NPSM.dll

Description: NPSM

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 2e59538cb00587c492f73300b304f621

File Size: 197.5 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

RegisterNowPlayingSessionManagerFactory (Ordinal: 1, Address: 0x3340)
UnregisterNowPlayingSessionManagerFactory (Ordinal: 2, Address: 0x32a0)
DllCanUnloadNow (Ordinal: 3, Address: 0x2c60)
DllGetActivationFactory (Ordinal: 4, Address: 0x2990)
DllGetClassObject (Ordinal: 5, Address: 0x2b70)
ServiceMain (Ordinal: 6, Address: 0x3370)
SvchostPushServiceGlobals (Ordinal: 7, Address: 0x3510)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

GlobalGetAtomNameW (Address: 0x1800243f8)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x180024490)
CoCancelCall (Address: 0x1800244a0)
CoCreateFreeThreadedMarshaler (Address: 0x180024420)
CoCreateInstance (Address: 0x180024430)
CoDecrementMTAUsage (Address: 0x180024440)
CoDisableCallCancellation (Address: 0x180024470)
CoDisconnectContext (Address: 0x1800244b0)
CoEnableCallCancellation (Address: 0x1800244a8)
CoGetCallContext (Address: 0x180024438)
CoGetMalloc (Address: 0x180024488)
CoImpersonateClient (Address: 0x180024458)
CoIncrementMTAUsage (Address: 0x180024408)
CoInitializeEx (Address: 0x180024418)
CoRegisterClassObject (Address: 0x180024428)
CoResumeClassObjects (Address: 0x180024410)
CoRevertToSelf (Address: 0x180024498)
CoRevokeClassObject (Address: 0x180024478)
CoSetProxyBlanket (Address: 0x180024450)
CoTaskMemAlloc (Address: 0x180024480)
CoTaskMemFree (Address: 0x180024468)
CoTaskMemRealloc (Address: 0x180024448)
CoUninitialize (Address: 0x180024460)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1800244c0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800244d0)
IsDebuggerPresent (Address: 0x1800244e0)
OutputDebugStringW (Address: 0x1800244d8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800244f0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180024500)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180024528)
RaiseException (Address: 0x180024530)
SetLastError (Address: 0x180024510)
SetUnhandledExceptionFilter (Address: 0x180024518)
UnhandledExceptionFilter (Address: 0x180024520)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x180024550)
RecordFeatureUsage (Address: 0x180024540)
SubscribeFeatureStateChangeNotification (Address: 0x180024558)
UnsubscribeFeatureStateChangeNotification (Address: 0x180024548)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180024570)
DuplicateHandle (Address: 0x180024568)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180024588)
HeapAlloc (Address: 0x180024590)
HeapFree (Address: 0x180024580)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800245a8)
LocalFree (Address: 0x1800245a0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

UnregisterWait (Address: 0x1800245b8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800245f0)
FreeLibrary (Address: 0x1800245e0)
GetModuleFileNameA (Address: 0x1800245d8)
GetModuleHandleExW (Address: 0x1800245e8)
GetModuleHandleW (Address: 0x1800245d0)
GetProcAddress (Address: 0x1800245c8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180024600)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180024610)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180024650)
GetCurrentProcessId (Address: 0x180024628)
GetCurrentThreadId (Address: 0x180024620)
GetProcessId (Address: 0x180024630)
OpenProcessToken (Address: 0x180024640)
ProcessIdToSessionId (Address: 0x180024648)
TerminateProcess (Address: 0x180024638)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180024660)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180024670)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180024680)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x180024690)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800246a0)
RtlLookupFunctionEntry (Address: 0x1800246a8)
RtlVirtualUnwind (Address: 0x1800246b0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800246c0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180024740)
AcquireSRWLockShared (Address: 0x180024718)
CreateEventW (Address: 0x1800246f8)
CreateMutexExW (Address: 0x180024730)
CreateSemaphoreExW (Address: 0x1800246d8)
DeleteCriticalSection (Address: 0x180024750)
EnterCriticalSection (Address: 0x180024720)
InitializeCriticalSectionEx (Address: 0x180024748)
InitializeSRWLock (Address: 0x1800246d0)
LeaveCriticalSection (Address: 0x180024728)
OpenSemaphoreW (Address: 0x180024710)
ReleaseMutex (Address: 0x1800246f0)
ReleaseSemaphore (Address: 0x180024758)
ReleaseSRWLockExclusive (Address: 0x180024700)
ReleaseSRWLockShared (Address: 0x180024738)
SetEvent (Address: 0x1800246e8)
WaitForSingleObject (Address: 0x1800246e0)
WaitForSingleObjectEx (Address: 0x180024708)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180024788)
InitOnceComplete (Address: 0x180024780)
InitOnceExecuteOnce (Address: 0x180024790)
Sleep (Address: 0x180024768)
WaitOnAddress (Address: 0x180024778)
WakeByAddressAll (Address: 0x180024770)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800247a0)
GetTickCount (Address: 0x1800247a8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800247d0)
CloseThreadpoolWait (Address: 0x1800247b8)
CloseThreadpoolWork (Address: 0x1800247e8)
CreateThreadpoolTimer (Address: 0x1800247c8)
CreateThreadpoolWait (Address: 0x180024810)
CreateThreadpoolWork (Address: 0x1800247e0)
FreeLibraryWhenCallbackReturns (Address: 0x1800247d8)
SetThreadpoolTimer (Address: 0x180024800)
SetThreadpoolWait (Address: 0x1800247f8)
SubmitThreadpoolWork (Address: 0x1800247f0)
WaitForThreadpoolTimerCallbacks (Address: 0x180024808)
WaitForThreadpoolWaitCallbacks (Address: 0x1800247c0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x180024828)
DeleteTimerQueueTimer (Address: 0x180024820)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180024840)
EncodePointer (Address: 0x180024838)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180024858)
RoOriginateErrorW (Address: 0x180024850)
RoTransformError (Address: 0x180024860)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180024880)
RoRegisterActivationFactories (Address: 0x180024870)
RoRevokeActivationFactories (Address: 0x180024878)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800248a0)
WindowsCreateStringReference (Address: 0x1800248a8)
WindowsDeleteString (Address: 0x180024898)
WindowsGetStringRawBuffer (Address: 0x1800248b0)
WindowsIsStringEmpty (Address: 0x1800248b8)
WindowsStringHasEmbeddedNull (Address: 0x180024890)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1800248c8)
GetTraceEnableLevel (Address: 0x1800248e8)
GetTraceLoggerHandle (Address: 0x1800248e0)
TraceMessage (Address: 0x1800248d8)
UnregisterTraceGuids (Address: 0x1800248d0)

