services.exe - Services and Controller app

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	services.exe
size	410624 (0x64400)
md5	754a2cc1f32107ea87cbd305abe3e618

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
187	30716	1
185	30716	53
1	0	332
198	30716	43
188	30716	9
183	30716	1
186	30716	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5010abe7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	10.10
SizeOfCode	0x54a00
SizeOfInitializedData	0xf600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1bd70
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.2
ImageVersion	6.2
SubsystemVersion	6.2
Reserved1	0
SizeOfImage	0x68000
SizeOfHeaders	0x400
CheckSum	0x6b36c
Subsystem	2
DllCharacteristics	0x8160
SizeOfStackReserve	0x80000
SizeOfStackCommit	0x8000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x54850	0x54a00	R-X CODE
.data	0x56000	0x1334	0x1400	RW- IDATA
.pdata	0x58000	0x4f2c	0x5000	R-- IDATA
.idata	0x5d000	0x3600	0x3600	R-- IDATA
.rsrc	0x61000	0x5628	0x5800	R-- IDATA
.reloc	0x67000	0x21c	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x5dac8	0x21c
RESOURCE	0x61000	0x5628
EXCEPTION	0x58000	0x4f2c
SECURITY	0	0
BASERELOC	0x67000	0x21c
DEBUG	0x4fe04	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x5d000	0xac8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	240
WEVT_TEMPLATE	#1	19822
VERSION	#1	932
MANIFEST	#1	698

module_name	hint	ord	function_name
api-ms-win-core-crt-l1-1-0.dll	2124		wcscat_s
api-ms-win-core-crt-l1-1-0.dll	2075		memcpy
api-ms-win-core-crt-l1-1-0.dll	2026		_wcslwr_s
api-ms-win-core-crt-l1-1-0.dll	2138		wcsrchr
api-ms-win-core-crt-l1-1-0.dll	2022		_vsnwprintf_s
api-ms-win-core-crt-l1-1-0.dll	2125		wcschr
api-ms-win-core-crt-l1-1-0.dll	2074		memcmp
api-ms-win-core-crt-l1-1-0.dll	2027		_wcsnicmp
api-ms-win-core-crt-l1-1-0.dll	2144		wcstoul
api-ms-win-core-crt-l1-1-0.dll	1986		_ltow_s
api-ms-win-core-crt-l1-1-0.dll	2129		wcscspn
api-ms-win-core-crt-l1-1-0.dll	1963		__C_specific_handler
api-ms-win-core-crt-l1-1-0.dll	2140		wcsstr
api-ms-win-core-crt-l1-1-0.dll	2024		_wcsicmp
api-ms-win-core-crt-l1-1-0.dll	2038		_wtol
api-ms-win-core-crt-l1-1-0.dll	2133		wcsncmp
api-ms-win-core-crt-l1-1-0.dll	2017		_ultow_s
api-ms-win-core-crt-l1-1-0.dll	2079		memset
api-ms-win-core-crt-l2-1-0.dll	1376		_initterm_e
api-ms-win-core-crt-l2-1-0.dll	1375		_initterm
api-ms-win-core-crt-l2-1-0.dll	1383		exit
RPCRT4.dll	450		RpcServerInqCallAttributesA
RPCRT4.dll	351		RpcAsyncAbortCall
RPCRT4.dll	532		UuidFromStringW
RPCRT4.dll	361		RpcBindingFree
RPCRT4.dll	145		NdrAsyncServerCall
RPCRT4.dll	295		NdrServerCall2
RPCRT4.dll	37		I_RpcBindingIsClientLocal
RPCRT4.dll	103		I_RpcSessionStrictContextHandle
RPCRT4.dll	31		I_RpcBindingInqLocalClientPID
RPCRT4.dll	448		RpcServerInqBindingHandle
RPCRT4.dll	411		RpcImpersonateClient
RPCRT4.dll	445		RpcRevertToSelf
RPCRT4.dll	353		RpcAsyncCompleteCall
RPCRT4.dll	451		RpcServerInqCallAttributesW
RPCRT4.dll	65		I_RpcMapWin32Status
RPCRT4.dll	481		RpcServerUseProtseqEpW
RPCRT4.dll	466		RpcServerRegisterIf3
RPCRT4.dll	467		RpcServerRegisterIfEx
RPCRT4.dll	488		RpcServerUseProtseqW
RPCRT4.dll	449		RpcServerInqBindings
RPCRT4.dll	383		RpcBindingToStringBindingW
RPCRT4.dll	516		RpcStringBindingParseW
RPCRT4.dll	518		RpcStringFreeW
RPCRT4.dll	394		RpcEpRegisterW
RPCRT4.dll	396		RpcEpUnregister
