Microsoft.WindowsAppRuntime.dll
Description: Microsoft.WindowsAppRuntime.dll
Authors: Copyright (c) Microsoft Corporation. All rights reserved.
Version: 1.7.0.0
Architecture: 64-bit
Operating System: Windows NT
SHA256: 86fbd45f8a978e5411f0d1df498e5b2a
File Size: 1.8 MB
Uploaded At: Dec. 1, 2025, 2:55 p.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported Functions
- (Ordinal: 1, Address: 0xeaad0)
- DllCanUnloadNow (Ordinal: 2, Address: 0xe5b10)
- DllGetActivationFactory (Ordinal: 3, Address: 0xe5be0)
- DllGetClassObject (Ordinal: 4, Address: 0xe3200)
- GetSecurityDescriptorForAppContainerNames (Ordinal: 5, Address: 0x44f0)
- MddAddPackageDependency (Ordinal: 6, Address: 0x6e5f0)
- MddDeletePackageDependency (Ordinal: 7, Address: 0x6e570)
- MddGetGenerationId (Ordinal: 8, Address: 0x6f070)
- MddGetIdForPackageDependencyContext (Ordinal: 9, Address: 0x6ecb0)
- MddGetPackageGraphRevisionId (Ordinal: 10, Address: 0x6efa0)
- MddGetResolvedPackageFullNameForPackageDependency (Ordinal: 11, Address: 0x6e910)
- MddGetResolvedPackageFullNameForPackageDependency2 (Ordinal: 12, Address: 0x6eae0)
- MddLifetimeManagementGC (Ordinal: 13, Address: 0x6b7f0)
- MddLifetimeManagementTestInitialize (Ordinal: 14, Address: 0x6afe0)
- MddRemovePackageDependency (Ordinal: 15, Address: 0x6e8b0)
- MddTryCreatePackageDependency (Ordinal: 16, Address: 0x6e450)
- MsixInstallLicenses (Ordinal: 17, Address: 0x89b20)
- WindowsAppRuntime_EnsureIsLoaded (Ordinal: 18, Address: 0x7140)
- WindowsAppRuntime_IsSelfContained (Ordinal: 19, Address: 0x7ce30)
- WindowsAppRuntime_VersionInfo_MSIX_Framework_PackageFamilyName_Get (Ordinal: 20, Address: 0x7d320)
- WindowsAppRuntime_VersionInfo_MSIX_Main_PackageFamilyName_Get (Ordinal: 21, Address: 0x7d430)
- WindowsAppRuntime_VersionInfo_TestInitialize (Ordinal: 22, Address: 0x7d540)
Imported DLLs & Functions
ADVAPI32.dll
- ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x1801230a8)
- ConvertStringSidToSidW (Address: 0x1801230a0)
- CopySid (Address: 0x180123048)
- DeregisterEventSource (Address: 0x180123050)
- EqualSid (Address: 0x1801230b8)
- EventActivityIdControl (Address: 0x180123038)
- EventRegister (Address: 0x1801230c8)
- EventSetInformation (Address: 0x1801230d0)
- EventUnregister (Address: 0x1801230c0)
- EventWriteTransfer (Address: 0x1801230d8)
- FreeSid (Address: 0x180123088)
- GetLengthSid (Address: 0x180123040)
- GetSidSubAuthority (Address: 0x180123010)
- GetSidSubAuthorityCount (Address: 0x180123018)
- GetTokenInformation (Address: 0x180123000)
- InitializeSecurityDescriptor (Address: 0x180123060)
- MakeSelfRelativeSD (Address: 0x180123070)
- RegCloseKey (Address: 0x180123100)
- RegCreateKeyExW (Address: 0x180123098)
- RegDeleteKeyExW (Address: 0x180123008)
- RegDeleteTreeW (Address: 0x180123080)
- RegDeleteValueW (Address: 0x1801230e0)
- RegEnumKeyExW (Address: 0x180123020)
- RegEnumValueW (Address: 0x180123078)
- RegGetValueW (Address: 0x180123030)
- RegisterEventSourceW (Address: 0x1801230f0)
