Windows.Payments.dll

Description: Payment Windows Runtime DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5198

Architecture: 32-bit

Operating System: Windows NT

SHA256: 8f4b2ed6b1b4ae4f911c76c221c6108e

File Size: 400.0 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1b9d0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x1ba50)
  • DllGetClassObject (Ordinal: 3, Address: 0x1ba00)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-2.dll
  • AppPolicyGetLifecycleManagement (Address: 0x1005b060)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x1005b068)
  • CoCreateGuid (Address: 0x1005b06c)
  • CoCreateInstance (Address: 0x1005b080)
  • CoGetCallContext (Address: 0x1005b08c)
  • CoGetInterfaceAndReleaseStream (Address: 0x1005b078)
  • CoGetMalloc (Address: 0x1005b088)
  • CoMarshalInterface (Address: 0x1005b074)
  • CoReleaseMarshalData (Address: 0x1005b07c)
  • CoSetProxyBlanket (Address: 0x1005b094)
  • CoTaskMemAlloc (Address: 0x1005b084)
  • CoTaskMemFree (Address: 0x1005b090)
  • CreateStreamOnHGlobal (Address: 0x1005b070)
  • StringFromGUID2 (Address: 0x1005b098)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1005b0a0)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x1005b0c4)
  • CStdStubBuffer2_CountRefs (Address: 0x1005b0d8)
  • CStdStubBuffer2_Disconnect (Address: 0x1005b0ac)
  • CStdStubBuffer2_QueryInterface (Address: 0x1005b0bc)
  • NdrProxyForwardingFunction3 (Address: 0x1005b0e4)
  • NdrProxyForwardingFunction4 (Address: 0x1005b0f8)
  • NdrProxyForwardingFunction5 (Address: 0x1005b0fc)
  • ObjectStublessClient10 (Address: 0x1005b0f0)
  • ObjectStublessClient11 (Address: 0x1005b0dc)
  • ObjectStublessClient12 (Address: 0x1005b0c8)
  • ObjectStublessClient13 (Address: 0x1005b0c0)
  • ObjectStublessClient14 (Address: 0x1005b0b0)
  • ObjectStublessClient15 (Address: 0x1005b0b8)
  • ObjectStublessClient16 (Address: 0x1005b0d0)
  • ObjectStublessClient17 (Address: 0x1005b110)
  • ObjectStublessClient18 (Address: 0x1005b100)
  • ObjectStublessClient19 (Address: 0x1005b0e0)
  • ObjectStublessClient20 (Address: 0x1005b120)
  • ObjectStublessClient21 (Address: 0x1005b10c)
  • ObjectStublessClient22 (Address: 0x1005b0e8)
  • ObjectStublessClient23 (Address: 0x1005b11c)
  • ObjectStublessClient24 (Address: 0x1005b108)
  • ObjectStublessClient25 (Address: 0x1005b104)
  • ObjectStublessClient26 (Address: 0x1005b114)
  • ObjectStublessClient27 (Address: 0x1005b0ec)
  • ObjectStublessClient28 (Address: 0x1005b118)
  • ObjectStublessClient3 (Address: 0x1005b0b4)
  • ObjectStublessClient6 (Address: 0x1005b0f4)
  • ObjectStublessClient7 (Address: 0x1005b0a8)
  • ObjectStublessClient8 (Address: 0x1005b0cc)
  • ObjectStublessClient9 (Address: 0x1005b0d4)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1005b130)
  • IsDebuggerPresent (Address: 0x1005b128)
  • OutputDebugStringW (Address: 0x1005b12c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1005b138)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1005b140)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1005b150)
  • RaiseException (Address: 0x1005b14c)
  • SetLastError (Address: 0x1005b158)
  • SetUnhandledExceptionFilter (Address: 0x1005b148)
  • UnhandledExceptionFilter (Address: 0x1005b154)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1005b160)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1005b170)
  • HeapAlloc (Address: 0x1005b16c)
  • HeapFree (Address: 0x1005b168)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1005b178)
  • LocalFree (Address: 0x1005b17c)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1005b184)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1005b198)
  • GetModuleFileNameA (Address: 0x1005b18c)
  • GetModuleHandleExW (Address: 0x1005b190)
  • GetModuleHandleW (Address: 0x1005b194)
  • GetProcAddress (Address: 0x1005b19c)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1005b1a4)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1005b1b0)
  • GetCurrentProcessId (Address: 0x1005b1b8)
  • GetCurrentThreadId (Address: 0x1005b1ac)
  • OpenProcessToken (Address: 0x1005b1b4)
  • TerminateProcess (Address: 0x1005b1bc)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1005b1c8)
  • OpenProcess (Address: 0x1005b1c4)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1005b1d0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1005b1d8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1005b228)
