F12AppFrame.dll

Description: F12 App Frame

Authors: © Microsoft Corporation. All rights reserved.

Version: 11.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: e00ad66d5527c66696a3121025829405

File Size: 254.0 KB

Uploaded At: Dec. 1, 2025, 8:10 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • AttachTools (Ordinal: 1, Address: 0x17020)
  • EnableDebugMode (Ordinal: 2, Address: 0x17210)
  • InjectTools (Ordinal: 3, Address: 0x169e0)
  • ShowTools (Ordinal: 4, Address: 0x16590)
  • DllCanUnloadNow (Ordinal: 5, Address: 0x164c0)
  • DllGetClassObject (Ordinal: 6, Address: 0x164e0)
  • DllInstall (Ordinal: 7, Address: 0x16550)
  • DllRegisterServer (Ordinal: 8, Address: 0x16530)
  • DllUnregisterServer (Ordinal: 9, Address: 0x16540)
  • GetProxyDllInfo (Ordinal: 10, Address: 0x9b80)

Imported DLLs & Functions

ADVAPI32.dll
  • RegCloseKey (Address: 0x1003a008)
  • RegCreateKeyExW (Address: 0x1003a000)
  • RegDeleteValueW (Address: 0x1003a018)
  • RegEnumKeyExW (Address: 0x1003a014)
  • RegOpenKeyExW (Address: 0x1003a00c)
  • RegQueryInfoKeyW (Address: 0x1003a010)
  • RegQueryValueExW (Address: 0x1003a004)
  • RegSetValueExW (Address: 0x1003a01c)
api-ms-win-appmodel-unlock-l1-1-0.dll
  • IsDeveloperModeEnabled (Address: 0x1003a438)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1003a440)
  • RoGetActivationFactory (Address: 0x1003a444)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x1003a44c)
  • WindowsCreateStringReference (Address: 0x1003a454)
  • WindowsDeleteString (Address: 0x1003a450)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1003a4fc)
  • __std_terminate (Address: 0x1003a4f8)
  • __std_type_info_compare (Address: 0x1003a4f0)
  • _CxxThrowException (Address: 0x1003a4ac)
  • _except_handler4_common (Address: 0x1003a4a4)
  • _o___std_exception_copy (Address: 0x1003a4ec)
  • _o___std_exception_destroy (Address: 0x1003a4e8)
  • _o___std_type_info_destroy_list (Address: 0x1003a4e4)
  • _o___stdio_common_vsnprintf_s (Address: 0x1003a4e0)
  • _o___stdio_common_vswprintf (Address: 0x1003a4dc)
  • _o___stdio_common_vswprintf_s (Address: 0x1003a4d8)
  • _o__callnewh (Address: 0x1003a4d4)
  • _o__cexit (Address: 0x1003a4d0)
  • _o__configure_narrow_argv (Address: 0x1003a4cc)
  • _o__crt_atexit (Address: 0x1003a4c8)
  • _o__difftime32 (Address: 0x1003a4c4)
  • _o__errno (Address: 0x1003a4c0)
  • _o__execute_onexit_table (Address: 0x1003a4bc)
  • _o__initialize_narrow_environment (Address: 0x1003a4b8)
  • _o__initialize_onexit_table (Address: 0x1003a4b4)
  • _o__invalid_parameter_noinfo (Address: 0x1003a4b0)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1003a4a8)
  • _o__purecall (Address: 0x1003a45c)
  • _o__recalloc (Address: 0x1003a460)
  • _o__register_onexit_function (Address: 0x1003a464)
  • _o__seh_filter_dll (Address: 0x1003a468)
  • _o__wcsicmp (Address: 0x1003a46c)
  • _o__wcslwr_s (Address: 0x1003a470)
  • _o__wtoi (Address: 0x1003a478)
  • _o_free (Address: 0x1003a47c)
  • _o_iswalpha (Address: 0x1003a480)
  • _o_malloc (Address: 0x1003a484)
  • _o_strncpy_s (Address: 0x1003a488)
  • _o_terminate (Address: 0x1003a48c)
  • _o_wcscat_s (Address: 0x1003a490)
  • _o_wcscpy_s (Address: 0x1003a494)
  • _o_wcsncpy_s (Address: 0x1003a498)
