XpsPrint.dll

Description: XPS Printing DLL

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: d5562603962f0e7e12893a734c6614b8

File Size: 941.0 KB

Uploaded At: Dec. 1, 2025, 8:08 a.m.

Views: 18

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 2, Address: 0x4b110)
StartXpsPrintJob1 (Ordinal: 3, Address: 0x4b460)
(Ordinal: 4, Address: 0x4b610)
(Ordinal: 5, Address: 0x4f1b0)
(Ordinal: 6, Address: 0x4f2f0)
StartXpsPrintJob (Ordinal: 7, Address: 0x4aec0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x100df05c)
CoCreateInstance (Address: 0x100df06c)
CoCreateInstanceEx (Address: 0x100df064)
CoGetMalloc (Address: 0x100df058)
CoInitializeEx (Address: 0x100df070)
CoSetProxyBlanket (Address: 0x100df04c)
CoTaskMemAlloc (Address: 0x100df050)
CoTaskMemFree (Address: 0x100df060)
CoUninitialize (Address: 0x100df054)
CreateStreamOnHGlobal (Address: 0x100df068)
StringFromCLSID (Address: 0x100df074)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100df084)
IsDebuggerPresent (Address: 0x100df080)
OutputDebugStringW (Address: 0x100df07c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100df08c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100df094)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100df09c)
SetLastError (Address: 0x100df0a8)
SetUnhandledExceptionFilter (Address: 0x100df0a4)
UnhandledExceptionFilter (Address: 0x100df0a0)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x100df0c4)
CreateFileW (Address: 0x100df0bc)
DeleteFileW (Address: 0x100df0d8)
FindClose (Address: 0x100df0d4)
FindFirstFileW (Address: 0x100df0d0)
FindNextFileW (Address: 0x100df0b0)
FlushFileBuffers (Address: 0x100df0e0)
GetFileAttributesW (Address: 0x100df0b4)
ReadFile (Address: 0x100df0cc)
SetEndOfFile (Address: 0x100df0dc)
SetFilePointer (Address: 0x100df0c8)
SetFilePointerEx (Address: 0x100df0c0)
WriteFile (Address: 0x100df0b8)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x100df0e8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100df0f4)
DuplicateHandle (Address: 0x100df0f0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100df100)
HeapAlloc (Address: 0x100df104)
HeapFree (Address: 0x100df0fc)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x100df110)
GlobalFree (Address: 0x100df10c)
LocalFree (Address: 0x100df114)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x100df11c)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x100df124)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x100df130)
FreeLibraryAndExitThread (Address: 0x100df134)
GetModuleFileNameA (Address: 0x100df12c)
GetModuleHandleExW (Address: 0x100df140)
GetModuleHandleW (Address: 0x100df144)
GetProcAddress (Address: 0x100df138)
LoadLibraryExW (Address: 0x100df13c)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x100df14c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100df154)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x100df15c)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x100df164)
ExitProcess (Address: 0x100df16c)
GetCurrentProcess (Address: 0x100df178)
GetCurrentProcessId (Address: 0x100df190)
GetCurrentThread (Address: 0x100df170)
GetCurrentThreadId (Address: 0x100df18c)
GetProcessTimes (Address: 0x100df174)
OpenThreadToken (Address: 0x100df184)
ResumeThread (Address: 0x100df188)
SetThreadToken (Address: 0x100df17c)
TerminateProcess (Address: 0x100df168)
TlsSetValue (Address: 0x100df180)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100df198)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100df1a0)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x100df1a8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100df1b4)
RegOpenKeyExW (Address: 0x100df1b0)
RegQueryValueExW (Address: 0x100df1b8)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x100df1c8)
GetStringTypeW (Address: 0x100df1c4)
MultiByteToWideChar (Address: 0x100df1cc)
WideCharToMultiByte (Address: 0x100df1c0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100df1f8)
AcquireSRWLockShared (Address: 0x100df20c)
CreateEventW (Address: 0x100df21c)
CreateMutexExW (Address: 0x100df1e8)
CreateSemaphoreExW (Address: 0x100df204)
DeleteCriticalSection (Address: 0x100df220)
EnterCriticalSection (Address: 0x100df1dc)
InitializeCriticalSection (Address: 0x100df208)
InitializeCriticalSectionAndSpinCount (Address: 0x100df1d8)
InitializeCriticalSectionEx (Address: 0x100df1e0)
LeaveCriticalSection (Address: 0x100df1d4)
OpenSemaphoreW (Address: 0x100df210)
ReleaseMutex (Address: 0x100df1fc)
ReleaseSemaphore (Address: 0x100df218)
ReleaseSRWLockExclusive (Address: 0x100df1ec)
ReleaseSRWLockShared (Address: 0x100df200)
ResetEvent (Address: 0x100df1f4)
SetEvent (Address: 0x100df1f0)
WaitForSingleObject (Address: 0x100df1e4)
WaitForSingleObjectEx (Address: 0x100df214)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100df238)
InitOnceComplete (Address: 0x100df234)
Sleep (Address: 0x100df230)
SleepConditionVariableSRW (Address: 0x100df228)
WakeAllConditionVariable (Address: 0x100df22c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100df244)
GetTickCount (Address: 0x100df240)
GetTickCount64 (Address: 0x100df248)

