FrameServer.dll

Description: Windows Camera Frame Server DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5854

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7a7b17594216486f7a4ad309ce687747

File Size: 966.0 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ServiceMain (Ordinal: 1, Address: 0x2b90)
  • SvchostPushServiceGlobals (Ordinal: 2, Address: 0x2b40)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1800ced90)
  • CoCreateFreeThreadedMarshaler (Address: 0x1800ced70)
  • CoCreateGuid (Address: 0x1800ced80)
  • CoCreateInstance (Address: 0x1800cedb8)
  • CoSetProxyBlanket (Address: 0x1800cedc0)
  • CoTaskMemAlloc (Address: 0x1800cedb0)
  • CoTaskMemFree (Address: 0x1800ceda0)
  • IIDFromString (Address: 0x1800ceda8)
  • PropVariantClear (Address: 0x1800ced78)
  • PropVariantCopy (Address: 0x1800ced98)
  • StringFromCLSID (Address: 0x1800ced68)
  • StringFromGUID2 (Address: 0x1800ced60)
  • StringFromIID (Address: 0x1800ced88)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800cede0)
  • IsDebuggerPresent (Address: 0x1800cede8)
  • OutputDebugStringA (Address: 0x1800cedd8)
  • OutputDebugStringW (Address: 0x1800cedd0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800cedf8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800cee08)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800cee38)
  • RaiseException (Address: 0x1800cee28)
  • SetLastError (Address: 0x1800cee20)
  • SetUnhandledExceptionFilter (Address: 0x1800cee30)
  • UnhandledExceptionFilter (Address: 0x1800cee18)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x1800cee48)
api-ms-win-core-featurestaging-l1-1-0.dll
  • GetFeatureEnabledState (Address: 0x1800cee58)
  • RecordFeatureUsage (Address: 0x1800cee60)
  • SubscribeFeatureStateChangeNotification (Address: 0x1800cee70)
  • UnsubscribeFeatureStateChangeNotification (Address: 0x1800cee68)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800cee88)
  • GetFileTime (Address: 0x1800cee80)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800ceea0)
  • DuplicateHandle (Address: 0x1800cee98)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800ceeb0)
  • HeapAlloc (Address: 0x1800ceeb8)
  • HeapFree (Address: 0x1800ceec0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800ceed0)
  • LocalFree (Address: 0x1800ceed8)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x1800ceee8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • AddDllDirectory (Address: 0x1800cef30)
  • DisableThreadLibraryCalls (Address: 0x1800cef38)
  • FreeLibrary (Address: 0x1800cef08)
  • GetModuleFileNameA (Address: 0x1800cef10)
  • GetModuleFileNameW (Address: 0x1800cef20)
  • GetModuleHandleExW (Address: 0x1800ceef8)
  • GetModuleHandleW (Address: 0x1800cef18)
  • GetProcAddress (Address: 0x1800cef00)
  • LoadLibraryExW (Address: 0x1800cef28)
  • RemoveDllDirectory (Address: 0x1800cef40)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1800cef50)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800cef60)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1800cef78)
  • MapViewOfFile (Address: 0x1800cef80)
  • OpenFileMappingW (Address: 0x1800cef88)
  • UnmapViewOfFile (Address: 0x1800cef70)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800cef98)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800cefc8)
  • GetCurrentProcessId (Address: 0x1800cefd8)
  • GetCurrentThread (Address: 0x1800cefb8)
  • GetCurrentThreadId (Address: 0x1800cefe0)
  • OpenProcessToken (Address: 0x1800cefb0)
  • OpenThreadToken (Address: 0x1800cefc0)
  • TerminateProcess (Address: 0x1800cefd0)