  • _o_wcstol (Address: 0x1003a49c)
  • _o_wmemcpy_s (Address: 0x1003a4a0)
  • memcmp (Address: 0x1003a500)
  • memcpy (Address: 0x1003a504)
  • memmove (Address: 0x1003a474)
  • wcschr (Address: 0x1003a50c)
  • wcsrchr (Address: 0x1003a4f4)
  • wcsstr (Address: 0x1003a508)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1003a514)
  • _initterm_e (Address: 0x1003a518)
api-ms-win-crt-stdio-l1-1-0.dll
  • _wtmpnam (Address: 0x1003a520)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1003a528)
api-ms-win-crt-time-l1-1-0.dll
  • _time32 (Address: 0x1003a530)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • SendMessageTimeoutW (Address: 0x1003a538)
GDI32.dll
  • BitBlt (Address: 0x1003a038)
  • CreateBitmap (Address: 0x1003a054)
  • CreateCompatibleBitmap (Address: 0x1003a02c)
  • CreateCompatibleDC (Address: 0x1003a058)
  • CreatePatternBrush (Address: 0x1003a028)
  • CreateSolidBrush (Address: 0x1003a034)
  • DeleteDC (Address: 0x1003a03c)
  • DeleteObject (Address: 0x1003a04c)
  • GetDeviceCaps (Address: 0x1003a048)
  • GetObjectW (Address: 0x1003a044)
  • GetStockObject (Address: 0x1003a040)
  • PatBlt (Address: 0x1003a050)
  • SelectObject (Address: 0x1003a030)
  • SetLayout (Address: 0x1003a024)
iertutil.dll
  • (Address: 0x1003a540)
  • (Address: 0x1003a544)
  • (Address: 0x1003a548)
  • (Address: 0x1003a54c)
KERNEL32.dll
  • AddAtomW (Address: 0x1003a074)
  • CloseHandle (Address: 0x1003a0c0)
  • CreateEventExW (Address: 0x1003a17c)
  • CreateEventW (Address: 0x1003a0c8)
  • CreateMutexExW (Address: 0x1003a174)
  • CreateSemaphoreExW (Address: 0x1003a178)
  • CreateThread (Address: 0x1003a0cc)
  • DebugBreak (Address: 0x1003a150)
  • DecodePointer (Address: 0x1003a1b0)
  • DelayLoadFailureHook (Address: 0x1003a06c)
  • DeleteCriticalSection (Address: 0x1003a0d8)
  • DuplicateHandle (Address: 0x1003a11c)
  • EncodePointer (Address: 0x1003a1ac)
  • EnterCriticalSection (Address: 0x1003a0ac)
  • ExitProcess (Address: 0x1003a07c)
  • FindAtomW (Address: 0x1003a078)
  • FindClose (Address: 0x1003a168)
  • FindFirstFileW (Address: 0x1003a164)
  • FindResourceExW (Address: 0x1003a0a4)
  • FlushInstructionCache (Address: 0x1003a1b8)
  • FormatMessageW (Address: 0x1003a138)
  • FreeLibrary (Address: 0x1003a0fc)
  • GetCurrentProcess (Address: 0x1003a094)
  • GetCurrentProcessId (Address: 0x1003a170)
  • GetCurrentThreadId (Address: 0x1003a0b4)
  • GetEnvironmentVariableW (Address: 0x1003a0f4)
  • GetLastError (Address: 0x1003a0c4)
  • GetModuleFileNameA (Address: 0x1003a14c)
  • GetModuleFileNameW (Address: 0x1003a0dc)
  • GetModuleHandleExW (Address: 0x1003a148)
  • GetModuleHandleW (Address: 0x1003a108)
  • GetProcAddress (Address: 0x1003a100)
  • GetProcessHeap (Address: 0x1003a140)
  • GetProcessIdOfThread (Address: 0x1003a114)
  • GetSystemTimeAsFileTime (Address: 0x1003a120)
  • GetVersionExW (Address: 0x1003a18c)
  • GlobalAlloc (Address: 0x1003a0e8)
  • GlobalLock (Address: 0x1003a0e4)
  • GlobalUnlock (Address: 0x1003a0e0)
  • HeapAlloc (Address: 0x1003a13c)
  • HeapDestroy (Address: 0x1003a19c)
  • HeapFree (Address: 0x1003a144)
  • HeapReAlloc (Address: 0x1003a198)
  • HeapSize (Address: 0x1003a194)
