msxml6.dll

Description: MSXML 6.0

Version: 6.30.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 0c3664326bf2d452a446aa360d8d093b

File Size: 1.9 MB

Uploaded At: Dec. 1, 2025, 8:01 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x96f50)
DllGetActivationFactory (Ordinal: 2, Address: 0xaafd0)
DllGetClassObject (Ordinal: 3, Address: 0x7eec0)
DllRegisterServer (Ordinal: 4, Address: 0x9b170)
DllSetProperty (Ordinal: 5, Address: 0xee8d0)
DllUnregisterServer (Ordinal: 6, Address: 0x9b170)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1019a028)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW (Address: 0x1019a034)
GetTimeFormatW (Address: 0x1019a030)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1019a040)
IsDebuggerPresent (Address: 0x1019a03c)
OutputDebugStringW (Address: 0x1019a044)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1019a04c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1019a054)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1019a06c)
RaiseException (Address: 0x1019a05c)
SetLastError (Address: 0x1019a060)
SetUnhandledExceptionFilter (Address: 0x1019a064)
UnhandledExceptionFilter (Address: 0x1019a068)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1019a078)
FlushFileBuffers (Address: 0x1019a074)
GetFileType (Address: 0x1019a07c)
ReadFile (Address: 0x1019a080)
SetEndOfFile (Address: 0x1019a088)
WriteFile (Address: 0x1019a084)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1019a090)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1019a0a0)
HeapAlloc (Address: 0x1019a098)
HeapCreate (Address: 0x1019a0a8)
HeapDestroy (Address: 0x1019a0a4)
HeapFree (Address: 0x1019a09c)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1019a0b0)
LocalFree (Address: 0x1019a0b4)

api-ms-win-core-libraryloader-l1-2-0.dll

FindResourceExW (Address: 0x1019a0d8)
FreeLibrary (Address: 0x1019a0e0)
GetModuleFileNameA (Address: 0x1019a0c8)
GetModuleFileNameW (Address: 0x1019a0e4)
GetModuleHandleExW (Address: 0x1019a0bc)
GetModuleHandleW (Address: 0x1019a0dc)
GetProcAddress (Address: 0x1019a0c4)
LoadLibraryExW (Address: 0x1019a0d4)
LoadResource (Address: 0x1019a0d0)
LockResource (Address: 0x1019a0cc)
SizeofResource (Address: 0x1019a0c0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1019a0f8)
GetCPInfo (Address: 0x1019a0f0)
GetThreadLocale (Address: 0x1019a0ec)
LCMapStringW (Address: 0x1019a0f4)

api-ms-win-core-memory-l1-1-0.dll

VirtualQuery (Address: 0x1019a100)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1019a110)
GetCurrentProcessId (Address: 0x1019a10c)
GetCurrentThread (Address: 0x1019a118)
GetCurrentThreadId (Address: 0x1019a138)
OpenProcessToken (Address: 0x1019a11c)
OpenThreadToken (Address: 0x1019a134)
SetThreadToken (Address: 0x1019a114)
SwitchToThread (Address: 0x1019a128)
TerminateProcess (Address: 0x1019a120)
TlsAlloc (Address: 0x1019a12c)
TlsFree (Address: 0x1019a130)
TlsGetValue (Address: 0x1019a124)
TlsSetValue (Address: 0x1019a108)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1019a140)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1019a148)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1019a150)
RegOpenKeyExW (Address: 0x1019a154)
RegQueryValueExW (Address: 0x1019a158)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathIsRelativeW (Address: 0x1019a164)
PathSearchAndQualifyW (Address: 0x1019a160)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrCmpNIW (Address: 0x1019a178)
StrCmpNW (Address: 0x1019a170)
StrCmpW (Address: 0x1019a16c)
StrToIntW (Address: 0x1019a174)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x1019a180)
MultiByteToWideChar (Address: 0x1019a184)
WideCharToMultiByte (Address: 0x1019a188)