  • TlsGetValue (Address: 0x1800cefe8)
  • TlsSetValue (Address: 0x1800cefa8)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x1800ceff8)
  • OpenProcess (Address: 0x1800cf000)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800cf010)
  • QueryPerformanceFrequency (Address: 0x1800cf018)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1800cf028)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800cf068)
  • RegCreateKeyExW (Address: 0x1800cf038)
  • RegDeleteKeyExW (Address: 0x1800cf050)
  • RegDeleteValueW (Address: 0x1800cf048)
  • RegEnumKeyExW (Address: 0x1800cf070)
  • RegGetValueW (Address: 0x1800cf060)
  • RegOpenKeyExW (Address: 0x1800cf040)
  • RegQueryValueExW (Address: 0x1800cf078)
  • RegSetValueExW (Address: 0x1800cf058)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800cf088)
  • RtlLookupFunctionEntry (Address: 0x1800cf098)
  • RtlVirtualUnwind (Address: 0x1800cf090)
api-ms-win-core-string-l1-1-0.dll
  • WideCharToMultiByte (Address: 0x1800cf0a8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800cf138)
  • AcquireSRWLockShared (Address: 0x1800cf130)
  • CreateEventW (Address: 0x1800cf0d0)
  • CreateMutexExW (Address: 0x1800cf140)
  • CreateMutexW (Address: 0x1800cf0c0)
  • CreateSemaphoreExW (Address: 0x1800cf0d8)
  • DeleteCriticalSection (Address: 0x1800cf150)
  • EnterCriticalSection (Address: 0x1800cf170)
  • InitializeCriticalSection (Address: 0x1800cf0f0)
  • InitializeCriticalSectionEx (Address: 0x1800cf120)
  • InitializeSRWLock (Address: 0x1800cf148)
  • LeaveCriticalSection (Address: 0x1800cf0f8)
  • OpenEventW (Address: 0x1800cf0b8)
  • OpenMutexW (Address: 0x1800cf0c8)
  • OpenSemaphoreW (Address: 0x1800cf118)
  • ReleaseMutex (Address: 0x1800cf0e8)
  • ReleaseSemaphore (Address: 0x1800cf158)
  • ReleaseSRWLockExclusive (Address: 0x1800cf128)
  • ReleaseSRWLockShared (Address: 0x1800cf100)
  • ResetEvent (Address: 0x1800cf160)
  • SetEvent (Address: 0x1800cf0e0)
  • TryEnterCriticalSection (Address: 0x1800cf108)
  • WaitForSingleObject (Address: 0x1800cf168)
  • WaitForSingleObjectEx (Address: 0x1800cf110)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1800cf1a0)
  • SleepConditionVariableSRW (Address: 0x1800cf198)
  • WaitOnAddress (Address: 0x1800cf190)
  • WakeAllConditionVariable (Address: 0x1800cf180)
  • WakeByAddressAll (Address: 0x1800cf188)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800cf1c8)
  • GetSystemInfo (Address: 0x1800cf1c0)
  • GetSystemTimeAsFileTime (Address: 0x1800cf1b8)
  • GetTickCount (Address: 0x1800cf1b0)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetSystemTimePreciseAsFileTime (Address: 0x1800cf1d8)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800cf200)
  • CreateThreadpoolTimer (Address: 0x1800cf1f8)
  • SetThreadpoolTimer (Address: 0x1800cf1e8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800cf1f0)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • UnregisterWaitEx (Address: 0x1800cf210)
api-ms-win-core-version-l1-1-0.dll
  • VerQueryValueW (Address: 0x1800cf220)
api-ms-win-core-version-l1-1-1.dll
  • GetFileVersionInfoSizeW (Address: 0x1800cf230)
  • GetFileVersionInfoW (Address: 0x1800cf238)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1800cf248)
  • RoOriginateErrorW (Address: 0x1800cf250)
  • RoTransformError (Address: 0x1800cf258)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800cf270)
  • RoGetActivationFactory (Address: 0x1800cf268)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
  • RoCreatePropertySetSerializer (Address: 0x1800cf280)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
