PresentationHost_v0400.dll

Description: Windows Presentation Foundation Host Library

Version: 4.8.4536.0

Architecture: 32-bit

Operating System: Windows

SHA256: f915f282a88b878724e2f43256c2395d

File Size: 229.4 KB

Uploaded At: Dec. 1, 2025, 8:48 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllMain (Ordinal: 1, Address: 0xb8c0)
Activate (Ordinal: 2, Address: 0xb9e0)
Deactivate (Ordinal: 3, Address: 0xc250)
ForwardTranslateAccelerator (Ordinal: 4, Address: 0xbee0)
SaveToHistory (Ordinal: 5, Address: 0xc3a0)
LoadFromHistory (Ordinal: 6, Address: 0xc400)
ProcessUnhandledException (Ordinal: 7, Address: 0xc7b0)
CreateIDispatchSTAForwarder (Ordinal: 8, Address: 0x1ec20)
SetFakeActiveWindow (Ordinal: 9, Address: 0xb650)
DllRegisterServer (Ordinal: 10, Address: 0xb950)
DllUnregisterServer (Ordinal: 11, Address: 0xb9c0)
ProcessCommandLine (Ordinal: 12, Address: 0x235d0)
DRMInitEnvironment (Ordinal: 601, Address: 0x1dce0)
DRMCreateBoundLicense (Ordinal: 602, Address: 0x1dd30)
DRMCreateLicenseStorageSession (Ordinal: 603, Address: 0x1dd80)
DRMCreateEnablingBitsDecryptor (Ordinal: 604, Address: 0x1ddd0)
DRMCreateEnablingBitsEncryptor (Ordinal: 605, Address: 0x1de20)
DRMEncrypt (Ordinal: 606, Address: 0x1de70)
DRMDecrypt (Ordinal: 607, Address: 0x1dec0)
DRMGetInfo (Ordinal: 608, Address: 0x1df10)
DRMGetBoundLicenseObjectCount (Ordinal: 609, Address: 0x1df60)
DRMGetBoundLicenseObject (Ordinal: 610, Address: 0x1dfa0)
DRMGetBoundLicenseAttribute (Ordinal: 611, Address: 0x1dfe0)
DRMGetSignedIssuanceLicense (Ordinal: 612, Address: 0x1e030)
DRMGetServiceLocation (Ordinal: 613, Address: 0x1e090)
DRMCloseEnvironmentHandle (Ordinal: 614, Address: 0x1e0e0)
DRMCloseHandle (Ordinal: 615, Address: 0x1e120)

Imported DLLs & Functions

ADVAPI32.dll

AddAccessAllowedAce (Address: 0x1003308c)
AddAce (Address: 0x10033094)
CopySid (Address: 0x10033070)
CreateProcessAsUserW (Address: 0x10033054)
CreateRestrictedToken (Address: 0x10033050)
CreateWellKnownSid (Address: 0x1003305c)
EqualSid (Address: 0x10033058)
GetAce (Address: 0x10033090)
GetAclInformation (Address: 0x10033080)
GetKernelObjectSecurity (Address: 0x10033074)
GetLengthSid (Address: 0x10033084)
GetSecurityDescriptorDacl (Address: 0x10033078)
GetSidSubAuthority (Address: 0x10033048)
GetSidSubAuthorityCount (Address: 0x1003304c)
GetTokenInformation (Address: 0x10033044)
GetTraceEnableFlags (Address: 0x10033028)
GetTraceEnableLevel (Address: 0x1003302c)
GetTraceLoggerHandle (Address: 0x10033030)
InitializeAcl (Address: 0x10033088)
LsaClose (Address: 0x1003306c)
LsaLookupPrivilegeValue (Address: 0x10033064)
LsaNtStatusToWinError (Address: 0x10033068)
LsaOpenPolicy (Address: 0x10033060)
OpenProcessToken (Address: 0x10033040)
RegCloseKey (Address: 0x1003300c)
RegCreateKeyExW (Address: 0x10033020)
RegDeleteKeyW (Address: 0x10033010)
RegDeleteValueW (Address: 0x10033024)
RegEnumKeyExW (Address: 0x10033018)
RegEnumKeyW (Address: 0x1003303c)
RegEnumValueW (Address: 0x10033038)
RegisterTraceGuidsW (Address: 0x10033034)
RegOpenKeyExW (Address: 0x10033004)
RegQueryInfoKeyW (Address: 0x10033014)
RegQueryValueExW (Address: 0x10033008)
RegSetValueExW (Address: 0x1003301c)
SetTokenInformation (Address: 0x1003307c)
TraceEvent (Address: 0x10033000)

