PsmServiceExtHost.dll

Description: Resource Manager PSM Service Extension

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 9fab67d82ef2c9184dd151d1c1095cc2

File Size: 746.0 KB

Uploaded At: Dec. 1, 2025, 7:37 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

PsmApplicationStateNotification (Ordinal: 1, Address: 0x3acd0)
PsmCrmCleanup (Ordinal: 2, Address: 0x629e0)
PsmCrmSessionUserNotification (Ordinal: 3, Address: 0x3d570)
PsmCrmStart (Ordinal: 4, Address: 0x41f50)
PsmCrmSuspendNotification (Ordinal: 5, Address: 0x3bbe0)
PsmHamGetPackageDebugMode (Ordinal: 6, Address: 0x24ef0)
PsmHamRegisterProcess (Ordinal: 7, Address: 0x36d60)
PsmHamTerminateApplication (Ordinal: 8, Address: 0x629f0)
PsmHamTerminateHost (Ordinal: 9, Address: 0x62a30)
PsmHamTerminatePackage (Ordinal: 10, Address: 0x62a60)
PsmHangNotification (Ordinal: 11, Address: 0x3acd0)
PsmHangNotification2 (Ordinal: 12, Address: 0x3acd0)
PsmHostStateNotification (Ordinal: 13, Address: 0x3acd0)
PsmHostStateNotification2 (Ordinal: 14, Address: 0xb550)
PsmInitializeServiceExtension (Ordinal: 15, Address: 0x3acd0)
PsmInitializeServiceExtension2 (Ordinal: 16, Address: 0x3acd0)
PsmInitializeServiceExtension3 (Ordinal: 17, Address: 0x3acd0)
PsmInitializeServiceExtension4 (Ordinal: 18, Address: 0x3ecf0)
PsmMemoryLimitNotification (Ordinal: 19, Address: 0x3acd0)
PsmMemoryLimitNotification2 (Ordinal: 20, Address: 0x33440)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

PackageFamilyNameFromFullName (Address: 0x180094118)

api-ms-win-appmodel-runtime-l1-1-1.dll

FormatApplicationUserModelId (Address: 0x180094128)
ParseApplicationUserModelId (Address: 0x180094130)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180094140)

api-ms-win-core-com-l1-1-0.dll

CoGetClassObject (Address: 0x180094158)
CoTaskMemAlloc (Address: 0x180094150)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180094168)
IsDebuggerPresent (Address: 0x180094170)
OutputDebugStringW (Address: 0x180094178)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180094188)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180094198)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800941a8)
SetLastError (Address: 0x1800941b0)
SetUnhandledExceptionFilter (Address: 0x1800941c0)
UnhandledExceptionFilter (Address: 0x1800941b8)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x1800941d0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800941e0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800941f8)
DuplicateHandle (Address: 0x1800941f0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180094208)
HeapAlloc (Address: 0x180094218)
HeapFree (Address: 0x180094210)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180094230)
LocalFree (Address: 0x180094228)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x180094240)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetMaximumProcessorGroupCount (Address: 0x180094258)
GetSystemPowerStatus (Address: 0x180094250)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x180094268)
GetModuleFileNameA (Address: 0x180094270)
GetModuleFileNameW (Address: 0x180094298)
GetModuleHandleExW (Address: 0x180094280)
GetModuleHandleW (Address: 0x180094288)
GetProcAddress (Address: 0x180094278)
LoadLibraryExW (Address: 0x180094290)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1800942a8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800942b8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x1800942c8)
VirtualFree (Address: 0x1800942d0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180094318)
GetCurrentProcess (Address: 0x1800942f0)
GetCurrentProcessId (Address: 0x1800942e0)
GetCurrentThread (Address: 0x180094308)
GetCurrentThreadId (Address: 0x1800942e8)
GetProcessId (Address: 0x180094310)
TerminateProcess (Address: 0x180094328)
TlsAlloc (Address: 0x180094300)
TlsGetValue (Address: 0x1800942f8)
TlsSetValue (Address: 0x180094320)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x180094340)
OpenProcess (Address: 0x180094338)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180094350)