  • RoGetBufferMarshaler (Address: 0x1800cf290)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x1800cf2a8)
  • WindowsCreateString (Address: 0x1800cf2e8)
  • WindowsCreateStringReference (Address: 0x1800cf2d8)
  • WindowsDeleteString (Address: 0x1800cf2c8)
  • WindowsDeleteStringBuffer (Address: 0x1800cf2b0)
  • WindowsDuplicateString (Address: 0x1800cf2e0)
  • WindowsGetStringRawBuffer (Address: 0x1800cf2a0)
  • WindowsIsStringEmpty (Address: 0x1800cf2d0)
  • WindowsPreallocateStringBuffer (Address: 0x1800cf2c0)
  • WindowsPromoteStringBuffer (Address: 0x1800cf2b8)
api-ms-win-devices-config-l1-1-1.dll
  • CM_Get_Device_Interface_List_SizeW (Address: 0x1800cf2f8)
  • CM_Get_Device_Interface_ListW (Address: 0x1800cf308)
  • CM_Get_Device_Interface_PropertyW (Address: 0x1800cf338)
  • CM_Get_DevNode_PropertyW (Address: 0x1800cf320)
  • CM_Get_Parent (Address: 0x1800cf310)
  • CM_Locate_DevNodeW (Address: 0x1800cf340)
  • CM_MapCrToWin32Err (Address: 0x1800cf330)
  • CM_Open_Device_Interface_KeyW (Address: 0x1800cf300)
  • CM_Register_Notification (Address: 0x1800cf328)
  • CM_Unregister_Notification (Address: 0x1800cf318)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1800cf360)
  • GetTraceEnableLevel (Address: 0x1800cf368)
  • GetTraceLoggerHandle (Address: 0x1800cf370)
  • RegisterTraceGuidsW (Address: 0x1800cf350)
  • TraceMessage (Address: 0x1800cf378)
  • UnregisterTraceGuids (Address: 0x1800cf358)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1800cf390)
  • EventSetInformation (Address: 0x1800cf3a0)
  • EventUnregister (Address: 0x1800cf388)
  • EventWriteTransfer (Address: 0x1800cf398)
api-ms-win-power-base-l1-1-0.dll
  • PowerRegisterSuspendResumeNotification (Address: 0x1800cf3b8)
  • PowerUnregisterSuspendResumeNotification (Address: 0x1800cf3b0)
api-ms-win-power-setting-l1-1-0.dll
  • PowerSettingRegisterNotification (Address: 0x1800cf3c8)
  • PowerSettingUnregisterNotification (Address: 0x1800cf3d0)
api-ms-win-security-base-l1-1-0.dll
  • CheckTokenMembership (Address: 0x1800cf3f0)
  • EqualSid (Address: 0x1800cf3f8)
  • GetLengthSid (Address: 0x1800cf408)
  • GetTokenInformation (Address: 0x1800cf400)
  • ImpersonateLoggedOnUser (Address: 0x1800cf3e0)
  • RevertToSelf (Address: 0x1800cf3e8)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800cf420)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1800cf418)
  • ConvertStringSidToSidW (Address: 0x1800cf428)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x1800cf438)
  • SetServiceStatus (Address: 0x1800cf440)
CFGMGR32.dll
  • CM_Get_Device_Interface_AliasW (Address: 0x1800cebe0)
MF.dll
  • MFCreateDeviceSource (Address: 0x1800cebf0)
  • MFEnumDeviceSources (Address: 0x1800cebf8)
MFSENSORGROUP.dll
  • MFCheckProcessCapabilities (Address: 0x1800cec08)
  • MFCloneSensorProfile (Address: 0x1800cec38)
  • MFCreatePackageFamilyNameTag (Address: 0x1800cec18)
  • MFCreatePassthroughTranslatedMediaType (Address: 0x1800cec50)
  • MFCreateSensorGroup (Address: 0x1800cec78)
  • MFCreateSensorGroupById (Address: 0x1800cec80)
  • MFCreateSensorGroupIdManager (Address: 0x1800cec70)
  • MFCreateSensorProfileCollection (Address: 0x1800cec98)
  • MFCreateSensorProfileWithFlags (Address: 0x1800cec30)
  • MFCreateSensorStream (Address: 0x1800cec28)
  • MFCreateTranslatedMediaType (Address: 0x1800cec90)
  • MFDeleteSensorGroupById (Address: 0x1800cec20)
  • MFGetSensorDeviceProperty (Address: 0x1800cec68)
  • MFGetSensorDeviceRegistryProperty (Address: 0x1800cec60)