api-ms-win-core-string-l2-1-0.dll

CharLowerW (Address: 0x1019a190)
CharUpperBuffW (Address: 0x1019a194)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1019a1b4)
AcquireSRWLockShared (Address: 0x1019a1cc)
CreateEventExW (Address: 0x1019a1d4)
CreateEventW (Address: 0x1019a1ec)
CreateMutexExW (Address: 0x1019a1d0)
CreateSemaphoreExW (Address: 0x1019a1f4)
DeleteCriticalSection (Address: 0x1019a1bc)
EnterCriticalSection (Address: 0x1019a1a8)
InitializeCriticalSection (Address: 0x1019a1f0)
InitializeCriticalSectionEx (Address: 0x1019a19c)
InitializeSRWLock (Address: 0x1019a1dc)
LeaveCriticalSection (Address: 0x1019a1a0)
OpenSemaphoreW (Address: 0x1019a1e4)
ReleaseMutex (Address: 0x1019a1ac)
ReleaseSemaphore (Address: 0x1019a1a4)
ReleaseSRWLockExclusive (Address: 0x1019a1b0)
ReleaseSRWLockShared (Address: 0x1019a1c4)
ResetEvent (Address: 0x1019a1e8)
SetEvent (Address: 0x1019a1e0)
SleepEx (Address: 0x1019a1c8)
WaitForMultipleObjectsEx (Address: 0x1019a1d8)
WaitForSingleObject (Address: 0x1019a1c0)
WaitForSingleObjectEx (Address: 0x1019a1b8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1019a1fc)
Sleep (Address: 0x1019a200)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1019a20c)
GetSystemInfo (Address: 0x1019a208)
GetSystemTimeAsFileTime (Address: 0x1019a210)
GetTickCount (Address: 0x1019a214)

api-ms-win-core-threadpool-l1-2-0.dll

CallbackMayRunLong (Address: 0x1019a23c)
CloseThreadpoolTimer (Address: 0x1019a228)
CloseThreadpoolWork (Address: 0x1019a234)
CreateThreadpoolTimer (Address: 0x1019a220)
CreateThreadpoolWork (Address: 0x1019a21c)
FreeLibraryWhenCallbackReturns (Address: 0x1019a238)
SetThreadpoolTimer (Address: 0x1019a224)
SubmitThreadpoolWork (Address: 0x1019a22c)
WaitForThreadpoolTimerCallbacks (Address: 0x1019a230)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x1019a244)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1019a24c)
SystemTimeToFileTime (Address: 0x1019a250)

api-ms-win-core-url-l1-1-0.dll

GetAcceptLanguagesW (Address: 0x1019a25c)
PathCreateFromUrlW (Address: 0x1019a26c)
PathIsURLW (Address: 0x1019a264)
UrlCanonicalizeW (Address: 0x1019a270)
UrlCreateFromPathW (Address: 0x1019a260)
UrlGetLocationW (Address: 0x1019a268)
UrlIsW (Address: 0x1019a274)
UrlUnescapeW (Address: 0x1019a258)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1019a27c)
EncodePointer (Address: 0x1019a280)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x1019a298)
RoOriginateError (Address: 0x1019a28c)
RoOriginateErrorW (Address: 0x1019a29c)
RoTransformError (Address: 0x1019a288)
RoTransformErrorW (Address: 0x1019a290)
SetRestrictedErrorInfo (Address: 0x1019a294)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1019a2a8)
RoGetMatchingRestrictedErrorInfo (Address: 0x1019a2a4)
RoReportFailedDelegate (Address: 0x1019a2ac)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1019a2bc)
RoInitialize (Address: 0x1019a2b4)
RoUninitialize (Address: 0x1019a2b8)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x1019a2c8)
HSTRING_UserMarshal (Address: 0x1019a2d4)
HSTRING_UserSize (Address: 0x1019a2e4)
HSTRING_UserUnmarshal (Address: 0x1019a2c4)
WindowsConcatString (Address: 0x1019a2d0)
WindowsCreateString (Address: 0x1019a2f4)
WindowsCreateStringReference (Address: 0x1019a2d8)
WindowsDeleteString (Address: 0x1019a2dc)
WindowsDeleteStringBuffer (Address: 0x1019a2e8)
WindowsGetStringRawBuffer (Address: 0x1019a2cc)
WindowsIsStringEmpty (Address: 0x1019a2ec)
WindowsPreallocateStringBuffer (Address: 0x1019a2f8)
WindowsPromoteStringBuffer (Address: 0x1019a2f0)
WindowsStringHasEmbeddedNull (Address: 0x1019a2e0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1019a304)
RevertToSelf (Address: 0x1019a300)

