oobecoreadapters.dll

Description: oobecoreadapters

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1265

Architecture: 64-bit

Operating System: Windows NT

SHA256: be724dba2f957bcff7772b6b7be99e4e

File Size: 563.5 KB

Uploaded At: Dec. 1, 2025, 8:13 a.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x6240)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x5ef0)
  • DllGetClassObject (Ordinal: 3, Address: 0x60d0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18006db08)
api-ms-win-core-com-l1-1-0.dll
  • CoAddRefServerProcess (Address: 0x18006db60)
  • CoCreateFreeThreadedMarshaler (Address: 0x18006db20)
  • CoCreateInstance (Address: 0x18006db48)
  • CoGetApartmentType (Address: 0x18006db88)
  • CoGetCallContext (Address: 0x18006db18)
  • CoGetMalloc (Address: 0x18006db30)
  • CoIncrementMTAUsage (Address: 0x18006db58)
  • CoMarshalInterface (Address: 0x18006db70)
  • CoReleaseMarshalData (Address: 0x18006db40)
  • CoReleaseServerProcess (Address: 0x18006db68)
  • CoTaskMemAlloc (Address: 0x18006db28)
  • CoTaskMemFree (Address: 0x18006db78)
  • CoWaitForMultipleHandles (Address: 0x18006db80)
  • CreateStreamOnHGlobal (Address: 0x18006db38)
  • StringFromCLSID (Address: 0x18006db50)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18006db98)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x18006dbf0)
  • CStdStubBuffer2_CountRefs (Address: 0x18006dc58)
  • CStdStubBuffer2_Disconnect (Address: 0x18006dc20)
  • CStdStubBuffer2_QueryInterface (Address: 0x18006dc00)
  • NdrProxyForwardingFunction3 (Address: 0x18006dbe8)
  • NdrProxyForwardingFunction4 (Address: 0x18006dbe0)
  • NdrProxyForwardingFunction5 (Address: 0x18006dbd8)
  • ObjectStublessClient10 (Address: 0x18006dba8)
  • ObjectStublessClient11 (Address: 0x18006dc08)
  • ObjectStublessClient12 (Address: 0x18006dc50)
  • ObjectStublessClient13 (Address: 0x18006dc10)
  • ObjectStublessClient14 (Address: 0x18006dc48)
  • ObjectStublessClient15 (Address: 0x18006dc28)
  • ObjectStublessClient16 (Address: 0x18006dbb8)
  • ObjectStublessClient17 (Address: 0x18006dbb0)
  • ObjectStublessClient18 (Address: 0x18006dc38)
  • ObjectStublessClient19 (Address: 0x18006dbf8)
  • ObjectStublessClient20 (Address: 0x18006dc30)
  • ObjectStublessClient3 (Address: 0x18006dc40)
  • ObjectStublessClient6 (Address: 0x18006dbd0)
  • ObjectStublessClient7 (Address: 0x18006dc18)
  • ObjectStublessClient8 (Address: 0x18006dbc8)
  • ObjectStublessClient9 (Address: 0x18006dbc0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18006dc70)
  • IsDebuggerPresent (Address: 0x18006dc68)
  • OutputDebugStringW (Address: 0x18006dc78)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18006dc88)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18006dc98)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18006dcb0)
  • RaiseException (Address: 0x18006dca8)
  • SetLastError (Address: 0x18006dcc0)
  • SetUnhandledExceptionFilter (Address: 0x18006dcb8)
  • UnhandledExceptionFilter (Address: 0x18006dcc8)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x18006dcd8)
  • GetFileAttributesW (Address: 0x18006dce0)
  • GetFullPathNameW (Address: 0x18006dce8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18006dcf8)
  • DuplicateHandle (Address: 0x18006dd00)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18006dd20)
  • HeapAlloc (Address: 0x18006dd18)
  • HeapFree (Address: 0x18006dd10)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18006dd38)
  • LocalFree (Address: 0x18006dd30)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18006dd48)
  • InterlockedPushEntrySList (Address: 0x18006dd50)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetSystemPowerStatus (Address: 0x18006dd60)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • PowerClearRequest (Address: 0x18006dd70)
  • PowerCreateRequest (Address: 0x18006dd80)
  • PowerSetRequest (Address: 0x18006dd78)
api-ms-win-core-kernel32-legacy-l1-1-5.dll
  • SetThreadExecutionState (Address: 0x18006dd90)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18006dda0)