  • InitializeCriticalSection (Address: 0x1003a0f8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1003a090)
  • InitializeSListHead (Address: 0x1003a08c)
  • InterlockedPopEntrySList (Address: 0x1003a060)
  • InterlockedPushEntrySList (Address: 0x1003a1bc)
  • IsDebuggerPresent (Address: 0x1003a154)
  • IsProcessorFeaturePresent (Address: 0x1003a1b4)
  • IsWow64Process (Address: 0x1003a160)
  • K32EnumProcessModulesEx (Address: 0x1003a180)
  • K32GetModuleFileNameExW (Address: 0x1003a184)
  • LeaveCriticalSection (Address: 0x1003a0b0)
  • LoadLibraryExA (Address: 0x1003a1a8)
  • LoadLibraryExW (Address: 0x1003a104)
  • LoadResource (Address: 0x1003a0a0)
  • LocalFree (Address: 0x1003a124)
  • LockResource (Address: 0x1003a09c)
  • lstrcmpiW (Address: 0x1003a10c)
  • lstrcmpW (Address: 0x1003a0f0)
  • lstrlenW (Address: 0x1003a190)
  • MulDiv (Address: 0x1003a0ec)
  • MultiByteToWideChar (Address: 0x1003a0a8)
  • OpenProcess (Address: 0x1003a118)
  • OpenSemaphoreW (Address: 0x1003a15c)
  • OpenThread (Address: 0x1003a110)
  • OutputDebugStringW (Address: 0x1003a158)
  • QueryFullProcessImageNameW (Address: 0x1003a16c)
  • QueryPerformanceCounter (Address: 0x1003a088)
  • RaiseException (Address: 0x1003a0bc)
  • ReleaseMutex (Address: 0x1003a12c)
  • ReleaseSemaphore (Address: 0x1003a130)
  • ResetEvent (Address: 0x1003a064)
  • ResolveDelayLoadedAPI (Address: 0x1003a070)
  • SetEvent (Address: 0x1003a0b8)
  • SetLastError (Address: 0x1003a0d4)
  • SetUnhandledExceptionFilter (Address: 0x1003a080)
  • SizeofResource (Address: 0x1003a098)
  • TerminateProcess (Address: 0x1003a084)
  • UnhandledExceptionFilter (Address: 0x1003a068)
  • VirtualAlloc (Address: 0x1003a1a4)
  • VirtualFree (Address: 0x1003a1a0)
  • WaitForMultipleObjects (Address: 0x1003a188)
  • WaitForSingleObject (Address: 0x1003a0d0)
  • WaitForSingleObjectEx (Address: 0x1003a134)
  • WideCharToMultiByte (Address: 0x1003a128)
msvcp_win.dll
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1003a554)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1003a558)
ole32.dll
  • CLSIDFromProgID (Address: 0x1003a578)
  • CLSIDFromString (Address: 0x1003a574)
  • CoCreateFreeThreadedMarshaler (Address: 0x1003a564)
  • CoCreateInstance (Address: 0x1003a598)
  • CoGetClassObject (Address: 0x1003a57c)
  • CoInitializeEx (Address: 0x1003a568)
  • CoTaskMemAlloc (Address: 0x1003a58c)
  • CoTaskMemFree (Address: 0x1003a5a0)
  • CoTaskMemRealloc (Address: 0x1003a570)
  • CoUninitialize (Address: 0x1003a56c)
  • CoWaitForMultipleHandles (Address: 0x1003a560)
  • CreateStreamOnHGlobal (Address: 0x1003a580)
  • HWND_UserFree (Address: 0x1003a5b0)
  • HWND_UserMarshal (Address: 0x1003a5a8)
  • HWND_UserSize (Address: 0x1003a5ac)
  • HWND_UserUnmarshal (Address: 0x1003a5b4)
  • ObjectStublessClient3 (Address: 0x1003a5b8)
  • ObjectStublessClient4 (Address: 0x1003a5a4)
  • ObjectStublessClient5 (Address: 0x1003a59c)
  • OleInitialize (Address: 0x1003a590)
  • OleLockRunning (Address: 0x1003a584)
  • OleUninitialize (Address: 0x1003a594)
  • StringFromCLSID (Address: 0x1003a5bc)
  • StringFromGUID2 (Address: 0x1003a588)
OLEACC.dll
  • ObjectFromLresult (Address: 0x1003a1c4)
OLEAUT32.dll
  • BSTR_UserFree (Address: 0x1003a1e0)
  • BSTR_UserMarshal (Address: 0x1003a1d8)
