F12AppFrame2.dll

Description: F12 App Frame

Authors: © Microsoft Corporation. All rights reserved.

Version: 11.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 46b1e182d85b1d03141432b234ea6f50

File Size: 268.5 KB

Uploaded At: Dec. 1, 2025, 8:10 a.m.

Views: 18

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • AttachTools (Ordinal: 1, Address: 0x19a80)
  • AttachToolsToDiagnosticsTarget (Ordinal: 2, Address: 0x199a0)
  • DllCanUnloadNow (Ordinal: 3, Address: 0x19070)
  • DllGetClassObject (Ordinal: 4, Address: 0x19090)
  • DllInstall (Ordinal: 5, Address: 0x190c0)
  • DllRegisterServer (Ordinal: 6, Address: 0x190a0)
  • DllUnregisterServer (Ordinal: 7, Address: 0x190b0)

Imported DLLs & Functions

ADVAPI32.dll
  • EventRegister (Address: 0x1003e024)
  • EventSetInformation (Address: 0x1003e028)
  • EventUnregister (Address: 0x1003e020)
  • EventWriteEx (Address: 0x1003e008)
  • RegCloseKey (Address: 0x1003e010)
  • RegCreateKeyExW (Address: 0x1003e018)
  • RegDeleteValueW (Address: 0x1003e004)
  • RegEnumKeyExW (Address: 0x1003e000)
  • RegOpenKeyExW (Address: 0x1003e014)
  • RegQueryInfoKeyW (Address: 0x1003e02c)
  • RegQueryValueExW (Address: 0x1003e00c)
  • RegSetValueExW (Address: 0x1003e01c)
api-ms-win-appmodel-identity-l1-2-0.dll
  • AppXGetDevelopmentMode (Address: 0x1003e360)
api-ms-win-appmodel-runtime-l1-1-1.dll
  • GetStagedPackageOrigin (Address: 0x1003e368)
api-ms-win-core-atoms-l1-1-0.dll
  • AddAtomW (Address: 0x1003e370)
  • FindAtomW (Address: 0x1003e374)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1003e37c)
api-ms-win-core-file-l1-1-0.dll
  • GetFileSizeEx (Address: 0x1003e384)
api-ms-win-core-handle-l1-1-0.dll
  • DuplicateHandle (Address: 0x1003e38c)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1003e39c)
  • MapViewOfFile (Address: 0x1003e398)
  • UnmapViewOfFile (Address: 0x1003e394)
api-ms-win-core-processthreads-l1-1-0.dll
  • ExitProcess (Address: 0x1003e3a8)
  • GetCurrentThread (Address: 0x1003e3a4)
  • OpenProcessToken (Address: 0x1003e3ac)
api-ms-win-core-processthreads-l1-1-3.dll
  • SetThreadDescription (Address: 0x1003e3b4)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceFrequency (Address: 0x1003e3bc)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathGetCharTypeW (Address: 0x1003e3c4)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1003e3cc)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x1003e3d4)
  • InitOnceInitialize (Address: 0x1003e3d8)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1003e3e0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolCleanupGroupMembers (Address: 0x1003e3ec)
  • CreateThreadpoolCleanupGroup (Address: 0x1003e3e8)
  • CreateThreadpoolWork (Address: 0x1003e3f0)
  • SubmitThreadpoolWork (Address: 0x1003e3f4)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1003e400)
  • SetRestrictedErrorInfo (Address: 0x1003e3fc)
api-ms-win-core-winrt-error-l1-1-1.dll
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1003e408)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1003e414)
  • RoGetActivationFactory (Address: 0x1003e410)
  • RoInitialize (Address: 0x1003e41c)
  • RoUninitialize (Address: 0x1003e418)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateStringReference (Address: 0x1003e42c)
  • WindowsDeleteString (Address: 0x1003e428)
