NotificationControllerPS.dll

Description: NotificationController Proxy Stub

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 969715b4308f0be40be0576b7a08de1d

File Size: 382.5 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1dc0)
DllGetClassObject (Ordinal: 2, Address: 0x1880)
DllRegisterServer (Ordinal: 3, Address: 0x14730)
DllUnregisterServer (Ordinal: 4, Address: 0x14760)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18004ab58)
CoCreateInstance (Address: 0x18004ab60)
CoGetCallContext (Address: 0x18004ab50)
CoTaskMemAlloc (Address: 0x18004ab68)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

ObjectStublessClient10 (Address: 0x18004abc0)
ObjectStublessClient11 (Address: 0x18004aba0)
ObjectStublessClient12 (Address: 0x18004abc8)
ObjectStublessClient13 (Address: 0x18004aba8)
ObjectStublessClient14 (Address: 0x18004abb0)
ObjectStublessClient15 (Address: 0x18004abe8)
ObjectStublessClient16 (Address: 0x18004abe0)
ObjectStublessClient17 (Address: 0x18004ab98)
ObjectStublessClient3 (Address: 0x18004abb8)
ObjectStublessClient4 (Address: 0x18004ab78)
ObjectStublessClient5 (Address: 0x18004ab88)
ObjectStublessClient6 (Address: 0x18004ab80)
ObjectStublessClient7 (Address: 0x18004abd8)
ObjectStublessClient8 (Address: 0x18004ab90)
ObjectStublessClient9 (Address: 0x18004abd0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004ac00)
IsDebuggerPresent (Address: 0x18004abf8)
OutputDebugStringW (Address: 0x18004ac08)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004ac20)
RaiseException (Address: 0x18004ac18)
SetLastError (Address: 0x18004ac38)
SetUnhandledExceptionFilter (Address: 0x18004ac28)
UnhandledExceptionFilter (Address: 0x18004ac30)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004ac48)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004ac60)
HeapAlloc (Address: 0x18004ac58)
HeapFree (Address: 0x18004ac68)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18004ac78)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18004ac90)
GetModuleHandleExW (Address: 0x18004ac88)
GetModuleHandleW (Address: 0x18004aca0)
GetProcAddress (Address: 0x18004ac98)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004acb0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004acd0)
GetCurrentProcessId (Address: 0x18004ace0)
GetCurrentThreadId (Address: 0x18004acc8)
GetProcessId (Address: 0x18004acc0)
ProcessIdToSessionId (Address: 0x18004ace8)
TerminateProcess (Address: 0x18004acd8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18004ad00)
OpenProcess (Address: 0x18004acf8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004ad10)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x18004ad20)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x18004ad30)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004ad40)
RtlLookupFunctionEntry (Address: 0x18004ad50)
RtlVirtualUnwind (Address: 0x18004ad48)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x18004ad60)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004add8)
AcquireSRWLockShared (Address: 0x18004ad90)
CreateEventExW (Address: 0x18004adb8)
CreateMutexExW (Address: 0x18004ada8)
CreateSemaphoreExW (Address: 0x18004ad98)
DeleteCriticalSection (Address: 0x18004ad70)
EnterCriticalSection (Address: 0x18004ad78)
InitializeCriticalSectionEx (Address: 0x18004add0)
LeaveCriticalSection (Address: 0x18004ad80)
OpenSemaphoreW (Address: 0x18004adb0)
ReleaseMutex (Address: 0x18004adf0)
ReleaseSemaphore (Address: 0x18004adc0)
ReleaseSRWLockExclusive (Address: 0x18004adc8)
ReleaseSRWLockShared (Address: 0x18004ad88)
ResetEvent (Address: 0x18004ada0)
SetEvent (Address: 0x18004ade8)
TryAcquireSRWLockExclusive (Address: 0x18004adf8)
TryAcquireSRWLockShared (Address: 0x18004ae00)
WaitForSingleObject (Address: 0x18004ade0)
WaitForSingleObjectEx (Address: 0x18004ae08)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18004ae30)
InitOnceComplete (Address: 0x18004ae28)
InitOnceExecuteOnce (Address: 0x18004ae20)
Sleep (Address: 0x18004ae18)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x18004ae40)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18004ae50)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x18004ae60)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004ae80)
CreateThreadpoolTimer (Address: 0x18004ae78)
SetThreadpoolTimer (Address: 0x18004ae70)
WaitForThreadpoolTimerCallbacks (Address: 0x18004ae88)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18004ae98)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x18004aea8)
SetRestrictedErrorInfo (Address: 0x18004aeb0)

