Windows.Storage.ApplicationData.dll

Description: Windows Application Data API Server

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 8ebe1195459cb5a5fcdf28ba1941970d

File Size: 312.3 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CleanupTemporaryState (Ordinal: 1, Address: 0x2b610)
DllCanUnloadNow (Ordinal: 2, Address: 0x1c2a0)
DllGetActivationFactory (Ordinal: 3, Address: 0x1b6b0)
DllGetClassObject (Ordinal: 4, Address: 0x2aba0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1004606c)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x100460ac)
CStdStubBuffer2_CountRefs (Address: 0x10046080)
CStdStubBuffer2_Disconnect (Address: 0x100460b8)
CStdStubBuffer2_QueryInterface (Address: 0x1004607c)
NdrProxyForwardingFunction3 (Address: 0x100460bc)
NdrProxyForwardingFunction4 (Address: 0x10046088)
NdrProxyForwardingFunction5 (Address: 0x1004608c)
ObjectStublessClient10 (Address: 0x100460a4)
ObjectStublessClient11 (Address: 0x10046084)
ObjectStublessClient12 (Address: 0x100460a8)
ObjectStublessClient13 (Address: 0x10046074)
ObjectStublessClient14 (Address: 0x1004609c)
ObjectStublessClient15 (Address: 0x10046094)
ObjectStublessClient16 (Address: 0x100460b4)
ObjectStublessClient17 (Address: 0x100460a0)
ObjectStublessClient18 (Address: 0x100460c4)
ObjectStublessClient3 (Address: 0x10046078)
ObjectStublessClient6 (Address: 0x100460b0)
ObjectStublessClient7 (Address: 0x10046090)
ObjectStublessClient8 (Address: 0x100460c0)
ObjectStublessClient9 (Address: 0x10046098)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100460d0)
IsDebuggerPresent (Address: 0x100460d4)
OutputDebugStringW (Address: 0x100460cc)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100460dc)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100460e4)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100460f0)
RaiseException (Address: 0x100460fc)
SetLastError (Address: 0x100460f8)
SetUnhandledExceptionFilter (Address: 0x100460ec)
UnhandledExceptionFilter (Address: 0x100460f4)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x10046104)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x10046118)
CreateFileW (Address: 0x10046128)
DeleteFileW (Address: 0x10046110)
FindClose (Address: 0x10046114)
FindFirstFileW (Address: 0x10046130)
FindNextFileW (Address: 0x10046120)
GetDiskFreeSpaceExW (Address: 0x10046134)
GetFileAttributesW (Address: 0x1004611c)
GetFileInformationByHandle (Address: 0x10046124)
RemoveDirectoryW (Address: 0x1004612c)
SetFileAttributesW (Address: 0x1004610c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1004613c)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1004614c)
HeapAlloc (Address: 0x10046148)
HeapFree (Address: 0x10046144)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10046154)
LocalFree (Address: 0x10046158)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x10046170)
GetModuleHandleExW (Address: 0x10046164)
GetModuleHandleW (Address: 0x10046168)
GetProcAddress (Address: 0x10046160)
LoadStringW (Address: 0x1004616c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10046178)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10046184)
GetCurrentProcessId (Address: 0x10046180)
GetCurrentThread (Address: 0x10046198)
GetCurrentThreadId (Address: 0x1004618c)
OpenProcessToken (Address: 0x10046190)
ProcessIdToSessionId (Address: 0x10046188)
TerminateProcess (Address: 0x10046194)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100461a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100461a8)