  • WindowsGetStringRawBuffer (Address: 0x1003e424)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1003e4d8)
  • __std_terminate (Address: 0x1003e4d4)
  • __std_type_info_compare (Address: 0x1003e4cc)
  • _CxxThrowException (Address: 0x1003e4a4)
  • _except_handler4_common (Address: 0x1003e4a0)
  • _o___std_exception_copy (Address: 0x1003e4c4)
  • _o___std_exception_destroy (Address: 0x1003e4c0)
  • _o___std_type_info_destroy_list (Address: 0x1003e4bc)
  • _o___stdio_common_vsnprintf_s (Address: 0x1003e4b8)
  • _o___stdio_common_vswprintf (Address: 0x1003e4b4)
  • _o___stdio_common_vswprintf_s (Address: 0x1003e4b0)
  • _o__callnewh (Address: 0x1003e4ac)
  • _o__cexit (Address: 0x1003e4a8)
  • _o__configure_narrow_argv (Address: 0x1003e4ec)
  • _o__crt_atexit (Address: 0x1003e4e8)
  • _o__difftime32 (Address: 0x1003e4e4)
  • _o__errno (Address: 0x1003e4e0)
  • _o__execute_onexit_table (Address: 0x1003e4dc)
  • _o__get_doserrno (Address: 0x1003e4f0)
  • _o__initialize_narrow_environment (Address: 0x1003e434)
  • _o__initialize_onexit_table (Address: 0x1003e438)
  • _o__invalid_parameter_noinfo (Address: 0x1003e43c)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1003e440)
  • _o__purecall (Address: 0x1003e444)
  • _o__recalloc (Address: 0x1003e448)
  • _o__register_onexit_function (Address: 0x1003e44c)
  • _o__seh_filter_dll (Address: 0x1003e450)
  • _o__ultow_s (Address: 0x1003e454)
  • _o__wcsicmp (Address: 0x1003e458)
  • _o__wcslwr_s (Address: 0x1003e45c)
  • _o__wfopen_s (Address: 0x1003e464)
  • _o__wtmpnam_s (Address: 0x1003e468)
  • _o_fclose (Address: 0x1003e46c)
  • _o_fputws (Address: 0x1003e470)
  • _o_free (Address: 0x1003e474)
  • _o_isalnum (Address: 0x1003e478)
  • _o_malloc (Address: 0x1003e47c)
  • _o_memcpy_s (Address: 0x1003e480)
  • _o_strncpy_s (Address: 0x1003e484)
  • _o_terminate (Address: 0x1003e488)
  • _o_wcscat_s (Address: 0x1003e48c)
  • _o_wcscpy_s (Address: 0x1003e490)
  • _o_wcsncpy_s (Address: 0x1003e494)
  • _o_wcstol (Address: 0x1003e498)
  • _o_wmemcpy_s (Address: 0x1003e49c)
  • memcmp (Address: 0x1003e4f4)
  • memcpy (Address: 0x1003e4f8)
  • memmove (Address: 0x1003e460)
  • wcsrchr (Address: 0x1003e4d0)
  • wcsstr (Address: 0x1003e4c8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1003e500)
  • _initterm_e (Address: 0x1003e504)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1003e510)
  • wcscspn (Address: 0x1003e50c)
  • wcsspn (Address: 0x1003e514)
api-ms-win-crt-time-l1-1-0.dll
  • _time32 (Address: 0x1003e51c)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • TraceMessage (Address: 0x1003e524)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventWriteTransfer (Address: 0x1003e52c)
api-ms-win-security-base-l1-1-0.dll
  • CopySid (Address: 0x1003e540)
  • GetLengthSid (Address: 0x1003e53c)
  • GetSidSubAuthority (Address: 0x1003e544)
  • GetSidSubAuthorityCount (Address: 0x1003e534)
  • GetTokenInformation (Address: 0x1003e548)
  • IsValidSid (Address: 0x1003e538)
api-ms-win-shcore-comhelpers-l1-1-0.dll
  • IUnknown_Set (Address: 0x1003e550)
dcomp.dll
  • DCompositionCreateDevice2 (Address: 0x1003e558)
EDGEHTML.dll
  • GetWebPlatformObject (Address: 0x1003e034)
GDI32.dll
  • BitBlt (Address: 0x1003e040)
  • CreateCompatibleBitmap (Address: 0x1003e04c)
  • CreateCompatibleDC (Address: 0x1003e044)
  • CreateSolidBrush (Address: 0x1003e03c)
