HoloShellRuntime.dll

Description: Hologram Shell Runtime

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 86c4650eb63fdc2ea5c98ac2fb310cda

File Size: 237.0 KB

Uploaded At: Dec. 1, 2025, 7:29 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x212f0)
DllGetActivationFactory (Ordinal: 2, Address: 0x21020)
DllGetClassObject (Ordinal: 3, Address: 0x21200)

Imported DLLs & Functions

api-ms-win-appmodel-identity-l1-2-0.dll

AppXFreeMemory (Address: 0x18002ede0)
AppXGetPackageCapabilities (Address: 0x18002ede8)

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x18002edf8)
GetPackageFullName (Address: 0x18002ee00)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18002ee20)
CoCreateInstance (Address: 0x18002ee30)
CoGetCallContext (Address: 0x18002ee48)
CoGetCallerTID (Address: 0x18002ee40)
CoGetInterfaceAndReleaseStream (Address: 0x18002ee38)
CoMarshalInterface (Address: 0x18002ee58)
CoReleaseMarshalData (Address: 0x18002ee18)
CoTaskMemAlloc (Address: 0x18002ee28)
CoTaskMemFree (Address: 0x18002ee50)
CoWaitForMultipleHandles (Address: 0x18002ee60)
CreateStreamOnHGlobal (Address: 0x18002ee10)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18002ee70)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002ee88)
IsDebuggerPresent (Address: 0x18002ee90)
OutputDebugStringW (Address: 0x18002ee80)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002eea0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002eeb0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002eec8)
RaiseException (Address: 0x18002eed0)
SetLastError (Address: 0x18002eed8)
SetUnhandledExceptionFilter (Address: 0x18002eec0)
UnhandledExceptionFilter (Address: 0x18002eee0)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x18002eef0)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18002ef00)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002ef10)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002ef20)
HeapAlloc (Address: 0x18002ef30)
HeapFree (Address: 0x18002ef28)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x18002ef40)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18002ef50)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18002ef70)
FreeLibrary (Address: 0x18002ef90)
GetModuleFileNameA (Address: 0x18002ef78)
GetModuleHandleExW (Address: 0x18002ef60)
GetModuleHandleW (Address: 0x18002ef80)
GetProcAddress (Address: 0x18002ef68)
LoadStringW (Address: 0x18002ef88)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18002efa0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002efb0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18002efe0)
GetCurrentProcess (Address: 0x18002efd8)
GetCurrentProcessId (Address: 0x18002efc0)
GetCurrentThreadId (Address: 0x18002efd0)
GetProcessId (Address: 0x18002eff0)
OpenProcessToken (Address: 0x18002efc8)
TerminateProcess (Address: 0x18002efe8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18002f000)
OpenProcess (Address: 0x18002f008)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002f018)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x18002f028)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18002f048)
RtlLookupFunctionEntry (Address: 0x18002f040)
RtlVirtualUnwind (Address: 0x18002f038)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18002f0a8)
AcquireSRWLockShared (Address: 0x18002f080)
CreateEventExW (Address: 0x18002f060)
CreateMutexExW (Address: 0x18002f088)
CreateSemaphoreExW (Address: 0x18002f070)
DeleteCriticalSection (Address: 0x18002f078)
EnterCriticalSection (Address: 0x18002f0b0)
InitializeCriticalSectionEx (Address: 0x18002f0d0)
InitializeSRWLock (Address: 0x18002f068)
LeaveCriticalSection (Address: 0x18002f0d8)
OpenSemaphoreW (Address: 0x18002f098)
ReleaseMutex (Address: 0x18002f0c0)
ReleaseSemaphore (Address: 0x18002f0e0)
ReleaseSRWLockExclusive (Address: 0x18002f0b8)
ReleaseSRWLockShared (Address: 0x18002f090)
SetEvent (Address: 0x18002f058)
WaitForSingleObject (Address: 0x18002f0c8)
WaitForSingleObjectEx (Address: 0x18002f0a0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18002f0f0)
InitOnceComplete (Address: 0x18002f100)
InitOnceExecuteOnce (Address: 0x18002f0f8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18002f110)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18002f128)
CreateThreadpoolTimer (Address: 0x18002f138)
SetThreadpoolTimer (Address: 0x18002f130)
WaitForThreadpoolTimerCallbacks (Address: 0x18002f120)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18002f148)
EncodePointer (Address: 0x18002f150)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18002f170)
RoOriginateError (Address: 0x18002f160)
RoOriginateErrorW (Address: 0x18002f180)
RoTransformError (Address: 0x18002f178)
SetRestrictedErrorInfo (Address: 0x18002f168)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18002f1a0)
RoGetMatchingRestrictedErrorInfo (Address: 0x18002f198)
RoReportFailedDelegate (Address: 0x18002f190)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18002f1c0)
RoGetActivationFactory (Address: 0x18002f1b8)
RoInitialize (Address: 0x18002f1b0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x18002f208)
WindowsCreateString (Address: 0x18002f200)
WindowsCreateStringReference (Address: 0x18002f1f0)
WindowsDeleteString (Address: 0x18002f1d8)
WindowsDuplicateString (Address: 0x18002f1d0)
WindowsGetStringRawBuffer (Address: 0x18002f1f8)
WindowsIsStringEmpty (Address: 0x18002f1e0)
WindowsStringHasEmbeddedNull (Address: 0x18002f1e8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18002f290)
__CxxFrameHandler3 (Address: 0x18002f298)
__CxxFrameHandler4 (Address: 0x18002f2b0)
__std_terminate (Address: 0x18002f2a8)
_CxxThrowException (Address: 0x18002f2a0)
_o___std_exception_copy (Address: 0x18002f2f8)
_o___std_exception_destroy (Address: 0x18002f2f0)
_o___std_type_info_destroy_list (Address: 0x18002f2e8)
_o___stdio_common_vsnprintf_s (Address: 0x18002f2d0)
_o___stdio_common_vswprintf (Address: 0x18002f2c0)
_o__callnewh (Address: 0x18002f248)
_o__cexit (Address: 0x18002f300)
_o__configure_narrow_argv (Address: 0x18002f250)
_o__crt_atexit (Address: 0x18002f2b8)
_o__errno (Address: 0x18002f2d8)
_o__execute_onexit_table (Address: 0x18002f2c8)
_o__initialize_narrow_environment (Address: 0x18002f218)
_o__initialize_onexit_table (Address: 0x18002f220)
_o__invalid_parameter_noinfo (Address: 0x18002f228)
_o__purecall (Address: 0x18002f230)
_o__register_onexit_function (Address: 0x18002f238)
_o__seh_filter_dll (Address: 0x18002f240)
_o__wcsicmp (Address: 0x18002f260)
_o_free (Address: 0x18002f268)
_o_malloc (Address: 0x18002f270)
_o_realloc (Address: 0x18002f278)
_o_terminate (Address: 0x18002f280)
_o_wcscpy_s (Address: 0x18002f288)
memcmp (Address: 0x18002f308)
memcpy (Address: 0x18002f310)
memmove (Address: 0x18002f258)
wcschr (Address: 0x18002f2e0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18002f320)
_initterm_e (Address: 0x18002f328)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18002f338)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18002f348)
EventRegister (Address: 0x18002f358)
EventSetInformation (Address: 0x18002f350)
EventUnregister (Address: 0x18002f368)
EventWriteTransfer (Address: 0x18002f360)

