NPSM.dll

Description: NPSM

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 5a018a4c600836e5faafd41afe1cbdf8

File Size: 144.0 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

RegisterNowPlayingSessionManagerFactory (Ordinal: 1, Address: 0x7f80)
UnregisterNowPlayingSessionManagerFactory (Ordinal: 2, Address: 0x7fa0)
DllCanUnloadNow (Ordinal: 3, Address: 0x7800)
DllGetActivationFactory (Ordinal: 4, Address: 0x77c0)
DllGetClassObject (Ordinal: 5, Address: 0x77e0)
ServiceMain (Ordinal: 6, Address: 0x7fb0)
SvchostPushServiceGlobals (Ordinal: 7, Address: 0x7fd0)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x10021010)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x10021040)
CoCancelCall (Address: 0x1002101c)
CoCreateFreeThreadedMarshaler (Address: 0x10021030)
CoCreateInstance (Address: 0x1002102c)
CoDecrementMTAUsage (Address: 0x10021054)
CoDisableCallCancellation (Address: 0x10021024)
CoDisconnectContext (Address: 0x1002105c)
CoEnableCallCancellation (Address: 0x10021020)
CoGetCallContext (Address: 0x10021028)
CoGetMalloc (Address: 0x1002103c)
CoImpersonateClient (Address: 0x10021048)
CoIncrementMTAUsage (Address: 0x10021018)
CoInitializeEx (Address: 0x1002106c)
CoRegisterClassObject (Address: 0x10021064)
CoResumeClassObjects (Address: 0x10021060)
CoRevertToSelf (Address: 0x10021044)
CoRevokeClassObject (Address: 0x10021068)
CoSetProxyBlanket (Address: 0x1002104c)
CoTaskMemAlloc (Address: 0x10021038)
CoTaskMemFree (Address: 0x10021050)
CoTaskMemRealloc (Address: 0x10021034)
CoUninitialize (Address: 0x10021058)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10021074)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10021080)
IsDebuggerPresent (Address: 0x1002107c)
OutputDebugStringW (Address: 0x10021084)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1002108c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10021094)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002109c)
RaiseException (Address: 0x100210a0)
SetLastError (Address: 0x100210ac)
SetUnhandledExceptionFilter (Address: 0x100210a8)
UnhandledExceptionFilter (Address: 0x100210a4)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x100210c0)
RecordFeatureUsage (Address: 0x100210b8)
SubscribeFeatureStateChangeNotification (Address: 0x100210bc)
UnsubscribeFeatureStateChangeNotification (Address: 0x100210b4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100210cc)
DuplicateHandle (Address: 0x100210c8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100210dc)
HeapAlloc (Address: 0x100210d4)
HeapFree (Address: 0x100210d8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100210e8)
LocalFree (Address: 0x100210e4)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

UnregisterWait (Address: 0x100210f0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100210fc)
FreeLibrary (Address: 0x10021100)
GetModuleFileNameA (Address: 0x1002110c)
GetModuleHandleExW (Address: 0x100210f8)
GetModuleHandleW (Address: 0x10021104)
GetProcAddress (Address: 0x10021108)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10021114)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1002111c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1002112c)
GetCurrentProcessId (Address: 0x10021124)
GetCurrentThreadId (Address: 0x1002113c)
GetProcessId (Address: 0x10021130)
OpenProcessToken (Address: 0x10021138)
ProcessIdToSessionId (Address: 0x10021128)
TerminateProcess (Address: 0x10021134)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x10021144)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002114c)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x10021154)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x1002115c)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x10021164)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10021194)
AcquireSRWLockShared (Address: 0x10021170)
CreateEventW (Address: 0x10021174)
CreateMutexExW (Address: 0x10021184)
CreateSemaphoreExW (Address: 0x1002117c)
DeleteCriticalSection (Address: 0x100211b0)
EnterCriticalSection (Address: 0x10021198)
InitializeCriticalSectionEx (Address: 0x100211ac)
InitializeSRWLock (Address: 0x1002116c)
LeaveCriticalSection (Address: 0x100211a0)
OpenSemaphoreW (Address: 0x10021190)
ReleaseMutex (Address: 0x10021188)
ReleaseSemaphore (Address: 0x1002119c)
ReleaseSRWLockExclusive (Address: 0x100211a8)
ReleaseSRWLockShared (Address: 0x10021178)
SetEvent (Address: 0x1002118c)
WaitForSingleObject (Address: 0x10021180)
WaitForSingleObjectEx (Address: 0x100211a4)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100211bc)
InitOnceComplete (Address: 0x100211b8)
InitOnceExecuteOnce (Address: 0x100211c8)
Sleep (Address: 0x100211cc)
WaitOnAddress (Address: 0x100211c0)
WakeByAddressAll (Address: 0x100211c4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100211d4)
GetTickCount (Address: 0x100211d8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100211e4)
CloseThreadpoolWait (Address: 0x10021208)
CloseThreadpoolWork (Address: 0x100211fc)
CreateThreadpoolTimer (Address: 0x100211f0)
CreateThreadpoolWait (Address: 0x10021204)
CreateThreadpoolWork (Address: 0x100211f8)
FreeLibraryWhenCallbackReturns (Address: 0x100211f4)
SetThreadpoolTimer (Address: 0x100211ec)
SetThreadpoolWait (Address: 0x100211e8)
SubmitThreadpoolWork (Address: 0x10021200)
WaitForThreadpoolTimerCallbacks (Address: 0x100211e0)
WaitForThreadpoolWaitCallbacks (Address: 0x1002120c)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x10021214)
DeleteTimerQueueTimer (Address: 0x10021218)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10021224)
EncodePointer (Address: 0x10021220)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x1002122c)
RoOriginateErrorW (Address: 0x10021230)
RoTransformError (Address: 0x10021234)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x10021244)
RoRegisterActivationFactories (Address: 0x10021240)
RoRevokeActivationFactories (Address: 0x1002123c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1002125c)
WindowsCreateStringReference (Address: 0x10021258)
WindowsDeleteString (Address: 0x10021250)
WindowsGetStringRawBuffer (Address: 0x10021260)
WindowsIsStringEmpty (Address: 0x10021254)
WindowsStringHasEmbeddedNull (Address: 0x1002124c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x10021278)
GetTraceEnableLevel (Address: 0x10021274)
GetTraceLoggerHandle (Address: 0x10021268)
TraceMessage (Address: 0x10021270)
UnregisterTraceGuids (Address: 0x1002126c)