  • DeleteDC (Address: 0x1003e060)
  • DeleteObject (Address: 0x1003e048)
  • GetDeviceCaps (Address: 0x1003e054)
  • GetObjectW (Address: 0x1003e058)
  • GetStockObject (Address: 0x1003e05c)
  • SelectObject (Address: 0x1003e050)
iertutil.dll
  • (Address: 0x1003e560)
  • (Address: 0x1003e564)
  • (Address: 0x1003e568)
  • (Address: 0x1003e56c)
  • (Address: 0x1003e570)
  • (Address: 0x1003e574)
  • (Address: 0x1003e578)
  • (Address: 0x1003e57c)
  • (Address: 0x1003e580)
  • (Address: 0x1003e584)
  • (Address: 0x1003e588)
  • (Address: 0x1003e58c)
  • (Address: 0x1003e590)
  • (Address: 0x1003e594)
  • (Address: 0x1003e598)
  • (Address: 0x1003e59c)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x1003e074)
  • CloseHandle (Address: 0x1003e184)
  • CreateEventExW (Address: 0x1003e14c)
  • CreateEventW (Address: 0x1003e16c)
  • CreateFileW (Address: 0x1003e10c)
  • CreateMutexExW (Address: 0x1003e0d0)
  • CreateSemaphoreExW (Address: 0x1003e0cc)
  • CreateThread (Address: 0x1003e140)
  • DebugBreak (Address: 0x1003e18c)
  • DecodePointer (Address: 0x1003e0a4)
  • DeleteCriticalSection (Address: 0x1003e134)
  • EncodePointer (Address: 0x1003e0a8)
  • EnterCriticalSection (Address: 0x1003e180)
  • FindResourceExW (Address: 0x1003e154)
  • FlushInstructionCache (Address: 0x1003e09c)
  • FormatMessageW (Address: 0x1003e1a0)
  • FreeLibrary (Address: 0x1003e104)
  • GetCurrentPackageInfo (Address: 0x1003e0d8)
  • GetCurrentProcess (Address: 0x1003e0b4)
  • GetCurrentProcessId (Address: 0x1003e0d4)
  • GetCurrentThreadId (Address: 0x1003e1a4)
  • GetEnvironmentVariableW (Address: 0x1003e114)
  • GetLastError (Address: 0x1003e178)
  • GetLocalTime (Address: 0x1003e0f4)
  • GetModuleFileNameA (Address: 0x1003e1b0)
  • GetModuleFileNameW (Address: 0x1003e128)
  • GetModuleHandleExW (Address: 0x1003e1a8)
  • GetModuleHandleW (Address: 0x1003e190)
  • GetProcAddress (Address: 0x1003e198)
  • GetProcessHeap (Address: 0x1003e194)
  • GetSystemInfo (Address: 0x1003e070)
  • GetSystemTimeAsFileTime (Address: 0x1003e07c)
  • GetTickCount (Address: 0x1003e174)
  • GetVersionExW (Address: 0x1003e0f0)
  • GlobalAlloc (Address: 0x1003e130)
  • GlobalLock (Address: 0x1003e12c)
  • GlobalUnlock (Address: 0x1003e124)
  • HeapAlloc (Address: 0x1003e19c)
  • HeapDestroy (Address: 0x1003e0c0)
  • HeapFree (Address: 0x1003e1ac)
  • HeapReAlloc (Address: 0x1003e0c4)
  • HeapSize (Address: 0x1003e0c8)
  • InitializeCriticalSection (Address: 0x1003e110)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1003e084)
  • InitializeSListHead (Address: 0x1003e078)
  • InterlockedPopEntrySList (Address: 0x1003e094)
  • InterlockedPushEntrySList (Address: 0x1003e098)
  • IsDebuggerPresent (Address: 0x1003e144)
  • IsProcessorFeaturePresent (Address: 0x1003e0a0)
  • LeaveCriticalSection (Address: 0x1003e17c)
  • LoadLibraryExA (Address: 0x1003e0ac)
  • LoadLibraryExW (Address: 0x1003e1b4)
  • LoadLibraryW (Address: 0x1003e108)
  • LoadResource (Address: 0x1003e158)
  • LockResource (Address: 0x1003e15c)
  • lstrcmpiW (Address: 0x1003e0fc)
  • lstrcmpW (Address: 0x1003e11c)
  • lstrlenW (Address: 0x1003e0ec)
  • MulDiv (Address: 0x1003e120)
  • MultiByteToWideChar (Address: 0x1003e150)
  • OpenProcess (Address: 0x1003e0f8)
  • OpenSemaphoreW (Address: 0x1003e0dc)
  • OutputDebugStringW (Address: 0x1003e148)
  • QueryPerformanceCounter (Address: 0x1003e080)