api-ms-win-core-psm-key-l1-1-0.dll

PsmGetApplicationNameFromKey (Address: 0x180094380)
PsmGetKeyFromToken (Address: 0x180094378)
PsmGetPackageFullNameFromKey (Address: 0x180094370)
PsmIsDynamicKey (Address: 0x180094360)
PsmIsValidKey (Address: 0x180094368)

api-ms-win-core-psm-key-l1-1-2.dll

PsmGetDynamicIdFromKey (Address: 0x180094390)

api-ms-win-core-quirks-l1-1-1.dll

QuirkIsEnabledForPackage3 (Address: 0x1800943a0)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x1800943b0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800943f0)
RegCreateKeyExW (Address: 0x1800943d8)
RegDeleteValueW (Address: 0x1800943e8)
RegEnumValueW (Address: 0x1800943d0)
RegOpenKeyExW (Address: 0x1800943c0)
RegQueryValueExW (Address: 0x1800943e0)
RegSetValueExW (Address: 0x1800943c8)

api-ms-win-core-registry-l2-1-0.dll

RegOpenKeyW (Address: 0x180094400)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180094418)
RtlCompareMemory (Address: 0x180094428)
RtlLookupFunctionEntry (Address: 0x180094410)
RtlVirtualUnwind (Address: 0x180094420)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x180094438)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180094448)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180094460)
AcquireSRWLockShared (Address: 0x180094498)
CreateEventW (Address: 0x1800944c8)
CreateMutexExW (Address: 0x180094478)
CreateSemaphoreExW (Address: 0x180094488)
DeleteCriticalSection (Address: 0x1800944a8)
EnterCriticalSection (Address: 0x1800944b8)
InitializeCriticalSectionEx (Address: 0x1800944d0)
LeaveCriticalSection (Address: 0x1800944d8)
OpenSemaphoreW (Address: 0x1800944e8)
ReleaseMutex (Address: 0x1800944a0)
ReleaseSemaphore (Address: 0x1800944c0)
ReleaseSRWLockExclusive (Address: 0x180094480)
ReleaseSRWLockShared (Address: 0x180094468)
ResetEvent (Address: 0x180094490)
SetEvent (Address: 0x1800944e0)
WaitForMultipleObjectsEx (Address: 0x180094470)
WaitForSingleObject (Address: 0x1800944b0)
WaitForSingleObjectEx (Address: 0x180094458)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800944f8)
Sleep (Address: 0x180094500)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x180094510)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180094520)
GetTickCount (Address: 0x180094528)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180094550)
CreateThreadpoolTimer (Address: 0x180094540)
SetThreadpoolTimer (Address: 0x180094538)
WaitForThreadpoolTimerCallbacks (Address: 0x180094548)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180094560)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x180094578)
EventRegister (Address: 0x180094580)
EventSetInformation (Address: 0x180094570)
EventUnregister (Address: 0x180094590)
EventWriteTransfer (Address: 0x180094588)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x1800945a0)
PowerSettingUnregisterNotification (Address: 0x1800945a8)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x1800945d0)
ImpersonateLoggedOnUser (Address: 0x1800945c8)
ImpersonateSelf (Address: 0x1800945c0)
IsWellKnownSid (Address: 0x1800945b8)
RevertToSelf (Address: 0x1800945d8)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x1800945e8)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800945f8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180094608)
ConvertStringSidToSidW (Address: 0x180094600)

