Microsoft.WindowsAppRuntime.dll
v1.7.0.0
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 22
#1 · 0xeaad0
DllCanUnloadNow
#2 · 0xe5b10
DllGetActivationFactory
#3 · 0xe5be0
DllGetClassObject
#4 · 0xe3200
GetSecurityDescriptorForAppContainerNames
#5 · 0x44f0
MddAddPackageDependency
#6 · 0x6e5f0
MddDeletePackageDependency
#7 · 0x6e570
MddGetGenerationId
#8 · 0x6f070
MddGetIdForPackageDependencyContext
#9 · 0x6ecb0
MddGetPackageGraphRevisionId
#10 · 0x6efa0
MddGetResolvedPackageFullNameForPackageDependency
#11 · 0x6e910
MddGetResolvedPackageFullNameForPackageDependency2
#12 · 0x6eae0
MddLifetimeManagementGC
#13 · 0x6b7f0
MddLifetimeManagementTestInitialize
#14 · 0x6afe0
MddRemovePackageDependency
#15 · 0x6e8b0
MddTryCreatePackageDependency
#16 · 0x6e450
MsixInstallLicenses
#17 · 0x89b20
WindowsAppRuntime_EnsureIsLoaded
#18 · 0x7140
WindowsAppRuntime_IsSelfContained
#19 · 0x7ce30
WindowsAppRuntime_VersionInfo_MSIX_Framework_PackageFamilyName_Get
#20 · 0x7d320
WindowsAppRuntime_VersionInfo_MSIX_Main_PackageFamilyName_Get
#21 · 0x7d430
WindowsAppRuntime_VersionInfo_TestInitialize
#22 · 0x7d540
No function matches your filter.
Imported DLLs & functions 341
ADVAPI32.dll
33
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x1801230a8
ConvertStringSidToSidW
0x1801230a0
CopySid
0x180123048
DeregisterEventSource
0x180123050
EqualSid
0x1801230b8
EventActivityIdControl
0x180123038
EventRegister
0x1801230c8
EventSetInformation
0x1801230d0
EventUnregister
0x1801230c0
EventWriteTransfer
0x1801230d8
FreeSid
0x180123088
GetLengthSid
0x180123040
GetSidSubAuthority
0x180123010
GetSidSubAuthorityCount
0x180123018
GetTokenInformation
0x180123000
InitializeSecurityDescriptor
0x180123060
MakeSelfRelativeSD
0x180123070
RegCloseKey
0x180123100
RegCreateKeyExW
0x180123098
RegDeleteKeyExW
0x180123008
RegDeleteTreeW
0x180123080
RegDeleteValueW
0x1801230e0
RegEnumKeyExW
0x180123020
RegEnumValueW
0x180123078
RegGetValueW
0x180123030
RegisterEventSourceW
0x1801230f0
RegOpenKeyExW
0x1801230f8
RegQueryInfoKeyW
0x180123028
RegQueryValueExW
0x180123090
RegSetValueExW
0x1801230e8
ReportEventW
0x1801230b0
SetEntriesInAclW
0x180123058
SetSecurityDescriptorDacl
0x180123068
VerifyPackageFamilyName
0x1801236b8
VerifyPackageFullName
0x1801236b0
SetUnhandledExceptionFilter
0x1801236d0
UnhandledExceptionFilter
0x1801236c8
FlsAlloc
0x1801236f8
FlsFree
0x1801236e0
FlsGetValue
0x1801236f0
FlsSetValue
0x1801236e8
InitializeSListHead
0x180123730
InterlockedFlushSList
0x180123728
InterlockedPushEntrySList
0x180123720
LoadLibraryExA
0x180123740
FormatMessageA
0x180123750
GetLocaleInfoEx
0x180123758
LCMapStringEx
0x180123760
IsProcessorFeaturePresent
0x1801237b8
QueryPerformanceCounter
0x1801237c8
RtlCaptureContext
0x1801237f8
RtlLookupFunctionEntry
0x1801237f0
RtlPcToFileHeader
0x1801237d8