combase.dll

(Address: 0x1019a30c)
(Address: 0x1019a310)
(Address: 0x1019a314)
(Address: 0x1019a318)
(Address: 0x1019a31c)
(Address: 0x1019a320)
(Address: 0x1019a324)
(Address: 0x1019a330)
(Address: 0x1019a338)
(Address: 0x1019a33c)
(Address: 0x1019a340)
(Address: 0x1019a34c)
(Address: 0x1019a35c)
(Address: 0x1019a360)
(Address: 0x1019a364)
(Address: 0x1019a368)
(Address: 0x1019a370)
(Address: 0x1019a374)
(Address: 0x1019a388)
(Address: 0x1019a38c)
(Address: 0x1019a390)
(Address: 0x1019a394)
(Address: 0x1019a398)
(Address: 0x1019a39c)
(Address: 0x1019a3a0)
(Address: 0x1019a3a8)
(Address: 0x1019a3ac)
(Address: 0x1019a3b0)
(Address: 0x1019a3c4)
(Address: 0x1019a3c8)
CreateErrorInfo (Address: 0x1019a384)
CStdStubBuffer_AddRef (Address: 0x1019a378)
CStdStubBuffer_Connect (Address: 0x1019a328)
CStdStubBuffer_CountRefs (Address: 0x1019a3a4)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1019a348)
CStdStubBuffer_DebugServerRelease (Address: 0x1019a3c0)
CStdStubBuffer_Disconnect (Address: 0x1019a3b8)
CStdStubBuffer_Invoke (Address: 0x1019a344)
CStdStubBuffer_IsIIDSupported (Address: 0x1019a350)
CStdStubBuffer_QueryInterface (Address: 0x1019a3bc)
CStdStubBuffer2_Connect (Address: 0x1019a32c)
CStdStubBuffer2_CountRefs (Address: 0x1019a358)
CStdStubBuffer2_Disconnect (Address: 0x1019a334)
CStdStubBuffer2_QueryInterface (Address: 0x1019a36c)
GetErrorInfo (Address: 0x1019a37c)
NdrCStdStubBuffer_Release (Address: 0x1019a354)
NdrCStdStubBuffer2_Release (Address: 0x1019a3b4)
SetErrorInfo (Address: 0x1019a380)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1019a3e4)
__dllonexit (Address: 0x1019a424)
_amsg_exit (Address: 0x1019a400)
_CIfmod (Address: 0x1019a414)
_clearfp (Address: 0x1019a41c)
_controlfp (Address: 0x1019a428)
_except_handler4_common (Address: 0x1019a408)
_ftol2 (Address: 0x1019a410)
_ftol2_sse (Address: 0x1019a40c)
_initterm (Address: 0x1019a3f4)
_lock (Address: 0x1019a434)
_onexit (Address: 0x1019a420)
_purecall (Address: 0x1019a448)
_resetstkoflw (Address: 0x1019a440)
_unlock (Address: 0x1019a430)
_vsnwprintf (Address: 0x1019a450)
_wtof (Address: 0x1019a418)
_wtol (Address: 0x1019a3d0)
_XcptFilter (Address: 0x1019a404)
bsearch (Address: 0x1019a444)
ceil (Address: 0x1019a3f0)
floor (Address: 0x1019a3ec)
free (Address: 0x1019a3fc)
malloc (Address: 0x1019a3f8)
memcmp (Address: 0x1019a3e8)
memcpy (Address: 0x1019a3dc)
memcpy_s (Address: 0x1019a44c)
memmove (Address: 0x1019a3d8)
memmove_s (Address: 0x1019a43c)
memset (Address: 0x1019a454)
qsort (Address: 0x1019a3e0)
wcschr (Address: 0x1019a3d4)
wcsncmp (Address: 0x1019a42c)
wcsrchr (Address: 0x1019a438)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x1019a488)
EtwGetTraceEnableLevel (Address: 0x1019a48c)
EtwGetTraceLoggerHandle (Address: 0x1019a490)
EtwRegisterTraceGuidsW (Address: 0x1019a484)
EtwTraceMessageVa (Address: 0x1019a47c)
EtwUnregisterTraceGuids (Address: 0x1019a480)
NtQuerySecurityAttributesToken (Address: 0x1019a46c)
NtQuerySecurityPolicy (Address: 0x1019a474)
NtQuerySystemInformation (Address: 0x1019a460)
RtlAllocateHeap (Address: 0x1019a45c)
RtlCompareMemory (Address: 0x1019a470)
RtlCopyUnicodeString (Address: 0x1019a464)
RtlFreeHeap (Address: 0x1019a468)
RtlInitUnicodeString (Address: 0x1019a478)
RtlNtStatusToDosError (Address: 0x1019a494)

RPCRT4.dll

IUnknown_AddRef_Proxy (Address: 0x1019a000)
IUnknown_QueryInterface_Proxy (Address: 0x1019a018)
IUnknown_Release_Proxy (Address: 0x1019a014)
NdrDllCanUnloadNow (Address: 0x1019a008)
NdrDllGetClassObject (Address: 0x1019a00c)
NdrOleAllocate (Address: 0x1019a01c)
NdrOleFree (Address: 0x1019a010)
NdrStubCall2 (Address: 0x1019a020)
NdrStubForwardingFunction (Address: 0x1019a004)