GDI32.dll

BitBlt (Address: 0x100330a8)
CreateCompatibleBitmap (Address: 0x100330b4)
CreateCompatibleDC (Address: 0x100330b8)
CreateSolidBrush (Address: 0x100330bc)
DeleteDC (Address: 0x100330a4)
DeleteObject (Address: 0x100330ac)
GetDeviceCaps (Address: 0x100330c0)
GetObjectW (Address: 0x1003309c)
GetStockObject (Address: 0x100330a0)
SelectObject (Address: 0x100330b0)

KERNEL32.dll

ActivateActCtx (Address: 0x100331b0)
CloseHandle (Address: 0x1003311c)
CreateActCtxW (Address: 0x100331ac)
CreateEventW (Address: 0x100330f0)
CreateFileMappingW (Address: 0x10033218)
CreateFileW (Address: 0x100331c0)
CreateMutexW (Address: 0x10033138)
CreateProcessW (Address: 0x100331d0)
CreateTimerQueueTimer (Address: 0x10033178)
CreateToolhelp32Snapshot (Address: 0x1003310c)
DeactivateActCtx (Address: 0x100331b4)
DecodePointer (Address: 0x100330e4)
DeleteCriticalSection (Address: 0x100330d8)
DeleteTimerQueueTimer (Address: 0x1003317c)
DisableThreadLibraryCalls (Address: 0x100330e0)
EncodePointer (Address: 0x10033244)
EnterCriticalSection (Address: 0x10033120)
ExitProcess (Address: 0x10033100)
ExpandEnvironmentStringsW (Address: 0x10033170)
FileTimeToSystemTime (Address: 0x10033190)
FindClose (Address: 0x10033158)
FindFirstFileW (Address: 0x10033154)
FindResourceExW (Address: 0x10033214)
FindResourceW (Address: 0x100330cc)
FlushInstructionCache (Address: 0x1003322c)
FormatMessageW (Address: 0x100331a4)
FreeLibrary (Address: 0x1003326c)
GetCommandLineW (Address: 0x10033198)
GetCurrentProcess (Address: 0x10033148)
GetCurrentProcessId (Address: 0x10033110)
GetCurrentThread (Address: 0x10033274)
GetCurrentThreadId (Address: 0x10033270)
GetEnvironmentVariableW (Address: 0x100331cc)
GetExitCodeProcess (Address: 0x100331d4)
GetFileAttributesExW (Address: 0x1003318c)
GetLastError (Address: 0x100331dc)
GetLocaleInfoW (Address: 0x1003320c)
GetModuleFileNameW (Address: 0x100330d4)
GetModuleHandleW (Address: 0x10033264)
GetNativeSystemInfo (Address: 0x100331c8)
GetProcAddress (Address: 0x10033268)
GetProcessHeap (Address: 0x10033238)
GetProcessTimes (Address: 0x10033144)
GetStartupInfoW (Address: 0x10033194)
GetSystemDefaultUILanguage (Address: 0x10033204)
GetSystemDirectoryW (Address: 0x10033104)
GetSystemTimeAsFileTime (Address: 0x1003314c)
GetTempFileNameW (Address: 0x100331bc)
GetTempPathW (Address: 0x100331b8)
GetThreadContext (Address: 0x100331f0)
GetUserDefaultLangID (Address: 0x1003315c)
GetUserDefaultUILanguage (Address: 0x10033208)
GetVersionExW (Address: 0x100330e8)
GlobalAlloc (Address: 0x100330fc)
GlobalLock (Address: 0x1003312c)
GlobalUnlock (Address: 0x10033128)
HeapAlloc (Address: 0x10033240)
HeapFree (Address: 0x1003323c)
InitializeCriticalSectionEx (Address: 0x100330dc)
InitializeSListHead (Address: 0x1003324c)
InterlockedPopEntrySList (Address: 0x10033234)
InterlockedPushEntrySList (Address: 0x10033230)
IsDebuggerPresent (Address: 0x10033174)
IsProcessorFeaturePresent (Address: 0x10033254)
IsWow64Process (Address: 0x1003316c)
LeaveCriticalSection (Address: 0x10033124)
LoadLibraryExA (Address: 0x10033220)
LoadLibraryExW (Address: 0x100330d0)
LoadLibraryW (Address: 0x10033150)
LoadResource (Address: 0x100330c8)
LocalAlloc (Address: 0x10033180)
LocalFree (Address: 0x10033184)
LockResource (Address: 0x10033108)
lstrcmpiW (Address: 0x100331e4)
lstrcmpW (Address: 0x10033134)
MapViewOfFile (Address: 0x1003321c)
Module32FirstW (Address: 0x10033114)
Module32NextW (Address: 0x10033118)
MulDiv (Address: 0x10033130)
MultiByteToWideChar (Address: 0x100331d8)
OpenEventW (Address: 0x1003319c)
OpenProcess (Address: 0x10033164)
OutputDebugStringW (Address: 0x10033248)
QueryPerformanceCounter (Address: 0x10033250)
QueueUserWorkItem (Address: 0x100330f4)
RaiseException (Address: 0x100331e0)
RegisterWaitForSingleObject (Address: 0x10033168)
ReleaseActCtx (Address: 0x100331a8)
ReleaseMutex (Address: 0x1003313c)
ResetEvent (Address: 0x10033188)
ResumeThread (Address: 0x100331f4)
SearchPathW (Address: 0x10033200)
SetEvent (Address: 0x100330ec)
SetLastError (Address: 0x10033278)
SetThreadContext (Address: 0x100331ec)
SetUnhandledExceptionFilter (Address: 0x10033258)
SizeofResource (Address: 0x10033140)
SuspendThread (Address: 0x100331f8)
SwitchToThread (Address: 0x100331a0)
TerminateProcess (Address: 0x10033160)
UnhandledExceptionFilter (Address: 0x1003325c)
UnmapViewOfFile (Address: 0x10033210)
VirtualAlloc (Address: 0x10033228)
VirtualFree (Address: 0x10033224)
VirtualProtect (Address: 0x100331fc)
VirtualQuery (Address: 0x100331e8)
WaitForMultipleObjects (Address: 0x1003327c)
WaitForSingleObject (Address: 0x100330f8)
WaitForSingleObjectEx (Address: 0x10033260)
WriteFile (Address: 0x100331c4)