RtlUnwindEx
0x1801237e0
RtlVirtualUnwind
0x1801237e8
DeleteCriticalSection
0x180123830
InitializeCriticalSectionAndSpinCount
0x180123820
InitializeCriticalSectionEx
0x180123838
TryAcquireSRWLockExclusive
0x180123828
SleepConditionVariableSRW
0x180123848
WaitOnAddress
0x180123858
WakeAllConditionVariable
0x180123860
WakeByAddressSingle
0x180123850
GetSystemTimePreciseAsFileTime
0x180123888
CloseThreadpoolWork
0x1801238a0
FreeLibraryWhenCallbackReturns
0x180123898
GetRestrictedErrorInfo
0x1801238d0
RoFailFastWithErrorContext
0x1801238c8
SetRestrictedErrorInfo
0x1801238d8
RoActivateInstance
0x1801238f0
RoGetActivationFactory
0x1801238e8
WindowsCreateString
0x180123910
WindowsCreateStringReference
0x180123900
WindowsDeleteString
0x180123908
WindowsGetStringRawBuffer
0x180123918
_o____lc_codepage_func
0x180123aa0
_o____lc_collate_cp_func
0x180123a98
_o____lc_locale_name_func
0x180123a90
_o____mb_cur_max_func
0x180123a88
_o___pctype_func
0x180123a68
_o___std_exception_copy
0x180123a60
_o___std_exception_destroy
0x180123a58
_o___stdio_common_vswprintf
0x180123a80
_o___stdio_common_vswprintf_s
0x180123a78
_o___stdio_common_vswscanf
0x180123a70
_o__callnewh
0x180123940
_o__calloc_base
0x180123948
_o__cexit
0x180123950
_o__configure_narrow_argv
0x180123958
_o__create_locale
0x180123960
_o__crt_atexit
0x180123968
_o__errno
0x180123970
_o__execute_onexit_table
0x180123978
_o__free_base
0x180123980
_o__initialize_narrow_environment
0x180123988
_o__initialize_onexit_table
0x180123990
_o__invalid_parameter_noinfo
0x180123998
_o__invalid_parameter_noinfo_noreturn
0x1801239a0
_o__localtime64_s
0x1801239a8
_o__malloc_base
0x1801239b0
_o__purecall
0x1801239b8
_o__register_onexit_function
0x1801239c0
_o__seh_filter_dll
0x1801239c8
_o__W_Gettnames
0x1801239d0
_o__wcsdup
0x1801239d8
_o__Wcsftime
0x1801239e0
_o__wcsicmp_l
0x1801239e8
_o_abort
0x1801239f0
_o_ceilf
0x1801239f8
_o_free
0x180123a00
_o_iswspace
0x180123a08
_o_malloc
0x180123a10
_o_realloc
0x180123a18
_o_setlocale
0x180123a20
_o_terminate
0x180123a28
_o_towlower
0x180123a30
_o_towupper
0x180123a38
_o_wcstok_s
0x180123a40
_o_wcstoul
0x180123a48
_o_wcstoull
0x180123a50
PowerRegisterSuspendResumeNotification
0x180123ae8
PowerUnregisterSuspendResumeNotification
0x180123af0
PowerRegisterForEffectivePowerModeNotifications
0x180123b08
PowerUnregisterFromEffectivePowerModeNotifications
0x180123b00
RoGetMetaDataFile
0x180123b18
RoResolveNamespace
0x180123b20
KERNEL32.dll
145
AcquireSRWLockExclusive
0x1801232e8
AcquireSRWLockShared
0x180123388
AddDllDirectory
0x180123480
CancelIoEx
0x1801233f8
CloseHandle
0x180123180
ClosePackageInfo
0x180123460
CloseThreadpoolCleanupGroupMembers
0x180123550
CloseThreadpoolTimer
0x1801231d0
CloseThreadpoolWait
0x180123168
CompareStringOrdinal
0x180123190
ConnectNamedPipe
0x1801234e0
