Windows 10 DLL File Information - MPSSVC.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Microsoft Protection Service
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	642 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	523,776 Bytes	79.6%	Read, Execute	Code
.data	0x00081000	12,800 Bytes	1.9%	Write, Read	Initialized Data
.idata	0x00088000	10,752 Bytes	1.6%	Read	Initialized Data
.didat	0x0008b000	1,536 Bytes	0.2%	Write, Read	Initialized Data
.rsrc	0x0008c000	70,656 Bytes	10.7%	Read	Initialized Data
.reloc	0x0009e000	37,376 Bytes	5.7%	Read, Discardable	Initialized Data

Static Linking

MPSSVC.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-file-l1-2-1.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-eventing-consumer-l1-1-0.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-file-l2-1-1.dll
api-ms-win-core-heap-l1-2-0.dll
RPCRT4.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-devices-config-l1-1-1.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-string-l2-1-0.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
api-ms-win-core-threadpool-private-l1-1-0.dll
api-ms-win-security-grouppolicy-l1-1-0.dll
NSI.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-eventing-obsolete-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
fwpuclnt.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-apiquery-l1-1-0.dll

This means that when MPSSVC.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, MPSSVC.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	100,146 Bytes	15.2%
Total	4	100,146 Bytes	15.2%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _initterm

  _lock

  _onexit

  _purecall

  _ultow_s

  _unlock

  _vsnprintf

  _vsnwprintf

  _wcsicmp

  _wcsnicmp

  bsearch

  free

  iswdigit

  malloc

  memcmp

  memcpy

  memcpy_s

  memmove_s

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  qsort

  towupper

  wcspbrk

  wcstok

• ntdll.dll:
  

  DbgPrint	EtwEventEnabled
  EtwEventRegister	EtwEventUnregister
  EtwEventWrite	EtwGetTraceEnableFlags
  EtwGetTraceEnableLevel	EtwGetTraceLoggerHandle
  EtwRegisterTraceGuidsW	EtwTraceMessage
  EtwUnregisterTraceGuids	NtQueryInformationProcess
  RtlAllocateHeap	RtlCopySid
  RtlCreateServiceSid	RtlEqualSid
  RtlFreeHeap	RtlGetAppContainerSidType
  RtlIpv4AddressToStringA	RtlIpv6AddressToStringA
  RtlIsCapabilitySid	RtlIsPackageSid
  RtlIsParentOfChildAppContainer	RtlLengthSid
  RtlNtStatusToDosError	RtlNtStatusToDosErrorNoTeb
  RtlPublishWnfStateData	RtlSubscribeWnfStateChangeNotification
  RtlUnsubscribeWnfNotificationWaitForCompletion	WinSqmAddToAverageDWORD
  WinSqmAddToStream

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventA	KernelBase!CreateEventW
  KernelBase!CreateMutexW	KernelBase!CreateWaitableTimerExW
  KernelBase!InitializeCriticalSectionAndSpinCount	KernelBase!ReleaseMutex
  KernelBase!ResetEvent	KernelBase!SetEvent
  KernelBase!SetWaitableTimer	KernelBase!Sleep
  KernelBase!WaitForMultipleObjectsEx	KernelBase!WaitForSingleObject
  KernelBase!WaitForSingleObjectEx	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection
  ntdll!RtlLeaveCriticalSection

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError

  KernelBase!SetUnhandledExceptionFilter

  KernelBase!UnhandledExceptionFilter

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	kernel32!CreateProcessAsUserW	kernel32!CreateThread
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!QueueUserAPC	kernel32!ResumeThread	kernel32!TerminateProcess	kernel32!TerminateThread

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!FreeLibrary	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress	KernelBase!LoadLibraryExW
  KernelBase!LoadStringW

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AccessCheck	KernelBase!AddAccessAllowedAce	KernelBase!AdjustTokenPrivileges
  KernelBase!AllocateAndInitializeSid	KernelBase!CheckTokenCapability	KernelBase!CheckTokenMembership
  KernelBase!CreateWellKnownSid	KernelBase!DuplicateTokenEx	KernelBase!EqualSid
  KernelBase!FreeSid	KernelBase!GetLengthSid	KernelBase!GetSecurityDescriptorControl
  KernelBase!GetSecurityDescriptorLength	KernelBase!InitializeAcl	KernelBase!InitializeSecurityDescriptor
  KernelBase!IsValidSecurityDescriptor	KernelBase!IsValidSid	KernelBase!MakeSelfRelativeSD
  KernelBase!SetFileSecurityW	KernelBase!SetSecurityDescriptorDacl	KernelBase!SetSecurityDescriptorGroup
  KernelBase!SetSecurityDescriptorOwner

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc

  KernelBase!LocalFree

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CreateFileW	KernelBase!FileTimeToLocalFileTime	KernelBase!FindClose
  KernelBase!FindFirstFileW	KernelBase!FindNextFileW	KernelBase!GetFileAttributesW
  KernelBase!GetFileSize	KernelBase!GetFileType	KernelBase!GetLogicalDriveStringsW
  KernelBase!QueryDosDeviceW	KernelBase!SetEndOfFile	KernelBase!SetFilePointerEx
  KernelBase!WriteFile

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!CompareStringOrdinal	KernelBase!CompareStringW	KernelBase!MultiByteToWideChar
  KernelBase!WideCharToMultiByte