- RegOpenKeyExW (Address: 0x1801230f8)
- RegQueryInfoKeyW (Address: 0x180123028)
- RegQueryValueExW (Address: 0x180123090)
- RegSetValueExW (Address: 0x1801230e8)
- ReportEventW (Address: 0x1801230b0)
- SetEntriesInAclW (Address: 0x180123058)
- SetSecurityDescriptorDacl (Address: 0x180123068)
api-ms-win-appmodel-runtime-l1-1-1.dll
- VerifyPackageFamilyName (Address: 0x1801236b8)
- VerifyPackageFullName (Address: 0x1801236b0)
api-ms-win-core-errorhandling-l1-1-0.dll
- SetUnhandledExceptionFilter (Address: 0x1801236d0)
- UnhandledExceptionFilter (Address: 0x1801236c8)
api-ms-win-core-fibers-l1-1-0.dll
- FlsAlloc (Address: 0x1801236f8)
- FlsFree (Address: 0x1801236e0)
- FlsGetValue (Address: 0x1801236f0)
- FlsSetValue (Address: 0x1801236e8)
api-ms-win-core-file-l1-1-0.dll
- CreateDirectoryW (Address: 0x180123708)
- GetFileAttributesExW (Address: 0x180123710)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x180123730)
- InterlockedFlushSList (Address: 0x180123728)
- InterlockedPushEntrySList (Address: 0x180123720)
api-ms-win-core-libraryloader-l1-2-0.dll
- LoadLibraryExA (Address: 0x180123740)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageA (Address: 0x180123750)
- GetLocaleInfoEx (Address: 0x180123758)
- LCMapStringEx (Address: 0x180123760)
api-ms-win-core-memory-l1-1-0.dll
- VirtualProtect (Address: 0x180123778)
- VirtualQuery (Address: 0x180123770)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCombine (Address: 0x180123790)
- PathCchRemoveFileSpec (Address: 0x180123788)
api-ms-win-core-processthreads-l1-1-0.dll
- SwitchToThread (Address: 0x1801237a0)
- TerminateProcess (Address: 0x1801237a8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1801237b8)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1801237c8)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1801237f8)
- RtlLookupFunctionEntry (Address: 0x1801237f0)
- RtlPcToFileHeader (Address: 0x1801237d8)
- RtlUnwindEx (Address: 0x1801237e0)
- RtlVirtualUnwind (Address: 0x1801237e8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x180123808)
- GetStringTypeW (Address: 0x180123810)
api-ms-win-core-synch-l1-1-0.dll
- DeleteCriticalSection (Address: 0x180123830)
- InitializeCriticalSectionAndSpinCount (Address: 0x180123820)
- InitializeCriticalSectionEx (Address: 0x180123838)
- TryAcquireSRWLockExclusive (Address: 0x180123828)
api-ms-win-core-synch-l1-2-0.dll
- SleepConditionVariableSRW (Address: 0x180123848)
- WaitOnAddress (Address: 0x180123858)
- WakeAllConditionVariable (Address: 0x180123860)
- WakeByAddressSingle (Address: 0x180123850)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemInfo (Address: 0x180123870)
- GetSystemTimeAsFileTime (Address: 0x180123878)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetSystemTimePreciseAsFileTime (Address: 0x180123888)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolWork (Address: 0x1801238a0)
- FreeLibraryWhenCallbackReturns (Address: 0x180123898)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1801238b0)