  • BSTR_UserSize (Address: 0x1003a1e4)
  • BSTR_UserUnmarshal (Address: 0x1003a1dc)
  • LoadRegTypeLib (Address: 0x1003a21c)
  • LoadTypeLib (Address: 0x1003a218)
  • OleCreateFontIndirect (Address: 0x1003a224)
  • RegisterTypeLib (Address: 0x1003a20c)
  • SafeArrayCopy (Address: 0x1003a1f8)
  • SafeArrayCreate (Address: 0x1003a1f0)
  • SafeArrayDestroy (Address: 0x1003a1f4)
  • SafeArrayGetLBound (Address: 0x1003a1cc)
  • SafeArrayGetUBound (Address: 0x1003a1d4)
  • SafeArrayGetVartype (Address: 0x1003a1d0)
  • SafeArrayLock (Address: 0x1003a1e8)
  • SafeArrayUnlock (Address: 0x1003a1ec)
  • SysAllocString (Address: 0x1003a234)
  • SysAllocStringLen (Address: 0x1003a230)
  • SysFreeString (Address: 0x1003a1fc)
  • SysStringByteLen (Address: 0x1003a214)
  • SysStringLen (Address: 0x1003a220)
  • UnRegisterTypeLib (Address: 0x1003a208)
  • VarBstrCmp (Address: 0x1003a228)
  • VariantClear (Address: 0x1003a200)
  • VariantCopy (Address: 0x1003a22c)
  • VariantInit (Address: 0x1003a204)
  • VarUI4FromStr (Address: 0x1003a210)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1003a274)
  • CStdStubBuffer_Connect (Address: 0x1003a24c)
  • CStdStubBuffer_CountRefs (Address: 0x1003a258)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1003a26c)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1003a27c)
  • CStdStubBuffer_Disconnect (Address: 0x1003a250)
  • CStdStubBuffer_Invoke (Address: 0x1003a264)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1003a25c)
  • CStdStubBuffer_QueryInterface (Address: 0x1003a254)
  • IUnknown_AddRef_Proxy (Address: 0x1003a268)
  • IUnknown_QueryInterface_Proxy (Address: 0x1003a260)
  • IUnknown_Release_Proxy (Address: 0x1003a278)
  • NdrCStdStubBuffer_Release (Address: 0x1003a244)
  • NdrDllCanUnloadNow (Address: 0x1003a240)
  • NdrDllGetClassObject (Address: 0x1003a23c)
  • NdrOleAllocate (Address: 0x1003a248)
  • NdrOleFree (Address: 0x1003a270)
SHELL32.dll
  • CommandLineToArgvW (Address: 0x1003a284)
  • ShellExecuteExW (Address: 0x1003a28c)
  • ShellExecuteW (Address: 0x1003a290)
  • SHGetKnownFolderPath (Address: 0x1003a288)
SHLWAPI.dll
  • PathFindFileNameW (Address: 0x1003a298)
  • PathGetCharTypeW (Address: 0x1003a29c)
urlmon.dll
  • CreateUri (Address: 0x1003a5c4)
  • RegisterWebPlatformPermanentSecurityManager (Address: 0x1003a5cc)
  • UnregisterWebPlatformPermanentSecurityManager (Address: 0x1003a5c8)
USER32.dll
  • AllowSetForegroundWindow (Address: 0x1003a3b8)
  • AppendMenuW (Address: 0x1003a40c)
  • BeginPaint (Address: 0x1003a348)
  • CallWindowProcW (Address: 0x1003a2c4)
  • ChangeWindowMessageFilterEx (Address: 0x1003a394)
  • CharNextW (Address: 0x1003a324)
  • ClientToScreen (Address: 0x1003a314)
  • CreateAcceleratorTableW (Address: 0x1003a318)
  • CreatePopupMenu (Address: 0x1003a414)
  • CreateWindowExW (Address: 0x1003a2dc)
  • DefWindowProcW (Address: 0x1003a2c0)
  • DestroyAcceleratorTable (Address: 0x1003a2e0)
  • DestroyMenu (Address: 0x1003a3f4)
  • DestroyWindow (Address: 0x1003a2cc)
  • DispatchMessageW (Address: 0x1003a364)
  • DrawEdge (Address: 0x1003a3fc)
  • EnableWindow (Address: 0x1003a388)
  • EndPaint (Address: 0x1003a344)
  • EqualRect (Address: 0x1003a3b0)