api-ms-win-core-psm-app-l1-1-0.dll

PsmQueryCurrentAppState (Address: 0x100461b0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100461bc)
RegEnumKeyExW (Address: 0x100461b8)
RegGetValueW (Address: 0x100461c0)
RegOpenKeyExW (Address: 0x100461c4)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100461cc)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100461e0)
AcquireSRWLockShared (Address: 0x100461dc)
CreateEventExW (Address: 0x100461f4)
CreateMutexExW (Address: 0x10046210)
CreateSemaphoreExW (Address: 0x1004621c)
DeleteCriticalSection (Address: 0x10046214)
EnterCriticalSection (Address: 0x10046208)
InitializeCriticalSectionEx (Address: 0x100461ec)
InitializeSRWLock (Address: 0x100461d8)
LeaveCriticalSection (Address: 0x100461e4)
OpenSemaphoreW (Address: 0x10046204)
ReleaseMutex (Address: 0x100461fc)
ReleaseSemaphore (Address: 0x100461f0)
ReleaseSRWLockExclusive (Address: 0x100461e8)
ReleaseSRWLockShared (Address: 0x100461d4)
ResetEvent (Address: 0x10046218)
SetEvent (Address: 0x1004620c)
WaitForSingleObject (Address: 0x100461f8)
WaitForSingleObjectEx (Address: 0x10046200)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x10046228)
Sleep (Address: 0x10046224)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x10046234)
GetSystemTimeAsFileTime (Address: 0x10046238)
GetTickCount (Address: 0x10046230)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10046258)
CloseThreadpoolWait (Address: 0x10046264)
CloseThreadpoolWork (Address: 0x10046240)
CreateThreadpoolTimer (Address: 0x10046254)
CreateThreadpoolWait (Address: 0x1004625c)
CreateThreadpoolWork (Address: 0x1004624c)
FreeLibraryWhenCallbackReturns (Address: 0x10046244)
SetThreadpoolTimer (Address: 0x10046250)
SetThreadpoolWait (Address: 0x1004626c)
SubmitThreadpoolWork (Address: 0x10046248)
WaitForThreadpoolTimerCallbacks (Address: 0x10046260)
WaitForThreadpoolWaitCallbacks (Address: 0x10046268)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10046274)
EncodePointer (Address: 0x10046278)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x10046288)
EventRegister (Address: 0x1004628c)
EventSetInformation (Address: 0x10046290)
EventUnregister (Address: 0x10046280)
EventWriteTransfer (Address: 0x10046284)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1004629c)
GetLengthSid (Address: 0x100462b0)
GetTokenInformation (Address: 0x10046298)
ImpersonateLoggedOnUser (Address: 0x100462a8)
IsValidSecurityDescriptor (Address: 0x100462ac)
IsValidSid (Address: 0x100462a0)
RevertToSelf (Address: 0x100462a4)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x100462b8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x100462bc)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100462c4)
SHTaskPoolQueueTask (Address: 0x100462c8)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100462d4)
__dllonexit (Address: 0x1004630c)
_amsg_exit (Address: 0x1004631c)
_callnewh (Address: 0x100462f4)
_except_handler4_common (Address: 0x100462dc)
_ftol2 (Address: 0x100462fc)
_initterm (Address: 0x10046320)
_lock (Address: 0x100462d0)
_onexit (Address: 0x10046308)
_purecall (Address: 0x10046318)
_unlock (Address: 0x10046310)
_vsnwprintf (Address: 0x100462f0)
_XcptFilter (Address: 0x100462ec)
free (Address: 0x10046314)
malloc (Address: 0x100462f8)
memcmp (Address: 0x10046300)
memcpy (Address: 0x10046304)
memcpy_s (Address: 0x100462e0)
memmove (Address: 0x100462d8)
memmove_s (Address: 0x100462e4)
memset (Address: 0x10046324)
toupper (Address: 0x100462e8)

ntdll.dll

EtwEventEnabled (Address: 0x1004632c)
EtwEventRegister (Address: 0x10046330)
EtwEventUnregister (Address: 0x10046334)
EtwEventWrite (Address: 0x1004635c)
NtQueryInformationThread (Address: 0x10046374)
NtQueryInformationToken (Address: 0x1004636c)
NtSetInformationFile (Address: 0x1004637c)
NtSetInformationThread (Address: 0x10046370)
RtlAcquireSRWLockExclusive (Address: 0x10046344)
RtlAcquireSRWLockShared (Address: 0x1004633c)
RtlConvertSidToUnicodeString (Address: 0x10046350)
RtlCopySid (Address: 0x10046364)
RtlDeleteCriticalSection (Address: 0x10046388)
RtlEnterCriticalSection (Address: 0x10046384)
RtlFreeUnicodeString (Address: 0x10046354)
RtlGetAppContainerSidType (Address: 0x10046368)
RtlInitializeCriticalSection (Address: 0x1004638c)
RtlInitializeSRWLock (Address: 0x10046348)
RtlLeaveCriticalSection (Address: 0x10046380)
RtlNtStatusToDosErrorNoTeb (Address: 0x10046378)
RtlReleaseSRWLockExclusive (Address: 0x10046340)
RtlReleaseSRWLockShared (Address: 0x10046338)
RtlValidSid (Address: 0x1004634c)
WinSqmIncrementDWORD (Address: 0x10046358)
WinSqmSetDWORD (Address: 0x10046390)
WinSqmSetString (Address: 0x10046360)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10046054)
CStdStubBuffer_Connect (Address: 0x10046034)
CStdStubBuffer_CountRefs (Address: 0x1004604c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1004605c)
CStdStubBuffer_DebugServerRelease (Address: 0x10046018)
CStdStubBuffer_Disconnect (Address: 0x1004600c)
CStdStubBuffer_Invoke (Address: 0x1004603c)
CStdStubBuffer_IsIIDSupported (Address: 0x10046064)
CStdStubBuffer_QueryInterface (Address: 0x10046048)
I_RpcExceptionFilter (Address: 0x10046000)
IUnknown_AddRef_Proxy (Address: 0x10046058)
IUnknown_QueryInterface_Proxy (Address: 0x10046008)
IUnknown_Release_Proxy (Address: 0x10046050)
NdrClientCall4 (Address: 0x1004602c)
NdrCStdStubBuffer_Release (Address: 0x10046010)
NdrCStdStubBuffer2_Release (Address: 0x10046030)
NdrDllCanUnloadNow (Address: 0x10046014)
NdrDllGetClassObject (Address: 0x1004601c)
NdrOleAllocate (Address: 0x10046038)
NdrOleFree (Address: 0x10046060)
NdrStubCall2 (Address: 0x10046044)
NdrStubForwardingFunction (Address: 0x10046040)
RpcBindingFromStringBindingW (Address: 0x10046024)
RpcBindingSetAuthInfoExW (Address: 0x10046028)
RpcStringBindingComposeW (Address: 0x10046020)
RpcStringFreeW (Address: 0x10046004)