  • RaiseException (Address: 0x1003e188)
  • ReadFile (Address: 0x1003e118)
  • ReleaseMutex (Address: 0x1003e0e8)
  • ReleaseSemaphore (Address: 0x1003e0e4)
  • ReleaseSRWLockExclusive (Address: 0x1003e100)
  • ResetEvent (Address: 0x1003e164)
  • SetEvent (Address: 0x1003e168)
  • SetLastError (Address: 0x1003e138)
  • SetUnhandledExceptionFilter (Address: 0x1003e08c)
  • SizeofResource (Address: 0x1003e160)
  • TerminateProcess (Address: 0x1003e088)
  • UnhandledExceptionFilter (Address: 0x1003e090)
  • VirtualAlloc (Address: 0x1003e0b0)
  • VirtualFree (Address: 0x1003e0b8)
  • VirtualProtect (Address: 0x1003e06c)
  • VirtualQuery (Address: 0x1003e068)
  • WaitForMultipleObjectsEx (Address: 0x1003e170)
  • WaitForSingleObject (Address: 0x1003e13c)
  • WaitForSingleObjectEx (Address: 0x1003e0e0)
  • WideCharToMultiByte (Address: 0x1003e0bc)
msvcp_win.dll
  • _Query_perf_counter (Address: 0x1003e5a4)
  • _Query_perf_frequency (Address: 0x1003e5a8)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1003e5ac)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1003e5b0)
ntdll.dll
  • RtlDeleteCriticalSection (Address: 0x1003e5c0)
  • RtlEnterCriticalSection (Address: 0x1003e5b8)
  • RtlInitializeCriticalSection (Address: 0x1003e5bc)
  • RtlIsCriticalSectionLocked (Address: 0x1003e5c8)
  • RtlIsCriticalSectionLockedByThread (Address: 0x1003e5cc)
  • RtlLeaveCriticalSection (Address: 0x1003e5c4)
ole32.dll
  • CLSIDFromProgID (Address: 0x1003e618)
  • CLSIDFromString (Address: 0x1003e5ec)
  • CoCreateFreeThreadedMarshaler (Address: 0x1003e5dc)
  • CoCreateInstance (Address: 0x1003e608)
  • CoGetApartmentType (Address: 0x1003e5d8)
  • CoGetClassObject (Address: 0x1003e5e4)
  • CoGetMalloc (Address: 0x1003e604)
  • CoInitializeEx (Address: 0x1003e5f0)
  • CoTaskMemAlloc (Address: 0x1003e614)
  • CoTaskMemFree (Address: 0x1003e5fc)
  • CoTaskMemRealloc (Address: 0x1003e5f8)
  • CoUninitialize (Address: 0x1003e5f4)
  • CoWaitForMultipleHandles (Address: 0x1003e5d4)
  • CreateStreamOnHGlobal (Address: 0x1003e5e0)
  • IIDFromString (Address: 0x1003e600)
  • OleInitialize (Address: 0x1003e5e8)
  • OleLockRunning (Address: 0x1003e610)
  • OleUninitialize (Address: 0x1003e60c)
  • StringFromGUID2 (Address: 0x1003e61c)
OLEAUT32.dll
  • LoadRegTypeLib (Address: 0x1003e1e0)
  • LoadTypeLib (Address: 0x1003e1e4)
  • OleCreateFontIndirect (Address: 0x1003e1d8)
  • RegisterTypeLib (Address: 0x1003e1f0)
  • SafeArrayCreateVector (Address: 0x1003e1fc)
  • SafeArrayPutElement (Address: 0x1003e1f8)
  • SysAllocString (Address: 0x1003e1cc)
  • SysAllocStringLen (Address: 0x1003e1d0)
  • SysFreeString (Address: 0x1003e1bc)
  • SysStringByteLen (Address: 0x1003e1e8)
  • SysStringLen (Address: 0x1003e1dc)
  • UnRegisterTypeLib (Address: 0x1003e1f4)
  • VarBstrCmp (Address: 0x1003e1d4)
  • VariantClear (Address: 0x1003e1c4)
  • VariantCopy (Address: 0x1003e1c8)
  • VariantInit (Address: 0x1003e1c0)
  • VarUI4FromStr (Address: 0x1003e1ec)
SHELL32.dll
  • SHGetKnownFolderPath (Address: 0x1003e204)
SHLWAPI.dll
  • PathFindFileNameW (Address: 0x1003e20c)
urlmon.dll
  • (Address: 0x1003e630)
  • CoInternetGetSession (Address: 0x1003e624)
  • CoInternetParseIUri (Address: 0x1003e62c)
  • CreateUri (Address: 0x1003e628)
  • RegisterWebPlatformPermanentSecurityManager (Address: 0x1003e634)