mscoree.dll

CLRCreateInstance (Address: 0x10033498)
CoEEShutDownCOM (Address: 0x10033494)
LoadLibraryShim (Address: 0x1003349c)

ntdll.dll

RtlGetVersion (Address: 0x100334a4)
RtlInitUnicodeString (Address: 0x100334a8)

ole32.dll

CLSIDFromProgID (Address: 0x100334e0)
CLSIDFromString (Address: 0x100334e4)
CoAllowSetForegroundWindow (Address: 0x100334f0)
CoCreateInstance (Address: 0x100334c0)
CoGetClassObject (Address: 0x100334b0)
CoInitialize (Address: 0x1003350c)
CoMarshalInterThreadInterfaceInStream (Address: 0x100334c8)
CoRegisterClassObject (Address: 0x10033504)
CoRegisterMessageFilter (Address: 0x100334e8)
CoReleaseMarshalData (Address: 0x100334ec)
CoRevokeClassObject (Address: 0x10033500)
CoTaskMemAlloc (Address: 0x10033510)
CoTaskMemFree (Address: 0x100334b4)
CoTaskMemRealloc (Address: 0x100334bc)
CoUninitialize (Address: 0x10033508)
CoUnmarshalInterface (Address: 0x100334c4)
CreateBindCtx (Address: 0x100334fc)
CreateStreamOnHGlobal (Address: 0x100334d4)
OleCreateMenuDescriptor (Address: 0x100334f4)
OleDestroyMenuDescriptor (Address: 0x100334f8)
OleInitialize (Address: 0x100334d0)
OleLockRunning (Address: 0x100334dc)
OleTranslateAccelerator (Address: 0x100334cc)
OleUninitialize (Address: 0x100334d8)
StringFromGUID2 (Address: 0x100334b8)