  • MFGetSensorGroupAttributesFromId (Address: 0x1800cec48)
  • MFGetSensorOrientation (Address: 0x1800cec40)
  • MFGetSGCH (Address: 0x1800cec88)
  • MFInitializeSensorGroupStore (Address: 0x1800cec58)
  • MFIsStreamAvailableToAppPackage (Address: 0x1800cec10)
msvcrt.dll
  • __C_specific_handler (Address: 0x1800cf550)
  • __CxxFrameHandler3 (Address: 0x1800cf528)
  • __dllonexit (Address: 0x1800cf538)
  • _amsg_exit (Address: 0x1800cf560)
  • _callnewh (Address: 0x1800cf570)
  • _errno (Address: 0x1800cf4f8)
  • _gcvt_s (Address: 0x1800cf460)
  • _i64toa_s (Address: 0x1800cf5a0)
  • _initterm (Address: 0x1800cf558)
  • _lock (Address: 0x1800cf548)
  • _ltoa_s (Address: 0x1800cf458)
  • _onexit (Address: 0x1800cf530)
  • _purecall (Address: 0x1800cf588)
  • _ultoa_s (Address: 0x1800cf4e8)
  • _unlock (Address: 0x1800cf540)
  • _vscprintf (Address: 0x1800cf510)
  • _vsnprintf (Address: 0x1800cf468)
  • _vsnwprintf (Address: 0x1800cf4c0)
  • _wcsicmp (Address: 0x1800cf480)
  • _wcslwr_s (Address: 0x1800cf4d8)
  • _wcsnicmp (Address: 0x1800cf470)
  • _wcsupr_s (Address: 0x1800cf590)
  • _XcptFilter (Address: 0x1800cf568)
  • free (Address: 0x1800cf580)
  • malloc (Address: 0x1800cf578)
  • memcmp (Address: 0x1800cf518)
  • memcpy (Address: 0x1800cf4c8)
  • memcpy_s (Address: 0x1800cf478)
  • memmove (Address: 0x1800cf4b0)
  • memmove_s (Address: 0x1800cf4e0)
  • memset (Address: 0x1800cf4a8)
  • qsort (Address: 0x1800cf450)
  • realloc (Address: 0x1800cf4f0)
  • sqrt (Address: 0x1800cf520)
  • strncpy_s (Address: 0x1800cf500)
  • strnlen (Address: 0x1800cf508)
  • swprintf_s (Address: 0x1800cf490)
  • wcschr (Address: 0x1800cf488)
  • wcscmp (Address: 0x1800cf5a8)
  • wcscpy_s (Address: 0x1800cf4b8)
  • wcsncmp (Address: 0x1800cf498)
  • wcsncpy_s (Address: 0x1800cf4d0)
  • wcsstr (Address: 0x1800cf4a0)
  • wcstol (Address: 0x1800cf598)
ntdll.dll
  • NtAcquireCrossVmMutant (Address: 0x1800cf5f8)
  • NtClose (Address: 0x1800cf5c0)
  • NtCreateCrossVmEvent (Address: 0x1800cf608)
  • NtCreateCrossVmMutant (Address: 0x1800cf600)
  • NtCreateFile (Address: 0x1800cf5d8)
  • NtCreateSection (Address: 0x1800cf5e0)
  • NtQueryInformationProcess (Address: 0x1800cf620)
  • NtReleaseMutant (Address: 0x1800cf5f0)
  • RtlAppendUnicodeStringToString (Address: 0x1800cf5d0)
  • RtlAppendUnicodeToString (Address: 0x1800cf5e8)
  • RtlFreeUnicodeString (Address: 0x1800cf5c8)
  • RtlStringFromGUIDEx (Address: 0x1800cf5b8)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800cf618)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800cf610)
PROPSYS.dll
  • PropVariantCompareEx (Address: 0x1800ceca8)
RPCRT4.dll
  • NdrServerCall2 (Address: 0x1800cecc0)
  • NdrServerCallAll (Address: 0x1800cecb8)
  • RpcBindingToStringBindingW (Address: 0x1800ced08)
  • RpcBindingVectorFree (Address: 0x1800ced10)
  • RpcEpRegisterW (Address: 0x1800ced20)
  • RpcEpUnregister (Address: 0x1800ced18)
  • RpcImpersonateClient (Address: 0x1800cece8)
  • RpcRevertToSelfEx (Address: 0x1800cece0)
  • RpcServerInqBindingHandle (Address: 0x1800cecd0)
  • RpcServerInqBindings (Address: 0x1800ced40)
  • RpcServerInqCallAttributesW (Address: 0x1800cecf0)
  • RpcServerInqDefaultPrincNameW (Address: 0x1800ced38)
  • RpcServerRegisterAuthInfoW (Address: 0x1800ced30)
  • RpcServerRegisterIf3 (Address: 0x1800ced28)
  • RpcServerUnregisterIfEx (Address: 0x1800ced50)
  • RpcServerUseProtseqEpW (Address: 0x1800cecc8)
  • RpcServerUseProtseqW (Address: 0x1800ced48)
  • RpcStringBindingParseW (Address: 0x1800ced00)
  • RpcStringFreeW (Address: 0x1800cecf8)
  • UuidCreate (Address: 0x1800cecd8)