CreateActCtxW
0x1801234c8
CreateEventExW
0x180123248
CreateEventW
0x1801232a0
CreateFileMappingW
0x180123250
CreateFileW
0x180123330
CreateMutexExW
0x180123260
CreateNamedPipeW
0x180123578
CreateProcessW
0x180123218
CreateSemaphoreExW
0x180123398
CreateThreadpool
0x180123520
CreateThreadpoolCleanupGroup
0x180123538
CreateThreadpoolTimer
0x180123138
CreateThreadpoolWait
0x1801231b0
CreateThreadpoolWork
0x180123540
DebugBreak
0x1801231e0
DeleteFileW
0x180123310
DeleteProcThreadAttributeList
0x180123200
DisableThreadLibraryCalls
0x1801233e8
DisconnectNamedPipe
0x180123500
DuplicateHandle
0x1801231b8
EnterCriticalSection
0x1801234f0
ExitProcess
0x1801232b8
ExpandEnvironmentStringsW
0x1801234b0
FindClose
0x180123340
FindFirstFileW
0x180123348
FindNextFileW
0x180123308
FindPackagesByPackageFamily
0x1801232f0
FindResourceW
0x180123490
FlushInstructionCache
0x180123510
FormatMessageW
0x180123370
FreeEnvironmentStringsW
0x1801231e8
FreeLibrary
0x180123158
GetCommandLineW
0x180123448
GetCurrentApplicationUserModelId
0x180123140
GetCurrentPackageFamilyName
0x180123360
GetCurrentPackageFullName
0x1801231f0
GetCurrentPackageInfo
0x180123430
GetCurrentProcess
0x180123120
GetCurrentProcessId
0x1801231a0
GetCurrentThread
0x180123438
GetCurrentThreadId
0x1801233b8
GetEnvironmentStringsW
0x180123590
GetEnvironmentVariableW
0x180123468
GetExitCodeProcess
0x180123130
GetFileAttributesW
0x180123320
GetFileInformationByHandleEx
0x180123328
GetFileSizeEx
0x180123418
GetFullPathNameW
0x180123350
GetLastError
0x1801233d8
GetModuleFileNameA
0x1801233a0
GetModuleFileNameW
0x180123110
GetModuleHandleExW
0x1801231f8
GetModuleHandleW
0x1801232d8
GetNamedPipeServerProcessId
0x180123298
GetOverlappedResult
0x180123588
GetPackageInfo
0x180123440
GetPackagePathByFullName
0x180123198
GetProcAddress
0x1801232d0
GetProcessHeap
0x1801232c8
GetThreadContext
0x180123518
GetVolumeNameForVolumeMountPointW
0x180123408
GetVolumePathNameW
0x180123488
HeapAlloc
0x180123358
HeapFree
0x180123270
InitializeCriticalSection
0x1801234d8
InitializeProcThreadAttributeList
0x180123208
InitOnceBeginInitialize
0x180123148
InitOnceComplete
0x180123150
InitOnceExecuteOnce
0x1801234e8
IsDebuggerPresent
0x180123368
IsWow64Process
0x1801232a8
IsWow64Process2
0x1801233f0
K32GetModuleFileNameExW
0x180123118
LeaveCriticalSection
0x1801234f8
LoadLibraryExW
0x180123410
LoadLibraryW
0x180123230
LoadResource
0x180123498
LocalAlloc
0x180123288
LocalFree
0x180123280
LockResource
0x1801234a8
MapViewOfFile
0x180123258
MultiByteToWideChar
0x1801233c8
OpenEventW
0x180123238
OpenPackageInfoByFullName
0x180123478
OpenProcess
0x1801231c0
OpenSemaphoreW
0x180123338
OutputDebugStringW
0x1801233c0
PackageFamilyNameFromFullName
0x1801234b8
PackageFamilyNameFromId
0x1801234c0
PackageIdFromFullName
0x180123450
QueryActCtxW