api-ms-win-core-sysinfo-l1-2-0.dll

VerSetConditionMask (Address: 0x100df250)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100df260)
CreateThreadpoolTimer (Address: 0x100df25c)
SetThreadpoolTimer (Address: 0x100df264)
WaitForThreadpoolTimerCallbacks (Address: 0x100df258)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueue (Address: 0x100df280)
CreateTimerQueueTimer (Address: 0x100df270)
DeleteTimerQueueEx (Address: 0x100df27c)
DeleteTimerQueueTimer (Address: 0x100df274)
QueueUserWorkItem (Address: 0x100df278)
UnregisterWaitEx (Address: 0x100df26c)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100df288)
EncodePointer (Address: 0x100df28c)

api-ms-win-core-version-l1-1-0.dll

VerQueryValueW (Address: 0x100df294)

api-ms-win-core-version-l1-1-1.dll

GetFileVersionInfoSizeW (Address: 0x100df2a0)
GetFileVersionInfoW (Address: 0x100df29c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x100df2ac)
GetTraceEnableLevel (Address: 0x100df2b4)
GetTraceLoggerHandle (Address: 0x100df2a8)
RegisterTraceGuidsW (Address: 0x100df2bc)
TraceMessage (Address: 0x100df2b0)
UnregisterTraceGuids (Address: 0x100df2b8)

api-ms-win-eventing-provider-l1-1-0.dll

EventEnabled (Address: 0x100df2cc)
EventRegister (Address: 0x100df2c4)
EventSetInformation (Address: 0x100df2c8)
EventUnregister (Address: 0x100df2d4)
EventWrite (Address: 0x100df2d0)
EventWriteTransfer (Address: 0x100df2d8)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x100df2e0)

api-ms-win-shcore-stream-l1-1-0.dll

SHCreateStreamOnFileW (Address: 0x100df2e8)

api-ms-win-shlwapi-ie-l1-1-0.dll

PathIsDirectoryW (Address: 0x100df2f0)