  • UnregisterWebPlatformPermanentSecurityManager (Address: 0x1003e638)
USER32.dll
  • AllowSetForegroundWindow (Address: 0x1003e298)
  • AppendMenuW (Address: 0x1003e250)
  • BeginPaint (Address: 0x1003e318)
  • CallWindowProcW (Address: 0x1003e338)
  • ChangeWindowMessageFilterEx (Address: 0x1003e2a0)
  • CharNextW (Address: 0x1003e2d8)
  • ClientToScreen (Address: 0x1003e2e8)
  • CopyRect (Address: 0x1003e28c)
  • CreateAcceleratorTableW (Address: 0x1003e2e4)
  • CreatePopupMenu (Address: 0x1003e248)
  • CreateWindowExW (Address: 0x1003e328)
  • DefWindowProcW (Address: 0x1003e33c)
  • DestroyAcceleratorTable (Address: 0x1003e314)
  • DestroyMenu (Address: 0x1003e260)
  • DestroyWindow (Address: 0x1003e334)
  • DispatchMessageW (Address: 0x1003e234)
  • EndPaint (Address: 0x1003e320)
  • FillRect (Address: 0x1003e300)
  • GetAncestor (Address: 0x1003e350)
  • GetAsyncKeyState (Address: 0x1003e220)
  • GetClassInfoExW (Address: 0x1003e32c)
  • GetClassNameW (Address: 0x1003e2d0)
  • GetClientRect (Address: 0x1003e304)
  • GetDC (Address: 0x1003e31c)
  • GetDesktopWindow (Address: 0x1003e310)
  • GetDlgItem (Address: 0x1003e2cc)
  • GetFocus (Address: 0x1003e2c0)
  • GetMenuItemCount (Address: 0x1003e254)
  • GetMenuItemInfoW (Address: 0x1003e25c)
  • GetMessageW (Address: 0x1003e2c8)
  • GetMonitorInfoW (Address: 0x1003e240)
  • GetParent (Address: 0x1003e2ec)
  • GetSysColor (Address: 0x1003e2d4)
  • GetWindow (Address: 0x1003e21c)
  • GetWindowLongW (Address: 0x1003e340)
  • GetWindowRect (Address: 0x1003e26c)
  • GetWindowTextLengthW (Address: 0x1003e2b0)
  • GetWindowTextW (Address: 0x1003e2b4)
  • InvalidateRect (Address: 0x1003e30c)
  • InvalidateRgn (Address: 0x1003e308)
  • IsChild (Address: 0x1003e2bc)
  • IsWindow (Address: 0x1003e34c)
  • IsZoomed (Address: 0x1003e288)
  • KillTimer (Address: 0x1003e294)
  • LoadAcceleratorsW (Address: 0x1003e278)
  • LoadCursorW (Address: 0x1003e230)
  • LoadImageW (Address: 0x1003e2a8)
  • LoadMenuW (Address: 0x1003e27c)
  • LoadStringA (Address: 0x1003e274)
  • LoadStringW (Address: 0x1003e280)
  • MapWindowPoints (Address: 0x1003e268)
  • MessageBeep (Address: 0x1003e264)
  • MonitorFromPoint (Address: 0x1003e244)
  • MoveWindow (Address: 0x1003e2f4)
  • MsgWaitForMultipleObjects (Address: 0x1003e29c)
  • MsgWaitForMultipleObjectsEx (Address: 0x1003e218)
  • PeekMessageW (Address: 0x1003e214)
  • PostMessageW (Address: 0x1003e238)
  • PostQuitMessage (Address: 0x1003e224)
  • PtInRect (Address: 0x1003e270)
  • RedrawWindow (Address: 0x1003e2e0)
  • RegisterClassExW (Address: 0x1003e330)
  • RegisterClassW (Address: 0x1003e2a4)
  • RegisterWindowMessageW (Address: 0x1003e2ac)
  • ReleaseCapture (Address: 0x1003e2fc)
  • ReleaseDC (Address: 0x1003e324)
  • RemoveMenu (Address: 0x1003e258)
  • ScreenToClient (Address: 0x1003e2f0)
  • SendMessageW (Address: 0x1003e348)
  • SetCapture (Address: 0x1003e2f8)
  • SetCursor (Address: 0x1003e22c)
  • SetFocus (Address: 0x1003e2c4)
  • SetTimer (Address: 0x1003e290)
  • SetWindowLongW (Address: 0x1003e344)
  • SetWindowPos (Address: 0x1003e2dc)
  • SetWindowTextW (Address: 0x1003e2b8)
  • TrackPopupMenuEx (Address: 0x1003e24c)
  • TranslateAcceleratorW (Address: 0x1003e284)
  • TranslateMessage (Address: 0x1003e228)
  • UnregisterClassA (Address: 0x1003e23c)
USERENV.dll
  • GetProfileType (Address: 0x1003e358)