thumbcache.dll

Description: Microsoft Thumbnail Cache

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 2cf76d3d340004dd97cab29427e218ba

File Size: 290.9 KB

Uploaded At: Dec. 1, 2025, 8:05 a.m.

Views: 15

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1b4e0)
DllGetActivationFactory (Ordinal: 2, Address: 0x2bb50)
DllGetClassObject (Ordinal: 3, Address: 0x141a0)
GetProxyDllInfo (Ordinal: 4, Address: 0x29470)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x64cc2054)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x64cc205c)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x64cc208c)
CStdStubBuffer2_CountRefs (Address: 0x64cc2074)
CStdStubBuffer2_Disconnect (Address: 0x64cc2088)
CStdStubBuffer2_QueryInterface (Address: 0x64cc2064)
NdrProxyForwardingFunction3 (Address: 0x64cc2090)
NdrProxyForwardingFunction4 (Address: 0x64cc2078)
NdrProxyForwardingFunction5 (Address: 0x64cc207c)
ObjectStublessClient4 (Address: 0x64cc2084)
ObjectStublessClient5 (Address: 0x64cc2068)
ObjectStublessClient6 (Address: 0x64cc2070)
ObjectStublessClient7 (Address: 0x64cc206c)
ObjectStublessClient8 (Address: 0x64cc2080)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x64cc20a0)
IsDebuggerPresent (Address: 0x64cc209c)
OutputDebugStringW (Address: 0x64cc2098)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x64cc20a8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x64cc20b0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x64cc20c0)
RaiseException (Address: 0x64cc20c4)
SetLastError (Address: 0x64cc20b8)
SetUnhandledExceptionFilter (Address: 0x64cc20bc)
UnhandledExceptionFilter (Address: 0x64cc20c8)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x64cc20f0)
CreateFileW (Address: 0x64cc2114)
DeleteFileW (Address: 0x64cc20e8)
FindClose (Address: 0x64cc20f8)
FindFirstFileW (Address: 0x64cc20d8)
FindNextFileW (Address: 0x64cc2100)
GetDiskFreeSpaceExW (Address: 0x64cc2104)
GetDriveTypeW (Address: 0x64cc20e0)
GetFileAttributesW (Address: 0x64cc20f4)
GetFileSize (Address: 0x64cc20dc)
GetTempFileNameW (Address: 0x64cc20fc)
GetVolumeInformationW (Address: 0x64cc20e4)
RemoveDirectoryW (Address: 0x64cc20d4)
SetEndOfFile (Address: 0x64cc2108)
SetFileAttributesW (Address: 0x64cc20d0)
SetFileInformationByHandle (Address: 0x64cc20ec)
SetFilePointer (Address: 0x64cc210c)
WriteFile (Address: 0x64cc2110)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x64cc211c)
MoveFileExW (Address: 0x64cc2120)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x64cc2128)
DuplicateHandle (Address: 0x64cc212c)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x64cc213c)
HeapAlloc (Address: 0x64cc2134)
HeapFree (Address: 0x64cc2140)
HeapReAlloc (Address: 0x64cc2138)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x64cc214c)
GlobalFree (Address: 0x64cc2150)
LocalAlloc (Address: 0x64cc2148)
LocalFree (Address: 0x64cc2154)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x64cc2160)
GlobalUnlock (Address: 0x64cc215c)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x64cc2168)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MulDiv (Address: 0x64cc2170)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x64cc2188)
GetModuleFileNameA (Address: 0x64cc2180)
GetModuleFileNameW (Address: 0x64cc2184)
GetModuleHandleExW (Address: 0x64cc2190)
GetModuleHandleW (Address: 0x64cc2178)
GetProcAddress (Address: 0x64cc217c)
LoadStringW (Address: 0x64cc218c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x64cc219c)
LCMapStringW (Address: 0x64cc2198)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x64cc21a4)
MapViewOfFile (Address: 0x64cc21ac)
UnmapViewOfFile (Address: 0x64cc21a8)

api-ms-win-core-path-l1-1-0.dll

PathCchAppend (Address: 0x64cc21b4)
PathCchStripToRoot (Address: 0x64cc21b8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x64cc21c8)
GetCurrentProcessId (Address: 0x64cc21d4)
GetCurrentThread (Address: 0x64cc21dc)
GetCurrentThreadId (Address: 0x64cc21d0)
GetProcessId (Address: 0x64cc21c0)
OpenProcessToken (Address: 0x64cc21cc)
OpenThreadToken (Address: 0x64cc21d8)
TerminateProcess (Address: 0x64cc21c4)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x64cc21e4)
OpenProcess (Address: 0x64cc21e8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x64cc21f0)