  • AcquireSRWLockShared (Address: 0x1005b218)
  • CreateEventExW (Address: 0x1005b1fc)
  • CreateEventW (Address: 0x1005b1f0)
  • CreateMutexExW (Address: 0x1005b21c)
  • CreateSemaphoreExW (Address: 0x1005b200)
  • DeleteCriticalSection (Address: 0x1005b20c)
  • EnterCriticalSection (Address: 0x1005b1ec)
  • InitializeCriticalSection (Address: 0x1005b1f8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1005b1e4)
  • InitializeCriticalSectionEx (Address: 0x1005b1f4)
  • InitializeSRWLock (Address: 0x1005b204)
  • LeaveCriticalSection (Address: 0x1005b214)
  • OpenEventW (Address: 0x1005b220)
  • OpenSemaphoreW (Address: 0x1005b230)
  • ReleaseMutex (Address: 0x1005b210)
  • ReleaseSemaphore (Address: 0x1005b224)
  • ReleaseSRWLockExclusive (Address: 0x1005b1e8)
  • ReleaseSRWLockShared (Address: 0x1005b234)
  • ResetEvent (Address: 0x1005b208)
  • SetEvent (Address: 0x1005b1e0)
  • WaitForSingleObject (Address: 0x1005b238)
  • WaitForSingleObjectEx (Address: 0x1005b22c)
api-ms-win-core-synch-l1-2-0.dll
  • InitializeConditionVariable (Address: 0x1005b24c)
  • InitOnceBeginInitialize (Address: 0x1005b240)
  • InitOnceComplete (Address: 0x1005b250)
  • InitOnceExecuteOnce (Address: 0x1005b248)
  • Sleep (Address: 0x1005b244)
  • SleepConditionVariableCS (Address: 0x1005b254)
  • WakeAllConditionVariable (Address: 0x1005b258)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1005b260)
  • GetTickCount (Address: 0x1005b264)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWait (Address: 0x1005b274)
  • CreateThreadpoolWait (Address: 0x1005b26c)
  • SetThreadpoolWait (Address: 0x1005b270)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1005b278)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1005b284)
  • EncodePointer (Address: 0x1005b280)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x1005b28c)
  • RoOriginateError (Address: 0x1005b298)
  • RoOriginateErrorW (Address: 0x1005b29c)
  • RoTransformError (Address: 0x1005b290)
  • SetRestrictedErrorInfo (Address: 0x1005b294)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x1005b2ac)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1005b2a4)
  • RoReportFailedDelegate (Address: 0x1005b2a8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1005b2b4)
  • RoGetActivationFactory (Address: 0x1005b2b8)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
  • RoCreatePropertySetSerializer (Address: 0x1005b2c0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x1005b2e0)
  • HSTRING_UserMarshal (Address: 0x1005b2e4)
  • HSTRING_UserSize (Address: 0x1005b2e8)
  • HSTRING_UserUnmarshal (Address: 0x1005b2dc)
  • WindowsCompareStringOrdinal (Address: 0x1005b2d4)
  • WindowsCreateString (Address: 0x1005b2ec)
  • WindowsCreateStringReference (Address: 0x1005b2d8)
  • WindowsDeleteString (Address: 0x1005b2c8)
  • WindowsDuplicateString (Address: 0x1005b2d0)
  • WindowsGetStringRawBuffer (Address: 0x1005b2f0)
  • WindowsIsStringEmpty (Address: 0x1005b2f4)
  • WindowsStringHasEmbeddedNull (Address: 0x1005b2f8)
  • WindowsSubstringWithSpecifiedLength (Address: 0x1005b2cc)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1005b37c)
  • __std_terminate (Address: 0x1005b378)
  • _CxxThrowException (Address: 0x1005b344)
  • _except_handler4_common (Address: 0x1005b340)
  • _o___std_exception_copy (Address: 0x1005b368)
  • _o___std_exception_destroy (Address: 0x1005b364)
  • _o___std_type_info_destroy_list (Address: 0x1005b360)
  • _o___stdio_common_vsnprintf_s (Address: 0x1005b35c)
  • _o___stdio_common_vswprintf (Address: 0x1005b358)
  • _o__callnewh (Address: 0x1005b354)
  • _o__cexit (Address: 0x1005b350)
  • _o__configure_narrow_argv (Address: 0x1005b34c)
  • _o__crt_atexit (Address: 0x1005b348)
  • _o__errno (Address: 0x1005b374)
  • _o__execute_onexit_table (Address: 0x1005b370)
  • _o__initialize_narrow_environment (Address: 0x1005b300)
  • _o__initialize_onexit_table (Address: 0x1005b304)
  • _o__invalid_parameter_noinfo (Address: 0x1005b308)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1005b30c)
  • _o__purecall (Address: 0x1005b310)
  • _o__register_onexit_function (Address: 0x1005b314)
  • _o__seh_filter_dll (Address: 0x1005b318)
  • _o__wcsicmp (Address: 0x1005b320)
  • _o_ceil (Address: 0x1005b324)
  • _o_free (Address: 0x1005b328)
  • _o_malloc (Address: 0x1005b32c)
  • _o_realloc (Address: 0x1005b330)
  • _o_terminate (Address: 0x1005b334)
  • _o_toupper (Address: 0x1005b338)