- EncodePointer (Address: 0x1801238b8)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x1801238d0)
- RoFailFastWithErrorContext (Address: 0x1801238c8)
- SetRestrictedErrorInfo (Address: 0x1801238d8)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1801238f0)
- RoGetActivationFactory (Address: 0x1801238e8)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateString (Address: 0x180123910)
- WindowsCreateStringReference (Address: 0x180123900)
- WindowsDeleteString (Address: 0x180123908)
- WindowsGetStringRawBuffer (Address: 0x180123918)
api-ms-win-crt-locale-l1-1-0.dll
- _lock_locales (Address: 0x180123928)
- _unlock_locales (Address: 0x180123930)
api-ms-win-crt-private-l1-1-0.dll
- _o____lc_codepage_func (Address: 0x180123aa0)
- _o____lc_collate_cp_func (Address: 0x180123a98)
- _o____lc_locale_name_func (Address: 0x180123a90)
- _o____mb_cur_max_func (Address: 0x180123a88)
- _o___pctype_func (Address: 0x180123a68)
- _o___std_exception_copy (Address: 0x180123a60)
- _o___std_exception_destroy (Address: 0x180123a58)
- _o___stdio_common_vswprintf (Address: 0x180123a80)
- _o___stdio_common_vswprintf_s (Address: 0x180123a78)
- _o___stdio_common_vswscanf (Address: 0x180123a70)
- _o__callnewh (Address: 0x180123940)
- _o__calloc_base (Address: 0x180123948)
- _o__cexit (Address: 0x180123950)
- _o__configure_narrow_argv (Address: 0x180123958)
- _o__create_locale (Address: 0x180123960)
- _o__crt_atexit (Address: 0x180123968)
- _o__errno (Address: 0x180123970)
- _o__execute_onexit_table (Address: 0x180123978)
- _o__free_base (Address: 0x180123980)
- _o__initialize_narrow_environment (Address: 0x180123988)
- _o__initialize_onexit_table (Address: 0x180123990)
- _o__invalid_parameter_noinfo (Address: 0x180123998)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1801239a0)
- _o__localtime64_s (Address: 0x1801239a8)
- _o__malloc_base (Address: 0x1801239b0)
- _o__purecall (Address: 0x1801239b8)
- _o__register_onexit_function (Address: 0x1801239c0)
- _o__seh_filter_dll (Address: 0x1801239c8)
- _o__W_Gettnames (Address: 0x1801239d0)
- _o__wcsdup (Address: 0x1801239d8)
- _o__Wcsftime (Address: 0x1801239e0)
- _o__wcsicmp_l (Address: 0x1801239e8)
- _o_abort (Address: 0x1801239f0)
- _o_ceilf (Address: 0x1801239f8)
- _o_free (Address: 0x180123a00)
- _o_iswspace (Address: 0x180123a08)
- _o_malloc (Address: 0x180123a10)
- _o_realloc (Address: 0x180123a18)
- _o_setlocale (Address: 0x180123a20)
- _o_terminate (Address: 0x180123a28)
- _o_towlower (Address: 0x180123a30)
- _o_towupper (Address: 0x180123a38)
- _o_wcstok_s (Address: 0x180123a40)
- _o_wcstoul (Address: 0x180123a48)
- _o_wcstoull (Address: 0x180123a50)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180123ab0)
- _initterm_e (Address: 0x180123ab8)
api-ms-win-crt-string-l1-1-0.dll
- strcmp (Address: 0x180123ad8)
- wcsncmp (Address: 0x180123ad0)
- wcsnlen (Address: 0x180123ac8)
api-ms-win-power-base-l1-1-0.dll
- PowerRegisterSuspendResumeNotification (Address: 0x180123ae8)