  • FindResourceExW (Address: 0x18006dde0)
  • FreeLibrary (Address: 0x18006ddb0)
  • GetModuleFileNameA (Address: 0x18006ddd8)
  • GetModuleFileNameW (Address: 0x18006ddf0)
  • GetModuleHandleExW (Address: 0x18006ddc0)
  • GetModuleHandleW (Address: 0x18006ddd0)
  • GetProcAddress (Address: 0x18006dde8)
  • LoadLibraryExW (Address: 0x18006dda8)
  • LoadResource (Address: 0x18006ddc8)
  • LockResource (Address: 0x18006ddb8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18006de40)
  • GetGeoInfoW (Address: 0x18006de18)
  • GetLocaleInfoEx (Address: 0x18006de10)
  • GetLocaleInfoW (Address: 0x18006de08)
  • GetThreadUILanguage (Address: 0x18006de00)
  • GetUserDefaultLocaleName (Address: 0x18006de30)
  • GetUserGeoID (Address: 0x18006de20)
  • GetUserPreferredUILanguages (Address: 0x18006de28)
  • ResolveLocaleName (Address: 0x18006de38)
api-ms-win-core-localization-l1-2-1.dll
  • EnumSystemLocalesEx (Address: 0x18006de50)
api-ms-win-core-localization-l1-2-2.dll
  • GetSystemDefaultLocaleName (Address: 0x18006de60)
api-ms-win-core-localization-l1-2-3.dll
  • GetUserDefaultGeoName (Address: 0x18006de70)
  • SetUserGeoName (Address: 0x18006de78)
api-ms-win-core-localization-private-l1-1-0.dll
  • NlsUpdateLocale (Address: 0x18006de88)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x18006de98)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18006dea8)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18006ded0)
  • GetCurrentProcessId (Address: 0x18006ded8)
  • GetCurrentThread (Address: 0x18006dee0)
  • GetCurrentThreadId (Address: 0x18006dee8)
  • OpenProcessToken (Address: 0x18006dec8)
  • OpenThreadToken (Address: 0x18006deb8)
  • TerminateProcess (Address: 0x18006dec0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18006df00)
  • OpenProcess (Address: 0x18006def8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18006df10)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18006df58)
  • RegCreateKeyExW (Address: 0x18006df68)
  • RegDeleteKeyExW (Address: 0x18006df70)
  • RegDeleteValueW (Address: 0x18006df50)
  • RegEnumKeyExW (Address: 0x18006df28)
  • RegGetValueW (Address: 0x18006df38)
  • RegOpenKeyExW (Address: 0x18006df20)
  • RegQueryInfoKeyW (Address: 0x18006df30)
  • RegQueryValueExW (Address: 0x18006df40)
  • RegSetKeySecurity (Address: 0x18006df48)
  • RegSetValueExW (Address: 0x18006df60)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18006df90)
  • RtlLookupFunctionEntry (Address: 0x18006df80)
  • RtlVirtualUnwind (Address: 0x18006df88)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18006dfa8)
  • MultiByteToWideChar (Address: 0x18006dfa0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18006dff8)
  • AcquireSRWLockShared (Address: 0x18006dfc8)
  • CreateEventExW (Address: 0x18006e020)
  • CreateEventW (Address: 0x18006dfe8)
  • CreateMutexExW (Address: 0x18006dfb8)
  • CreateSemaphoreExW (Address: 0x18006e050)
  • DeleteCriticalSection (Address: 0x18006e000)
  • EnterCriticalSection (Address: 0x18006dfd0)
  • InitializeCriticalSection (Address: 0x18006e060)
  • InitializeCriticalSectionEx (Address: 0x18006dfd8)
  • InitializeSRWLock (Address: 0x18006e010)
  • LeaveCriticalSection (Address: 0x18006dfc0)
  • OpenSemaphoreW (Address: 0x18006e030)
  • ReleaseMutex (Address: 0x18006e018)
  • ReleaseSemaphore (Address: 0x18006e040)
  • ReleaseSRWLockExclusive (Address: 0x18006e008)
  • ReleaseSRWLockShared (Address: 0x18006e058)
  • ResetEvent (Address: 0x18006e038)
  • SetEvent (Address: 0x18006dfe0)
  • WaitForMultipleObjectsEx (Address: 0x18006e048)
  • WaitForSingleObject (Address: 0x18006e028)
  • WaitForSingleObjectEx (Address: 0x18006dff0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18006e080)
  • InitOnceComplete (Address: 0x18006e078)
  • InitOnceExecuteOnce (Address: 0x18006e070)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18006e090)
  • GetTickCount (Address: 0x18006e098)
