PickerPlatform.dll

Description: PickerPlatform

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 8cd595da8cb38c969fe17581fd4aaf09

File Size: 270.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xd2c0)
DllGetActivationFactory (Ordinal: 2, Address: 0xd280)
DllGetClassObject (Ordinal: 3, Address: 0xd2a0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x1003f028)
GetPackageFullName (Address: 0x1003f02c)

api-ms-win-appmodel-runtime-l1-1-1.dll

ParseApplicationUserModelId (Address: 0x1003f034)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1003f03c)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1003f054)
CoCreateInstance (Address: 0x1003f074)
CoGetApartmentType (Address: 0x1003f04c)
CoGetCallContext (Address: 0x1003f044)
CoGetInterfaceAndReleaseStream (Address: 0x1003f060)
CoGetMalloc (Address: 0x1003f070)
CoMarshalInterface (Address: 0x1003f05c)
CoMarshalInterThreadInterfaceInStream (Address: 0x1003f068)
CoReleaseMarshalData (Address: 0x1003f058)
CoTaskMemAlloc (Address: 0x1003f06c)
CoTaskMemFree (Address: 0x1003f064)
CoTaskMemRealloc (Address: 0x1003f078)
CoWaitForMultipleHandles (Address: 0x1003f048)
CreateStreamOnHGlobal (Address: 0x1003f050)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1003f080)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1003f08c)
IsDebuggerPresent (Address: 0x1003f088)
OutputDebugStringW (Address: 0x1003f090)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1003f0a8)
RaiseException (Address: 0x1003f0a4)
SetLastError (Address: 0x1003f0a0)
SetUnhandledExceptionFilter (Address: 0x1003f098)
UnhandledExceptionFilter (Address: 0x1003f09c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1003f0b0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1003f0bc)
HeapAlloc (Address: 0x1003f0b8)
HeapFree (Address: 0x1003f0c0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1003f0cc)
LocalFree (Address: 0x1003f0c8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1003f0dc)
FindStringOrdinal (Address: 0x1003f0d8)
FreeLibrary (Address: 0x1003f0ec)
GetModuleFileNameA (Address: 0x1003f0e8)
GetModuleFileNameW (Address: 0x1003f0d4)
GetModuleHandleExW (Address: 0x1003f0f0)
GetModuleHandleW (Address: 0x1003f0f4)
GetProcAddress (Address: 0x1003f0e4)
LoadLibraryExA (Address: 0x1003f0f8)
LoadStringW (Address: 0x1003f0e0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1003f100)