api-ms-win-eventing-obsolete-l1-1-0.dll

RegisterTraceGuidsA (Address: 0x1800248f8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180024918)
EventRegister (Address: 0x180024928)
EventSetInformation (Address: 0x180024910)
EventUnregister (Address: 0x180024908)
EventWriteTransfer (Address: 0x180024920)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x180024938)
PowerSettingUnregisterNotification (Address: 0x180024940)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180024950)
GetLengthSid (Address: 0x180024960)
GetTokenInformation (Address: 0x180024958)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180024970)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180024980)
SetServiceStatus (Address: 0x180024988)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolGetUniqueContext (Address: 0x1800249a0)
SHTaskPoolQueueTask (Address: 0x180024998)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThread (Address: 0x1800249b0)

combase.dll

(Address: 0x1800249d0)
(Address: 0x1800249c8)
(Address: 0x1800249c0)

msvcrt.dll

__C_specific_handler (Address: 0x180024a68)
__CxxFrameHandler3 (Address: 0x180024a20)
__dllonexit (Address: 0x1800249e0)
_amsg_exit (Address: 0x180024a48)
_callnewh (Address: 0x180024a28)
_CxxThrowException (Address: 0x180024a00)
_initterm (Address: 0x180024a18)
_lock (Address: 0x1800249f0)
_onexit (Address: 0x180024a10)
_purecall (Address: 0x180024a88)
_unlock (Address: 0x1800249e8)
_vsnprintf_s (Address: 0x180024ac0)
_vsnwprintf (Address: 0x180024a90)
_XcptFilter (Address: 0x180024a50)
??_V@YAXPEAX@Z (Address: 0x180024a98)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180024ae0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180024a80)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180024ab8)
??0exception@@QEAA@XZ (Address: 0x180024ab0)
??1exception@@UEAA@XZ (Address: 0x180024aa8)
??1type_info@@UEAA@XZ (Address: 0x180024a08)
??3@YAXPEAX@Z (Address: 0x180024a78)
?terminate@@YAXXZ (Address: 0x180024a58)
?what@exception@@UEBAPEBDXZ (Address: 0x180024a40)
difftime (Address: 0x180024ac8)
free (Address: 0x180024a38)
malloc (Address: 0x180024a30)
memcpy (Address: 0x1800249f8)
memcpy_s (Address: 0x180024aa0)
memmove (Address: 0x180024a70)
memset (Address: 0x180024a60)
time (Address: 0x180024ad0)
wcschr (Address: 0x180024ad8)
wcscmp (Address: 0x180024ae8)

ntdll.dll

NtQueryInformationToken (Address: 0x180024b00)
RtlAllocateHeap (Address: 0x180024b18)
RtlCompareUnicodeString (Address: 0x180024b28)
RtlEqualSid (Address: 0x180024b10)
RtlFreeHeap (Address: 0x180024af8)
RtlInitUnicodeString (Address: 0x180024b08)
RtlNtStatusToDosErrorNoTeb (Address: 0x180024b20)
RtlPublishWnfStateData (Address: 0x180024b38)
RtlQueryPackageClaims (Address: 0x180024b30)

PROPSYS.dll

PSCreateMemoryPropertyStore (Address: 0x1800243d8)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x1800243e8)