msvcrt.dll

___lc_codepage_func (Address: 0x100df348)
___lc_handle_func (Address: 0x100df334)
___mb_cur_max_func (Address: 0x100df3d8)
__crtLCMapStringA (Address: 0x100df34c)
__crtLCMapStringW (Address: 0x100df40c)
__CxxFrameHandler3 (Address: 0x100df300)
__dllonexit (Address: 0x100df360)
__pctype_func (Address: 0x100df2fc)
__uncaught_exception (Address: 0x100df308)
_amsg_exit (Address: 0x100df354)
_callnewh (Address: 0x100df36c)
_CxxThrowException (Address: 0x100df338)
_errno (Address: 0x100df320)
_except_handler4_common (Address: 0x100df3c4)
_finite (Address: 0x100df3b4)
_ftol2 (Address: 0x100df418)
_initterm (Address: 0x100df358)
_ismbblead (Address: 0x100df3e0)
_isnan (Address: 0x100df3c0)
_lock (Address: 0x100df31c)
_onexit (Address: 0x100df364)
_purecall (Address: 0x100df3f8)
_unlock (Address: 0x100df310)
_vsnprintf (Address: 0x100df3b0)
_vsnprintf_s (Address: 0x100df3e8)
_vsnwprintf (Address: 0x100df408)
_vsnwprintf_l (Address: 0x100df3b8)
_wcsdup (Address: 0x100df350)
_wcsicmp (Address: 0x100df394)
_wsetlocale (Address: 0x100df374)
_wtof (Address: 0x100df380)
_XcptFilter (Address: 0x100df33c)
??_V@YAXPAX@Z (Address: 0x100df414)
??0bad_cast@@QAE@ABV0@@Z (Address: 0x100df3c8)
??0bad_cast@@QAE@PBD@Z (Address: 0x100df3cc)
??0exception@@QAE@ABQBD@Z (Address: 0x100df3d4)
??0exception@@QAE@ABQBDH@Z (Address: 0x100df3dc)
??0exception@@QAE@ABV0@@Z (Address: 0x100df3ec)
??0exception@@QAE@XZ (Address: 0x100df3f0)
??1bad_cast@@UAE@XZ (Address: 0x100df3d0)
??1exception@@UAE@XZ (Address: 0x100df3f4)
??1type_info@@UAE@XZ (Address: 0x100df368)
??3@YAXPAX@Z (Address: 0x100df400)
?terminate@@YAXXZ (Address: 0x100df3fc)
?what@exception@@UBEPBDXZ (Address: 0x100df3e4)
abort (Address: 0x100df370)
calloc (Address: 0x100df35c)
free (Address: 0x100df3a0)
isalnum (Address: 0x100df324)
isdigit (Address: 0x100df32c)
islower (Address: 0x100df344)
isspace (Address: 0x100df39c)
isupper (Address: 0x100df2f8)
ldexp (Address: 0x100df340)
ldiv (Address: 0x100df384)
localeconv (Address: 0x100df3a4)
malloc (Address: 0x100df388)
memchr (Address: 0x100df314)
memcmp (Address: 0x100df318)
memcpy (Address: 0x100df330)
memcpy_s (Address: 0x100df404)
memmove (Address: 0x100df328)
memmove_s (Address: 0x100df38c)
memset (Address: 0x100df410)
setlocale (Address: 0x100df30c)
sprintf_s (Address: 0x100df398)
strcspn (Address: 0x100df3a8)
strncmp (Address: 0x100df378)
swprintf_s (Address: 0x100df37c)
tolower (Address: 0x100df304)
wcscpy_s (Address: 0x100df390)
wcsrchr (Address: 0x100df3ac)
wcstod (Address: 0x100df3bc)

ntdll.dll

NtQueryInformationToken (Address: 0x100df430)
RtlAcquireSRWLockExclusive (Address: 0x100df428)
RtlAcquireSRWLockShared (Address: 0x100df440)
RtlGetAppContainerSidType (Address: 0x100df438)
RtlInitializeSRWLock (Address: 0x100df420)
RtlNtStatusToDosError (Address: 0x100df434)
RtlReleaseSRWLockExclusive (Address: 0x100df424)
RtlReleaseSRWLockShared (Address: 0x100df43c)
WinSqmIncrementDWORD (Address: 0x100df42c)
WinSqmIsOptedIn (Address: 0x100df444)

OLEAUT32.dll

SetErrorInfo (Address: 0x100df010)
SysAllocString (Address: 0x100df00c)
SysAllocStringLen (Address: 0x100df004)
SysFreeString (Address: 0x100df014)
SysStringLen (Address: 0x100df008)
VariantClear (Address: 0x100df000)
VariantInit (Address: 0x100df018)

RPCRT4.dll

RpcServerInqCallAttributesW (Address: 0x100df028)
RpcStringFreeW (Address: 0x100df024)
UuidCreateSequential (Address: 0x100df02c)
UuidToStringW (Address: 0x100df020)

urlmon.dll

CreateUri (Address: 0x100df44c)

WINSPOOL.DRV

(Address: 0x100df034)
(Address: 0x100df03c)
GetPrintExecutionData (Address: 0x100df038)

XmlLite.dll

CreateXmlReader (Address: 0x100df044)

xpsservices.dll

(Address: 0x100df454)
(Address: 0x100df458)