  • GetTickCount64 (Address: 0x18006e0a0)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetSystemTimePreciseAsFileTime (Address: 0x18006e0b0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18006e0f8)
  • CloseThreadpoolWait (Address: 0x18006e0f0)
  • CreateThreadpoolTimer (Address: 0x18006e0e8)
  • CreateThreadpoolWait (Address: 0x18006e0d8)
  • SetThreadpoolTimer (Address: 0x18006e0c8)
  • SetThreadpoolWait (Address: 0x18006e0e0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18006e0d0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x18006e0c0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18006e108)
  • EncodePointer (Address: 0x18006e110)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x18006e138)
  • RoOriginateError (Address: 0x18006e128)
  • RoOriginateErrorW (Address: 0x18006e140)
  • RoTransformError (Address: 0x18006e120)
  • SetRestrictedErrorInfo (Address: 0x18006e130)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18006e150)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18006e160)
  • RoOriginateLanguageException (Address: 0x18006e168)
  • RoReportFailedDelegate (Address: 0x18006e158)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18006e178)
  • RoGetActivationFactory (Address: 0x18006e180)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x18006e1b8)
  • HSTRING_UserFree64 (Address: 0x18006e1c8)
  • HSTRING_UserMarshal (Address: 0x18006e1d0)
  • HSTRING_UserMarshal64 (Address: 0x18006e1e8)
  • HSTRING_UserSize (Address: 0x18006e1d8)
  • HSTRING_UserSize64 (Address: 0x18006e1c0)
  • HSTRING_UserUnmarshal (Address: 0x18006e1a8)
  • HSTRING_UserUnmarshal64 (Address: 0x18006e1a0)
  • WindowsConcatString (Address: 0x18006e1b0)
  • WindowsCreateString (Address: 0x18006e190)
  • WindowsCreateStringReference (Address: 0x18006e1f0)
  • WindowsDeleteString (Address: 0x18006e1e0)
  • WindowsDuplicateString (Address: 0x18006e198)
  • WindowsGetStringRawBuffer (Address: 0x18006e1f8)
  • WindowsIsStringEmpty (Address: 0x18006e200)
  • WindowsStringHasEmbeddedNull (Address: 0x18006e208)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18006e278)
  • __CxxFrameHandler3 (Address: 0x18006e280)
  • __CxxFrameHandler4 (Address: 0x18006e328)
  • __std_terminate (Address: 0x18006e320)
  • _CxxThrowException (Address: 0x18006e288)
  • _o___std_exception_copy (Address: 0x18006e2f8)
  • _o___std_exception_destroy (Address: 0x18006e2f0)
  • _o___std_type_info_destroy_list (Address: 0x18006e2e8)
  • _o___stdio_common_vsnprintf_s (Address: 0x18006e2d8)
  • _o___stdio_common_vsprintf (Address: 0x18006e2d0)
  • _o___stdio_common_vswprintf (Address: 0x18006e2c8)
  • _o__callnewh (Address: 0x18006e2c0)
  • _o__cexit (Address: 0x18006e2b8)
  • _o__configure_narrow_argv (Address: 0x18006e2a8)
  • _o__crt_atexit (Address: 0x18006e2a0)
  • _o__errno (Address: 0x18006e308)
  • _o__execute_onexit_table (Address: 0x18006e300)
  • _o__initialize_narrow_environment (Address: 0x18006e2e0)
  • _o__initialize_onexit_table (Address: 0x18006e2b0)
  • _o__invalid_parameter_noinfo (Address: 0x18006e298)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18006e290)
  • _o__purecall (Address: 0x18006e218)
  • _o__register_onexit_function (Address: 0x18006e220)
  • _o__seh_filter_dll (Address: 0x18006e228)
  • _o__wcsicmp (Address: 0x18006e230)
  • _o__wcsnicmp (Address: 0x18006e238)
  • _o_free (Address: 0x18006e248)
  • _o_iswspace (Address: 0x18006e250)
  • _o_malloc (Address: 0x18006e258)
  • _o_realloc (Address: 0x18006e260)
  • _o_terminate (Address: 0x18006e268)
  • _o_wcscpy_s (Address: 0x18006e270)
  • memcmp (Address: 0x18006e330)
  • memcpy (Address: 0x18006e338)
  • memmove (Address: 0x18006e240)
  • wcschr (Address: 0x18006e310)
  • wcsrchr (Address: 0x18006e318)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18006e350)
  • _initterm_e (Address: 0x18006e348)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18006e360)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x18006e378)
  • EventSetInformation (Address: 0x18006e370)
  • EventUnregister (Address: 0x18006e388)
  • EventWriteTransfer (Address: 0x18006e380)
