ExtendedSecurityUpdatesAI.dll

Description: Extended Security Updates AI plug-in

Version: 10.0.19041.6271

Architecture: 32-bit

Operating System: Windows NT

SHA256: 0635fb931b7694457e36ee449afd555e

File Size: 114.5 KB

Uploaded At: Dec. 1, 2025, 8:47 a.m.

Views: 12

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x12800)
DllCsiGetHandler (Ordinal: 2, Address: 0x12820)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x1001c018)
CoQueryProxyBlanket (Address: 0x1001c020)
CoSetProxyBlanket (Address: 0x1001c024)
CoTaskMemFree (Address: 0x1001c01c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1001c030)
IsDebuggerPresent (Address: 0x1001c02c)
OutputDebugStringW (Address: 0x1001c034)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1001c048)
SetLastError (Address: 0x1001c03c)
SetUnhandledExceptionFilter (Address: 0x1001c044)
UnhandledExceptionFilter (Address: 0x1001c040)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1001c050)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1001c05c)
HeapAlloc (Address: 0x1001c058)
HeapDestroy (Address: 0x1001c064)
HeapFree (Address: 0x1001c060)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1001c06c)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1001c074)
FreeLibrary (Address: 0x1001c088)
GetModuleFileNameA (Address: 0x1001c080)
GetModuleHandleExW (Address: 0x1001c07c)
GetModuleHandleW (Address: 0x1001c078)
GetProcAddress (Address: 0x1001c08c)
LoadLibraryExW (Address: 0x1001c084)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1001c094)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1001c09c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1001c0a4)
GetCurrentProcessId (Address: 0x1001c0ac)
GetCurrentThreadId (Address: 0x1001c0b0)
TerminateProcess (Address: 0x1001c0a8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1001c0b8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1001c0c8)
RegOpenKeyExW (Address: 0x1001c0c0)
RegQueryValueExW (Address: 0x1001c0c4)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x1001c0d0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1001c110)
AcquireSRWLockShared (Address: 0x1001c0dc)
CreateMutexExW (Address: 0x1001c100)
CreateSemaphoreExW (Address: 0x1001c0f4)
DeleteCriticalSection (Address: 0x1001c10c)
EnterCriticalSection (Address: 0x1001c104)
InitializeCriticalSection (Address: 0x1001c0f0)
InitializeCriticalSectionEx (Address: 0x1001c108)
LeaveCriticalSection (Address: 0x1001c0f8)
OpenSemaphoreW (Address: 0x1001c0fc)
ReleaseMutex (Address: 0x1001c0e8)
ReleaseSemaphore (Address: 0x1001c0e4)
ReleaseSRWLockExclusive (Address: 0x1001c0d8)
ReleaseSRWLockShared (Address: 0x1001c0e0)
WaitForSingleObject (Address: 0x1001c114)
WaitForSingleObjectEx (Address: 0x1001c0ec)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1001c11c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1001c128)
GetTickCount (Address: 0x1001c12c)
GetVersionExW (Address: 0x1001c124)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x1001c134)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1001c140)
CreateThreadpoolTimer (Address: 0x1001c13c)
SetThreadpoolTimer (Address: 0x1001c144)
WaitForThreadpoolTimerCallbacks (Address: 0x1001c148)

AzureCheck.dll

IsAzureVM (Address: 0x1001c000)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001c1b8)
__dllonexit (Address: 0x1001c154)
_amsg_exit (Address: 0x1001c1dc)
_callnewh (Address: 0x1001c184)
_CxxThrowException (Address: 0x1001c174)
_except_handler4_common (Address: 0x1001c15c)
_initterm (Address: 0x1001c1b4)
_lock (Address: 0x1001c188)
_onexit (Address: 0x1001c158)
_purecall (Address: 0x1001c1d4)
_snprintf_s (Address: 0x1001c168)
_unlock (Address: 0x1001c150)
_vsnprintf_s (Address: 0x1001c1c0)
_vsnwprintf (Address: 0x1001c1cc)
_wcsnicmp (Address: 0x1001c1a0)
_XcptFilter (Address: 0x1001c198)
??0exception@@QAE@ABQBD@Z (Address: 0x1001c180)
??0exception@@QAE@ABQBDH@Z (Address: 0x1001c17c)
??0exception@@QAE@ABV0@@Z (Address: 0x1001c1a8)
??0exception@@QAE@XZ (Address: 0x1001c1b0)
??1exception@@UAE@XZ (Address: 0x1001c1ac)
??1type_info@@UAE@XZ (Address: 0x1001c178)
??3@YAXPAX@Z (Address: 0x1001c1d8)
?terminate@@YAXXZ (Address: 0x1001c18c)
?what@exception@@UBEPBDXZ (Address: 0x1001c1c4)
free (Address: 0x1001c1bc)
malloc (Address: 0x1001c194)
memcmp (Address: 0x1001c160)
memcpy (Address: 0x1001c170)
memcpy_s (Address: 0x1001c1c8)
memmove (Address: 0x1001c190)
memmove_s (Address: 0x1001c1a4)
memset (Address: 0x1001c1e0)
strncmp (Address: 0x1001c16c)
swscanf (Address: 0x1001c1d0)
time (Address: 0x1001c19c)
wcstoul (Address: 0x1001c164)

netutils.dll

NetApiBufferFree (Address: 0x1001c1e8)

ntdll.dll

DbgPrint (Address: 0x1001c1f4)
DbgPrintEx (Address: 0x1001c238)
LdrGetDllHandle (Address: 0x1001c214)
LdrGetProcedureAddress (Address: 0x1001c224)
LdrLoadDll (Address: 0x1001c208)
LdrUnloadDll (Address: 0x1001c210)
NtClose (Address: 0x1001c21c)
NtCreateFile (Address: 0x1001c1f8)
NtOpenKey (Address: 0x1001c218)
NtQueryLicenseValue (Address: 0x1001c24c)
NtQueryValueKey (Address: 0x1001c1f0)
NtWriteFile (Address: 0x1001c220)
RtlAllocateHeap (Address: 0x1001c23c)
RtlCreateUnicodeStringFromAsciiz (Address: 0x1001c200)
RtlDeleteCriticalSection (Address: 0x1001c248)
RtlDosPathNameToNtPathName_U (Address: 0x1001c20c)
RtlEnterCriticalSection (Address: 0x1001c234)
RtlFreeHeap (Address: 0x1001c1fc)
RtlInitializeCriticalSection (Address: 0x1001c230)
RtlLeaveCriticalSection (Address: 0x1001c22c)
RtlQueryEnvironmentVariable_U (Address: 0x1001c204)
RtlRaiseStatus (Address: 0x1001c228)
RtlReAllocateHeap (Address: 0x1001c240)
RtlTimeToTimeFields (Address: 0x1001c244)

OLEAUT32.dll

SysAllocString (Address: 0x1001c008)
SysFreeString (Address: 0x1001c00c)
VariantInit (Address: 0x1001c010)