Windows.ApplicationModel.Core.dll

Description: Windows Application Model Core API

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 0950410418aaedb8f74f6304c610cdf5

File Size: 157.0 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xa8c0)
DllGetActivationFactory (Ordinal: 2, Address: 0xa900)
DllGetClassObject (Ordinal: 3, Address: 0xa920)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x10024054)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10024074)
CoCreateInstance (Address: 0x10024070)
CoGetApartmentType (Address: 0x10024078)
CoGetCallContext (Address: 0x1002405c)
CoGetInterfaceAndReleaseStream (Address: 0x10024060)
CoMarshalInterface (Address: 0x10024064)
CoReleaseMarshalData (Address: 0x1002406c)
CoTaskMemAlloc (Address: 0x1002407c)
CreateStreamOnHGlobal (Address: 0x10024068)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10024084)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x10024090)
CStdStubBuffer2_CountRefs (Address: 0x100240a4)
CStdStubBuffer2_Disconnect (Address: 0x100240b8)
CStdStubBuffer2_QueryInterface (Address: 0x100240ac)
NdrProxyForwardingFunction3 (Address: 0x100240d0)
NdrProxyForwardingFunction4 (Address: 0x100240a8)
NdrProxyForwardingFunction5 (Address: 0x100240dc)
ObjectStublessClient10 (Address: 0x100240d8)
ObjectStublessClient11 (Address: 0x100240c4)
ObjectStublessClient12 (Address: 0x100240cc)
ObjectStublessClient13 (Address: 0x100240b0)
ObjectStublessClient14 (Address: 0x100240c8)
ObjectStublessClient15 (Address: 0x100240bc)
ObjectStublessClient16 (Address: 0x1002408c)
ObjectStublessClient17 (Address: 0x10024094)
ObjectStublessClient3 (Address: 0x100240c0)
ObjectStublessClient4 (Address: 0x100240d4)
ObjectStublessClient6 (Address: 0x100240a0)
ObjectStublessClient7 (Address: 0x100240b4)
ObjectStublessClient8 (Address: 0x1002409c)
ObjectStublessClient9 (Address: 0x10024098)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100240ec)
IsDebuggerPresent (Address: 0x100240e8)
OutputDebugStringW (Address: 0x100240e4)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100240f4)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100240fc)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002410c)
RaiseException (Address: 0x10024114)
SetLastError (Address: 0x10024104)
SetUnhandledExceptionFilter (Address: 0x10024108)
UnhandledExceptionFilter (Address: 0x10024110)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x10024124)
DeleteFileW (Address: 0x1002411c)
GetFileAttributesW (Address: 0x10024120)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1002412c)
DuplicateHandle (Address: 0x10024130)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10024140)
HeapAlloc (Address: 0x1002413c)
HeapFree (Address: 0x10024138)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1002414c)
LocalFree (Address: 0x10024148)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x10024154)
GetModuleHandleExW (Address: 0x10024158)
GetModuleHandleW (Address: 0x1002415c)
GetProcAddress (Address: 0x10024160)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10024168)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x10024178)
GetCurrentProcess (Address: 0x10024180)
GetCurrentProcessId (Address: 0x10024170)
GetCurrentThread (Address: 0x10024194)
GetCurrentThreadId (Address: 0x10024174)
InitializeProcThreadAttributeList (Address: 0x10024188)
OpenProcessToken (Address: 0x10024184)
OpenThreadToken (Address: 0x1002418c)
SetThreadToken (Address: 0x10024190)
TerminateProcess (Address: 0x10024198)
UpdateProcThreadAttribute (Address: 0x1002417c)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100241a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100241a8)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcesses (Address: 0x100241b0)

api-ms-win-core-psm-key-l1-1-0.dll

PsmGetKeyFromToken (Address: 0x100241b8)