RPCRT4.dll	453		RpcServerInqDefaultPrincNameW
RPCRT4.dll	463		RpcServerRegisterAuthInfoW
RPCRT4.dll	385		RpcBindingVectorFree
RPCRT4.dll	468		RpcServerSubscribeForNotification
RPCRT4.dll	472		RpcServerUnsubscribeForNotification
RPCRT4.dll	530		UuidEqual
RPCRT4.dll	528		UuidCreateNil
RPCRT4.dll	527		UuidCreate
SspiCli.dll	33		LogonUserExExW
ntdll.dll	832		RtlDosPathNameToNtPathName_U
ntdll.dll	297		NtDeleteObjectAuditAlarm
ntdll.dll	677		RtlAreAllAccessesGranted
ntdll.dll	1205		RtlReleaseSRWLockExclusive
ntdll.dll	862		RtlEqualSid
ntdll.dll	959		RtlGetOwnerSecurityDescriptor
ntdll.dll	354		NtLoadDriver
ntdll.dll	34		DbgPrintEx
ntdll.dll	473		NtRaiseHardError
ntdll.dll	657		RtlAdjustPrivilege
ntdll.dll	1103		RtlLookupFunctionEntry
ntdll.dll	688		RtlCaptureContext
ntdll.dll	304		NtDisplayString
ntdll.dll	1483		TpReleaseWait
ntdll.dll	1004		RtlInitUnicodeStringEx
ntdll.dll	1454		TpAllocWait
ntdll.dll	301		NtDeleteWnfStateName
ntdll.dll	1145		RtlPublishWnfStateData
ntdll.dll	287		NtCreateWnfStateName
ntdll.dll	397		NtOpenThread
ntdll.dll	470		NtQueueApcThread
ntdll.dll	1180		RtlQueueApcWow64Thread
ntdll.dll	89		EvtIntReportEventAndSourceAsync
ntdll.dll	59		EtwEventWrite
ntdll.dll	56		EtwEventRegister
ntdll.dll	1318		RtlUnhandledExceptionFilter
ntdll.dll	910		RtlFreeHeap
ntdll.dll	525		NtSetEvent
ntdll.dll	1493		TpSetWait
ntdll.dll	390		NtOpenProcessToken
ntdll.dll	1261		RtlSetProcessIsCritical
ntdll.dll	536		NtSetInformationProcess
ntdll.dll	430		NtQueryInformationFile
ntdll.dll	443		NtQueryKey
ntdll.dll	671		RtlAppendUnicodeStringToString
ntdll.dll	672		RtlAppendUnicodeToString
ntdll.dll	600		NtWaitForSingleObject
ntdll.dll	422		NtQueryDirectoryFile
ntdll.dll	295		NtDeleteFile
ntdll.dll	742		RtlCopyUnicodeString
ntdll.dll	915		RtlFreeUnicodeString
ntdll.dll	661		RtlAllocateHeap
ntdll.dll	620		RtlAbsoluteToSelfRelativeSD
ntdll.dll	1245		RtlSetDaclSecurityDescriptor
ntdll.dll	634		RtlAddAccessDeniedAce
ntdll.dll	919		RtlGetAce
ntdll.dll	631		RtlAddAccessAllowedAce
ntdll.dll	745		RtlCreateAcl
ntdll.dll	932		RtlGetDaclSecurityDescriptor
ntdll.dll	1251		RtlSetGroupSecurityDescriptor
ntdll.dll	945		RtlGetGroupSecurityDescriptor
ntdll.dll	1258		RtlSetOwnerSecurityDescriptor
ntdll.dll	763		RtlCreateSecurityDescriptor
ntdll.dll	436		NtQueryInformationToken
ntdll.dll	194		NtAdjustPrivilegesToken
ntdll.dll	307		NtDuplicateToken
ntdll.dll	183		NtAccessCheckAndAuditAlarm
ntdll.dll	182		NtAccessCheck
ntdll.dll	410		NtPrivilegeObjectAuditAlarm
ntdll.dll	409		NtPrivilegeCheck
ntdll.dll	1106		RtlMapGenericMask
ntdll.dll	1266		RtlSetSecurityObject
ntdll.dll	398		NtOpenThreadToken
ntdll.dll	1359		RtlValidRelativeSecurityDescriptor
ntdll.dll	1170		RtlQuerySecurityObject
ntdll.dll	1291		RtlSubAuthoritySid
ntdll.dll	1507		WinSqmAddToStream
ntdll.dll	1240		RtlSetControlSecurityDescriptor
ntdll.dll	296		NtDeleteKey
ntdll.dll	311		NtEnumerateKey
ntdll.dll	299		NtDeleteValueKey
ntdll.dll	562		NtSetValueKey
ntdll.dll	465		NtQueryValueKey
ntdll.dll	381		NtOpenKey
ntdll.dll	259		NtCreateKey
ntdll.dll	1081		RtlLengthSecurityDescriptor
ntdll.dll	1360		RtlValidSecurityDescriptor
ntdll.dll	1249		RtlSetEnvironmentVariable
ntdll.dll	722		RtlConvertExclusiveToShared
ntdll.dll	538		NtSetInformationThread
ntdll.dll	626		RtlAcquireSRWLockExclusive
ntdll.dll	1366		RtlVirtualUnwind
ntdll.dll	457		NtQuerySymbolicLinkObject