api-ms-win-core-psapi-l1-1-0.dll

K32QueryWorkingSetEx (Address: 0x64cc21f8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x64cc2210)
RegGetValueW (Address: 0x64cc2204)
RegOpenKeyExW (Address: 0x64cc2200)
RegQueryInfoKeyW (Address: 0x64cc220c)
RegQueryValueExW (Address: 0x64cc2208)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathAppendW (Address: 0x64cc222c)
PathCombineW (Address: 0x64cc2218)
PathFindExtensionW (Address: 0x64cc221c)
PathFindFileNameW (Address: 0x64cc2220)
PathIsRootW (Address: 0x64cc2228)
PathIsUNCW (Address: 0x64cc2224)
PathRemoveFileSpecW (Address: 0x64cc2230)
PathSkipRootW (Address: 0x64cc2234)
PathStripToRootW (Address: 0x64cc2238)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x64cc2240)
StrCmpICW (Address: 0x64cc2248)
StrCmpNIW (Address: 0x64cc2244)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x64cc2250)

api-ms-win-core-string-l2-1-0.dll

CharUpperBuffW (Address: 0x64cc2258)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenW (Address: 0x64cc2260)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x64cc22a0)
AcquireSRWLockShared (Address: 0x64cc2294)
CreateEventW (Address: 0x64cc22b8)
CreateMutexExW (Address: 0x64cc2290)
CreateMutexW (Address: 0x64cc22a4)
CreateSemaphoreExW (Address: 0x64cc228c)
DeleteCriticalSection (Address: 0x64cc2298)
EnterCriticalSection (Address: 0x64cc22a8)
InitializeCriticalSectionAndSpinCount (Address: 0x64cc2280)
InitializeCriticalSectionEx (Address: 0x64cc229c)
InitializeSRWLock (Address: 0x64cc22b4)
LeaveCriticalSection (Address: 0x64cc2274)
OpenSemaphoreW (Address: 0x64cc2288)
ReleaseMutex (Address: 0x64cc2268)
ReleaseSemaphore (Address: 0x64cc2270)
ReleaseSRWLockExclusive (Address: 0x64cc22ac)
ReleaseSRWLockShared (Address: 0x64cc22b0)
ResetEvent (Address: 0x64cc226c)
SetEvent (Address: 0x64cc227c)
WaitForSingleObject (Address: 0x64cc2284)
WaitForSingleObjectEx (Address: 0x64cc2278)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x64cc22c0)
InitOnceComplete (Address: 0x64cc22cc)
InitOnceExecuteOnce (Address: 0x64cc22c4)
Sleep (Address: 0x64cc22c8)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x64cc22d4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x64cc22e4)
GetSystemTimeAsFileTime (Address: 0x64cc22e0)
GetTickCount (Address: 0x64cc22e8)
GetWindowsDirectoryW (Address: 0x64cc22dc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x64cc22f0)
CreateThreadpoolTimer (Address: 0x64cc22f8)
SetThreadpoolTimer (Address: 0x64cc22fc)
WaitForThreadpoolTimerCallbacks (Address: 0x64cc22f4)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x64cc2308)
DeleteTimerQueueTimer (Address: 0x64cc2304)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x64cc2310)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x64cc2318)
EncodePointer (Address: 0x64cc231c)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x64cc2328)
RoOriginateErrorW (Address: 0x64cc2324)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x64cc2330)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x64cc233c)
HSTRING_UserMarshal (Address: 0x64cc2340)
HSTRING_UserSize (Address: 0x64cc2344)
HSTRING_UserUnmarshal (Address: 0x64cc2338)
WindowsCreateString (Address: 0x64cc234c)
WindowsCreateStringReference (Address: 0x64cc2348)
WindowsGetStringRawBuffer (Address: 0x64cc2358)
WindowsIsStringEmpty (Address: 0x64cc2354)
WindowsStringHasEmbeddedNull (Address: 0x64cc2350)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x64cc2390)
_except_handler4_common (Address: 0x64cc2394)
_o___std_type_info_destroy_list (Address: 0x64cc23b0)
_o___stdio_common_vswprintf (Address: 0x64cc23ac)
_o__cexit (Address: 0x64cc23a8)
_o__configure_narrow_argv (Address: 0x64cc23a4)
_o__crt_atexit (Address: 0x64cc23a0)
_o__errno (Address: 0x64cc239c)
_o__execute_onexit_table (Address: 0x64cc2398)
_o__initialize_narrow_environment (Address: 0x64cc2360)
_o__initialize_onexit_table (Address: 0x64cc2364)
_o__invalid_parameter_noinfo (Address: 0x64cc2368)
_o__purecall (Address: 0x64cc236c)
_o__recalloc (Address: 0x64cc2370)
_o__register_onexit_function (Address: 0x64cc2374)
_o__seh_filter_dll (Address: 0x64cc2378)
_o__ui64tow_s (Address: 0x64cc237c)
_o__ultow_s (Address: 0x64cc2380)
_o_free (Address: 0x64cc2388)
_o_toupper (Address: 0x64cc238c)
memcmp (Address: 0x64cc23b4)
memcpy (Address: 0x64cc23b8)
memmove (Address: 0x64cc2384)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x64cc23c0)
_initterm_e (Address: 0x64cc23c4)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x64cc23cc)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x64cc23dc)
EventProviderEnabled (Address: 0x64cc23e0)
EventRegister (Address: 0x64cc23d4)
EventSetInformation (Address: 0x64cc23e4)
EventUnregister (Address: 0x64cc23d8)
EventWriteTransfer (Address: 0x64cc23e8)

