtlSubAuthoritySid
ntdll.dll	1489		WinSqmAddToStream
ntdll.dll	1232		RtlSetControlSecurityDescriptor
ntdll.dll	295		NtDeleteKey
ntdll.dll	310		NtEnumerateKey
ntdll.dll	298		NtDeleteValueKey
ntdll.dll	561		NtSetValueKey
ntdll.dll	464		NtQueryValueKey
ntdll.dll	380		NtOpenKey
ntdll.dll	257		NtCreateKey
ntdll.dll	1079		RtlLengthSecurityDescriptor
ntdll.dll	1352		RtlValidSecurityDescriptor
ntdll.dll	1241		RtlSetEnvironmentVariable
ntdll.dll	719		RtlConvertExclusiveToShared
ntdll.dll	722		RtlConvertSharedToExclusive
ntdll.dll	1190		RtlRegisterWait
ntdll.dll	800		RtlDeleteSecurityObject
ntdll.dll	1174		RtlQueueWorkItem
ntdll.dll	1010		RtlInitializeResource
ntdll.dll	347		NtInitializeRegistry
ntdll.dll	563		NtShutdownSystem
ntdll.dll	442		NtQueryKey
ntdll.dll	537		NtSetInformationThread
ntdll.dll	625		RtlAcquireSRWLockExclusive
ntdll.dll	822		RtlDosPathNameToNtPathName_U
ntdll.dll	910		RtlFreeUnicodeString
ntdll.dll	290		NtDelayExecution
ntdll.dll	395		NtOpenSymbolicLinkObject
ntdll.dll	377		NtOpenFile
ntdll.dll	1012		RtlInitializeSRWLock
ntdll.dll	865		RtlExpandEnvironmentStrings_U
ntdll.dll	654		RtlAdjustPrivilege
ntdll.dll	472		NtRaiseHardError
ntdll.dll	730		RtlCopyLuid
ntdll.dll	630		RtlAddAccessAllowedAce
ntdll.dll	623		RtlAcquireResourceExclusive
ntdll.dll	599		NtWaitForSingleObject
ntdll.dll	626		RtlAcquireSRWLockShared
ntdll.dll	855		RtlEqualUnicodeString
ntdll.dll	949		RtlGetNtProductType
ntdll.dll	736		RtlCopySid
ntdll.dll	1080		RtlLengthSid
ntdll.dll	583		NtUnloadDriver
ntdll.dll	710		RtlCompareUnicodeString
ntdll.dll	373		NtOpenDirectoryObject
ntdll.dll	422		NtQueryDirectoryObject
ntdll.dll	353		NtLoadDriver
ntdll.dll	456		NtQuerySymbolicLinkObject
ntdll.dll	34		DbgPrintEx
ntdll.dll	551		NtSetSystemEnvironmentValue
ntdll.dll	993		RtlInitUnicodeString
ntdll.dll	235		NtClose
ntdll.dll	1118		RtlNtStatusToDosError
ntdll.dll	81		EtwTraceMessage
ntdll.dll	1199		RtlReleaseSRWLockShared
ntdll.dll	761		RtlCreateServiceSid
ntdll.dll	459		NtQuerySystemInformation
ntdll.dll	1119		RtlNtStatusToDosErrorNoTeb
ntdll.dll	1078		RtlLengthRequiredSid
ntdll.dll	636		RtlAddAce
ntdll.dll	1112		RtlNewSecurityObject
ntdll.dll	1255		RtlSetSaclSecurityDescriptor
ntdll.dll	1013		RtlInitializeSid
ntdll.dll	1281		RtlSubAuthorityCountSid
ntdll.dll	664		RtlAnsiStringToUnicodeString
ntdll.dll	984		RtlInitAnsiString
ntdll.dll	1313		RtlUnicodeStringToAnsiString
ntdll.dll	68		EtwGetTraceEnableLevel
ntdll.dll	67		EtwGetTraceEnableFlags
ntdll.dll	76		EtwRegisterTraceGuidsW
ntdll.dll	1315		RtlUnicodeStringToInteger
ntdll.dll	69		EtwGetTraceLoggerHandle
ntdll.dll	1247		RtlSetLastWin32Error
ntdll.dll	579		NtTraceControl
ntdll.dll	716		RtlConnectToSm
ntdll.dll	1227		RtlSendMsgToSm
profapi.dll		102
profapi.dll		101
profapi.dll		106
profapi.dll		105
api-ms-win-security-lsalookup-l1-1-1.dll	104		LsaLookupOpenLocalPolicy
api-ms-win-security-lsalookup-l1-1-1.dll	100		LsaLookupFreeMemory
api-ms-win-security-lsalookup-l1-1-1.dll	99		LsaLookupClose
api-ms-win-security-lsalookup-l1-1-1.dll	102		LsaLookupManageSidNameMapping
api-ms-win-security-lsalookup-l1-1-1.dll	101		LsaLookupGetDomainInfo
api-ms-win-security-lsalookup-l1-1-1.dll	107		LsaLookupTranslateNames
api-ms-win-security-lsalookup-l1-1-1.dll	108		LsaLookupTranslateSids
api-ms-win-security-sddl-l1-1-0.dll	13		ConvertSidToStringSidW
api-ms-win-security-sddl-l1-1-0.dll	14		ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-security-sddl-l1-1-0.dll	12		ConvertSecurityDescriptorToStringSecurityDescriptorW
CRYPTBASE.dll	4		SystemFunction005
CRYPTBASE.dll	6		SystemFunction029
api-ms-win-core-errorhandling-l1-1-1.dll	1127		SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	422		GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	1272		UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	1171		SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	1110		SetErrorMode