ntdll.dll	624		RtlAcquireResourceExclusive
ntdll.dll	374		NtOpenDirectoryObject
ntdll.dll	1204		RtlReleaseResource
ntdll.dll	807		RtlDeleteSecurityObject
ntdll.dll	1181		RtlQueueWorkItem
ntdll.dll	1019		RtlInitializeResource
ntdll.dll	625		RtlAcquireResourceShared
ntdll.dll	348		NtInitializeRegistry
ntdll.dll	317		NtFilterToken
ntdll.dll	564		NtShutdownSystem
ntdll.dll	1235		RtlSendMsgToSm
ntdll.dll	291		NtDelayExecution
ntdll.dll	815		RtlDeregisterWait
ntdll.dll	627		RtlAcquireSRWLockShared
ntdll.dll	238		NtCloseObjectAuditAlarm
ntdll.dll	532		NtSetInformationFile
ntdll.dll	1010		RtlInitializeCriticalSection
ntdll.dll	724		RtlConvertSharedToExclusive
ntdll.dll	1197		RtlRegisterWait
ntdll.dll	864		RtlEqualUnicodeString
ntdll.dll	957		RtlGetNtProductType
ntdll.dll	739		RtlCopySid
ntdll.dll	1082		RtlLengthSid
ntdll.dll	584		NtUnloadDriver
ntdll.dll	712		RtlCompareUnicodeString
ntdll.dll	396		NtOpenSymbolicLinkObject
ntdll.dll	423		NtQueryDirectoryObject
ntdll.dll	875		RtlExpandEnvironmentStrings_U
ntdll.dll	378		NtOpenFile
ntdll.dll	1021		RtlInitializeSRWLock
ntdll.dll	552		NtSetSystemEnvironmentValue
ntdll.dll	1003		RtlInitUnicodeString
ntdll.dll	237		NtClose
ntdll.dll	1122		RtlNtStatusToDosError
ntdll.dll	81		EtwTraceMessage
ntdll.dll	731		RtlCopyLuid
ntdll.dll	1206		RtlReleaseSRWLockShared
ntdll.dll	764		RtlCreateServiceSid
ntdll.dll	460		NtQuerySystemInformation
ntdll.dll	1123		RtlNtStatusToDosErrorNoTeb
ntdll.dll	1080		RtlLengthRequiredSid
ntdll.dll	637		RtlAddAce
ntdll.dll	1116		RtlNewSecurityObject
ntdll.dll	1263		RtlSetSaclSecurityDescriptor
ntdll.dll	1022		RtlInitializeSid
ntdll.dll	1290		RtlSubAuthorityCountSid
ntdll.dll	667		RtlAnsiStringToUnicodeString
ntdll.dll	994		RtlInitAnsiString
ntdll.dll	1321		RtlUnicodeStringToAnsiString
ntdll.dll	68		EtwGetTraceEnableLevel
ntdll.dll	67		EtwGetTraceEnableFlags
ntdll.dll	76		EtwRegisterTraceGuidsW
ntdll.dll	1323		RtlUnicodeStringToInteger
ntdll.dll	69		EtwGetTraceLoggerHandle
ntdll.dll	1255		RtlSetLastWin32Error
ntdll.dll	580		NtTraceControl
ntdll.dll	719		RtlConnectToSm
profapi.dll		105
profapi.dll		102
profapi.dll		106
profapi.dll		101
api-ms-win-security-lsalookup-l1-1-1.dll	104		LsaLookupOpenLocalPolicy
api-ms-win-security-lsalookup-l1-1-1.dll	100		LsaLookupFreeMemory
api-ms-win-security-lsalookup-l1-1-1.dll	99		LsaLookupClose
api-ms-win-security-lsalookup-l1-1-1.dll	102		LsaLookupManageSidNameMapping
api-ms-win-security-lsalookup-l1-1-1.dll	101		LsaLookupGetDomainInfo
api-ms-win-security-lsalookup-l1-1-1.dll	107		LsaLookupTranslateNames
api-ms-win-security-lsalookup-l1-1-1.dll	108		LsaLookupTranslateSids
api-ms-win-security-sddl-l1-1-0.dll	13		ConvertSidToStringSidW
api-ms-win-security-sddl-l1-1-0.dll	14		ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-security-sddl-l1-1-0.dll	12		ConvertSecurityDescriptorToStringSecurityDescriptorW
CRYPTBASE.dll	4		SystemFunction005
CRYPTBASE.dll	6		SystemFunction029
api-ms-win-core-errorhandling-l1-1-1.dll	1165		SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	1121		SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	422		GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	1104		SetErrorMode
api-ms-win-core-errorhandling-l1-1-1.dll	1266		UnhandledExceptionFilter
api-ms-win-core-file-l1-2-0.dll	131		CreateFileW
api-ms-win-core-file-l1-2-0.dll	121		CreateDirectoryW