  • FillRect (Address: 0x1003a2fc)
  • GetAncestor (Address: 0x1003a420)
  • GetAsyncKeyState (Address: 0x1003a430)
  • GetCapture (Address: 0x1003a3e0)
  • GetClassInfoExW (Address: 0x1003a2d8)
  • GetClassNameW (Address: 0x1003a32c)
  • GetClientRect (Address: 0x1003a2f8)
  • GetDC (Address: 0x1003a2ec)
  • GetDesktopWindow (Address: 0x1003a2e4)
  • GetDlgItem (Address: 0x1003a330)
  • GetFocus (Address: 0x1003a33c)
  • GetForegroundWindow (Address: 0x1003a3b4)
  • GetKeyState (Address: 0x1003a42c)
  • GetMenuItemCount (Address: 0x1003a408)
  • GetMenuItemInfoW (Address: 0x1003a400)
  • GetMessagePos (Address: 0x1003a3e8)
  • GetMessageW (Address: 0x1003a2a4)
  • GetMonitorInfoW (Address: 0x1003a3a8)
  • GetParent (Address: 0x1003a310)
  • GetSysColor (Address: 0x1003a328)
  • GetSystemMetrics (Address: 0x1003a3d8)
  • GetWindow (Address: 0x1003a334)
  • GetWindowDC (Address: 0x1003a3f8)
  • GetWindowLongW (Address: 0x1003a2bc)
  • GetWindowPlacement (Address: 0x1003a398)
  • GetWindowRect (Address: 0x1003a370)
  • GetWindowTextLengthW (Address: 0x1003a354)
  • GetWindowTextW (Address: 0x1003a350)
  • GetWindowThreadProcessId (Address: 0x1003a378)
  • InflateRect (Address: 0x1003a39c)
  • InvalidateRect (Address: 0x1003a2f0)
  • InvalidateRgn (Address: 0x1003a2f4)
  • IsChild (Address: 0x1003a340)
  • IsIconic (Address: 0x1003a368)
  • IsWindow (Address: 0x1003a2b0)
  • IsWindowEnabled (Address: 0x1003a360)
  • IsWindowVisible (Address: 0x1003a428)
  • IsZoomed (Address: 0x1003a36c)
  • LoadAcceleratorsW (Address: 0x1003a3d0)
  • LoadCursorW (Address: 0x1003a2c8)
  • LoadImageW (Address: 0x1003a384)
  • LoadMenuW (Address: 0x1003a3cc)
  • LoadStringA (Address: 0x1003a3d4)
  • LoadStringW (Address: 0x1003a3c8)
  • MapWindowPoints (Address: 0x1003a3ec)
  • MessageBeep (Address: 0x1003a3f0)
  • MessageBoxW (Address: 0x1003a35c)
  • MonitorFromPoint (Address: 0x1003a418)
  • MonitorFromWindow (Address: 0x1003a3a4)
  • MoveWindow (Address: 0x1003a308)
  • PeekMessageW (Address: 0x1003a2a8)
  • PostMessageW (Address: 0x1003a2ac)
  • PostQuitMessage (Address: 0x1003a2d0)
  • PtInRect (Address: 0x1003a3dc)
  • RedrawWindow (Address: 0x1003a31c)
  • RegisterClassExW (Address: 0x1003a2d4)
  • RegisterWindowMessageW (Address: 0x1003a358)
  • ReleaseCapture (Address: 0x1003a300)
  • ReleaseDC (Address: 0x1003a2e8)
  • RemoveMenu (Address: 0x1003a404)
  • ScreenToClient (Address: 0x1003a30c)
  • SendMessageW (Address: 0x1003a2b4)
  • SetActiveWindow (Address: 0x1003a3a0)
  • SetCapture (Address: 0x1003a304)
  • SetCursor (Address: 0x1003a380)
  • SetFocus (Address: 0x1003a338)
  • SetForegroundWindow (Address: 0x1003a37c)
  • SetParent (Address: 0x1003a3c0)
  • SetRect (Address: 0x1003a38c)
  • SetRectEmpty (Address: 0x1003a3c4)
  • SetWindowLongW (Address: 0x1003a2b8)
  • SetWindowPlacement (Address: 0x1003a3ac)
  • SetWindowPos (Address: 0x1003a320)
  • SetWindowTextW (Address: 0x1003a34c)
  • ShowWindow (Address: 0x1003a374)
  • SystemParametersInfoW (Address: 0x1003a3e4)
  • TrackPopupMenuEx (Address: 0x1003a410)
  • TranslateAcceleratorW (Address: 0x1003a3bc)
  • TranslateMessage (Address: 0x1003a424)
  • UnregisterClassA (Address: 0x1003a41c)
  • UpdateWindow (Address: 0x1003a390)