Geolocation.dll

Description: Geolocation Runtime DLL

Version: 10.0.19041.6033

Architecture: 64-bit

Operating System: Windows NT

SHA256: cff0daddcae4dd25e80d60751f339f73

File Size: 496.5 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x14a60)
DllGetActivationFactory (Ordinal: 2, Address: 0x14aa0)
DllGetClassObject (Ordinal: 3, Address: 0x14ae0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1800569b8)
CoCreateInstance (Address: 0x180056998)
CoDecrementMTAUsage (Address: 0x1800569f0)
CoGetApartmentType (Address: 0x180056988)
CoGetCallerTID (Address: 0x1800569a0)
CoGetInterfaceAndReleaseStream (Address: 0x1800569c8)
CoIncrementMTAUsage (Address: 0x1800569d0)
CoInitializeEx (Address: 0x180056990)
CoMarshalInterface (Address: 0x1800569b0)
CoQueryProxyBlanket (Address: 0x1800569c0)
CoReleaseMarshalData (Address: 0x1800569d8)
CoSetProxyBlanket (Address: 0x1800569e8)
CoTaskMemAlloc (Address: 0x1800569f8)
CoTaskMemFree (Address: 0x1800569a8)
CoUninitialize (Address: 0x180056980)
CreateStreamOnHGlobal (Address: 0x1800569e0)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180056a08)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180056a18)
IsDebuggerPresent (Address: 0x180056a20)
OutputDebugStringW (Address: 0x180056a28)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180056a38)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180056a48)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180056a78)
RaiseException (Address: 0x180056a60)
SetLastError (Address: 0x180056a70)
SetUnhandledExceptionFilter (Address: 0x180056a58)
UnhandledExceptionFilter (Address: 0x180056a68)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180056a88)
DuplicateHandle (Address: 0x180056a90)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180056ab0)
HeapAlloc (Address: 0x180056aa8)
HeapFree (Address: 0x180056aa0)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x180056ad0)
GetModuleHandleExW (Address: 0x180056ae0)
GetModuleHandleW (Address: 0x180056ac0)
GetProcAddress (Address: 0x180056ac8)
LoadStringW (Address: 0x180056ad8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180056af8)
GetGeoInfoW (Address: 0x180056b00)
GetUserGeoID (Address: 0x180056af0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180056b38)
GetCurrentProcessId (Address: 0x180056b10)
GetCurrentThread (Address: 0x180056b40)
GetCurrentThreadId (Address: 0x180056b28)
OpenProcessToken (Address: 0x180056b18)
OpenThreadToken (Address: 0x180056b30)
SetThreadToken (Address: 0x180056b20)
TerminateProcess (Address: 0x180056b48)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180056b58)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180056b68)