- PowerUnregisterSuspendResumeNotification (Address: 0x180123af0)
api-ms-win-power-setting-l1-1-1.dll
- PowerRegisterForEffectivePowerModeNotifications (Address: 0x180123b08)
- PowerUnregisterFromEffectivePowerModeNotifications (Address: 0x180123b00)
api-ms-win-ro-typeresolution-l1-1-0.dll
- RoGetMetaDataFile (Address: 0x180123b18)
- RoResolveNamespace (Address: 0x180123b20)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x1801232e8)
- AcquireSRWLockShared (Address: 0x180123388)
- AddDllDirectory (Address: 0x180123480)
- CancelIoEx (Address: 0x1801233f8)
- CloseHandle (Address: 0x180123180)
- ClosePackageInfo (Address: 0x180123460)
- CloseThreadpoolCleanupGroupMembers (Address: 0x180123550)
- CloseThreadpoolTimer (Address: 0x1801231d0)
- CloseThreadpoolWait (Address: 0x180123168)
- CompareStringOrdinal (Address: 0x180123190)
- ConnectNamedPipe (Address: 0x1801234e0)
- CreateActCtxW (Address: 0x1801234c8)
- CreateEventExW (Address: 0x180123248)
- CreateEventW (Address: 0x1801232a0)
- CreateFileMappingW (Address: 0x180123250)
- CreateFileW (Address: 0x180123330)
- CreateMutexExW (Address: 0x180123260)
- CreateNamedPipeW (Address: 0x180123578)
- CreateProcessW (Address: 0x180123218)
- CreateSemaphoreExW (Address: 0x180123398)
- CreateThreadpool (Address: 0x180123520)
- CreateThreadpoolCleanupGroup (Address: 0x180123538)
- CreateThreadpoolTimer (Address: 0x180123138)
- CreateThreadpoolWait (Address: 0x1801231b0)
- CreateThreadpoolWork (Address: 0x180123540)
- DebugBreak (Address: 0x1801231e0)
- DeleteFileW (Address: 0x180123310)
- DeleteProcThreadAttributeList (Address: 0x180123200)
- DisableThreadLibraryCalls (Address: 0x1801233e8)
- DisconnectNamedPipe (Address: 0x180123500)
- DuplicateHandle (Address: 0x1801231b8)
- EnterCriticalSection (Address: 0x1801234f0)
- ExitProcess (Address: 0x1801232b8)
- ExpandEnvironmentStringsW (Address: 0x1801234b0)
- FindClose (Address: 0x180123340)
- FindFirstFileW (Address: 0x180123348)
- FindNextFileW (Address: 0x180123308)
- FindPackagesByPackageFamily (Address: 0x1801232f0)
- FindResourceW (Address: 0x180123490)
- FlushInstructionCache (Address: 0x180123510)
- FormatMessageW (Address: 0x180123370)
- FreeEnvironmentStringsW (Address: 0x1801231e8)
- FreeLibrary (Address: 0x180123158)
- GetCommandLineW (Address: 0x180123448)
- GetCurrentApplicationUserModelId (Address: 0x180123140)
- GetCurrentPackageFamilyName (Address: 0x180123360)
- GetCurrentPackageFullName (Address: 0x1801231f0)
- GetCurrentPackageInfo (Address: 0x180123430)
- GetCurrentProcess (Address: 0x180123120)
- GetCurrentProcessId (Address: 0x1801231a0)
- GetCurrentThread (Address: 0x180123438)
- GetCurrentThreadId (Address: 0x1801233b8)
- GetEnvironmentStringsW (Address: 0x180123590)
- GetEnvironmentVariableW (Address: 0x180123468)
- GetExitCodeProcess (Address: 0x180123130)
- GetFileAttributesW (Address: 0x180123320)
- GetFileInformationByHandleEx (Address: 0x180123328)
- GetFileSizeEx (Address: 0x180123418)
- GetFullPathNameW (Address: 0x180123350)
