MrmCoreR.dll

Description: Microsoft Windows MRM

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: a91cf700e8dfd127d7e6e9465c6b9542

File Size: 993.2 KB

Uploaded At: Dec. 1, 2025, 7:33 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3e2b0)
DllGetActivationFactory (Ordinal: 2, Address: 0x3d570)
DllGetClassObject (Ordinal: 3, Address: 0x3dc50)
GetInternalReferenceBlobForManifestValue (Ordinal: 4, Address: 0x65ae0)
GetMergedSystemPri (Ordinal: 5, Address: 0x68380)
GetMergedSystemPriEx (Ordinal: 6, Address: 0x683b0)
GetStringValueForManifestField (Ordinal: 7, Address: 0x6c50)
MergeResourcePackPri (Ordinal: 8, Address: 0x68420)
MergeSystemPriFiles (Ordinal: 9, Address: 0x684c0)
ResourceManagerQueueGetCurrentDepth (Ordinal: 10, Address: 0x4ae0)
ResourceManagerQueueGetGlobalFlags (Ordinal: 11, Address: 0x65be0)
ResourceManagerQueueGetMrtCachePathForPackage (Ordinal: 12, Address: 0x65c00)
ResourceManagerQueueGetString (Ordinal: 13, Address: 0x38f80)
ResourceManagerQueueGetStringDirect (Ordinal: 14, Address: 0x65c70)
ResourceManagerQueueIsResourceReference (Ordinal: 15, Address: 0x19c90)
ResourceManagerQueueReset (Ordinal: 16, Address: 0x38f0)
ResourceManagerQueueSetGlobalFlags (Ordinal: 17, Address: 0x65cd0)
ShouldMergeInproc (Ordinal: 18, Address: 0x1f060)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800c3058)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1800c3090)
CStdStubBuffer2_CountRefs (Address: 0x1800c3108)
CStdStubBuffer2_Disconnect (Address: 0x1800c30f0)
CStdStubBuffer2_QueryInterface (Address: 0x1800c3138)
NdrProxyForwardingFunction3 (Address: 0x1800c3070)
NdrProxyForwardingFunction4 (Address: 0x1800c3098)
NdrProxyForwardingFunction5 (Address: 0x1800c30b8)
ObjectStublessClient10 (Address: 0x1800c3130)
ObjectStublessClient11 (Address: 0x1800c3110)
ObjectStublessClient12 (Address: 0x1800c3128)
ObjectStublessClient13 (Address: 0x1800c30e0)
ObjectStublessClient14 (Address: 0x1800c3118)
ObjectStublessClient15 (Address: 0x1800c3100)
ObjectStublessClient16 (Address: 0x1800c3068)
ObjectStublessClient17 (Address: 0x1800c3088)
ObjectStublessClient18 (Address: 0x1800c30c0)
ObjectStublessClient19 (Address: 0x1800c30d8)
ObjectStublessClient20 (Address: 0x1800c3140)
ObjectStublessClient21 (Address: 0x1800c30f8)
ObjectStublessClient22 (Address: 0x1800c30a0)
ObjectStublessClient23 (Address: 0x1800c30c8)
ObjectStublessClient3 (Address: 0x1800c30a8)
ObjectStublessClient4 (Address: 0x1800c3120)
ObjectStublessClient5 (Address: 0x1800c30d0)
ObjectStublessClient6 (Address: 0x1800c3080)
ObjectStublessClient7 (Address: 0x1800c30e8)
ObjectStublessClient8 (Address: 0x1800c3078)
ObjectStublessClient9 (Address: 0x1800c30b0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800c3158)
IsDebuggerPresent (Address: 0x1800c3150)
OutputDebugStringW (Address: 0x1800c3160)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800c3170)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800c3180)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800c3190)
RaiseException (Address: 0x1800c31a0)
SetLastError (Address: 0x1800c3198)
SetUnhandledExceptionFilter (Address: 0x1800c31a8)
UnhandledExceptionFilter (Address: 0x1800c31b0)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x1800c31c8)
RecordFeatureUsage (Address: 0x1800c31d8)
SubscribeFeatureStateChangeNotification (Address: 0x1800c31d0)
UnsubscribeFeatureStateChangeNotification (Address: 0x1800c31c0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800c3210)
CreateDirectoryW (Address: 0x1800c3208)
CreateFileW (Address: 0x1800c3228)
DeleteFileW (Address: 0x1800c3218)
FindClose (Address: 0x1800c31f8)
FindFirstFileW (Address: 0x1800c3260)
FindNextFileW (Address: 0x1800c3200)
FlushFileBuffers (Address: 0x1800c3240)
GetDriveTypeW (Address: 0x1800c31e8)
GetFileAttributesExW (Address: 0x1800c3220)
GetFileAttributesW (Address: 0x1800c3248)
GetFileSizeEx (Address: 0x1800c3258)
GetFinalPathNameByHandleW (Address: 0x1800c3230)
GetTempFileNameW (Address: 0x1800c31f0)
ReadFile (Address: 0x1800c3250)
WriteFile (Address: 0x1800c3238)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1800c3270)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800c3280)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800c3298)
HeapAlloc (Address: 0x1800c3290)
HeapFree (Address: 0x1800c32a0)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1800c32b0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800c32c0)