api-ms-win-security-base-l1-1-0.dll

DuplicateTokenEx (Address: 0x64cc23f0)
GetSecurityDescriptorControl (Address: 0x64cc23f8)
GetSidSubAuthority (Address: 0x64cc23f4)
GetTokenInformation (Address: 0x64cc23fc)

api-ms-win-shcore-comhelpers-l1-1-0.dll

IUnknown_Set (Address: 0x64cc2404)
IUnknown_SetSite (Address: 0x64cc2408)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x64cc2410)

api-ms-win-shcore-path-l1-1-0.dll

(Address: 0x64cc2418)

api-ms-win-shcore-registry-l1-1-0.dll

SHGetValueW (Address: 0x64cc2420)

api-ms-win-shcore-stream-l1-1-0.dll

IStream_Copy (Address: 0x64cc2434)
IStream_Read (Address: 0x64cc2430)
IStream_Reset (Address: 0x64cc242c)
IStream_Size (Address: 0x64cc2438)
IStream_Write (Address: 0x64cc243c)
SHCreateMemStream (Address: 0x64cc2428)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOverStream (Address: 0x64cc2448)
CreateStreamOverRandomAccessStream (Address: 0x64cc2444)

api-ms-win-shcore-sysinfo-l1-1-0.dll

IsOS (Address: 0x64cc2450)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThread (Address: 0x64cc2458)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x64cc2460)

ntdll.dll

NtQueryInformationFile (Address: 0x64cc2468)
NtSetInformationFile (Address: 0x64cc2470)
RtlAddAccessAllowedAce (Address: 0x64cc2480)
RtlCreateAcl (Address: 0x64cc247c)
RtlCreateSecurityDescriptor (Address: 0x64cc2478)
RtlNtStatusToDosError (Address: 0x64cc246c)
RtlSetDaclSecurityDescriptor (Address: 0x64cc2474)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x64cc2034)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x64cc2018)
CStdStubBuffer_DebugServerRelease (Address: 0x64cc2000)
CStdStubBuffer_Invoke (Address: 0x64cc2028)
CStdStubBuffer_IsIIDSupported (Address: 0x64cc2008)
IUnknown_AddRef_Proxy (Address: 0x64cc201c)
IUnknown_QueryInterface_Proxy (Address: 0x64cc2004)
IUnknown_Release_Proxy (Address: 0x64cc2010)
NdrCStdStubBuffer2_Release (Address: 0x64cc2038)
NdrDllCanUnloadNow (Address: 0x64cc202c)
NdrDllGetClassObject (Address: 0x64cc2030)
NdrOleAllocate (Address: 0x64cc200c)
NdrOleFree (Address: 0x64cc2014)
NdrStubCall2 (Address: 0x64cc2020)
NdrStubForwardingFunction (Address: 0x64cc2024)

SHCORE.dll

(Address: 0x64cc2040)
(Address: 0x64cc2044)
(Address: 0x64cc2048)
(Address: 0x64cc204c)