api-ms-win-core-errorhandling-l1-1-1.dll		2147483647
api-ms-win-core-file-l1-2-0.dll	121		CreateDirectoryW
api-ms-win-core-file-l1-2-0.dll	278		FindFirstFileW
api-ms-win-core-file-l1-2-0.dll	1117		SetFileInformationByHandle
api-ms-win-core-file-l1-2-0.dll	271		FindClose
api-ms-win-core-file-l1-2-0.dll	285		FindNextFileW
api-ms-win-core-file-l1-2-0.dll	131		CreateFileW
api-ms-win-core-handle-l1-1-0.dll	200		DuplicateHandle
api-ms-win-core-handle-l1-1-0.dll	92		CloseHandle
api-ms-win-core-heap-l1-2-0.dll	578		HeapAlloc
api-ms-win-core-heap-l1-2-0.dll	586		HeapSetInformation
api-ms-win-core-heap-l1-2-0.dll	582		HeapFree
api-ms-win-core-heap-l1-2-0.dll		2147483647
api-ms-win-core-interlocked-l1-2-0.dll	616		InterlockedCompareExchange64
api-ms-win-core-interlocked-l1-2-0.dll	621		InterlockedIncrement
api-ms-win-core-interlocked-l1-2-0.dll	615		InterlockedCompareExchange
api-ms-win-core-interlocked-l1-2-0.dll	618		InterlockedExchange
api-ms-win-core-interlocked-l1-2-0.dll		2147483647
api-ms-win-core-io-l1-1-1.dll	301		DeviceIoControl
api-ms-win-core-libraryloader-l1-1-1.dll	720		LoadStringW
api-ms-win-core-libraryloader-l1-1-1.dll	446		GetModuleHandleW
api-ms-win-core-libraryloader-l1-1-1.dll	468		GetProcAddress
api-ms-win-core-libraryloader-l1-1-1.dll	715		LoadLibraryExW
api-ms-win-core-libraryloader-l1-1-1.dll	308		FreeLibrary
api-ms-win-core-registry-l1-1-0.dll	987		RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll	992		RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll	945		RegCloseKey
api-ms-win-core-registry-l1-1-0.dll	956		RegDeleteTreeW
api-ms-win-core-registry-l1-1-0.dll	982		RegNotifyChangeKeyValue
api-ms-win-core-registry-l1-1-0.dll	997		RegSetKeySecurity
api-ms-win-core-registry-l1-1-0.dll	965		RegGetKeySecurity
api-ms-win-core-registry-l1-1-0.dll	981		RegLoadMUIStringW
api-ms-win-core-registry-l1-1-0.dll	950		RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll	999		RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll	990		RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll	963		RegEnumValueW
api-ms-win-core-processenvironment-l1-2-0.dll	387		GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll	261		ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-1.dll	257		CreateThread
api-ms-win-core-processthreads-l1-1-1.dll	239		CreateProcessW
api-ms-win-core-processthreads-l1-1-1.dll	1346		SetThreadPriority
api-ms-win-core-processthreads-l1-1-1.dll	551		GetCurrentThread
api-ms-win-core-processthreads-l1-1-1.dll	552		GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-1.dll	1391		TerminateProcess
api-ms-win-core-processthreads-l1-1-1.dll	700		GetProcessId
api-ms-win-core-processthreads-l1-1-1.dll	1041		OpenThreadToken
api-ms-win-core-processthreads-l1-1-1.dll	547		GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll	872		InitializeProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-1.dll	1439		UpdateProcThreadAttribute
api-ms-win-core-processthreads-l1-1-1.dll	292		DeleteProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-1.dll	236		CreateProcessAsUserW
api-ms-win-core-processthreads-l1-1-1.dll	1205		ResumeThread
api-ms-win-core-processthreads-l1-1-1.dll	1033		OpenProcessToken
api-ms-win-core-processthreads-l1-1-1.dll	1032		OpenProcess
api-ms-win-core-processthreads-l1-1-1.dll	708		GetProcessTimes
api-ms-win-core-processthreads-l1-1-1.dll	366		ExitThread
api-ms-win-core-processthreads-l1-1-1.dll	1321		SetProcessShutdownParameters
api-ms-win-core-processthreads-l1-1-1.dll	548		GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-1.dll		2147483647