  • _o_wcstoul (Address: 0x1005b33c)
  • memcmp (Address: 0x1005b380)
  • memcpy (Address: 0x1005b384)
  • memmove (Address: 0x1005b31c)
  • strchr (Address: 0x1005b36c)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1005b390)
  • _initterm_e (Address: 0x1005b38c)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1005b39c)
  • wcscspn (Address: 0x1005b398)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1005b3b0)
  • EventProviderEnabled (Address: 0x1005b3b8)
  • EventRegister (Address: 0x1005b3a8)
  • EventSetInformation (Address: 0x1005b3a4)
  • EventUnregister (Address: 0x1005b3b4)
  • EventWriteTransfer (Address: 0x1005b3ac)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x1005b3c0)
  • EqualSid (Address: 0x1005b3c8)
  • GetTokenInformation (Address: 0x1005b3c4)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x1005b3d4)
  • SHTaskPoolQueueTask (Address: 0x1005b3d0)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHGetThreadRef (Address: 0x1005b3dc)
bcrypt.dll
  • BCryptCloseAlgorithmProvider (Address: 0x1005b418)
  • BCryptDecrypt (Address: 0x1005b3e8)
  • BCryptDeriveKey (Address: 0x1005b400)
  • BCryptDestroyKey (Address: 0x1005b40c)
  • BCryptDestroySecret (Address: 0x1005b3e4)
  • BCryptEncrypt (Address: 0x1005b3ec)
  • BCryptExportKey (Address: 0x1005b408)
  • BCryptFinalizeKeyPair (Address: 0x1005b3f0)
  • BCryptGenerateKeyPair (Address: 0x1005b3fc)
  • BCryptGenerateSymmetricKey (Address: 0x1005b3f8)
  • BCryptGenRandom (Address: 0x1005b410)
  • BCryptImportKeyPair (Address: 0x1005b414)
  • BCryptOpenAlgorithmProvider (Address: 0x1005b41c)
  • BCryptSecretAgreement (Address: 0x1005b404)
  • BCryptSetProperty (Address: 0x1005b3f4)
BiWinrt.dll
  • BiRtCreateEventForApp (Address: 0x1005b004)
  • BiRtDeleteEventForApp (Address: 0x1005b000)
combase.dll
  • (Address: 0x1005b424)
  • (Address: 0x1005b428)
  • (Address: 0x1005b42c)
msvcp_win.dll
  • _Wcscoll (Address: 0x1005b474)
  • _Wcsxfrm (Address: 0x1005b470)
  • ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x1005b440)
  • ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1005b454)
  • ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x1005b480)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x1005b468)
  • ?_Incref@facet@locale@std@@UAEXXZ (Address: 0x1005b438)
  • ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x1005b46c)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1005b48c)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1005b43c)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1005b458)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x1005b45c)
  • ??0_Locinfo@std@@QAE@PBD@Z (Address: 0x1005b484)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x1005b47c)
  • ??0facet@locale@std@@IAE@I@Z (Address: 0x1005b444)
  • ??1_Locinfo@std@@QAE@XZ (Address: 0x1005b434)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x1005b478)
  • ??1facet@locale@std@@MAE@XZ (Address: 0x1005b448)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x1005b488)
  • ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x1005b460)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x1005b464)
  • ?is@?$ctype@G@std@@QBE_NFG@Z (Address: 0x1005b44c)
  • ?tolower@?$ctype@G@std@@QBEGG@Z (Address: 0x1005b450)
  • ?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z (Address: 0x1005b490)
ntdll.dll
  • RtlDeriveCapabilitySidsFromName (Address: 0x1005b498)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1005b058)
  • CStdStubBuffer_Connect (Address: 0x1005b04c)
  • CStdStubBuffer_CountRefs (Address: 0x1005b034)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1005b024)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1005b040)
  • CStdStubBuffer_Disconnect (Address: 0x1005b050)
  • CStdStubBuffer_Invoke (Address: 0x1005b014)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1005b048)
  • CStdStubBuffer_QueryInterface (Address: 0x1005b038)
  • IUnknown_AddRef_Proxy (Address: 0x1005b020)
  • IUnknown_QueryInterface_Proxy (Address: 0x1005b044)
  • IUnknown_Release_Proxy (Address: 0x1005b030)
  • NdrCStdStubBuffer_Release (Address: 0x1005b010)
  • NdrCStdStubBuffer2_Release (Address: 0x1005b054)
  • NdrDllCanUnloadNow (Address: 0x1005b00c)
  • NdrDllGetClassObject (Address: 0x1005b02c)
  • NdrOleAllocate (Address: 0x1005b03c)
  • NdrOleFree (Address: 0x1005b028)
  • NdrStubCall2 (Address: 0x1005b01c)
  • NdrStubForwardingFunction (Address: 0x1005b018)