api-ms-win-core-file-l1-2-0.dll	1111		SetFileInformationByHandle
api-ms-win-core-file-l1-2-0.dll	285		FindNextFileW
api-ms-win-core-file-l1-2-0.dll	271		FindClose
api-ms-win-core-file-l1-2-0.dll	278		FindFirstFileW
api-ms-win-core-handle-l1-1-0.dll	200		DuplicateHandle
api-ms-win-core-handle-l1-1-0.dll	92		CloseHandle
api-ms-win-core-heap-l1-2-0.dll	582		HeapFree
api-ms-win-core-heap-l1-2-0.dll	586		HeapSetInformation
api-ms-win-core-heap-l1-2-0.dll	578		HeapAlloc
api-ms-win-core-io-l1-1-1.dll	305		DeviceIoControl
api-ms-win-core-libraryloader-l1-1-1.dll	714		LoadStringW
api-ms-win-core-libraryloader-l1-1-1.dll	446		GetModuleHandleW
api-ms-win-core-libraryloader-l1-1-1.dll	468		GetProcAddress
api-ms-win-core-libraryloader-l1-1-1.dll	709		LoadLibraryExW
api-ms-win-core-libraryloader-l1-1-1.dll	308		FreeLibrary
api-ms-win-core-registry-l1-1-0.dll	939		RegCloseKey
api-ms-win-core-registry-l1-1-0.dll	950		RegDeleteTreeW
api-ms-win-core-registry-l1-1-0.dll	976		RegNotifyChangeKeyValue
api-ms-win-core-registry-l1-1-0.dll	991		RegSetKeySecurity
api-ms-win-core-registry-l1-1-0.dll	959		RegGetKeySecurity
api-ms-win-core-registry-l1-1-0.dll	975		RegLoadMUIStringW
api-ms-win-core-registry-l1-1-0.dll	944		RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll	993		RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll	984		RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll	957		RegEnumValueW
api-ms-win-core-registry-l1-1-0.dll	981		RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll	986		RegQueryValueExW
api-ms-win-core-processenvironment-l1-2-0.dll	387		GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll	261		ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-1.dll	256		CreateThread
api-ms-win-core-processthreads-l1-1-1.dll	239		CreateProcessW
api-ms-win-core-processthreads-l1-1-1.dll	1360		SetThreadPriority
api-ms-win-core-processthreads-l1-1-1.dll	557		GetCurrentThread
api-ms-win-core-processthreads-l1-1-1.dll	558		GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-1.dll	1406		TerminateProcess
api-ms-win-core-processthreads-l1-1-1.dll	707		GetProcessId
api-ms-win-core-processthreads-l1-1-1.dll	1044		OpenThreadToken
api-ms-win-core-processthreads-l1-1-1.dll	553		GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll	881		InitializeProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-1.dll	1455		UpdateProcThreadAttribute
api-ms-win-core-processthreads-l1-1-1.dll	293		DeleteProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-1.dll	236		CreateProcessAsUserW
api-ms-win-core-processthreads-l1-1-1.dll	1209		ResumeThread
api-ms-win-core-processthreads-l1-1-1.dll	1036		OpenProcessToken
api-ms-win-core-processthreads-l1-1-1.dll	554		GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-1.dll	1335		SetProcessShutdownParameters
api-ms-win-core-processthreads-l1-1-1.dll	372		ExitThread
api-ms-win-core-processthreads-l1-1-1.dll	715		GetProcessTimes
api-ms-win-core-processthreads-l1-1-1.dll	1035		OpenProcess
api-ms-win-core-profile-l1-1-0.dll	907		QueryPerformanceCounter
api-ms-win-core-string-l1-1-0.dll	106		CompareStringW
api-ms-win-core-synch-l1-2-0.dll	1003		ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll	7		AcquireSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll	605		InitializeCriticalSection