OLEAUT32.dll

DispCallFunc (Address: 0x100332a4)
LoadRegTypeLib (Address: 0x100332ac)
LoadTypeLib (Address: 0x10033294)
OleCreateFontIndirect (Address: 0x100332a8)
SysAllocString (Address: 0x10033284)
SysAllocStringByteLen (Address: 0x10033298)
SysAllocStringLen (Address: 0x100332b0)
SysFreeString (Address: 0x10033288)
SysStringLen (Address: 0x1003328c)
VariantClear (Address: 0x100332a0)
VariantCopy (Address: 0x100332b4)
VariantInit (Address: 0x1003329c)
VarUI4FromStr (Address: 0x10033290)

PSAPI.DLL

GetMappedFileNameW (Address: 0x100332bc)

SHELL32.dll

CommandLineToArgvW (Address: 0x100332c4)
ShellExecuteExW (Address: 0x100332d0)
ShellExecuteW (Address: 0x100332c8)
SHGetFolderPathW (Address: 0x100332d4)
SHGetKnownFolderPath (Address: 0x100332cc)

SHLWAPI.dll

AssocQueryStringW (Address: 0x100332e8)
PathAppendW (Address: 0x100332e4)
PathCombineW (Address: 0x100332e0)
PathFindExtensionW (Address: 0x100332ec)
PathIsURLW (Address: 0x100332f0)
UrlCreateFromPathW (Address: 0x100332dc)

ucrtbase_clr0400.dll

__stdio_common_vswprintf (Address: 0x1003355c)
__stdio_common_vswprintf_s (Address: 0x10033554)
_beginthreadex (Address: 0x10033560)
_callnewh (Address: 0x1003358c)
_cexit (Address: 0x1003351c)
_configure_narrow_argv (Address: 0x10033538)
_crt_atexit (Address: 0x10033518)
_errno (Address: 0x10033574)
_execute_onexit_table (Address: 0x10033528)
_initialize_narrow_environment (Address: 0x10033534)
_initialize_onexit_table (Address: 0x10033530)
_initterm (Address: 0x10033524)
_initterm_e (Address: 0x10033594)
_invalid_parameter_noinfo (Address: 0x10033578)
_recalloc (Address: 0x10033570)
_register_onexit_function (Address: 0x1003352c)
_seh_filter_dll (Address: 0x1003353c)
_ultow_s (Address: 0x10033550)
_wcsicmp (Address: 0x10033584)
_wcslwr_s (Address: 0x1003354c)
_wcsnicmp (Address: 0x10033564)
bsearch (Address: 0x10033590)
free (Address: 0x1003357c)
isdigit (Address: 0x10033544)
iswdigit (Address: 0x10033540)
malloc (Address: 0x10033588)
terminate (Address: 0x10033520)
tolower (Address: 0x10033548)
wcscat_s (Address: 0x10033568)
wcscpy_s (Address: 0x1003356c)
wcsncmp (Address: 0x10033558)
wcsncpy_s (Address: 0x10033580)

urlmon.dll

CoInternetCombineUrl (Address: 0x100335a8)
CoInternetCreateSecurityManager (Address: 0x100335b0)
CoInternetParseUrl (Address: 0x100335ac)
CompareSecurityIds (Address: 0x100335c0)
CreateURLMoniker (Address: 0x100335b4)
CreateURLMonikerEx (Address: 0x1003359c)
GetClassFileOrMime (Address: 0x100335a0)
RegisterBindStatusCallback (Address: 0x100335c4)
URLDownloadToCacheFileW (Address: 0x100335a4)
UrlMkGetSessionOption (Address: 0x100335bc)
URLOpenBlockingStreamW (Address: 0x100335b8)