api-ms-win-core-psm-tc-l1-1-0.dll

PsmRegisterDynamicProcess (Address: 0x100241c0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100241c8)
RegCreateKeyExW (Address: 0x100241e0)
RegDeleteTreeW (Address: 0x100241d0)
RegDeleteValueW (Address: 0x100241e8)
RegGetValueW (Address: 0x100241d4)
RegOpenCurrentUser (Address: 0x100241cc)
RegOpenKeyExW (Address: 0x100241dc)
RegQueryValueExW (Address: 0x100241e4)
RegSetValueExW (Address: 0x100241d8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10024214)
AcquireSRWLockShared (Address: 0x10024210)
CreateMutexExW (Address: 0x10024204)
CreateSemaphoreExW (Address: 0x1002420c)
InitializeSRWLock (Address: 0x100241f4)
OpenSemaphoreW (Address: 0x100241fc)
ReleaseMutex (Address: 0x10024200)
ReleaseSemaphore (Address: 0x100241f0)
ReleaseSRWLockExclusive (Address: 0x10024208)
ReleaseSRWLockShared (Address: 0x100241f8)
WaitForSingleObject (Address: 0x10024218)
WaitForSingleObjectEx (Address: 0x1002421c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x10024224)
Sleep (Address: 0x10024228)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x10024234)
GetTickCount (Address: 0x10024230)
GetTickCount64 (Address: 0x10024238)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10024240)
EncodePointer (Address: 0x10024244)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x10024250)
RoGetActivationFactory (Address: 0x1002424c)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x10024288)
HSTRING_UserMarshal (Address: 0x10024264)
HSTRING_UserSize (Address: 0x10024270)
HSTRING_UserUnmarshal (Address: 0x10024280)
WindowsConcatString (Address: 0x10024260)
WindowsCreateString (Address: 0x10024278)
WindowsCreateStringReference (Address: 0x10024284)
WindowsDeleteString (Address: 0x10024258)
WindowsDuplicateString (Address: 0x1002427c)
WindowsGetStringLen (Address: 0x1002425c)
WindowsGetStringRawBuffer (Address: 0x10024274)
WindowsIsStringEmpty (Address: 0x1002426c)
WindowsStringHasEmbeddedNull (Address: 0x10024268)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100242a4)
EventProviderEnabled (Address: 0x10024298)
EventRegister (Address: 0x1002429c)
EventSetInformation (Address: 0x100242a0)
EventUnregister (Address: 0x10024290)
EventWriteTransfer (Address: 0x10024294)

api-ms-win-security-provider-l1-1-0.dll

GetNamedSecurityInfoW (Address: 0x100242ac)
GetSecurityInfo (Address: 0x100242b0)
SetNamedSecurityInfoW (Address: 0x100242b4)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100242bc)
SHTaskPoolQueueTask (Address: 0x100242c0)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100242f8)
__dllonexit (Address: 0x100242f4)
_amsg_exit (Address: 0x100242f0)
_callnewh (Address: 0x100242e4)
_except_handler4_common (Address: 0x100242dc)
_initterm (Address: 0x100242cc)
_lock (Address: 0x100242ec)
_onexit (Address: 0x10024310)
_purecall (Address: 0x1002430c)
_unlock (Address: 0x100242c8)
_vsnwprintf (Address: 0x100242fc)
_XcptFilter (Address: 0x10024300)
free (Address: 0x10024304)
malloc (Address: 0x100242d8)
memcmp (Address: 0x100242e0)
memcpy (Address: 0x100242e8)
memcpy_s (Address: 0x10024314)
memmove (Address: 0x10024318)
memmove_s (Address: 0x100242d4)
memset (Address: 0x1002431c)
realloc (Address: 0x100242d0)
toupper (Address: 0x10024308)

ntdll.dll

EtwEventRegister (Address: 0x1002434c)
EtwEventUnregister (Address: 0x10024354)
EtwEventWrite (Address: 0x10024350)
NtClose (Address: 0x1002433c)
NtDeviceIoControlFile (Address: 0x10024334)
NtOpenFile (Address: 0x10024338)
NtOpenProcessToken (Address: 0x10024330)
NtQueryInformationToken (Address: 0x10024340)
RtlAllocateHeap (Address: 0x10024358)
RtlCopySid (Address: 0x10024324)
RtlFreeHeap (Address: 0x10024360)
RtlIsParentOfChildAppContainer (Address: 0x1002435c)
RtlLengthSid (Address: 0x10024328)
RtlNtStatusToDosError (Address: 0x10024344)
RtlQueryTokenHostIdAsUlong64 (Address: 0x1002432c)
ZwQueryWnfStateData (Address: 0x10024348)

profapi.dll

(Address: 0x10024368)
(Address: 0x1002436c)
(Address: 0x10024370)
(Address: 0x10024374)
(Address: 0x10024378)
(Address: 0x1002437c)
(Address: 0x10024380)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10024024)
CStdStubBuffer_Connect (Address: 0x10024004)
CStdStubBuffer_CountRefs (Address: 0x1002401c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1002403c)
CStdStubBuffer_DebugServerRelease (Address: 0x10024014)
CStdStubBuffer_Disconnect (Address: 0x10024010)
CStdStubBuffer_Invoke (Address: 0x1002404c)
CStdStubBuffer_IsIIDSupported (Address: 0x10024008)
CStdStubBuffer_QueryInterface (Address: 0x10024018)
IUnknown_AddRef_Proxy (Address: 0x10024040)
IUnknown_QueryInterface_Proxy (Address: 0x1002400c)
IUnknown_Release_Proxy (Address: 0x10024020)
NdrCStdStubBuffer_Release (Address: 0x10024034)
NdrCStdStubBuffer2_Release (Address: 0x10024028)
NdrDllCanUnloadNow (Address: 0x10024030)
NdrDllGetClassObject (Address: 0x1002402c)
NdrOleAllocate (Address: 0x10024000)
NdrOleFree (Address: 0x10024038)
NdrStubCall2 (Address: 0x10024044)
NdrStubForwardingFunction (Address: 0x10024048)