api-ms-win-power-base-l1-1-0.dll
  • GetPwrCapabilities (Address: 0x18006e398)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
  • MsgWaitForMultipleObjectsEx (Address: 0x18006e3a8)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • DispatchMessageW (Address: 0x18006e3d0)
  • PeekMessageW (Address: 0x18006e3c0)
  • PostQuitMessage (Address: 0x18006e3b8)
  • TranslateMessage (Address: 0x18006e3c8)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x18006e400)
  • CreateWellKnownSid (Address: 0x18006e418)
  • DuplicateTokenEx (Address: 0x18006e3f0)
  • EqualSid (Address: 0x18006e3e0)
  • FreeSid (Address: 0x18006e3f8)
  • GetAce (Address: 0x18006e3e8)
  • GetTokenInformation (Address: 0x18006e408)
  • RevertToSelf (Address: 0x18006e410)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x18006e428)
api-ms-win-security-lsalookup-l2-1-0.dll
  • LookupAccountSidW (Address: 0x18006e438)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x18006e448)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18006e458)
  • ConvertStringSidToSidW (Address: 0x18006e450)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18006e468)
  • SHTaskPoolQueueTask (Address: 0x18006e470)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x18006e480)
Bcp47Langs.dll
  • Bcp47GetUnIsoRegionCode (Address: 0x18006d9c0)
combase.dll
  • (Address: 0x18006e490)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18006e4a0)
ntdll.dll
  • NtQueryLicenseValue (Address: 0x18006e4d8)
  • NtQuerySecurityObject (Address: 0x18006e4f0)
  • NtSetSecurityObject (Address: 0x18006e4b0)
  • RtlAddAccessAllowedAce (Address: 0x18006e528)
  • RtlAddAce (Address: 0x18006e520)
  • RtlAllocateHeap (Address: 0x18006e518)
  • RtlConvertSidToUnicodeString (Address: 0x18006e508)
  • RtlCreateAcl (Address: 0x18006e4c0)
  • RtlCreateSecurityDescriptor (Address: 0x18006e4f8)
  • RtlFreeHeap (Address: 0x18006e500)
  • RtlFreeUnicodeString (Address: 0x18006e4e8)
  • RtlGetAce (Address: 0x18006e4b8)
  • RtlGetDaclSecurityDescriptor (Address: 0x18006e4e0)
  • RtlIsMultiSessionSku (Address: 0x18006e510)
  • RtlLengthSid (Address: 0x18006e4c8)
  • RtlQueryInformationAcl (Address: 0x18006e4d0)
  • RtlSetDaclSecurityDescriptor (Address: 0x18006e530)
OLEAUT32.dll
  • SysAllocString (Address: 0x18006d9d0)
  • SysFreeString (Address: 0x18006d9d8)
  • SysStringLen (Address: 0x18006d9f0)
  • VariantClear (Address: 0x18006d9e0)
  • VariantInit (Address: 0x18006d9e8)
POWRPROF.dll
  • PowerDeterminePlatformRole (Address: 0x18006da00)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x18006da88)
  • CStdStubBuffer_Connect (Address: 0x18006da80)
  • CStdStubBuffer_CountRefs (Address: 0x18006da18)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x18006dad0)
  • CStdStubBuffer_DebugServerRelease (Address: 0x18006da40)
  • CStdStubBuffer_Disconnect (Address: 0x18006dad8)
  • CStdStubBuffer_Invoke (Address: 0x18006dab8)
  • CStdStubBuffer_IsIIDSupported (Address: 0x18006da68)
  • CStdStubBuffer_QueryInterface (Address: 0x18006da20)
  • IUnknown_AddRef_Proxy (Address: 0x18006dac8)
  • IUnknown_QueryInterface_Proxy (Address: 0x18006da58)
  • IUnknown_Release_Proxy (Address: 0x18006da10)
  • NdrClientCall3 (Address: 0x18006da78)
  • NdrCStdStubBuffer_Release (Address: 0x18006dab0)
  • NdrCStdStubBuffer2_Release (Address: 0x18006da98)
  • NdrDllCanUnloadNow (Address: 0x18006daa8)
  • NdrDllGetClassObject (Address: 0x18006daa0)
  • NdrOleAllocate (Address: 0x18006da38)
  • NdrOleFree (Address: 0x18006dac0)
  • NdrStubCall3 (Address: 0x18006da60)
  • NdrStubForwardingFunction (Address: 0x18006dae0)
  • RpcBindingFree (Address: 0x18006da50)
  • RpcBindingFromStringBindingW (Address: 0x18006da28)
  • RpcExceptionFilter (Address: 0x18006da70)
  • RpcStringBindingComposeW (Address: 0x18006da30)
  • RpcStringFreeW (Address: 0x18006da48)
  • UuidCreate (Address: 0x18006da90)
samcli.dll
  • NetLocalGroupAddMembers (Address: 0x18006e540)
WinLangdb.dll
  • GetLocaleFromLanguageAndRegion (Address: 0x18006daf0)
  • SetUserLanguagesCore (Address: 0x18006daf8)