PickerPlatform.dll

Description: PickerPlatform

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: a42baa170818ff699dbd6a61ce920518

File Size: 380.0 KB

Uploaded At: Dec. 1, 2025, 7:36 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x28f0)
DllGetActivationFactory (Ordinal: 2, Address: 0x2620)
DllGetClassObject (Ordinal: 3, Address: 0x2800)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x180049848)
GetPackageFullName (Address: 0x180049850)

api-ms-win-appmodel-runtime-l1-1-1.dll

ParseApplicationUserModelId (Address: 0x180049860)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180049870)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1800498c0)
CoCreateInstance (Address: 0x1800498b8)
CoGetApartmentType (Address: 0x180049890)
CoGetCallContext (Address: 0x180049880)
CoGetInterfaceAndReleaseStream (Address: 0x180049898)
CoGetMalloc (Address: 0x1800498d0)
CoMarshalInterface (Address: 0x1800498a0)
CoReleaseMarshalData (Address: 0x1800498b0)
CoTaskMemAlloc (Address: 0x1800498d8)
CoTaskMemFree (Address: 0x1800498e0)
CoTaskMemRealloc (Address: 0x1800498c8)
CoWaitForMultipleHandles (Address: 0x180049888)
CreateStreamOnHGlobal (Address: 0x1800498a8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1800498f0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180049908)
IsDebuggerPresent (Address: 0x180049910)
OutputDebugStringW (Address: 0x180049900)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180049920)
RaiseException (Address: 0x180049928)
SetLastError (Address: 0x180049930)
SetUnhandledExceptionFilter (Address: 0x180049938)
UnhandledExceptionFilter (Address: 0x180049940)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180049950)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180049960)
HeapAlloc (Address: 0x180049968)
HeapFree (Address: 0x180049970)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180049980)
LocalFree (Address: 0x180049988)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800499a8)
FindStringOrdinal (Address: 0x1800499c0)
FreeLibrary (Address: 0x1800499a0)
GetModuleFileNameA (Address: 0x1800499d8)
GetModuleFileNameW (Address: 0x1800499b8)
GetModuleHandleExW (Address: 0x1800499c8)
GetModuleHandleW (Address: 0x1800499d0)
GetProcAddress (Address: 0x180049998)
LoadLibraryExA (Address: 0x1800499e0)
LoadStringW (Address: 0x1800499b0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800499f0)

api-ms-win-core-memory-l1-1-0.dll

VirtualProtect (Address: 0x180049a08)
VirtualQuery (Address: 0x180049a00)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180049a18)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180049a40)
GetCurrentProcessId (Address: 0x180049a48)
GetCurrentThreadId (Address: 0x180049a38)
GetProcessId (Address: 0x180049a28)
OpenProcessToken (Address: 0x180049a30)
TerminateProcess (Address: 0x180049a50)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180049a60)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180049a70)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180049a80)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180049aa0)
RegEnumKeyExW (Address: 0x180049a90)
RegGetValueW (Address: 0x180049aa8)
RegOpenKeyExW (Address: 0x180049a98)
RegQueryInfoKeyW (Address: 0x180049ab0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180049ac8)
RtlLookupFunctionEntry (Address: 0x180049ac0)
RtlVirtualUnwind (Address: 0x180049ad0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x180049ae0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180049af0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180049b10)
AcquireSRWLockShared (Address: 0x180049b68)
CreateEventExW (Address: 0x180049b88)
CreateEventW (Address: 0x180049b30)
CreateMutexExW (Address: 0x180049b00)
CreateSemaphoreExW (Address: 0x180049b70)
DeleteCriticalSection (Address: 0x180049b60)
InitializeCriticalSection (Address: 0x180049b48)
InitializeSRWLock (Address: 0x180049b80)
LeaveCriticalSection (Address: 0x180049b58)
OpenSemaphoreW (Address: 0x180049b18)
ReleaseMutex (Address: 0x180049b20)
ReleaseSemaphore (Address: 0x180049b40)
ReleaseSRWLockExclusive (Address: 0x180049b50)
ReleaseSRWLockShared (Address: 0x180049b08)
SetEvent (Address: 0x180049b28)
TryEnterCriticalSection (Address: 0x180049b90)
WaitForSingleObject (Address: 0x180049b38)
WaitForSingleObjectEx (Address: 0x180049b78)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180049ba0)
InitOnceComplete (Address: 0x180049bb8)
InitOnceExecuteOnce (Address: 0x180049ba8)
Sleep (Address: 0x180049bb0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x180049bc8)
GetSystemTimeAsFileTime (Address: 0x180049bd8)
GetTickCount (Address: 0x180049bd0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x180049be8)
CreateThreadpoolWait (Address: 0x180049bf8)
SetThreadpoolWait (Address: 0x180049bf0)
WaitForThreadpoolWaitCallbacks (Address: 0x180049c00)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180049c10)
EncodePointer (Address: 0x180049c18)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180049c30)
RoOriginateError (Address: 0x180049c38)
RoOriginateErrorW (Address: 0x180049c40)
RoTransformError (Address: 0x180049c48)
SetRestrictedErrorInfo (Address: 0x180049c28)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180049c60)
RoGetMatchingRestrictedErrorInfo (Address: 0x180049c58)
RoReportFailedDelegate (Address: 0x180049c68)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180049c78)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x180049cb8)
WindowsConcatString (Address: 0x180049c98)
WindowsCreateString (Address: 0x180049c88)
WindowsCreateStringReference (Address: 0x180049ca8)
WindowsDeleteString (Address: 0x180049cc0)
WindowsDuplicateString (Address: 0x180049cc8)
WindowsGetStringRawBuffer (Address: 0x180049cd0)
WindowsIsStringEmpty (Address: 0x180049ca0)
WindowsStringHasEmbeddedNull (Address: 0x180049c90)
WindowsSubstringWithSpecifiedLength (Address: 0x180049cb0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180049cf0)
EventProviderEnabled (Address: 0x180049cf8)
EventRegister (Address: 0x180049ce0)
EventSetInformation (Address: 0x180049d08)
EventUnregister (Address: 0x180049ce8)
EventWriteTransfer (Address: 0x180049d00)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x180049d18)