api-ms-win-core-synch-l1-2-0.dll	208		EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll	705		LeaveCriticalSection
api-ms-win-core-synch-l1-2-0.dll	1172		Sleep
api-ms-win-core-synch-l1-2-0.dll	1325		WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll	758		OpenEventW
api-ms-win-core-synch-l1-2-0.dll	1015		ResetEvent
api-ms-win-core-synch-l1-2-0.dll	1324		WaitForMultipleObjectsEx
api-ms-win-core-synch-l1-2-0.dll	125		CreateEventW
api-ms-win-core-synch-l1-2-0.dll	1105		SetEvent
api-ms-win-core-sysinfo-l1-2-0.dll	519		GetSystemTime
api-ms-win-core-sysinfo-l1-2-0.dll	561		GetVersionExW
api-ms-win-core-sysinfo-l1-2-0.dll	344		GetComputerNameExW
api-ms-win-core-sysinfo-l1-2-0.dll	514		GetSystemDirectoryW
api-ms-win-core-sysinfo-l1-2-0.dll	538		GetTickCount64
api-ms-win-core-sysinfo-l1-2-0.dll	537		GetTickCount
api-ms-win-core-sysinfo-l1-2-0.dll	521		GetSystemTimeAsFileTime
api-ms-win-security-base-l1-2-0.dll	10		AddAccessAllowedAce
api-ms-win-security-base-l1-2-0.dll	1119		SetKernelObjectSecurity
api-ms-win-security-base-l1-2-0.dll	419		GetKernelObjectSecurity
api-ms-win-security-base-l1-2-0.dll	312		FreeSid
api-ms-win-security-base-l1-2-0.dll	31		AllocateAndInitializeSid
api-ms-win-security-base-l1-2-0.dll	32		AllocateLocallyUniqueId
api-ms-win-security-base-l1-2-0.dll	1136		SetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll	16		AddAce
api-ms-win-security-base-l1-2-0.dll	603		InitializeAcl
api-ms-win-security-base-l1-2-0.dll	491		GetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll	1138		SetSecurityDescriptorOwner
api-ms-win-security-base-l1-2-0.dll	612		InitializeSecurityDescriptor
api-ms-win-security-base-l1-2-0.dll	243		EqualSid
api-ms-win-security-base-l1-2-0.dll	29		AdjustTokenPrivileges
api-ms-win-security-base-l1-2-0.dll	1022		RevertToSelf
api-ms-win-security-base-l1-2-0.dll	596		ImpersonateLoggedOnUser
api-ms-win-security-base-l1-2-0.dll	115		CopySid
api-ms-win-security-base-l1-2-0.dll	423		GetLengthSid
api-ms-win-security-base-l1-2-0.dll	86		CheckTokenMembership
api-ms-win-security-base-l1-2-0.dll	544		GetTokenInformation
api-ms-win-security-base-l1-2-0.dll	1163		SetTokenInformation
api-ms-win-core-threadpool-l1-2-0.dll	157		CreateThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll	161		CreateThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll	1241		SubmitThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll	96		CloseThreadpoolCleanupGroupMembers
api-ms-win-core-threadpool-l1-2-0.dll	95		CloseThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll	62		CallbackMayRunLong
api-ms-win-core-threadpool-l1-2-0.dll	100		CloseThreadpoolWork
api-ms-win-core-wow64-l1-1-0.dll	671		IsWow64Process
api-ms-win-core-heap-obsolete-l1-1-0.dll	972		LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll	976		LocalFree

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Services and Controller app
FileVersion	6.2.9200.16384 (win8_rtm.120725-1247)
InternalName	services.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	services.exe
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.2.9200.16384

VS_FIXEDFILEINFO

FileVersion	6.2.9200.16384
ProductVersion	6.2.9200.16384
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	405040	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

services.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

services.exe
-