- GetLastError (Address: 0x1801233d8)
- GetModuleFileNameA (Address: 0x1801233a0)
- GetModuleFileNameW (Address: 0x180123110)
- GetModuleHandleExW (Address: 0x1801231f8)
- GetModuleHandleW (Address: 0x1801232d8)
- GetNamedPipeServerProcessId (Address: 0x180123298)
- GetOverlappedResult (Address: 0x180123588)
- GetPackageInfo (Address: 0x180123440)
- GetPackagePathByFullName (Address: 0x180123198)
- GetProcAddress (Address: 0x1801232d0)
- GetProcessHeap (Address: 0x1801232c8)
- GetThreadContext (Address: 0x180123518)
- GetVolumeNameForVolumeMountPointW (Address: 0x180123408)
- GetVolumePathNameW (Address: 0x180123488)
- HeapAlloc (Address: 0x180123358)
- HeapFree (Address: 0x180123270)
- InitializeCriticalSection (Address: 0x1801234d8)
- InitializeProcThreadAttributeList (Address: 0x180123208)
- InitOnceBeginInitialize (Address: 0x180123148)
- InitOnceComplete (Address: 0x180123150)
- InitOnceExecuteOnce (Address: 0x1801234e8)
- IsDebuggerPresent (Address: 0x180123368)
- IsWow64Process (Address: 0x1801232a8)
- IsWow64Process2 (Address: 0x1801233f0)
- K32GetModuleFileNameExW (Address: 0x180123118)
- LeaveCriticalSection (Address: 0x1801234f8)
- LoadLibraryExW (Address: 0x180123410)
- LoadLibraryW (Address: 0x180123230)
- LoadResource (Address: 0x180123498)
- LocalAlloc (Address: 0x180123288)
- LocalFree (Address: 0x180123280)
- LockResource (Address: 0x1801234a8)
- MapViewOfFile (Address: 0x180123258)
- MultiByteToWideChar (Address: 0x1801233c8)
- OpenEventW (Address: 0x180123238)
- OpenPackageInfoByFullName (Address: 0x180123478)
- OpenProcess (Address: 0x1801231c0)
- OpenSemaphoreW (Address: 0x180123338)
- OutputDebugStringW (Address: 0x1801233c0)
- PackageFamilyNameFromFullName (Address: 0x1801234b8)
- PackageFamilyNameFromId (Address: 0x1801234c0)
- PackageIdFromFullName (Address: 0x180123450)
- QueryActCtxW (Address: 0x180123400)
- RaiseException (Address: 0x180123580)
- ReadFile (Address: 0x180123420)
- ReadProcessMemory (Address: 0x1801232b0)
- RegisterWaitForSingleObject (Address: 0x1801231c8)
- ReleaseActCtx (Address: 0x1801234d0)
- ReleaseMutex (Address: 0x180123160)
- ReleaseSemaphore (Address: 0x180123390)
- ReleaseSRWLockExclusive (Address: 0x1801232e0)
- ReleaseSRWLockShared (Address: 0x180123380)
- RemoveDirectoryW (Address: 0x1801232f8)
- RemoveDllDirectory (Address: 0x180123470)
- ResetEvent (Address: 0x1801231a8)
- ResumeThread (Address: 0x180123220)
- SetEnvironmentVariableW (Address: 0x180123458)
- SetEvent (Address: 0x180123240)
- SetFileAttributesW (Address: 0x180123318)
- SetFileInformationByHandle (Address: 0x180123300)
- SetLastError (Address: 0x180123278)
- SetThreadContext (Address: 0x180123508)
- SetThreadpoolThreadMaximum (Address: 0x180123528)
- SetThreadpoolThreadMinimum (Address: 0x180123530)
- SetThreadpoolTimer (Address: 0x180123128)
- SetThreadpoolWait (Address: 0x180123178)
- SetThreadpoolWaitEx (Address: 0x1801233d0)
- SizeofResource (Address: 0x1801234a0)
- SubmitThreadpoolWork (Address: 0x180123548)
