SharedRealitySvc.dll

Description: Microsoft (R) Spatial Data Service

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 0f99cd285ab2512a5b5dbc41720cc74c

File Size: 300.0 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x7930)
SvchostPushServiceGlobals (Ordinal: 2, Address: 0x7940)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x18003a738)
GetPackageId (Address: 0x18003a730)

api-ms-win-appmodel-state-l1-2-0.dll

CloseState (Address: 0x18003a748)
GetStateSettingsFolder (Address: 0x18003a750)
OpenStateExplicit (Address: 0x18003a758)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18003a768)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18003a7f8)
CoCreateGuid (Address: 0x18003a7d0)
CoCreateInstance (Address: 0x18003a778)
CoDecrementMTAUsage (Address: 0x18003a7a0)
CoDisconnectContext (Address: 0x18003a790)
CoFreeUnusedLibrariesEx (Address: 0x18003a788)
CoImpersonateClient (Address: 0x18003a800)
CoIncrementMTAUsage (Address: 0x18003a7a8)
CoInitializeEx (Address: 0x18003a7b0)
CoRegisterClassObject (Address: 0x18003a7c8)
CoResumeClassObjects (Address: 0x18003a798)
CoRevertToSelf (Address: 0x18003a7e8)
CoRevokeClassObject (Address: 0x18003a7b8)
CoSwitchCallContext (Address: 0x18003a7c0)
CoTaskMemAlloc (Address: 0x18003a7f0)
CoTaskMemFree (Address: 0x18003a7d8)
CoUninitialize (Address: 0x18003a780)
CoWaitForMultipleHandles (Address: 0x18003a7e0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18003a818)
IsDebuggerPresent (Address: 0x18003a820)
OutputDebugStringW (Address: 0x18003a810)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18003a830)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18003a840)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18003a858)
RaiseException (Address: 0x18003a850)
SetLastError (Address: 0x18003a870)
SetUnhandledExceptionFilter (Address: 0x18003a860)
UnhandledExceptionFilter (Address: 0x18003a868)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18003a8c8)
DeleteFileW (Address: 0x18003a890)
FindClose (Address: 0x18003a8a8)
FindFirstFileW (Address: 0x18003a880)
FindNextFileW (Address: 0x18003a888)
GetFileAttributesExW (Address: 0x18003a8b8)
GetFileSizeEx (Address: 0x18003a898)
GetFullPathNameW (Address: 0x18003a8b0)
ReadFile (Address: 0x18003a8a0)
RemoveDirectoryW (Address: 0x18003a8d0)
WriteFile (Address: 0x18003a8c0)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x18003a8e0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18003a8f0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18003a900)
HeapAlloc (Address: 0x18003a908)
HeapFree (Address: 0x18003a910)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18003a920)
LocalFree (Address: 0x18003a928)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18003a938)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RaiseFailFastException (Address: 0x18003a958)
UnregisterWait (Address: 0x18003a948)
WaitForMultipleObjects (Address: 0x18003a950)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18003a988)
GetModuleFileNameA (Address: 0x18003a980)
GetModuleHandleExW (Address: 0x18003a970)
GetModuleHandleW (Address: 0x18003a978)
GetProcAddress (Address: 0x18003a968)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18003a998)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x18003a9a8)
PathCchAppend (Address: 0x18003a9b0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18003a9c0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18003a9d0)
GetCurrentProcessId (Address: 0x18003a9e8)
GetCurrentThreadId (Address: 0x18003a9e0)
OpenProcessToken (Address: 0x18003a9f0)
TerminateProcess (Address: 0x18003a9d8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18003aa00)
OpenProcess (Address: 0x18003aa08)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18003aa20)
QueryPerformanceFrequency (Address: 0x18003aa18)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x18003aa30)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x18003aa40)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18003aa50)
RegGetValueW (Address: 0x18003aa60)
RegOpenKeyExW (Address: 0x18003aa58)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18003aa80)
RtlLookupFunctionEntry (Address: 0x18003aa78)
RtlVirtualUnwind (Address: 0x18003aa70)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindExtensionW (Address: 0x18003aa98)
PathFindFileNameW (Address: 0x18003aa90)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18003aad0)
AcquireSRWLockShared (Address: 0x18003aac0)
CreateEventExW (Address: 0x18003aae8)
CreateMutexExW (Address: 0x18003aaf8)
CreateSemaphoreExW (Address: 0x18003ab30)
DeleteCriticalSection (Address: 0x18003aaa8)
EnterCriticalSection (Address: 0x18003ab00)
InitializeCriticalSectionEx (Address: 0x18003aaf0)
LeaveCriticalSection (Address: 0x18003aab8)
OpenSemaphoreW (Address: 0x18003ab08)
ReleaseMutex (Address: 0x18003ab18)
ReleaseSemaphore (Address: 0x18003ab28)
ReleaseSRWLockExclusive (Address: 0x18003aae0)
ReleaseSRWLockShared (Address: 0x18003aac8)
ResetEvent (Address: 0x18003aab0)
SetEvent (Address: 0x18003aad8)
WaitForSingleObject (Address: 0x18003ab20)
WaitForSingleObjectEx (Address: 0x18003ab10)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18003ab50)
InitOnceComplete (Address: 0x18003ab48)
InitOnceExecuteOnce (Address: 0x18003ab40)
WaitOnAddress (Address: 0x18003ab58)
WakeByAddressAll (Address: 0x18003ab60)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18003ab70)