api-ms-win-core-psm-app-l1-1-0.dll

PsmQueryCurrentAppState (Address: 0x180056b78)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x180056b88)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180056ba0)
RtlLookupFunctionEntry (Address: 0x180056b98)
RtlVirtualUnwind (Address: 0x180056ba8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180056bb8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180056bf0)
AcquireSRWLockShared (Address: 0x180056be8)
CreateEventExW (Address: 0x180056c00)
CreateEventW (Address: 0x180056bd8)
CreateMutexExW (Address: 0x180056bc8)
CreateSemaphoreExW (Address: 0x180056bd0)
DeleteCriticalSection (Address: 0x180056c18)
EnterCriticalSection (Address: 0x180056c30)
InitializeCriticalSection (Address: 0x180056c50)
InitializeCriticalSectionEx (Address: 0x180056c58)
InitializeSRWLock (Address: 0x180056be0)
LeaveCriticalSection (Address: 0x180056c60)
OpenEventW (Address: 0x180056bf8)
OpenSemaphoreW (Address: 0x180056c20)
ReleaseMutex (Address: 0x180056c40)
ReleaseSemaphore (Address: 0x180056c68)
ReleaseSRWLockExclusive (Address: 0x180056c08)
ReleaseSRWLockShared (Address: 0x180056c10)
SetEvent (Address: 0x180056c70)
TryAcquireSRWLockExclusive (Address: 0x180056c38)
WaitForSingleObject (Address: 0x180056c48)
WaitForSingleObjectEx (Address: 0x180056c28)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180056c98)
Sleep (Address: 0x180056c88)
SleepConditionVariableSRW (Address: 0x180056c80)
WakeAllConditionVariable (Address: 0x180056c90)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180056ca8)
GetTickCount (Address: 0x180056cb0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180056cf0)
CloseThreadpoolWait (Address: 0x180056ce8)
CreateThreadpoolTimer (Address: 0x180056cc0)
CreateThreadpoolWait (Address: 0x180056ce0)
FreeLibraryWhenCallbackReturns (Address: 0x180056cf8)
SetThreadpoolTimer (Address: 0x180056cc8)
SetThreadpoolWait (Address: 0x180056cd8)
TrySubmitThreadpoolCallback (Address: 0x180056cd0)
WaitForThreadpoolTimerCallbacks (Address: 0x180056d00)
WaitForThreadpoolWaitCallbacks (Address: 0x180056d08)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180056d18)
EncodePointer (Address: 0x180056d20)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180056d30)
RoOriginateError (Address: 0x180056d38)
RoOriginateErrorW (Address: 0x180056d48)
RoTransformError (Address: 0x180056d40)
SetRestrictedErrorInfo (Address: 0x180056d50)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180056d60)
RoGetMatchingRestrictedErrorInfo (Address: 0x180056d70)
RoReportFailedDelegate (Address: 0x180056d68)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180056d88)
RoInitialize (Address: 0x180056d90)
RoUninitialize (Address: 0x180056d80)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x180056e00)
HSTRING_UserFree64 (Address: 0x180056dc0)
HSTRING_UserMarshal (Address: 0x180056db8)
HSTRING_UserMarshal64 (Address: 0x180056dd0)
HSTRING_UserSize (Address: 0x180056de0)
HSTRING_UserSize64 (Address: 0x180056e18)
HSTRING_UserUnmarshal (Address: 0x180056df0)
HSTRING_UserUnmarshal64 (Address: 0x180056db0)
WindowsCreateString (Address: 0x180056dc8)
WindowsCreateStringReference (Address: 0x180056da8)
WindowsDeleteString (Address: 0x180056df8)
WindowsDuplicateString (Address: 0x180056de8)
WindowsGetStringLen (Address: 0x180056e08)
WindowsGetStringRawBuffer (Address: 0x180056dd8)
WindowsIsStringEmpty (Address: 0x180056e10)
WindowsStringHasEmbeddedNull (Address: 0x180056da0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180056e40)
EventRegister (Address: 0x180056e38)
EventSetInformation (Address: 0x180056e28)
EventUnregister (Address: 0x180056e48)
EventWriteTransfer (Address: 0x180056e30)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x180056e58)
ImpersonateSelf (Address: 0x180056e68)
RevertToSelf (Address: 0x180056e60)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180056e78)

BiWinrt.dll

BiRtCreateEventForApp (Address: 0x1800568f8)
BiRtDeleteEventForApp (Address: 0x1800568f0)

combase.dll

(Address: 0x180056e88)
(Address: 0x180056e90)
(Address: 0x180056e98)
(Address: 0x180056ea0)
(Address: 0x180056ea8)
(Address: 0x180056eb8)
(Address: 0x180056ec8)
(Address: 0x180056ed0)
(Address: 0x180056ee0)
(Address: 0x180056ee8)
(Address: 0x180056f00)
(Address: 0x180056f08)
(Address: 0x180056f10)
(Address: 0x180056f18)
(Address: 0x180056f40)
(Address: 0x180056f48)
(Address: 0x180056f58)
CStdStubBuffer_AddRef (Address: 0x180056eb0)
CStdStubBuffer_Connect (Address: 0x180056ec0)
CStdStubBuffer_CountRefs (Address: 0x180056ed8)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x180056ef0)
CStdStubBuffer_DebugServerRelease (Address: 0x180056f38)
CStdStubBuffer_Disconnect (Address: 0x180056f50)
CStdStubBuffer_Invoke (Address: 0x180056f20)
CStdStubBuffer_IsIIDSupported (Address: 0x180056f60)
CStdStubBuffer_QueryInterface (Address: 0x180056f80)
CStdStubBuffer2_Connect (Address: 0x180056f70)
CStdStubBuffer2_CountRefs (Address: 0x180056ef8)
CStdStubBuffer2_Disconnect (Address: 0x180056f68)
CStdStubBuffer2_QueryInterface (Address: 0x180056f78)
NdrCStdStubBuffer_Release (Address: 0x180056f28)
NdrCStdStubBuffer2_Release (Address: 0x180056f30)