api-ms-win-core-memory-l1-1-0.dll

VirtualProtect (Address: 0x1003f108)
VirtualQuery (Address: 0x1003f10c)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1003f114)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1003f11c)
GetCurrentProcessId (Address: 0x1003f120)
GetCurrentThreadId (Address: 0x1003f124)
GetProcessId (Address: 0x1003f128)
OpenProcessToken (Address: 0x1003f130)
TerminateProcess (Address: 0x1003f12c)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1003f138)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1003f140)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1003f148)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1003f160)
RegEnumKeyExW (Address: 0x1003f154)
RegGetValueW (Address: 0x1003f15c)
RegOpenKeyExW (Address: 0x1003f150)
RegQueryInfoKeyW (Address: 0x1003f158)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x1003f168)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1003f170)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1003f1a4)
AcquireSRWLockShared (Address: 0x1003f18c)
CreateEventExW (Address: 0x1003f188)
CreateEventW (Address: 0x1003f194)
CreateMutexExW (Address: 0x1003f1ac)
CreateSemaphoreExW (Address: 0x1003f180)
DeleteCriticalSection (Address: 0x1003f1b8)
InitializeCriticalSection (Address: 0x1003f198)
InitializeSRWLock (Address: 0x1003f1a0)
LeaveCriticalSection (Address: 0x1003f1c0)
OpenSemaphoreW (Address: 0x1003f190)
ReleaseMutex (Address: 0x1003f184)
ReleaseSemaphore (Address: 0x1003f17c)
ReleaseSRWLockExclusive (Address: 0x1003f1a8)
ReleaseSRWLockShared (Address: 0x1003f19c)
SetEvent (Address: 0x1003f1bc)
TryEnterCriticalSection (Address: 0x1003f1b4)
WaitForSingleObject (Address: 0x1003f178)
WaitForSingleObjectEx (Address: 0x1003f1b0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1003f1c8)
InitOnceComplete (Address: 0x1003f1d0)
InitOnceExecuteOnce (Address: 0x1003f1d4)
Sleep (Address: 0x1003f1cc)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x1003f1e4)
GetSystemTimeAsFileTime (Address: 0x1003f1e0)
GetTickCount (Address: 0x1003f1dc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x1003f1f4)
CreateThreadpoolWait (Address: 0x1003f1f8)
SetThreadpoolWait (Address: 0x1003f1ec)
WaitForThreadpoolWaitCallbacks (Address: 0x1003f1f0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1003f200)
EncodePointer (Address: 0x1003f204)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x1003f218)
RoOriginateError (Address: 0x1003f214)
RoOriginateErrorW (Address: 0x1003f21c)
RoTransformError (Address: 0x1003f210)
SetRestrictedErrorInfo (Address: 0x1003f20c)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1003f224)
RoGetMatchingRestrictedErrorInfo (Address: 0x1003f228)
RoReportFailedDelegate (Address: 0x1003f22c)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1003f234)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x1003f23c)
WindowsConcatString (Address: 0x1003f254)
WindowsCreateString (Address: 0x1003f250)
WindowsCreateStringReference (Address: 0x1003f244)
WindowsDeleteString (Address: 0x1003f240)
WindowsDuplicateString (Address: 0x1003f24c)
WindowsGetStringRawBuffer (Address: 0x1003f25c)
WindowsIsStringEmpty (Address: 0x1003f258)
WindowsStringHasEmbeddedNull (Address: 0x1003f260)
WindowsSubstringWithSpecifiedLength (Address: 0x1003f248)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1003f27c)
EventProviderEnabled (Address: 0x1003f26c)
EventRegister (Address: 0x1003f278)
EventSetInformation (Address: 0x1003f274)
EventUnregister (Address: 0x1003f268)
EventWriteTransfer (Address: 0x1003f270)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1003f284)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1003f29c)
__dllonexit (Address: 0x1003f2c0)
_amsg_exit (Address: 0x1003f2b4)
_callnewh (Address: 0x1003f2e0)
_CxxThrowException (Address: 0x1003f2d0)
_except_handler4_common (Address: 0x1003f290)
_initterm (Address: 0x1003f2a8)
_lock (Address: 0x1003f2a4)
_onexit (Address: 0x1003f294)
_purecall (Address: 0x1003f2e4)
_unlock (Address: 0x1003f2a0)
_XcptFilter (Address: 0x1003f2b8)
??_V@YAXPAX@Z (Address: 0x1003f2f4)
??0exception@@QAE@ABQBD@Z (Address: 0x1003f2dc)
??0exception@@QAE@ABQBDH@Z (Address: 0x1003f2d8)
??0exception@@QAE@ABV0@@Z (Address: 0x1003f2f0)
??0exception@@QAE@XZ (Address: 0x1003f2ec)
??1exception@@UAE@XZ (Address: 0x1003f2e8)
??1type_info@@UAE@XZ (Address: 0x1003f2c4)
??3@YAXPAX@Z (Address: 0x1003f2bc)
?terminate@@YAXXZ (Address: 0x1003f28c)
?what@exception@@UBEPBDXZ (Address: 0x1003f2d4)
free (Address: 0x1003f2b0)
malloc (Address: 0x1003f2ac)
memcmp (Address: 0x1003f298)
memcpy (Address: 0x1003f2cc)
memmove (Address: 0x1003f2c8)
memset (Address: 0x1003f300)
realloc (Address: 0x1003f2f8)
toupper (Address: 0x1003f2fc)

ntdll.dll

_vsnprintf_s (Address: 0x1003f310)
_vsnwprintf (Address: 0x1003f318)
_wcsicmp (Address: 0x1003f31c)
memcpy_s (Address: 0x1003f314)
memmove_s (Address: 0x1003f308)
NtQueryInformationToken (Address: 0x1003f328)
RtlAllocateHeap (Address: 0x1003f330)
RtlCompareUnicodeString (Address: 0x1003f338)
RtlFreeHeap (Address: 0x1003f324)
RtlInitUnicodeString (Address: 0x1003f32c)
RtlNtStatusToDosErrorNoTeb (Address: 0x1003f334)
wcschr (Address: 0x1003f33c)
wcscspn (Address: 0x1003f30c)
wcsrchr (Address: 0x1003f320)

SHCORE.dll

(Address: 0x1003f00c)
SHGetThreadRef (Address: 0x1003f004)
SHTaskPoolAllowThreadReuse (Address: 0x1003f008)
SHTaskPoolQueueTask (Address: 0x1003f000)

Windows.Storage.dll

(Address: 0x1003f018)
SHGetIDListFromObject (Address: 0x1003f01c)
STORAGE_CStorageItem_GetValidatedStorageItemObject (Address: 0x1003f020)
STORAGE_GetShellItemFromStorageItem (Address: 0x1003f014)