Windows.Devices.Picker.dll

Description: Device Picker

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: 1861768e6c4a30eeb1f76b716be9ffe7

File Size: 334.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x13610)
DllGetActivationFactory (Ordinal: 2, Address: 0x13640)
DllGetClassObject (Ordinal: 3, Address: 0x13660)
ServiceMain (Ordinal: 4, Address: 0x13530)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1004d034)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1004d044)
IsDebuggerPresent (Address: 0x1004d040)
OutputDebugStringW (Address: 0x1004d03c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1004d04c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1004d054)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1004d06c)
RaiseException (Address: 0x1004d068)
SetLastError (Address: 0x1004d060)
SetUnhandledExceptionFilter (Address: 0x1004d05c)
UnhandledExceptionFilter (Address: 0x1004d064)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x1004d078)
RecordFeatureUsage (Address: 0x1004d074)
SubscribeFeatureStateChangeNotification (Address: 0x1004d080)
UnsubscribeFeatureStateChangeNotification (Address: 0x1004d07c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1004d088)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1004d090)
HeapAlloc (Address: 0x1004d098)
HeapFree (Address: 0x1004d094)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1004d0a4)
LocalFree (Address: 0x1004d0a0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1004d0ac)
FindResourceExW (Address: 0x1004d0c8)
GetModuleFileNameA (Address: 0x1004d0c4)
GetModuleHandleExW (Address: 0x1004d0c0)
GetModuleHandleW (Address: 0x1004d0b0)
GetProcAddress (Address: 0x1004d0b4)
LoadResource (Address: 0x1004d0bc)
LockResource (Address: 0x1004d0b8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1004d0d0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1004d0e0)
GetCurrentProcess (Address: 0x1004d0ec)
GetCurrentProcessId (Address: 0x1004d0e8)
GetCurrentThreadId (Address: 0x1004d0d8)
GetProcessId (Address: 0x1004d0f0)
OpenProcessToken (Address: 0x1004d0e4)
TerminateProcess (Address: 0x1004d0dc)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1004d0f8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1004d100)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1004d124)
RegCreateKeyExW (Address: 0x1004d114)
RegEnumKeyExW (Address: 0x1004d10c)
RegGetValueW (Address: 0x1004d120)
RegNotifyChangeKeyValue (Address: 0x1004d11c)
RegOpenKeyExW (Address: 0x1004d108)
RegQueryInfoKeyW (Address: 0x1004d110)
RegSetValueExW (Address: 0x1004d118)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1004d12c)

api-ms-win-core-string-l2-1-0.dll

CharUpperBuffW (Address: 0x1004d134)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1004d160)
AcquireSRWLockShared (Address: 0x1004d164)
CreateEventExW (Address: 0x1004d148)
CreateEventW (Address: 0x1004d18c)
CreateMutexExW (Address: 0x1004d184)
CreateSemaphoreExW (Address: 0x1004d17c)
DeleteCriticalSection (Address: 0x1004d150)
EnterCriticalSection (Address: 0x1004d154)
InitializeCriticalSectionEx (Address: 0x1004d14c)
InitializeSRWLock (Address: 0x1004d15c)
LeaveCriticalSection (Address: 0x1004d158)
OpenSemaphoreW (Address: 0x1004d180)
ReleaseMutex (Address: 0x1004d174)
ReleaseSemaphore (Address: 0x1004d170)
ReleaseSRWLockExclusive (Address: 0x1004d168)
ReleaseSRWLockShared (Address: 0x1004d16c)
ResetEvent (Address: 0x1004d144)
SetEvent (Address: 0x1004d13c)
WaitForMultipleObjectsEx (Address: 0x1004d188)
WaitForSingleObject (Address: 0x1004d178)
WaitForSingleObjectEx (Address: 0x1004d140)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1004d19c)
InitOnceComplete (Address: 0x1004d194)
InitOnceExecuteOnce (Address: 0x1004d198)
Sleep (Address: 0x1004d1a8)
SleepConditionVariableSRW (Address: 0x1004d1a4)
WakeAllConditionVariable (Address: 0x1004d1a0)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1004d1b0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1004d1b8)
GetTickCount (Address: 0x1004d1c0)
GetTickCount64 (Address: 0x1004d1bc)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1004d1d4)
CloseThreadpoolWait (Address: 0x1004d1e4)
CreateThreadpoolTimer (Address: 0x1004d1d8)
CreateThreadpoolWait (Address: 0x1004d1d0)
SetThreadpoolTimer (Address: 0x1004d1c8)
SetThreadpoolWait (Address: 0x1004d1dc)
WaitForThreadpoolTimerCallbacks (Address: 0x1004d1cc)
WaitForThreadpoolWaitCallbacks (Address: 0x1004d1e0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1004d1f0)
EncodePointer (Address: 0x1004d1ec)

api-ms-win-devices-query-l1-1-0.dll

DevFindProperty (Address: 0x1004d1f8)
DevFreeObjectProperties (Address: 0x1004d1fc)

api-ms-win-devices-query-l1-1-1.dll

DevGetObjectPropertiesEx (Address: 0x1004d204)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1004d214)
GetTraceEnableLevel (Address: 0x1004d218)
GetTraceLoggerHandle (Address: 0x1004d21c)
RegisterTraceGuidsW (Address: 0x1004d210)
TraceMessage (Address: 0x1004d220)
UnregisterTraceGuids (Address: 0x1004d20c)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1004d238)
EventRegister (Address: 0x1004d22c)
EventSetInformation (Address: 0x1004d230)
EventUnregister (Address: 0x1004d228)
EventWriteTransfer (Address: 0x1004d234)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1004d248)
GetLengthSid (Address: 0x1004d244)
GetTokenInformation (Address: 0x1004d240)
MakeAbsoluteSD (Address: 0x1004d24c)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1004d254)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1004d258)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x1004d260)
SetServiceStatus (Address: 0x1004d264)