api-ms-win-core-winrt-error-l1-1-1.dll

RoGetMatchingRestrictedErrorInfo (Address: 0x18004aec0)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18004aed0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateStringReference (Address: 0x18004aee0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18004af58)
__CxxFrameHandler3 (Address: 0x18004af60)
__CxxFrameHandler4 (Address: 0x18004afd0)
__std_terminate (Address: 0x18004afc8)
_CxxThrowException (Address: 0x18004af68)
_o___std_exception_copy (Address: 0x18004afc0)
_o___std_exception_destroy (Address: 0x18004afb8)
_o___std_type_info_destroy_list (Address: 0x18004afb0)
_o___stdio_common_vsnprintf_s (Address: 0x18004afa8)
_o___stdio_common_vswprintf (Address: 0x18004afa0)
_o__callnewh (Address: 0x18004af98)
_o__cexit (Address: 0x18004af90)
_o__configure_narrow_argv (Address: 0x18004af88)
_o__crt_atexit (Address: 0x18004af80)
_o__errno (Address: 0x18004af78)
_o__execute_onexit_table (Address: 0x18004af70)
_o__initialize_narrow_environment (Address: 0x18004aef0)
_o__initialize_onexit_table (Address: 0x18004aef8)
_o__invalid_parameter_noinfo (Address: 0x18004af00)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18004af08)
_o__purecall (Address: 0x18004af10)
_o__register_onexit_function (Address: 0x18004af18)
_o__seh_filter_dll (Address: 0x18004af20)
_o__wcsicmp (Address: 0x18004af30)
_o_free (Address: 0x18004af38)
_o_malloc (Address: 0x18004af40)
_o_wcscpy_s (Address: 0x18004af48)
_o_wcstoull (Address: 0x18004af50)
memcmp (Address: 0x18004afd8)
memcpy (Address: 0x18004afe0)
memmove (Address: 0x18004af28)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18004aff8)
_initterm_e (Address: 0x18004aff0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18004b008)
wcscmp (Address: 0x18004b010)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18004b030)
EventRegister (Address: 0x18004b028)
EventSetInformation (Address: 0x18004b020)
EventUnregister (Address: 0x18004b038)
EventWriteTransfer (Address: 0x18004b040)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x18004b050)

api-ms-win-rtcore-ntuser-powermanagement-l1-1-0.dll

UnregisterPowerSettingNotification (Address: 0x18004b060)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolGetUniqueContext (Address: 0x18004b078)
SHTaskPoolQueueTask (Address: 0x18004b070)

combase.dll

(Address: 0x18004b088)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x18004b098)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18004b0a8)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18004b0a0)

ntdll.dll

NtQueryWnfStateData (Address: 0x18004b0d0)
RtlGetDeviceFamilyInfoEnum (Address: 0x18004b0f0)
RtlIsMultiUsersInSessionSku (Address: 0x18004b0e8)
RtlPublishWnfStateData (Address: 0x18004b0b8)
RtlSubscribeWnfStateChangeNotification (Address: 0x18004b0c8)
RtlTestAndPublishWnfStateData (Address: 0x18004b0d8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18004b0c0)
wcschr (Address: 0x18004b0e0)

OLEAUT32.dll

BSTR_UserFree (Address: 0x18004aa20)
BSTR_UserFree64 (Address: 0x18004aa28)
BSTR_UserMarshal (Address: 0x18004aa48)
BSTR_UserMarshal64 (Address: 0x18004aa60)
BSTR_UserSize (Address: 0x18004aa40)
BSTR_UserSize64 (Address: 0x18004aa30)
BSTR_UserUnmarshal (Address: 0x18004aa68)
BSTR_UserUnmarshal64 (Address: 0x18004aa50)
SysAllocString (Address: 0x18004aa58)
SysFreeString (Address: 0x18004aa38)

RMCLIENT.dll

HamCloseActivity (Address: 0x18004aa80)
HamConnectToServer (Address: 0x18004aa98)
HamCreateActivityForProcess (Address: 0x18004aa88)
HamDisconnectFromServer (Address: 0x18004aaa0)
HamPopulateActivityProperties (Address: 0x18004aa78)
HamStartActivityAsync (Address: 0x18004aa90)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18004aad0)
CStdStubBuffer_Connect (Address: 0x18004aab8)
CStdStubBuffer_CountRefs (Address: 0x18004aaf0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18004ab40)
CStdStubBuffer_DebugServerRelease (Address: 0x18004ab18)
CStdStubBuffer_Disconnect (Address: 0x18004ab20)
CStdStubBuffer_Invoke (Address: 0x18004aae0)
CStdStubBuffer_IsIIDSupported (Address: 0x18004aac8)
CStdStubBuffer_QueryInterface (Address: 0x18004aad8)
IUnknown_AddRef_Proxy (Address: 0x18004aac0)
IUnknown_QueryInterface_Proxy (Address: 0x18004aae8)
IUnknown_Release_Proxy (Address: 0x18004ab28)
NdrCStdStubBuffer_Release (Address: 0x18004aaf8)
NdrDllCanUnloadNow (Address: 0x18004ab00)
NdrDllGetClassObject (Address: 0x18004aab0)
NdrDllRegisterProxy (Address: 0x18004ab38)
NdrDllUnregisterProxy (Address: 0x18004ab08)
NdrOleAllocate (Address: 0x18004ab10)
NdrOleFree (Address: 0x18004ab30)