IPHLPAPI.DLL

CancelMibChangeNotify2 (Address: 0x180093fc0)
FreeMibTable (Address: 0x180093fb0)
GetIpInterfaceTable (Address: 0x180093fa0)
GetUnicastIpAddressTable (Address: 0x180093f98)
NotifyIpInterfaceChange (Address: 0x180093fb8)
NotifyUnicastIpAddressChange (Address: 0x180093fa8)

msvcrt.dll

__C_specific_handler (Address: 0x1800946d0)
__CxxFrameHandler3 (Address: 0x180094698)
__dllonexit (Address: 0x1800946b8)
_amsg_exit (Address: 0x1800946e8)
_callnewh (Address: 0x180094618)
_initterm (Address: 0x1800946d8)
_lock (Address: 0x1800946c8)
_onexit (Address: 0x1800946b0)
_purecall (Address: 0x180094650)
_unlock (Address: 0x1800946c0)
_vsnwprintf (Address: 0x180094660)
_wcsicmp (Address: 0x180094640)
_XcptFilter (Address: 0x1800946f0)
bsearch (Address: 0x180094620)
free (Address: 0x1800946f8)
malloc (Address: 0x1800946e0)
memcmp (Address: 0x180094680)
memcpy (Address: 0x180094688)
memcpy_s (Address: 0x180094658)
memmove (Address: 0x1800946a0)
memmove_s (Address: 0x180094648)
memset (Address: 0x1800946a8)
qsort (Address: 0x180094630)
qsort_s (Address: 0x180094638)
toupper (Address: 0x180094690)
wcscmp (Address: 0x180094678)
wcscpy_s (Address: 0x180094668)
wcsnlen (Address: 0x180094670)
wcstok_s (Address: 0x180094628)

