Windows.Media.MediaControl.dll

Description: Windows Runtime MediaControl server DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: 2c0abe626c4deb39a99ba2cd63a227d0

File Size: 458.1 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • CreateCaptureAudioStateMonitor (Ordinal: 1, Address: 0x2ca00)
  • CreateCaptureAudioStateMonitorForCategory (Ordinal: 2, Address: 0x2ca40)
  • CreateCaptureAudioStateMonitorForCategoryAndDeviceId (Ordinal: 3, Address: 0x2cac0)
  • CreateCaptureAudioStateMonitorForCategoryAndDeviceRole (Ordinal: 4, Address: 0x2cb40)
  • CreateRenderAudioStateMonitor (Ordinal: 5, Address: 0x2cbd0)
  • CreateRenderAudioStateMonitorForCategory (Ordinal: 6, Address: 0x2cc10)
  • CreateRenderAudioStateMonitorForCategoryAndDeviceId (Ordinal: 7, Address: 0x2cc90)
  • CreateRenderAudioStateMonitorForCategoryAndDeviceRole (Ordinal: 8, Address: 0x2cd10)
  • DllCanUnloadNow (Ordinal: 9, Address: 0x25660)
  • DllGetActivationFactory (Ordinal: 10, Address: 0x24a60)
  • DllGetClassObject (Ordinal: 11, Address: 0x21410)

Imported DLLs & Functions

api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x10067088)
  • CStdStubBuffer2_CountRefs (Address: 0x10067100)
  • CStdStubBuffer2_Disconnect (Address: 0x100670d4)
  • CStdStubBuffer2_QueryInterface (Address: 0x100670c4)
  • NdrProxyForwardingFunction3 (Address: 0x10067080)
  • NdrProxyForwardingFunction4 (Address: 0x100670b4)
  • NdrProxyForwardingFunction5 (Address: 0x100670b0)
  • ObjectStublessClient10 (Address: 0x10067094)
  • ObjectStublessClient11 (Address: 0x10067104)
  • ObjectStublessClient12 (Address: 0x100670f8)
  • ObjectStublessClient13 (Address: 0x100670cc)
  • ObjectStublessClient14 (Address: 0x100670c8)
  • ObjectStublessClient15 (Address: 0x100670dc)
  • ObjectStublessClient16 (Address: 0x100670fc)
  • ObjectStublessClient17 (Address: 0x10067098)
  • ObjectStublessClient18 (Address: 0x100670e8)
  • ObjectStublessClient19 (Address: 0x100670c0)
  • ObjectStublessClient20 (Address: 0x100670e0)
  • ObjectStublessClient21 (Address: 0x100670bc)
  • ObjectStublessClient22 (Address: 0x100670f4)
  • ObjectStublessClient23 (Address: 0x100670d8)
  • ObjectStublessClient24 (Address: 0x1006708c)
  • ObjectStublessClient25 (Address: 0x10067090)
  • ObjectStublessClient26 (Address: 0x1006709c)
  • ObjectStublessClient27 (Address: 0x100670ec)
  • ObjectStublessClient28 (Address: 0x100670e4)
  • ObjectStublessClient29 (Address: 0x1006707c)
  • ObjectStublessClient3 (Address: 0x100670f0)
  • ObjectStublessClient30 (Address: 0x10067084)
  • ObjectStublessClient4 (Address: 0x100670b8)
  • ObjectStublessClient5 (Address: 0x100670a0)
  • ObjectStublessClient6 (Address: 0x100670ac)
  • ObjectStublessClient7 (Address: 0x100670d0)
  • ObjectStublessClient8 (Address: 0x100670a8)
  • ObjectStublessClient9 (Address: 0x100670a4)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1006710c)
  • IsDebuggerPresent (Address: 0x10067110)
  • OutputDebugStringW (Address: 0x10067114)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1006711c)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10067124)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1006713c)
  • RaiseException (Address: 0x10067138)
  • SetLastError (Address: 0x10067134)
  • SetUnhandledExceptionFilter (Address: 0x1006712c)
  • UnhandledExceptionFilter (Address: 0x10067130)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10067144)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10067154)
  • HeapAlloc (Address: 0x10067150)
  • HeapFree (Address: 0x1006714c)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1006715c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x10067170)