- SuspendThread (Address: 0x180123560)
- TrySubmitThreadpoolCallback (Address: 0x1801231d8)
- UnmapViewOfFile (Address: 0x180123268)
- UnregisterWait (Address: 0x180123188)
- UpdateProcThreadAttribute (Address: 0x180123210)
- VirtualAlloc (Address: 0x180123568)
- VirtualAllocEx (Address: 0x1801232c0)
- VirtualFree (Address: 0x180123570)
- VirtualProtectEx (Address: 0x180123558)
- VirtualQueryEx (Address: 0x1801233b0)
- WaitForSingleObject (Address: 0x180123378)
- WaitForSingleObjectEx (Address: 0x180123228)
- WaitForThreadpoolWaitCallbacks (Address: 0x180123170)
- WaitNamedPipeW (Address: 0x180123290)
- WideCharToMultiByte (Address: 0x1801233e0)
- WriteFile (Address: 0x180123428)
- WriteProcessMemory (Address: 0x1801233a8)
ole32.dll
- CoCreateFreeThreadedMarshaler (Address: 0x180123bb8)
- CoCreateGuid (Address: 0x180123ba8)
- CoCreateInstance (Address: 0x180123bd8)
- CoGetApartmentType (Address: 0x180123b48)
- CoGetDefaultContext (Address: 0x180123b40)
- CoGetInterfaceAndReleaseStream (Address: 0x180123b90)
- CoGetMarshalSizeMax (Address: 0x180123b68)
- CoGetObjectContext (Address: 0x180123b30)
- CoIncrementMTAUsage (Address: 0x180123b38)
- CoInitializeEx (Address: 0x180123bb0)
- CoMarshalInterface (Address: 0x180123b58)
- CoMarshalInterThreadInterfaceInStream (Address: 0x180123b88)
- CoRegisterClassObject (Address: 0x180123b80)
- CoReleaseMarshalData (Address: 0x180123b70)
- CoRevokeClassObject (Address: 0x180123b98)
- CoTaskMemAlloc (Address: 0x180123bd0)
- CoTaskMemFree (Address: 0x180123b78)
- CoUninitialize (Address: 0x180123bc0)
- CoUnmarshalInterface (Address: 0x180123b50)
- CreateStreamOnHGlobal (Address: 0x180123b60)
- StringFromCLSID (Address: 0x180123bc8)
- StringFromGUID2 (Address: 0x180123ba0)
OLEAUT32.dll
- GetErrorInfo (Address: 0x1801235b8)
- SetErrorInfo (Address: 0x1801235b0)
- SysAllocString (Address: 0x1801235c0)
- SysFreeString (Address: 0x1801235a0)
- SysStringLen (Address: 0x1801235a8)
RoMetadata.dll
- MetaDataGetDispenser (Address: 0x1801235d0)
SHELL32.dll
- CommandLineToArgvW (Address: 0x180123600)
- ExtractIconExW (Address: 0x1801235e8)
- GetCurrentProcessExplicitAppUserModelID (Address: 0x1801235e0)
- SHChangeNotify (Address: 0x1801235f8)
- SHCreateItemFromParsingName (Address: 0x1801235f0)
- ShellExecuteExW (Address: 0x180123610)
- SHGetKnownFolderPath (Address: 0x180123608)
SHLWAPI.dll
- (Address: 0x180123620)
- (Address: 0x180123640)
- PathFindFileNameW (Address: 0x180123638)
- PathIsFileSpecW (Address: 0x180123630)
- SHCreateStreamOnFileEx (Address: 0x180123628)
USER32.dll
- AllowSetForegroundWindow (Address: 0x180123668)
- DestroyIcon (Address: 0x180123678)
- LoadStringA (Address: 0x180123670)
- MessageBoxW (Address: 0x180123660)
- SendMessageTimeoutW (Address: 0x180123658)
- wsprintfW (Address: 0x180123650)
USERENV.dll
- DeriveAppContainerSidFromAppContainerName (Address: 0x180123688)
XmlLite.dll
- CreateXmlReader (Address: 0x180123698)
- CreateXmlReaderInputWithEncodingName (Address: 0x1801236a0)