ntdll.dll

EtwEventWriteNoRegistration (Address: 0x180094ae8)
NtAdjustPrivilegesToken (Address: 0x180094710)
NtAlpcConnectPort (Address: 0x180094ad0)
NtAlpcSendWaitReceivePort (Address: 0x180094af0)
NtClearEvent (Address: 0x1800948c0)
NtClose (Address: 0x1800948e0)
NtCompareObjects (Address: 0x180094778)
NtCreateEvent (Address: 0x1800948d8)
NtCreateFile (Address: 0x180094a98)
NtCreateWnfStateName (Address: 0x180094a20)
NtDeleteWnfStateName (Address: 0x1800949a8)
NtDeviceIoControlFile (Address: 0x180094798)
NtDuplicateObject (Address: 0x1800947a0)
NtGetNextThread (Address: 0x180094828)
NtManagePartition (Address: 0x180094800)
NtOpenEvent (Address: 0x180094ac8)
NtOpenFile (Address: 0x1800947f8)
NtOpenKey (Address: 0x180094a70)
NtOpenPartition (Address: 0x1800947d8)
NtOpenProcess (Address: 0x180094758)
NtOpenProcessToken (Address: 0x180094718)
NtOpenThreadToken (Address: 0x1800947a8)
NtQueryInformationJobObject (Address: 0x180094770)
NtQueryInformationProcess (Address: 0x180094a10)
NtQueryInformationThread (Address: 0x1800947c8)
NtQueryInformationToken (Address: 0x180094780)
NtQuerySystemInformation (Address: 0x180094a30)
NtQuerySystemInformationEx (Address: 0x180094748)
NtQueryValueKey (Address: 0x180094aa0)
NtQueryVirtualMemory (Address: 0x180094a60)
NtQueryVolumeInformationFile (Address: 0x180094a90)
NtQueryWnfStateData (Address: 0x180094820)
NtSetEvent (Address: 0x1800948d0)
NtSetInformationJobObject (Address: 0x180094728)
NtSetInformationProcess (Address: 0x1800947b8)
NtSetInformationThread (Address: 0x180094768)
NtSetInformationVirtualMemory (Address: 0x180094a68)
NtSetSystemInformation (Address: 0x180094750)
NtTerminateJobObject (Address: 0x180094790)
NtTerminateProcess (Address: 0x1800947f0)
NtUpdateWnfStateData (Address: 0x1800947b0)
NtWaitForMultipleObjects (Address: 0x1800948c8)
NtWaitForSingleObject (Address: 0x1800949d8)
PssNtCaptureSnapshot (Address: 0x180094aa8)
PssNtFreeSnapshot (Address: 0x180094ab0)
RtlAbsoluteToSelfRelativeSD (Address: 0x1800949f0)
RtlAcquireSRWLockExclusive (Address: 0x180094950)
RtlAcquireSRWLockShared (Address: 0x180094948)
RtlAddAccessAllowedAceEx (Address: 0x180094a08)
RtlAllocateAndInitializeSid (Address: 0x180094ad8)
RtlAllocateHeap (Address: 0x180094808)
RtlCapabilityCheck (Address: 0x1800947d0)
RtlClearAllBits (Address: 0x1800948b0)
RtlClearBit (Address: 0x180094850)
RtlConvertSidToUnicodeString (Address: 0x180094740)
RtlConvertSRWLockExclusiveToShared (Address: 0x180094878)
RtlCopySid (Address: 0x180094818)
RtlCreateAcl (Address: 0x1800949e8)
RtlCreateSecurityDescriptor (Address: 0x1800949e0)
RtlEnterCriticalSection (Address: 0x180094a58)
RtlEqualSid (Address: 0x1800947e0)
RtlFreeHeap (Address: 0x180094810)
RtlFreeSid (Address: 0x180094ae0)
RtlFreeUnicodeString (Address: 0x180094840)
RtlGetDeviceFamilyInfoEnum (Address: 0x1800949b8)
RtlGetNtProductType (Address: 0x180094a78)
RtlGetNtSystemRoot (Address: 0x180094868)
RtlGetSuiteMask (Address: 0x180094a88)
RtlInitializeBitMap (Address: 0x180094910)
RtlInitializeConditionVariable (Address: 0x1800948f0)
RtlInitializeCriticalSection (Address: 0x180094a40)
RtlInitializeSRWLock (Address: 0x180094900)
RtlInitUnicodeString (Address: 0x180094760)
RtlLeaveCriticalSection (Address: 0x180094a38)
RtlLengthSid (Address: 0x180094938)
RtlNtStatusToDosError (Address: 0x180094b00)
RtlNumberOfSetBits (Address: 0x180094908)
RtlNumberOfSetBitsUlongPtr (Address: 0x180094a00)
RtlPublishWnfStateData (Address: 0x1800949a0)
RtlQueryPackageClaims (Address: 0x180094788)
RtlQueryPerformanceCounter (Address: 0x180094858)
RtlQueryPerformanceFrequency (Address: 0x180094848)
RtlQueryTokenHostIdAsUlong64 (Address: 0x180094880)
RtlQueryUnbiasedInterruptTime (Address: 0x1800948a8)
RtlQueryWnfMetaNotification (Address: 0x180094888)
RtlQueryWnfStateData (Address: 0x180094898)
RtlRandom (Address: 0x180094860)
RtlRbInsertNodeEx (Address: 0x180094970)
RtlRbRemoveNode (Address: 0x180094968)
RtlReAllocateHeap (Address: 0x1800949f8)
RtlReleaseSRWLockExclusive (Address: 0x180094958)
RtlReleaseSRWLockShared (Address: 0x180094940)
RtlRunOnceExecuteOnce (Address: 0x180094a80)
RtlSetBit (Address: 0x1800948b8)
RtlSetDaclSecurityDescriptor (Address: 0x180094a18)
RtlSetOwnerSecurityDescriptor (Address: 0x180094a28)
RtlSleepConditionVariableSRW (Address: 0x180094870)
RtlSubscribeWnfStateChangeNotification (Address: 0x180094920)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180094918)
RtlUpcaseUnicodeChar (Address: 0x180094998)
RtlValidSid (Address: 0x180094930)
RtlWaitForWnfMetaNotification (Address: 0x180094890)
RtlWaitOnAddress (Address: 0x1800948e8)
RtlWakeAddressAll (Address: 0x180094708)
RtlWakeAddressSingle (Address: 0x180094838)
RtlWakeAllConditionVariable (Address: 0x1800948f8)
RtlWakeConditionVariable (Address: 0x180094830)
TpAllocCleanupGroup (Address: 0x180094990)
TpAllocPool (Address: 0x180094928)
TpAllocTimer (Address: 0x1800949c8)
TpAllocWait (Address: 0x1800947c0)
TpAllocWork (Address: 0x180094af8)
TpPostWork (Address: 0x180094a50)
TpReleaseCleanupGroup (Address: 0x180094988)
TpReleaseCleanupGroupMembers (Address: 0x180094980)
TpReleasePool (Address: 0x180094960)
TpReleaseTimer (Address: 0x1800949b0)
TpReleaseWait (Address: 0x180094730)
TpReleaseWork (Address: 0x180094a48)
TpSetTimer (Address: 0x1800949d0)
TpSetTimerEx (Address: 0x1800948a0)
TpSetWait (Address: 0x180094720)
TpWaitForTimer (Address: 0x1800949c0)
TpWaitForWait (Address: 0x1800947e8)
TpWaitForWork (Address: 0x180094978)
ZwQueryWnfStateData (Address: 0x180094738)
ZwQueryWnfStateNameInformation (Address: 0x180094ac0)
ZwUpdateWnfStateData (Address: 0x180094ab8)