  • GetModuleFileNameA (Address: 0x10067178)
  • GetModuleHandleExW (Address: 0x10067164)
  • GetModuleHandleW (Address: 0x10067168)
  • GetProcAddress (Address: 0x1006716c)
  • LoadStringW (Address: 0x10067174)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x10067180)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x10067188)
  • GetCurrentProcessId (Address: 0x10067194)
  • GetCurrentThreadId (Address: 0x10067198)
  • GetProcessId (Address: 0x1006719c)
  • OpenProcessToken (Address: 0x10067190)
  • TerminateProcess (Address: 0x1006718c)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x100671a4)
  • OpenProcess (Address: 0x100671a8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100671b0)
api-ms-win-core-quirks-l1-1-0.dll
  • QuirkIsEnabled (Address: 0x100671b8)
api-ms-win-core-registry-l1-1-0.dll
  • RegGetValueW (Address: 0x100671c0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10067208)
  • AcquireSRWLockShared (Address: 0x10067204)
  • CreateEventW (Address: 0x100671cc)
  • CreateMutexExW (Address: 0x100671f0)
  • CreateSemaphoreExW (Address: 0x100671e8)
  • DeleteCriticalSection (Address: 0x100671dc)
  • EnterCriticalSection (Address: 0x100671d4)
  • InitializeCriticalSection (Address: 0x100671c8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100671f8)
  • InitializeCriticalSectionEx (Address: 0x100671e0)
  • InitializeSRWLock (Address: 0x100671e4)
  • LeaveCriticalSection (Address: 0x100671d8)
  • OpenSemaphoreW (Address: 0x100671fc)
  • ReleaseMutex (Address: 0x10067210)
  • ReleaseSemaphore (Address: 0x10067214)
  • ReleaseSRWLockExclusive (Address: 0x100671f4)
  • ReleaseSRWLockShared (Address: 0x100671ec)
  • ResetEvent (Address: 0x10067218)
  • SetEvent (Address: 0x100671d0)
  • WaitForSingleObject (Address: 0x10067200)
  • WaitForSingleObjectEx (Address: 0x1006720c)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x10067230)
  • InitOnceComplete (Address: 0x10067220)
  • InitOnceExecuteOnce (Address: 0x10067228)
  • WaitOnAddress (Address: 0x1006722c)
  • WakeByAddressAll (Address: 0x10067224)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x10067238)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWork (Address: 0x10067244)
  • CreateThreadpoolWork (Address: 0x10067248)
  • FreeLibraryWhenCallbackReturns (Address: 0x1006724c)
  • SubmitThreadpoolWork (Address: 0x10067240)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x10067254)
  • EncodePointer (Address: 0x10067258)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x100672d0)
  • __std_terminate (Address: 0x100672cc)
  • _CxxThrowException (Address: 0x100672a8)
  • _except_handler4_common (Address: 0x100672a4)
  • _o___std_exception_copy (Address: 0x100672c0)
  • _o___std_exception_destroy (Address: 0x100672bc)
  • _o___std_type_info_destroy_list (Address: 0x100672b8)
  • _o___stdio_common_vsnprintf_s (Address: 0x100672b4)
  • _o___stdio_common_vswprintf (Address: 0x100672b0)
  • _o__callnewh (Address: 0x100672d8)
  • _o__cexit (Address: 0x100672c8)
  • _o__configure_narrow_argv (Address: 0x100672ac)
  • _o__crt_atexit (Address: 0x100672c4)
  • _o__errno (Address: 0x10067260)
  • _o__execute_onexit_table (Address: 0x10067264)
  • _o__initialize_narrow_environment (Address: 0x10067268)
  • _o__initialize_onexit_table (Address: 0x1006726c)
  • _o__invalid_parameter_noinfo (Address: 0x10067270)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x10067274)
  • _o__purecall (Address: 0x10067278)
  • _o__register_onexit_function (Address: 0x1006727c)
  • _o__resetstkoflw (Address: 0x10067280)
  • _o__seh_filter_dll (Address: 0x10067284)
  • _o_ceil (Address: 0x1006728c)