0x180123400
RaiseException
0x180123580
ReadFile
0x180123420
ReadProcessMemory
0x1801232b0
RegisterWaitForSingleObject
0x1801231c8
ReleaseActCtx
0x1801234d0
ReleaseMutex
0x180123160
ReleaseSemaphore
0x180123390
ReleaseSRWLockExclusive
0x1801232e0
ReleaseSRWLockShared
0x180123380
RemoveDirectoryW
0x1801232f8
RemoveDllDirectory
0x180123470
ResetEvent
0x1801231a8
ResumeThread
0x180123220
SetEnvironmentVariableW
0x180123458
SetEvent
0x180123240
SetFileAttributesW
0x180123318
SetFileInformationByHandle
0x180123300
SetLastError
0x180123278
SetThreadContext
0x180123508
SetThreadpoolThreadMaximum
0x180123528
SetThreadpoolThreadMinimum
0x180123530
SetThreadpoolTimer
0x180123128
SetThreadpoolWait
0x180123178
SetThreadpoolWaitEx
0x1801233d0
SizeofResource
0x1801234a0
SubmitThreadpoolWork
0x180123548
SuspendThread
0x180123560
TrySubmitThreadpoolCallback
0x1801231d8
UnmapViewOfFile
0x180123268
UnregisterWait
0x180123188
UpdateProcThreadAttribute
0x180123210
VirtualAlloc
0x180123568
VirtualAllocEx
0x1801232c0
VirtualFree
0x180123570
VirtualProtectEx
0x180123558
VirtualQueryEx
0x1801233b0
WaitForSingleObject
0x180123378
WaitForSingleObjectEx
0x180123228
WaitForThreadpoolWaitCallbacks
0x180123170
WaitNamedPipeW
0x180123290
WideCharToMultiByte
0x1801233e0
WriteFile
0x180123428
WriteProcessMemory
0x1801233a8
ole32.dll
22
CoCreateFreeThreadedMarshaler
0x180123bb8
CoCreateGuid
0x180123ba8
CoCreateInstance
0x180123bd8
CoGetApartmentType
0x180123b48
CoGetDefaultContext
0x180123b40
CoGetInterfaceAndReleaseStream
0x180123b90
CoGetMarshalSizeMax
0x180123b68
CoGetObjectContext
0x180123b30
CoIncrementMTAUsage
0x180123b38
CoInitializeEx
0x180123bb0
CoMarshalInterface
0x180123b58
CoMarshalInterThreadInterfaceInStream
0x180123b88
CoRegisterClassObject
0x180123b80
CoReleaseMarshalData
0x180123b70
CoRevokeClassObject
0x180123b98
CoTaskMemAlloc
0x180123bd0
CoTaskMemFree
0x180123b78
CoUninitialize
0x180123bc0
CoUnmarshalInterface
0x180123b50
CreateStreamOnHGlobal
0x180123b60
StringFromCLSID
0x180123bc8
StringFromGUID2
0x180123ba0
GetErrorInfo
0x1801235b8
SetErrorInfo
0x1801235b0
SysAllocString
0x1801235c0
SysFreeString
0x1801235a0
SysStringLen
0x1801235a8
MetaDataGetDispenser
0x1801235d0
CommandLineToArgvW
0x180123600
ExtractIconExW
0x1801235e8
GetCurrentProcessExplicitAppUserModelID
0x1801235e0
SHChangeNotify
0x1801235f8
SHCreateItemFromParsingName
0x1801235f0
ShellExecuteExW
0x180123610
SHGetKnownFolderPath
0x180123608
0x180123620
0x180123640
PathFindFileNameW
0x180123638
PathIsFileSpecW
0x180123630
SHCreateStreamOnFileEx
0x180123628
AllowSetForegroundWindow
0x180123668
DestroyIcon
0x180123678
LoadStringA
0x180123670
MessageBoxW
0x180123660
SendMessageTimeoutW
0x180123658
wsprintfW
0x180123650
DeriveAppContainerSidFromAppContainerName
0x180123688
No function matches your filter.