api-ms-win-security-base-l1-1-0.dll

EqualSid (Address: 0x18002f380)
GetTokenInformation (Address: 0x18002f378)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountNameW (Address: 0x18002f390)

api-ms-win-security-provider-l1-1-0.dll

GetNamedSecurityInfoW (Address: 0x18002f3b0)
SetEntriesInAclW (Address: 0x18002f3a0)
SetNamedSecurityInfoW (Address: 0x18002f3a8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18002f3c0)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18002f3d8)
SHTaskPoolQueueTask (Address: 0x18002f3d0)

combase.dll

(Address: 0x18002f3e8)
(Address: 0x18002f3f0)

CoreMessaging.dll

CoreUICallCreateEndpointHost (Address: 0x18002edc0)
CoreUICallReceive (Address: 0x18002edb8)
CoreUICallSend (Address: 0x18002edb0)
CoreUICreate (Address: 0x18002eda8)
MsgBufferShare (Address: 0x18002ed98)
MsgRelease (Address: 0x18002ed90)
MsgStringCreateShared (Address: 0x18002eda0)

CoreUIComponents.dll

CoreUIFactoryCreate (Address: 0x18002edd0)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x18002f408)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18002f400)

ntdll.dll

NtQueryInformationProcess (Address: 0x18002f448)
NtQueryInformationToken (Address: 0x18002f460)
NtQueryWnfStateData (Address: 0x18002f428)
RtlAllocateHeap (Address: 0x18002f420)
RtlCompareUnicodeString (Address: 0x18002f450)
RtlDeriveCapabilitySidsFromName (Address: 0x18002f438)
RtlFreeHeap (Address: 0x18002f458)
RtlGetDeviceFamilyInfoEnum (Address: 0x18002f430)
RtlInitUnicodeString (Address: 0x18002f440)
RtlNtStatusToDosErrorNoTeb (Address: 0x18002f418)

twinapi.appcore.dll

(Address: 0x18002f470)
(Address: 0x18002f478)