api-ms-win-eventing-obsolete-l1-1-0.dll

RegisterTraceGuidsA (Address: 0x10021280)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x10021294)
EventRegister (Address: 0x1002128c)
EventSetInformation (Address: 0x10021288)
EventUnregister (Address: 0x10021290)
EventWriteTransfer (Address: 0x10021298)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x100212a0)
PowerSettingUnregisterNotification (Address: 0x100212a4)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x100212b4)
GetLengthSid (Address: 0x100212b0)
GetTokenInformation (Address: 0x100212ac)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x100212bc)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x100212c8)
SetServiceStatus (Address: 0x100212c4)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolGetUniqueContext (Address: 0x100212d4)
SHTaskPoolQueueTask (Address: 0x100212d0)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThread (Address: 0x100212dc)

combase.dll

(Address: 0x100212e4)
(Address: 0x100212e8)
(Address: 0x100212ec)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x10021338)
__dllonexit (Address: 0x100212fc)
_amsg_exit (Address: 0x10021328)
_callnewh (Address: 0x10021330)
_CxxThrowException (Address: 0x1002133c)
_except_handler4_common (Address: 0x10021300)
_initterm (Address: 0x10021314)
_lock (Address: 0x10021310)
_onexit (Address: 0x100212f8)
_purecall (Address: 0x10021348)
_unlock (Address: 0x1002130c)
_vsnprintf_s (Address: 0x10021364)
_vsnwprintf (Address: 0x1002134c)
_XcptFilter (Address: 0x1002132c)
??_V@YAXPAX@Z (Address: 0x10021350)
??0exception@@QAE@ABQBD@Z (Address: 0x10021344)
??0exception@@QAE@ABQBDH@Z (Address: 0x10021308)
??0exception@@QAE@ABV0@@Z (Address: 0x10021360)
??0exception@@QAE@XZ (Address: 0x1002135c)
??1exception@@UAE@XZ (Address: 0x10021358)
??1type_info@@UAE@XZ (Address: 0x10021334)
??3@YAXPAX@Z (Address: 0x10021340)
?terminate@@YAXXZ (Address: 0x100212f4)
?what@exception@@UBEPBDXZ (Address: 0x10021304)
difftime (Address: 0x10021368)
free (Address: 0x10021320)
malloc (Address: 0x1002131c)
memcpy (Address: 0x10021318)
memcpy_s (Address: 0x10021354)
memmove (Address: 0x10021324)
memset (Address: 0x10021374)
time (Address: 0x1002136c)
wcschr (Address: 0x10021370)

ntdll.dll

NtQueryInformationToken (Address: 0x10021380)
RtlAllocateHeap (Address: 0x1002138c)
RtlCompareUnicodeString (Address: 0x10021394)
RtlEqualSid (Address: 0x10021388)
RtlFreeHeap (Address: 0x1002137c)
RtlInitUnicodeString (Address: 0x10021384)
RtlNtStatusToDosErrorNoTeb (Address: 0x10021390)
RtlPublishWnfStateData (Address: 0x1002139c)
RtlQueryPackageClaims (Address: 0x10021398)

PROPSYS.dll

PSCreateMemoryPropertyStore (Address: 0x10021000)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x10021008)