api-ms-win-core-libraryloader-l1-2-0.dll

FindStringOrdinal (Address: 0x1800c32d8)
FreeLibrary (Address: 0x1800c32f8)
GetModuleFileNameA (Address: 0x1800c3308)
GetModuleFileNameW (Address: 0x1800c32e8)
GetModuleHandleExW (Address: 0x1800c32e0)
GetModuleHandleW (Address: 0x1800c32f0)
GetProcAddress (Address: 0x1800c32d0)
LoadLibraryExW (Address: 0x1800c3300)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800c3328)
GetGeoInfoW (Address: 0x1800c3320)
GetThreadPreferredUILanguages (Address: 0x1800c3318)
GetUserGeoID (Address: 0x1800c3330)

api-ms-win-core-localization-private-l1-1-0.dll

_AddMUIStringToCache (Address: 0x1800c3348)
_GetMUIStringFromCache (Address: 0x1800c3350)
_OpenMuiStringCache (Address: 0x1800c3340)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800c3368)
MapViewOfFile (Address: 0x1800c3360)
UnmapViewOfFile (Address: 0x1800c3370)

api-ms-win-core-processenvironment-l1-1-0.dll

GetEnvironmentVariableW (Address: 0x1800c3380)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1800c33b8)
GetCurrentProcess (Address: 0x1800c33c8)
GetCurrentProcessId (Address: 0x1800c33a0)
GetCurrentThread (Address: 0x1800c3398)
GetCurrentThreadId (Address: 0x1800c33b0)
OpenProcessToken (Address: 0x1800c33a8)
OpenThreadToken (Address: 0x1800c3390)
TerminateProcess (Address: 0x1800c33c0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800c33e0)
OpenProcess (Address: 0x1800c33d8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800c33f0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800c3428)
RegCreateKeyExW (Address: 0x1800c3438)
RegDeleteValueW (Address: 0x1800c3410)
RegGetValueW (Address: 0x1800c3430)
RegNotifyChangeKeyValue (Address: 0x1800c3420)
RegOpenCurrentUser (Address: 0x1800c3418)
RegOpenKeyExW (Address: 0x1800c3408)
RegSetValueExW (Address: 0x1800c3400)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800c3458)
RtlLookupFunctionEntry (Address: 0x1800c3450)
RtlVirtualUnwind (Address: 0x1800c3448)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x1800c3468)
CompareStringOrdinal (Address: 0x1800c3480)
MultiByteToWideChar (Address: 0x1800c3478)
WideCharToMultiByte (Address: 0x1800c3470)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800c34f8)
AcquireSRWLockShared (Address: 0x1800c34d0)
CreateEventExW (Address: 0x1800c34c0)
CreateEventW (Address: 0x1800c3518)
CreateMutexExW (Address: 0x1800c3508)
CreateSemaphoreExW (Address: 0x1800c34c8)
DeleteCriticalSection (Address: 0x1800c3500)
EnterCriticalSection (Address: 0x1800c34b0)
InitializeCriticalSectionAndSpinCount (Address: 0x1800c3530)
InitializeCriticalSectionEx (Address: 0x1800c3490)
InitializeSRWLock (Address: 0x1800c3528)
LeaveCriticalSection (Address: 0x1800c3498)
OpenSemaphoreW (Address: 0x1800c3520)
ReleaseMutex (Address: 0x1800c34e8)
ReleaseSemaphore (Address: 0x1800c34a8)
ReleaseSRWLockExclusive (Address: 0x1800c3510)
ReleaseSRWLockShared (Address: 0x1800c34e0)
ResetEvent (Address: 0x1800c34d8)
SetEvent (Address: 0x1800c34f0)
WaitForSingleObject (Address: 0x1800c34b8)
WaitForSingleObjectEx (Address: 0x1800c34a0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800c3548)
SignalObjectAndWait (Address: 0x1800c3540)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x1800c3560)