api-ms-win-core-profile-l1-1-0.dll	913		QueryPerformanceCounter
api-ms-win-core-profile-l1-1-0.dll		2147483647
api-ms-win-core-string-l1-1-0.dll	106		CompareStringW
api-ms-win-core-synch-l1-2-0.dll	7		AcquireSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll	764		OpenEventW
api-ms-win-core-synch-l1-2-0.dll	1021		ResetEvent
api-ms-win-core-synch-l1-2-0.dll	1330		WaitForMultipleObjectsEx
api-ms-win-core-synch-l1-2-0.dll	125		CreateEventW
api-ms-win-core-synch-l1-2-0.dll	1111		SetEvent
api-ms-win-core-synch-l1-2-0.dll	1331		WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll	1178		Sleep
api-ms-win-core-synch-l1-2-0.dll	711		LeaveCriticalSection
api-ms-win-core-synch-l1-2-0.dll	208		EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll	605		InitializeCriticalSection
api-ms-win-core-synch-l1-2-0.dll	1009		ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll		2147483647
api-ms-win-core-sysinfo-l1-2-0.dll	538		GetTickCount64
api-ms-win-core-sysinfo-l1-2-0.dll	521		GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-0.dll	344		GetComputerNameExW
api-ms-win-core-sysinfo-l1-2-0.dll	561		GetVersionExW
api-ms-win-core-sysinfo-l1-2-0.dll	519		GetSystemTime
api-ms-win-core-sysinfo-l1-2-0.dll	537		GetTickCount
api-ms-win-security-base-l1-2-0.dll	10		AddAccessAllowedAce
api-ms-win-security-base-l1-2-0.dll	1125		SetKernelObjectSecurity
api-ms-win-security-base-l1-2-0.dll	419		GetKernelObjectSecurity
api-ms-win-security-base-l1-2-0.dll	312		FreeSid
api-ms-win-security-base-l1-2-0.dll	31		AllocateAndInitializeSid
api-ms-win-security-base-l1-2-0.dll	32		AllocateLocallyUniqueId
api-ms-win-security-base-l1-2-0.dll	1142		SetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll	16		AddAce
api-ms-win-security-base-l1-2-0.dll	603		InitializeAcl
api-ms-win-security-base-l1-2-0.dll	491		GetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll	1144		SetSecurityDescriptorOwner
api-ms-win-security-base-l1-2-0.dll	612		InitializeSecurityDescriptor
api-ms-win-security-base-l1-2-0.dll	243		EqualSid
api-ms-win-security-base-l1-2-0.dll	29		AdjustTokenPrivileges
api-ms-win-security-base-l1-2-0.dll	1028		RevertToSelf
api-ms-win-security-base-l1-2-0.dll	596		ImpersonateLoggedOnUser
api-ms-win-security-base-l1-2-0.dll	115		CopySid
api-ms-win-security-base-l1-2-0.dll	423		GetLengthSid
api-ms-win-security-base-l1-2-0.dll	86		CheckTokenMembership
api-ms-win-security-base-l1-2-0.dll	544		GetTokenInformation
api-ms-win-security-base-l1-2-0.dll	1169		SetTokenInformation
api-ms-win-core-threadpool-l1-2-0.dll	157		CreateThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll	161		CreateThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll	1247		SubmitThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll	96		CloseThreadpoolCleanupGroupMembers
api-ms-win-core-threadpool-l1-2-0.dll	95		CloseThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll	62		CallbackMayRunLong
api-ms-win-core-threadpool-l1-2-0.dll	100		CloseThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll		2147483647
api-ms-win-core-heap-obsolete-l1-1-0.dll	969		LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll	973		LocalFree

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Services and Controller app
FileVersion	6.2.9200.16384 (win8_rtm.120725-1247)
InternalName	services.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	services.exe
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.2.9200.16384

VS_FIXEDFILEINFO

FileVersion	6.2.9200.16384
ProductVersion	6.2.9200.16384
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	333312	EXE	07/26/2012 02:39:37	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

services.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

services.exe
-