USER32.dll

BeginPaint (Address: 0x10033348)
CallWindowProcW (Address: 0x100332f8)
CharNextW (Address: 0x10033424)
CheckMenuItem (Address: 0x100333f0)
ClientToScreen (Address: 0x10033314)
CreateAcceleratorTableW (Address: 0x10033318)
CreateMenu (Address: 0x10033380)
CreateWindowExW (Address: 0x100333c4)
DefWindowProcW (Address: 0x10033408)
DestroyAcceleratorTable (Address: 0x100333e8)
DestroyMenu (Address: 0x10033394)
DestroyWindow (Address: 0x1003331c)
DispatchMessageW (Address: 0x10033414)
EnableMenuItem (Address: 0x100333a0)
EndPaint (Address: 0x10033344)
FillRect (Address: 0x10033300)
GetActiveWindow (Address: 0x10033428)
GetClassInfoExW (Address: 0x10033320)
GetClassInfoW (Address: 0x10033370)
GetClassNameW (Address: 0x100333fc)
GetClientRect (Address: 0x100333c8)
GetDC (Address: 0x100333dc)
GetDesktopWindow (Address: 0x100333e4)
GetDlgItem (Address: 0x10033338)
GetFocus (Address: 0x1003333c)
GetKeyState (Address: 0x1003340c)
GetMenuItemCount (Address: 0x1003335c)
GetMenuItemID (Address: 0x10033364)
GetMenuItemInfoW (Address: 0x1003339c)
GetMenuStringW (Address: 0x10033384)
GetMessageExtraInfo (Address: 0x10033420)
GetMessageW (Address: 0x10033400)
GetParent (Address: 0x10033310)
GetSubMenu (Address: 0x10033360)
GetSysColor (Address: 0x1003332c)
GetWindow (Address: 0x100333d8)
GetWindowLongW (Address: 0x100333ec)
GetWindowTextLengthW (Address: 0x10033354)
GetWindowTextW (Address: 0x10033430)
GetWindowThreadProcessId (Address: 0x1003336c)
InsertMenuW (Address: 0x10033388)
InvalidateRect (Address: 0x10033368)
InvalidateRgn (Address: 0x100332fc)
IsChild (Address: 0x10033340)
IsWindow (Address: 0x10033330)
KillTimer (Address: 0x1003337c)
LoadCursorW (Address: 0x1003342c)
LoadMenuW (Address: 0x1003338c)
LoadStringW (Address: 0x10033398)
MessageBeep (Address: 0x100333a8)
MessageBoxW (Address: 0x100333f4)
MoveWindow (Address: 0x100333b4)
MsgWaitForMultipleObjects (Address: 0x1003341c)
PeekMessageW (Address: 0x10033418)
PostMessageW (Address: 0x10033404)
PostQuitMessage (Address: 0x100333a4)
PostThreadMessageW (Address: 0x100333b8)
RedrawWindow (Address: 0x10033324)
RegisterClassExW (Address: 0x10033350)
RegisterClassW (Address: 0x100333cc)
RegisterRawInputDevices (Address: 0x10033378)
RegisterWindowMessageW (Address: 0x10033358)
ReleaseCapture (Address: 0x10033304)
ReleaseDC (Address: 0x100333e0)
RemoveMenu (Address: 0x10033390)
ScreenToClient (Address: 0x1003330c)
SendMessageW (Address: 0x10033334)
SetCapture (Address: 0x10033308)
SetFocus (Address: 0x100333c0)
SetMessageExtraInfo (Address: 0x10033410)
SetParent (Address: 0x100333d0)
SetTimer (Address: 0x10033374)
SetWindowLongW (Address: 0x100333d4)
SetWindowPos (Address: 0x10033328)
SetWindowTextW (Address: 0x1003334c)
ShowWindow (Address: 0x100333bc)
TranslateMessage (Address: 0x100333f8)
UnregisterClassW (Address: 0x100333b0)
WaitForInputIdle (Address: 0x100333ac)

VCRUNTIME140_CLR0400.dll

__CxxFrameHandler3 (Address: 0x10033464)
__std_type_info_destroy_list (Address: 0x10033448)
__vcrt_InitializeCriticalSectionEx (Address: 0x10033454)
_CxxThrowException (Address: 0x10033460)
_except_handler4_common (Address: 0x10033450)
_purecall (Address: 0x10033440)
memcmp (Address: 0x10033438)
memcpy (Address: 0x1003345c)
memmove (Address: 0x10033458)
memset (Address: 0x1003344c)
wcschr (Address: 0x10033444)
wcsstr (Address: 0x1003343c)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x10033474)
GetFileVersionInfoW (Address: 0x1003346c)
VerQueryValueW (Address: 0x10033470)

WININET.dll

InternetCrackUrlW (Address: 0x1003347c)
InternetCreateUrlW (Address: 0x10033480)
InternetErrorDlg (Address: 0x10033484)
InternetGetCookieExW (Address: 0x10033488)
InternetSetCookieExW (Address: 0x1003348c)