RMCLIENT.dll

HamCloseActivity (Address: 0x180093ff0)
HamConnectToServer (Address: 0x180093fe8)
HamCreateActivity (Address: 0x180093ff8)
HamDisconnectFromServer (Address: 0x180093fd8)
HamStartActivityAsync (Address: 0x180093fe0)
HamStopActivity (Address: 0x180093fd0)

RPCRT4.dll

I_RpcMapWin32Status (Address: 0x180094008)
NdrServerCall2 (Address: 0x180094068)
NdrServerCallAll (Address: 0x180094078)
RpcBindingVectorFree (Address: 0x180094070)
RpcEpRegisterW (Address: 0x180094040)
RpcEpUnregister (Address: 0x180094048)
RpcImpersonateClient (Address: 0x180094028)
RpcRevertToSelf (Address: 0x180094020)
RpcServerInqBindings (Address: 0x180094030)
RpcServerInqBindingsEx (Address: 0x180094038)
RpcServerInqCallAttributesW (Address: 0x180094018)
RpcServerRegisterIf3 (Address: 0x180094050)
RpcServerUnregisterIf (Address: 0x180094058)
RpcServerUseProtseqW (Address: 0x180094060)
UuidCreate (Address: 0x180094010)

UMPDC.dll

PdcNotificationClientAcknowledge (Address: 0x1800940e0)
PdcNotificationClientRegister (Address: 0x1800940d0)
PdcNotificationClientUnregister (Address: 0x180094090)
Pdcv2ActivationClientActivate (Address: 0x1800940c0)
Pdcv2ActivationClientDeactivate (Address: 0x180094108)
Pdcv2ActivationClientRegister (Address: 0x1800940e8)
Pdcv2ActivationClientRenewActivation (Address: 0x1800940f0)
Pdcv2ActivationClientUnregister (Address: 0x180094098)
SleepstudyHelperBlockerActiveDereference (Address: 0x1800940a8)
SleepstudyHelperBlockerActiveReference (Address: 0x180094088)
SleepstudyHelperBuildBlocker (Address: 0x1800940b8)
SleepstudyHelperCreateBlockerFromGuid (Address: 0x1800940a0)
SleepstudyHelperCreateLibrary (Address: 0x1800940c8)
SleepstudyHelperDestroyBlocker (Address: 0x1800940b0)
SleepstudyHelperDestroyBlockerBuilder (Address: 0x1800940f8)
SleepstudyHelperDestroyLibrary (Address: 0x1800940d8)
SleepstudyHelperSetBlockerParentHandle (Address: 0x180094100)

wer.dll

WerpAddTerminationReason (Address: 0x180094b10)