api-ms-win-core-threadpool-l1-2-0.dll

TrySubmitThreadpoolCallback (Address: 0x18003ab80)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18003ab90)
EncodePointer (Address: 0x18003ab98)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x18003abb0)
RoOriginateErrorW (Address: 0x18003aba8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18003abc0)
RoGetActivationFactory (Address: 0x18003abc8)
RoRegisterActivationFactories (Address: 0x18003abd0)
RoRevokeActivationFactories (Address: 0x18003abd8)

api-ms-win-core-winrt-robuffer-l1-1-0.dll

RoGetBufferMarshaler (Address: 0x18003abe8)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x18003ac10)
WindowsCreateStringReference (Address: 0x18003ac08)
WindowsDeleteString (Address: 0x18003abf8)
WindowsGetStringRawBuffer (Address: 0x18003ac18)
WindowsIsStringEmpty (Address: 0x18003ac20)
WindowsStringHasEmbeddedNull (Address: 0x18003ac00)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x18003ac30)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18003aca8)
__CxxFrameHandler3 (Address: 0x18003acb0)
__CxxFrameHandler4 (Address: 0x18003ad20)
__std_terminate (Address: 0x18003ad18)
_CxxThrowException (Address: 0x18003acb8)
_o___std_exception_copy (Address: 0x18003ad08)
_o___std_exception_destroy (Address: 0x18003ad00)
_o___std_type_info_destroy_list (Address: 0x18003acf8)
_o___stdio_common_vsnprintf_s (Address: 0x18003acf0)
_o___stdio_common_vswprintf (Address: 0x18003ace8)
_o__beginthreadex (Address: 0x18003acd0)
_o__callnewh (Address: 0x18003acc8)
_o__cexit (Address: 0x18003acc0)
_o__configure_narrow_argv (Address: 0x18003ad28)
_o__crt_atexit (Address: 0x18003ad10)
_o__errno (Address: 0x18003ace0)
_o__execute_onexit_table (Address: 0x18003acd8)
_o__initialize_narrow_environment (Address: 0x18003ac40)
_o__initialize_onexit_table (Address: 0x18003ac48)
_o__invalid_parameter_noinfo (Address: 0x18003ac50)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18003ac58)
_o__purecall (Address: 0x18003ac60)
_o__register_onexit_function (Address: 0x18003ac68)
_o__seh_filter_dll (Address: 0x18003ac70)
_o__wcsicmp (Address: 0x18003ac80)
_o_free (Address: 0x18003ac88)
_o_malloc (Address: 0x18003ac90)
_o_terminate (Address: 0x18003ac98)
_o_wcsncpy_s (Address: 0x18003aca0)
memcmp (Address: 0x18003ad30)
memcpy (Address: 0x18003ad38)
memmove (Address: 0x18003ac78)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18003ad48)
_initterm_e (Address: 0x18003ad50)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18003ad60)
wcsncmp (Address: 0x18003ad68)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18003ad88)
EventRegister (Address: 0x18003ad80)
EventSetInformation (Address: 0x18003ad90)
EventUnregister (Address: 0x18003ad98)
EventWriteTransfer (Address: 0x18003ad78)

api-ms-win-security-base-l1-1-0.dll

CheckTokenMembership (Address: 0x18003adb0)
GetTokenInformation (Address: 0x18003adb8)
ImpersonateLoggedOnUser (Address: 0x18003ada8)
RevertToSelf (Address: 0x18003adc0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18003add8)
ConvertStringSidToSidW (Address: 0x18003add0)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18003ade8)
SetServiceStatus (Address: 0x18003adf0)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18003ae00)

Cabinet.dll

(Address: 0x18003a708)
(Address: 0x18003a710)
(Address: 0x18003a700)
(Address: 0x18003a6f8)
(Address: 0x18003a6f0)
(Address: 0x18003a6e8)

combase.dll

(Address: 0x18003ae28)
(Address: 0x18003ae20)
(Address: 0x18003ae18)
(Address: 0x18003ae10)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x18003ae78)
_Mtx_destroy_in_situ (Address: 0x18003ae40)
_Mtx_init_in_situ (Address: 0x18003ae60)
_Mtx_lock (Address: 0x18003ae58)
_Mtx_unlock (Address: 0x18003ae68)
_Thrd_detach (Address: 0x18003ae70)
?_Throw_C_error@std@@YAXH@Z (Address: 0x18003ae48)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18003ae80)
?_Xbad_function_call@std@@YAXXZ (Address: 0x18003ae50)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18003ae38)

ntdll.dll

RtlGetDeviceFamilyInfoEnum (Address: 0x18003ae90)
RtlIsStateSeparationEnabled (Address: 0x18003ae98)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x18003a720)