GetSystemTimeAsFileTime (Address: 0x1800c3558)
GetSystemWindowsDirectoryW (Address: 0x1800c3570)
GetTickCount (Address: 0x1800c3568)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800c3590)
CreateThreadpoolTimer (Address: 0x1800c3580)
SetThreadpoolTimer (Address: 0x1800c3588)
WaitForThreadpoolTimerCallbacks (Address: 0x1800c3598)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1800c35a8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800c35b8)
EncodePointer (Address: 0x1800c35c0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1800c36c8)
__CxxFrameHandler3 (Address: 0x1800c36d0)
__CxxFrameHandler4 (Address: 0x1800c3758)
__std_terminate (Address: 0x1800c3750)
_CxxThrowException (Address: 0x1800c36d8)
_o___std_exception_copy (Address: 0x1800c3738)
_o___std_exception_destroy (Address: 0x1800c3730)
_o___std_type_info_destroy_list (Address: 0x1800c3728)
_o___stdio_common_vsnprintf_s (Address: 0x1800c3720)
_o___stdio_common_vswprintf (Address: 0x1800c3710)
_o__callnewh (Address: 0x1800c3708)
_o__cexit (Address: 0x1800c3700)
_o__configure_narrow_argv (Address: 0x1800c36f8)
_o__crt_atexit (Address: 0x1800c36f0)
_o__errno (Address: 0x1800c36e8)
_o__execute_onexit_table (Address: 0x1800c36e0)
_o__initialize_narrow_environment (Address: 0x1800c35d0)
_o__initialize_onexit_table (Address: 0x1800c35d8)
_o__invalid_parameter_noinfo (Address: 0x1800c35e0)
_o__itow_s (Address: 0x1800c35e8)
_o__purecall (Address: 0x1800c35f0)
_o__register_onexit_function (Address: 0x1800c35f8)
_o__seh_filter_dll (Address: 0x1800c3600)
_o__ui64tow_s (Address: 0x1800c3608)
_o__wcsicmp (Address: 0x1800c3618)
_o__wcsnicmp (Address: 0x1800c3620)
_o__wcstoi64 (Address: 0x1800c3628)
_o__wtof (Address: 0x1800c3630)
_o__wtoi (Address: 0x1800c3638)
_o_bsearch (Address: 0x1800c3640)
_o_free (Address: 0x1800c3648)
_o_isalpha (Address: 0x1800c3650)
_o_iswalnum (Address: 0x1800c3658)
_o_iswctype (Address: 0x1800c3660)
_o_iswdigit (Address: 0x1800c3668)
_o_iswspace (Address: 0x1800c3670)
_o_malloc (Address: 0x1800c3678)
_o_memcpy_s (Address: 0x1800c3680)
_o_qsort_s (Address: 0x1800c3688)
_o_terminate (Address: 0x1800c3690)
_o_toupper (Address: 0x1800c3698)
_o_towlower (Address: 0x1800c36a0)
_o_towupper (Address: 0x1800c36a8)
_o_wcscpy_s (Address: 0x1800c36b0)
_o_wcsncpy_s (Address: 0x1800c36b8)
_o_wcstoul (Address: 0x1800c36c0)
memcmp (Address: 0x1800c3760)
memcpy (Address: 0x1800c3768)
memmove (Address: 0x1800c3610)
wcschr (Address: 0x1800c3748)
wcsrchr (Address: 0x1800c3740)
wcsstr (Address: 0x1800c3718)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800c3780)
_initterm_e (Address: 0x1800c3778)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800c3798)
wcsncmp (Address: 0x1800c3790)
wcsnlen (Address: 0x1800c37a0)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x1800c37c8)
EventRegister (Address: 0x1800c37b0)
EventSetInformation (Address: 0x1800c37d0)
EventUnregister (Address: 0x1800c37c0)
EventWriteTransfer (Address: 0x1800c37b8)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x1800c37e0)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1800c37f8)
SHTaskPoolQueueTask (Address: 0x1800c37f0)