  • _o_free (Address: 0x10067290)
  • _o_malloc (Address: 0x10067294)
  • _o_realloc (Address: 0x10067298)
  • _o_terminate (Address: 0x1006729c)
  • _o_wcscpy_s (Address: 0x100672a0)
  • memcmp (Address: 0x100672d4)
  • memcpy (Address: 0x100672dc)
  • memmove (Address: 0x10067288)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x100672e8)
  • _initterm_e (Address: 0x100672e4)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x100672f0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x10067300)
  • GetTraceEnableLevel (Address: 0x100672fc)
  • GetTraceLoggerHandle (Address: 0x100672f8)
  • RegisterTraceGuidsW (Address: 0x10067304)
  • UnregisterTraceGuids (Address: 0x10067308)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x10067318)
  • EventRegister (Address: 0x1006731c)
  • EventSetInformation (Address: 0x10067310)
  • EventUnregister (Address: 0x10067320)
  • EventWriteTransfer (Address: 0x10067314)
api-ms-win-security-base-l1-1-0.dll
  • CheckTokenMembership (Address: 0x1006732c)
  • GetTokenInformation (Address: 0x10067328)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSidToSidW (Address: 0x10067334)
api-ms-win-service-private-l1-1-0.dll
  • SubscribeServiceChangeNotifications (Address: 0x10067340)
  • UnsubscribeServiceChangeNotifications (Address: 0x1006733c)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
  • CreateRandomAccessStreamOverStream (Address: 0x10067348)
  • CreateStreamOverRandomAccessStream (Address: 0x1006734c)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x10067354)
  • SHTaskPoolGetUniqueContext (Address: 0x10067358)
  • SHTaskPoolQueueTask (Address: 0x1006735c)
combase.dll
  • (Address: 0x10067364)
  • (Address: 0x10067368)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10067370)
ntdll.dll
  • NtQueryInformationToken (Address: 0x10067398)
  • NtQueryWnfStateData (Address: 0x10067390)
  • RtlAllocateHeap (Address: 0x10067384)
  • RtlCompareUnicodeString (Address: 0x1006738c)
  • RtlFreeHeap (Address: 0x1006737c)
  • RtlInitUnicodeString (Address: 0x10067380)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x10067388)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x10067378)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x10067394)
OLEAUT32.dll
  • HWND_UserFree (Address: 0x10067008)
  • HWND_UserMarshal (Address: 0x10067000)
  • HWND_UserSize (Address: 0x10067004)
  • HWND_UserUnmarshal (Address: 0x1006700c)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x10067038)
  • CStdStubBuffer_Connect (Address: 0x10067060)
  • CStdStubBuffer_CountRefs (Address: 0x10067054)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x10067030)
  • CStdStubBuffer_DebugServerRelease (Address: 0x10067064)
  • CStdStubBuffer_Disconnect (Address: 0x10067074)
  • CStdStubBuffer_Invoke (Address: 0x10067024)
  • CStdStubBuffer_IsIIDSupported (Address: 0x10067068)
  • CStdStubBuffer_QueryInterface (Address: 0x10067058)
  • IUnknown_AddRef_Proxy (Address: 0x10067070)
  • IUnknown_QueryInterface_Proxy (Address: 0x1006706c)
  • IUnknown_Release_Proxy (Address: 0x10067050)
  • NdrClientCall4 (Address: 0x1006703c)
  • NdrCStdStubBuffer_Release (Address: 0x10067018)
  • NdrCStdStubBuffer2_Release (Address: 0x1006701c)
  • NdrDllCanUnloadNow (Address: 0x10067014)
  • NdrDllGetClassObject (Address: 0x10067020)
  • NdrOleAllocate (Address: 0x1006705c)
  • NdrOleFree (Address: 0x10067034)
  • NdrStubCall2 (Address: 0x1006702c)
  • NdrStubForwardingFunction (Address: 0x10067028)
  • RpcBindingFree (Address: 0x10067040)
  • RpcBindingFromStringBindingW (Address: 0x10067048)
  • RpcStringBindingComposeW (Address: 0x1006704c)
  • RpcStringFreeW (Address: 0x10067044)