api-ms-win-shcore-registry-l1-1-0.dll

SHEnumValueW (Address: 0x1004d26c)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1004d278)
SHTaskPoolQueueTask (Address: 0x1004d274)

combase.dll

(Address: 0x1004d284)
(Address: 0x1004d288)
(Address: 0x1004d290)
(Address: 0x1004d298)
(Address: 0x1004d29c)
(Address: 0x1004d2a4)
(Address: 0x1004d2ac)
(Address: 0x1004d2b0)
(Address: 0x1004d2bc)
(Address: 0x1004d2c4)
(Address: 0x1004d2c8)
(Address: 0x1004d2cc)
(Address: 0x1004d2d4)
(Address: 0x1004d2d8)
(Address: 0x1004d2dc)
(Address: 0x1004d2e0)
(Address: 0x1004d2ec)
(Address: 0x1004d2f0)
(Address: 0x1004d2f4)
(Address: 0x1004d2f8)
(Address: 0x1004d2fc)
(Address: 0x1004d300)
(Address: 0x1004d30c)
(Address: 0x1004d310)
(Address: 0x1004d318)
(Address: 0x1004d31c)
(Address: 0x1004d320)
(Address: 0x1004d328)
(Address: 0x1004d32c)
CStdStubBuffer_AddRef (Address: 0x1004d2d0)
CStdStubBuffer_Connect (Address: 0x1004d294)
CStdStubBuffer_CountRefs (Address: 0x1004d2c0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1004d304)
CStdStubBuffer_DebugServerRelease (Address: 0x1004d2b4)
CStdStubBuffer_Disconnect (Address: 0x1004d2a8)
CStdStubBuffer_Invoke (Address: 0x1004d324)
CStdStubBuffer_IsIIDSupported (Address: 0x1004d2a0)
CStdStubBuffer_QueryInterface (Address: 0x1004d2b8)
CStdStubBuffer2_Connect (Address: 0x1004d308)
CStdStubBuffer2_CountRefs (Address: 0x1004d28c)
CStdStubBuffer2_Disconnect (Address: 0x1004d280)
CStdStubBuffer2_QueryInterface (Address: 0x1004d314)
NdrCStdStubBuffer_Release (Address: 0x1004d2e4)
NdrCStdStubBuffer2_Release (Address: 0x1004d2e8)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1004d3b8)
__dllonexit (Address: 0x1004d350)
_amsg_exit (Address: 0x1004d36c)
_callnewh (Address: 0x1004d384)
_CxxThrowException (Address: 0x1004d37c)
_except_handler4_common (Address: 0x1004d348)
_get_errno (Address: 0x1004d334)
_initterm (Address: 0x1004d364)
_lock (Address: 0x1004d358)
_onexit (Address: 0x1004d34c)
_purecall (Address: 0x1004d38c)
_set_errno (Address: 0x1004d338)
_unlock (Address: 0x1004d354)
_vsnprintf_s (Address: 0x1004d394)
_vsnwprintf (Address: 0x1004d398)
_XcptFilter (Address: 0x1004d370)
??_V@YAXPAX@Z (Address: 0x1004d3a4)
??0exception@@QAE@ABQBD@Z (Address: 0x1004d380)
??0exception@@QAE@ABQBDH@Z (Address: 0x1004d3a8)
??0exception@@QAE@ABV0@@Z (Address: 0x1004d39c)
??0exception@@QAE@XZ (Address: 0x1004d3a0)
??1exception@@UAE@XZ (Address: 0x1004d3b0)
??1type_info@@UAE@XZ (Address: 0x1004d35c)
??3@YAXPAX@Z (Address: 0x1004d3ac)
?terminate@@YAXXZ (Address: 0x1004d360)
?what@exception@@UBEPBDXZ (Address: 0x1004d390)
free (Address: 0x1004d368)
malloc (Address: 0x1004d388)
memcmp (Address: 0x1004d344)
memcpy (Address: 0x1004d378)
memcpy_s (Address: 0x1004d3b4)
memmove (Address: 0x1004d374)
memmove_s (Address: 0x1004d33c)
memset (Address: 0x1004d3bc)
realloc (Address: 0x1004d340)

ntdll.dll

NtQueryWnfStateData (Address: 0x1004d3c8)
RtlPublishWnfStateData (Address: 0x1004d3cc)
RtlSubscribeWnfStateChangeNotification (Address: 0x1004d3c4)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1004d3d0)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x1004d00c)
IUnknown_AddRef_Proxy (Address: 0x1004d018)
IUnknown_QueryInterface_Proxy (Address: 0x1004d01c)
IUnknown_Release_Proxy (Address: 0x1004d004)
NdrDllCanUnloadNow (Address: 0x1004d010)
NdrDllGetClassObject (Address: 0x1004d008)
NdrOleAllocate (Address: 0x1004d024)
NdrOleFree (Address: 0x1004d014)
NdrStubCall2 (Address: 0x1004d000)
NdrStubForwardingFunction (Address: 0x1004d020)

SHCORE.dll

(Address: 0x1004d02c)