KERNELBASE.dll

AppXGetOSMaxVersionTested (Address: 0x1800c2ed8)
GetCurrentPackageApplicationResourcesContext (Address: 0x1800c2f68)
GetCurrentPackageFamilyName (Address: 0x1800c2f00)
GetCurrentPackageFullName (Address: 0x1800c2f08)
GetCurrentPackageGlobalizationContext (Address: 0x1800c2f78)
GetCurrentPackageId (Address: 0x1800c2f70)
GetCurrentPackageInfo (Address: 0x1800c2f40)
GetCurrentPackageInfo2 (Address: 0x1800c2f48)
GetCurrentPackageInfo3 (Address: 0x1800c2f58)
GetCurrentPackageResourcesContext (Address: 0x1800c2f50)
GetPackageGlobalizationProperty (Address: 0x1800c2f80)
GetPackagePathByFullName (Address: 0x1800c2f18)
GetPackagePathByFullName2 (Address: 0x1800c2f60)
GetPackageResourcesProperty (Address: 0x1800c2ee0)
GetPackageStatusForUser (Address: 0x1800c2ef8)
GetStagedPackageOrigin (Address: 0x1800c2f10)
GetStagedPackagePathByFullName2 (Address: 0x1800c2f88)
GetSystemMetadataPathForPackage (Address: 0x1800c2ee8)
LocalAlloc (Address: 0x1800c2f38)
OpenGlobalizationUserSettingsKey (Address: 0x1800c2f20)
PackageFamilyNameFromFullName (Address: 0x1800c2ef0)
PackageIdFromFullName (Address: 0x1800c2f28)
Sleep (Address: 0x1800c2f30)

ntdll.dll

NtClose (Address: 0x1800c3850)
NtQueryInformationToken (Address: 0x1800c3868)
NtQuerySystemInformation (Address: 0x1800c3828)
NtQueryWnfStateData (Address: 0x1800c3878)
RtlAcquireSRWLockExclusive (Address: 0x1800c3840)
RtlAcquireSRWLockShared (Address: 0x1800c3848)
RtlCheckSandboxedToken (Address: 0x1800c3810)
RtlCompareUnicodeString (Address: 0x1800c3890)
RtlConvertDeviceFamilyInfoToString (Address: 0x1800c3808)
RtlGetDeviceFamilyInfoEnum (Address: 0x1800c3818)
RtlInitializeSRWLock (Address: 0x1800c3860)
RtlInitUnicodeString (Address: 0x1800c3838)
RtlPublishWnfStateData (Address: 0x1800c3830)
RtlReleaseSRWLockExclusive (Address: 0x1800c3888)
RtlReleaseSRWLockShared (Address: 0x1800c3858)
RtlReportException (Address: 0x1800c3820)
RtlSubscribeWnfStateChangeNotification (Address: 0x1800c3870)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800c3880)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1800c3010)
CStdStubBuffer_Connect (Address: 0x1800c2fe8)
CStdStubBuffer_CountRefs (Address: 0x1800c3000)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800c2fe0)
CStdStubBuffer_DebugServerRelease (Address: 0x1800c3040)
CStdStubBuffer_Disconnect (Address: 0x1800c2ff0)
CStdStubBuffer_Invoke (Address: 0x1800c2fa0)
CStdStubBuffer_IsIIDSupported (Address: 0x1800c3028)
CStdStubBuffer_QueryInterface (Address: 0x1800c2ff8)
IUnknown_AddRef_Proxy (Address: 0x1800c2fd8)
IUnknown_QueryInterface_Proxy (Address: 0x1800c3038)
IUnknown_Release_Proxy (Address: 0x1800c3018)
NdrCStdStubBuffer_Release (Address: 0x1800c2fb8)
NdrCStdStubBuffer2_Release (Address: 0x1800c3020)
NdrDllCanUnloadNow (Address: 0x1800c2fb0)
NdrDllGetClassObject (Address: 0x1800c2f98)
NdrOleAllocate (Address: 0x1800c3048)
NdrOleFree (Address: 0x1800c3008)
NdrStubCall3 (Address: 0x1800c3030)
NdrStubForwardingFunction (Address: 0x1800c2fa8)
RpcStringFreeW (Address: 0x1800c2fd0)
UuidCreate (Address: 0x1800c2fc0)
UuidToStringW (Address: 0x1800c2fc8)