msvcp110_win.dll

_Nan (Address: 0x180056f90)
?_Orphan_all@_Container_base0@std@@QEAAXXZ (Address: 0x180056fd8)
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z (Address: 0x180056fa0)
?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180056fb8)
?_Winerror_map@std@@YAPEBDH@Z (Address: 0x180056fc8)
?_Xbad_alloc@std@@YAXXZ (Address: 0x180056fa8)
?_Xbad_function_call@std@@YAXXZ (Address: 0x180056f98)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180056fc0)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180056fd0)
??0id@locale@std@@QEAA@_K@Z (Address: 0x180056fb0)

msvcrt.dll

__C_specific_handler (Address: 0x180057060)
__CxxFrameHandler3 (Address: 0x1800570e0)
__dllonexit (Address: 0x180057028)
_amsg_exit (Address: 0x180057078)
_callnewh (Address: 0x180057010)
_CxxThrowException (Address: 0x180057008)
_initterm (Address: 0x180057068)
_isnan (Address: 0x180057040)
_lock (Address: 0x180057038)
_onexit (Address: 0x180057020)
_purecall (Address: 0x1800570c0)
_unlock (Address: 0x180057030)
_vsnprintf_s (Address: 0x1800570a0)
_vsnwprintf (Address: 0x1800570d0)
_XcptFilter (Address: 0x180057080)
??_V@YAXPEAX@Z (Address: 0x1800570d8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800570a8)
??0exception@@QEAA@XZ (Address: 0x1800570b0)
??1exception@@UEAA@XZ (Address: 0x1800570b8)
??1type_info@@UEAA@XZ (Address: 0x180057018)
??3@YAXPEAX@Z (Address: 0x1800570e8)
?terminate@@YAXXZ (Address: 0x180057058)
fmod (Address: 0x180057000)
free (Address: 0x180057070)
malloc (Address: 0x180057090)
memcmp (Address: 0x180056ff8)
memcpy (Address: 0x180056ff0)
memcpy_s (Address: 0x1800570c8)
memmove (Address: 0x180056fe8)
memmove_s (Address: 0x180057098)
memset (Address: 0x180057088)
realloc (Address: 0x180057048)
wcsnlen (Address: 0x180057050)

ntdll.dll

NtCreateCrossVmEvent (Address: 0x180057118)
NtQuerySystemInformation (Address: 0x1800570f8)
RtlGUIDFromString (Address: 0x180057108)
RtlInitUnicodeString (Address: 0x180057110)
RtlQueryPackageIdentityEx (Address: 0x180057120)
RtlReportException (Address: 0x180057100)
RtlSubscribeWnfStateChangeNotification (Address: 0x180057128)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180057130)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x180057138)

OLEAUT32.dll

SysFreeString (Address: 0x180056908)
SysStringLen (Address: 0x180056910)

RPCRT4.dll

IUnknown_AddRef_Proxy (Address: 0x180056948)
IUnknown_QueryInterface_Proxy (Address: 0x180056950)
IUnknown_Release_Proxy (Address: 0x180056928)
NdrDllCanUnloadNow (Address: 0x180056920)
NdrDllGetClassObject (Address: 0x180056938)
NdrOleAllocate (Address: 0x180056958)
NdrOleFree (Address: 0x180056930)
NdrStubCall3 (Address: 0x180056960)
NdrStubForwardingFunction (Address: 0x180056940)

USERENV.dll

UnloadUserProfile (Address: 0x180056970)