msvcrt.dll

__C_specific_handler (Address: 0x180049d58)
__CxxFrameHandler3 (Address: 0x180049d90)
__dllonexit (Address: 0x180049d30)
_amsg_exit (Address: 0x180049d78)
_callnewh (Address: 0x180049dd0)
_CxxThrowException (Address: 0x180049db0)
_initterm (Address: 0x180049d60)
_lock (Address: 0x180049d50)
_onexit (Address: 0x180049d28)
_purecall (Address: 0x180049dd8)
_unlock (Address: 0x180049d38)
_XcptFilter (Address: 0x180049d80)
??_V@YAXPEAX@Z (Address: 0x180049df8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180049dc8)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180049dc0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180049df0)
??0exception@@QEAA@XZ (Address: 0x180049de8)
??1exception@@UEAA@XZ (Address: 0x180049de0)
??1type_info@@UEAA@XZ (Address: 0x180049d98)
??3@YAXPEAX@Z (Address: 0x180049d88)
?terminate@@YAXXZ (Address: 0x180049d40)
?what@exception@@UEBAPEBDXZ (Address: 0x180049db8)
free (Address: 0x180049d70)
malloc (Address: 0x180049d68)
memcmp (Address: 0x180049d48)
memcpy (Address: 0x180049da8)
memmove (Address: 0x180049da0)
memset (Address: 0x180049e10)
realloc (Address: 0x180049e00)
toupper (Address: 0x180049e08)

ntdll.dll

_vsnprintf_s (Address: 0x180049e30)
_vsnwprintf (Address: 0x180049e40)
_wcsicmp (Address: 0x180049e48)
memcpy_s (Address: 0x180049e38)
memmove_s (Address: 0x180049e20)
NtQueryInformationToken (Address: 0x180049e60)
RtlAllocateHeap (Address: 0x180049e70)
RtlCompareUnicodeString (Address: 0x180049e80)
RtlFreeHeap (Address: 0x180049e58)
RtlInitUnicodeString (Address: 0x180049e68)
RtlNtStatusToDosErrorNoTeb (Address: 0x180049e78)
wcschr (Address: 0x180049e88)
wcscspn (Address: 0x180049e28)
wcsrchr (Address: 0x180049e50)

SHCORE.dll

(Address: 0x1800497f8)
SHGetThreadRef (Address: 0x180049800)
SHTaskPoolAllowThreadReuse (Address: 0x180049808)
SHTaskPoolQueueTask (Address: 0x180049810)

Windows.Storage.dll

(Address: 0x180049820)
SHGetIDListFromObject (Address: 0x180049838)
STORAGE_CStorageItem_GetValidatedStorageItemObject (Address: 0x180049828)
STORAGE_GetShellItemFromStorageItem (Address: 0x180049830)