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetLocalTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
  KernelBase!GetVersionExW

• api-ms-win-eventing-consumer-l1-1-0.dll:
  

  sechost!CloseTrace

  sechost!OpenTraceW

  sechost!ProcessTrace

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  sechost!ControlTraceW

  sechost!EnableTraceEx2

  sechost!StartTraceW

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolIo	KernelBase!CreateThreadpoolTimer	KernelBase!CreateThreadpoolWork
  ntdll!TpCancelAsyncIoOperation	ntdll!TpPostWork	ntdll!TpReleaseIoCompletion
  ntdll!TpReleaseTimer	ntdll!TpReleaseWork	ntdll!TpSetTimer
  ntdll!TpStartAsyncIoOperation	ntdll!TpWaitForIoCompletion	ntdll!TpWaitForTimer
  ntdll!TpWaitForWork

• api-ms-win-core-file-l2-1-1.dll:
  

  KernelBase!CopyFileExW

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

  ntdll!RtlReAllocateHeap

• RPCRT4.dll:
  

  I_RpcBindingIsClientLocal	NdrAsyncServerCall	NdrServerCall2	RpcAsyncAbortCall
  RpcAsyncCompleteCall	RpcBindingInqAuthClientW	RpcBindingToStringBindingW	RpcBindingVectorFree
  RpcEpRegisterW	RpcEpUnregister	RpcImpersonateClient	RpcRevertToSelf
  RpcServerInqBindings	RpcServerInqDefaultPrincNameW	RpcServerRegisterAuthInfoW	RpcServerRegisterIf3
  RpcServerUnregisterIfEx	RpcServerUseProtseqW	RpcStringBindingParseW	RpcStringFreeW
  UuidCreate

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!FileTimeToSystemTime

• api-ms-win-core-memory-l1-1-2.dll:
  

  KernelBase!CreateFileMappingW

  KernelBase!MapViewOfFile

  KernelBase!UnmapViewOfFile

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegEnumKeyExW	KernelBase!RegNotifyChangeKeyValue
  KernelBase!RegOpenCurrentUser	KernelBase!RegOpenKeyExW	KernelBase!RegQueryValueExW

• api-ms-win-devices-config-l1-1-1.dll:
  

  cfgmgr32!CM_Open_Class_KeyW

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!CancelIo

  kernel32!DeviceIoControl

• api-ms-win-core-string-l2-1-0.dll:
  

  KernelBase!CharLowerBuffW

• api-ms-win-core-localization-l1-2-1.dll:
  

  KernelBase!FormatMessageW

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringA

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-shlwapi-legacy-l1-1-0.dll:
  

  KernelBase!PathFileExistsW	KernelBase!PathFindFileNameW	KernelBase!PathIsRelativeW
  KernelBase!PathRemoveFileSpecW

• api-ms-win-core-threadpool-private-l1-1-0.dll:
  

  KernelBase!RegisterWaitForSingleObjectEx

• api-ms-win-security-grouppolicy-l1-1-0.dll:
  

  KernelBase!RegisterGPNotificationInternal

  KernelBase!UnregisterGPNotificationInternal

• NSI.dll:
  

  NsiAllocateAndGetTable

  NsiFreeTable

  NsiGetParameter

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpi

  kernel32!lstrcmpiW

• api-ms-win-eventing-obsolete-l1-1-0.dll:
  

  sechost!RemoveTraceCallback

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!CreateTimerQueue	KernelBase!CreateTimerQueueTimer	KernelBase!DeleteTimerQueueEx
  KernelBase!DeleteTimerQueueTimer	KernelBase!UnregisterWaitEx

• fwpuclnt.dll:
  

  FwpiExpandCriteria0	FwpiFreeCriteria0	FwpmCalloutAdd0
  FwpmEngineClose0	FwpmEngineOpen0	FwpmEngineSetOption0
  FwpmEventProviderCreate0	FwpmEventProviderDestroy0	FwpmEventProviderFireNetEvent0
  FwpmEventProviderIsNetEventTypeEnabled0	FwpmFilterAdd0	FwpmFilterCreateEnumHandle0
  FwpmFilterDeleteById0	FwpmFilterDeleteByKey0	FwpmFilterDestroyEnumHandle0
  FwpmFilterEnum0	FwpmFreeMemory0	FwpmIPsecTunnelAdd2
  FwpmIPsecTunnelAddConditions0	FwpmIPsecTunnelDeleteByKey0	FwpmNetEventCreateEnumHandle0
  FwpmNetEventDestroyEnumHandle0	FwpmNetEventEnum2	FwpmNetEventSubscribe1
  FwpmNetEventUnsubscribe0	FwpmProviderAdd0	FwpmProviderContextAdd0
  FwpmProviderContextAdd2	FwpmProviderContextDeleteById0	FwpmProviderContextDeleteByKey0
  FwpmSubLayerAdd0	FwpmTransactionAbort0	FwpmTransactionBegin0
  FwpmTransactionCommit0	FwppGetMD5HashBytes	IPsecSaContextCreateEnumHandle0
  IPsecSaContextDeleteById0	IPsecSaContextDestroyEnumHandle0	IPsecSaContextEnum0
  IkeextSaCreateEnumHandle0	IkeextSaDeleteById0	IkeextSaDestroyEnumHandle0
  IkeextSaEnum2

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence