Windows.Devices.LowLevel.dll

Description: Windows.Devices.LowLevel DLL

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 38b965545bb0b9f6a3fd7657b2687c48

File Size: 379.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x21890)
DllGetActivationFactory (Ordinal: 2, Address: 0x21870)
DllGetClassObject (Ordinal: 3, Address: 0x218c0)
GetProxyDllInfo (Ordinal: 4, Address: 0x4ee50)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10056060)
CoCreateInstance (Address: 0x10056054)
CoGetInterfaceAndReleaseStream (Address: 0x10056064)
CoMarshalInterface (Address: 0x10056068)
CoReleaseMarshalData (Address: 0x10056058)
CoTaskMemAlloc (Address: 0x1005605c)
CreateStreamOnHGlobal (Address: 0x1005606c)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10056074)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x100560c4)
CStdStubBuffer2_CountRefs (Address: 0x10056098)
CStdStubBuffer2_Disconnect (Address: 0x10056084)
CStdStubBuffer2_QueryInterface (Address: 0x10056090)
NdrProxyForwardingFunction3 (Address: 0x100560c0)
NdrProxyForwardingFunction4 (Address: 0x10056094)
NdrProxyForwardingFunction5 (Address: 0x100560d0)
ObjectStublessClient10 (Address: 0x100560b8)
ObjectStublessClient11 (Address: 0x1005609c)
ObjectStublessClient12 (Address: 0x100560a4)
ObjectStublessClient13 (Address: 0x1005607c)
ObjectStublessClient14 (Address: 0x100560a0)
ObjectStublessClient15 (Address: 0x10056088)
ObjectStublessClient16 (Address: 0x100560bc)
ObjectStublessClient17 (Address: 0x100560b4)
ObjectStublessClient18 (Address: 0x100560c8)
ObjectStublessClient19 (Address: 0x100560cc)
ObjectStublessClient3 (Address: 0x1005608c)
ObjectStublessClient6 (Address: 0x100560a8)
ObjectStublessClient7 (Address: 0x10056080)
ObjectStublessClient8 (Address: 0x100560ac)
ObjectStublessClient9 (Address: 0x100560b0)

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x100560d8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100560e4)
RaiseException (Address: 0x100560e0)
SetUnhandledExceptionFilter (Address: 0x100560e8)
UnhandledExceptionFilter (Address: 0x100560ec)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x100560fc)
ReadFile (Address: 0x100560f4)
WriteFile (Address: 0x100560f8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10056104)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1005610c)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x10056118)
DeviceIoControl (Address: 0x1005611c)
GetOverlappedResult (Address: 0x10056114)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10056128)
LoadStringW (Address: 0x10056124)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10056130)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x10056140)
GetCurrentProcess (Address: 0x1005613c)
GetCurrentProcessId (Address: 0x10056138)
GetCurrentThreadId (Address: 0x10056148)
OpenProcessToken (Address: 0x10056144)
TerminateProcess (Address: 0x1005614c)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x10056154)
OpenProcess (Address: 0x10056158)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10056160)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1005618c)
AcquireSRWLockShared (Address: 0x10056184)
CreateEventW (Address: 0x10056170)
CreateWaitableTimerExW (Address: 0x10056178)
InitializeSRWLock (Address: 0x1005616c)
ReleaseSRWLockExclusive (Address: 0x10056180)
ReleaseSRWLockShared (Address: 0x10056188)
ResetEvent (Address: 0x10056168)
SetEvent (Address: 0x10056174)
SetWaitableTimer (Address: 0x1005617c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x10056198)
SignalObjectAndWait (Address: 0x10056194)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x100561a4)
WaitForMultipleObjects (Address: 0x100561a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100561ac)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x100561c0)
CreateThreadpoolWait (Address: 0x100561b8)
SetThreadpoolWait (Address: 0x100561bc)
WaitForThreadpoolWaitCallbacks (Address: 0x100561b4)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100561cc)
EncodePointer (Address: 0x100561c8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x100561e4)
RoFailFastWithErrorContext (Address: 0x100561e0)
RoOriginateError (Address: 0x100561d8)
RoOriginateErrorW (Address: 0x100561dc)
RoTransformError (Address: 0x100561d4)
SetRestrictedErrorInfo (Address: 0x100561e8)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x100561f8)
RoGetMatchingRestrictedErrorInfo (Address: 0x100561f4)
RoReportFailedDelegate (Address: 0x100561f0)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x10056204)
RoInitialize (Address: 0x10056208)
RoUninitialize (Address: 0x10056200)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x10056228)
HSTRING_UserMarshal (Address: 0x10056210)
HSTRING_UserSize (Address: 0x10056238)
HSTRING_UserUnmarshal (Address: 0x10056224)
WindowsCreateString (Address: 0x10056214)
WindowsCreateStringReference (Address: 0x10056230)
WindowsDeleteString (Address: 0x10056234)
WindowsDuplicateString (Address: 0x1005622c)
WindowsGetStringRawBuffer (Address: 0x10056218)
WindowsIsStringEmpty (Address: 0x10056220)
WindowsStringHasEmbeddedNull (Address: 0x1005621c)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x100562a8)
__std_terminate (Address: 0x100562a4)
_CxxThrowException (Address: 0x10056280)
_except_handler4_common (Address: 0x1005627c)
_o___std_exception_copy (Address: 0x100562a0)
_o___std_exception_destroy (Address: 0x1005629c)
_o___std_type_info_destroy_list (Address: 0x10056298)
_o___stdio_common_vswprintf (Address: 0x10056294)
_o__callnewh (Address: 0x1005628c)
_o__cexit (Address: 0x10056288)
_o__configure_narrow_argv (Address: 0x10056290)
_o__crt_atexit (Address: 0x10056284)
_o__errno (Address: 0x10056240)
_o__execute_onexit_table (Address: 0x10056244)
_o__initialize_narrow_environment (Address: 0x10056248)
_o__initialize_onexit_table (Address: 0x1005624c)
_o__invalid_parameter_noinfo (Address: 0x10056250)
_o__invalid_parameter_noinfo_noreturn (Address: 0x10056254)
_o__purecall (Address: 0x10056258)
_o__register_onexit_function (Address: 0x1005625c)
_o__seh_filter_dll (Address: 0x10056260)
_o_free (Address: 0x10056268)
_o_malloc (Address: 0x1005626c)
_o_realloc (Address: 0x10056270)
_o_round (Address: 0x10056274)
_o_terminate (Address: 0x10056278)
memcmp (Address: 0x100562ac)
memmove (Address: 0x10056264)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100562b8)
_initterm_e (Address: 0x100562b4)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100562c0)

api-ms-win-devices-config-l1-1-1.dll

CM_Get_Device_Interface_List_SizeW (Address: 0x100562c8)
CM_Get_Device_Interface_ListW (Address: 0x100562cc)
CM_MapCrToWin32Err (Address: 0x100562d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100562e0)
EventSetInformation (Address: 0x100562e4)
EventUnregister (Address: 0x100562dc)
EventWriteTransfer (Address: 0x100562d8)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x100562ec)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100562f4)
SHTaskPoolQueueTask (Address: 0x100562f8)

msvcp_win.dll

?_Xlength_error@std@@YAXPBD@Z (Address: 0x10056300)

ntdll.dll

RtlInitializeBitMap (Address: 0x10056308)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10056008)
CStdStubBuffer_Connect (Address: 0x10056030)
CStdStubBuffer_CountRefs (Address: 0x10056020)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10056004)
CStdStubBuffer_DebugServerRelease (Address: 0x10056044)
CStdStubBuffer_Disconnect (Address: 0x10056000)
CStdStubBuffer_Invoke (Address: 0x1005601c)
CStdStubBuffer_IsIIDSupported (Address: 0x10056034)
CStdStubBuffer_QueryInterface (Address: 0x1005604c)
IUnknown_AddRef_Proxy (Address: 0x10056010)
IUnknown_QueryInterface_Proxy (Address: 0x10056038)
IUnknown_Release_Proxy (Address: 0x1005600c)
NdrCStdStubBuffer_Release (Address: 0x10056024)
NdrCStdStubBuffer2_Release (Address: 0x1005602c)
NdrDllCanUnloadNow (Address: 0x10056028)
NdrDllGetClassObject (Address: 0x10056040)
NdrOleAllocate (Address: 0x10056048)
NdrOleFree (Address: 0x1005603c)
NdrStubCall2 (Address: 0x10056014)
NdrStubForwardingFunction (Address: 0x10056018)