thumbcache.dll

Description: Microsoft Thumbnail Cache

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 4c645b26aca75639a2a79d6d507842b7

File Size: 401.9 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1bf20)
DllGetActivationFactory (Ordinal: 2, Address: 0x2e6d0)
DllGetClassObject (Ordinal: 3, Address: 0x19b40)
GetProxyDllInfo (Ordinal: 4, Address: 0x2b210)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x18004a208)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18004a218)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18004a260)
CStdStubBuffer2_CountRefs (Address: 0x18004a258)
CStdStubBuffer2_Disconnect (Address: 0x18004a250)
CStdStubBuffer2_QueryInterface (Address: 0x18004a238)
NdrProxyForwardingFunction3 (Address: 0x18004a228)
NdrProxyForwardingFunction4 (Address: 0x18004a278)
NdrProxyForwardingFunction5 (Address: 0x18004a240)
ObjectStublessClient4 (Address: 0x18004a280)
ObjectStublessClient5 (Address: 0x18004a270)
ObjectStublessClient6 (Address: 0x18004a230)
ObjectStublessClient7 (Address: 0x18004a248)
ObjectStublessClient8 (Address: 0x18004a268)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004a290)
IsDebuggerPresent (Address: 0x18004a2a0)
OutputDebugStringW (Address: 0x18004a298)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004a2b0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004a2c0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004a2e8)
RaiseException (Address: 0x18004a2f0)
SetLastError (Address: 0x18004a2d8)
SetUnhandledExceptionFilter (Address: 0x18004a2d0)
UnhandledExceptionFilter (Address: 0x18004a2e0)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18004a370)
CreateFileW (Address: 0x18004a350)
DeleteFileW (Address: 0x18004a318)
FindClose (Address: 0x18004a310)
FindFirstFileW (Address: 0x18004a348)
FindNextFileW (Address: 0x18004a308)
GetDiskFreeSpaceExW (Address: 0x18004a328)
GetDriveTypeW (Address: 0x18004a340)
GetFileAttributesW (Address: 0x18004a368)
GetFileSize (Address: 0x18004a358)
GetTempFileNameW (Address: 0x18004a330)
GetVolumeInformationW (Address: 0x18004a338)
RemoveDirectoryW (Address: 0x18004a320)
SetEndOfFile (Address: 0x18004a380)
SetFileAttributesW (Address: 0x18004a360)
SetFileInformationByHandle (Address: 0x18004a300)
SetFilePointer (Address: 0x18004a378)
WriteFile (Address: 0x18004a388)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x18004a3a0)
MoveFileExW (Address: 0x18004a398)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004a3b8)
DuplicateHandle (Address: 0x18004a3b0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004a3e0)
HeapAlloc (Address: 0x18004a3c8)
HeapFree (Address: 0x18004a3d8)
HeapReAlloc (Address: 0x18004a3d0)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x18004a3f0)
GlobalFree (Address: 0x18004a400)
LocalAlloc (Address: 0x18004a408)
LocalFree (Address: 0x18004a3f8)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x18004a418)
GlobalUnlock (Address: 0x18004a420)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18004a430)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MulDiv (Address: 0x18004a440)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18004a470)
GetModuleFileNameA (Address: 0x18004a480)
GetModuleFileNameW (Address: 0x18004a460)
GetModuleHandleExW (Address: 0x18004a478)
GetModuleHandleW (Address: 0x18004a468)
GetProcAddress (Address: 0x18004a450)
LoadStringW (Address: 0x18004a458)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004a498)
LCMapStringW (Address: 0x18004a490)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18004a4b0)
MapViewOfFile (Address: 0x18004a4b8)
UnmapViewOfFile (Address: 0x18004a4a8)

api-ms-win-core-path-l1-1-0.dll

PathCchAppend (Address: 0x18004a4c8)
PathCchStripToRoot (Address: 0x18004a4d0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004a500)
GetCurrentProcessId (Address: 0x18004a510)
GetCurrentThread (Address: 0x18004a4e8)
GetCurrentThreadId (Address: 0x18004a518)
GetProcessId (Address: 0x18004a4e0)
OpenProcessToken (Address: 0x18004a508)
OpenThreadToken (Address: 0x18004a4f0)
TerminateProcess (Address: 0x18004a4f8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18004a528)
OpenProcess (Address: 0x18004a530)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004a540)

api-ms-win-core-psapi-l1-1-0.dll

K32QueryWorkingSetEx (Address: 0x18004a550)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18004a580)
RegGetValueW (Address: 0x18004a568)
RegOpenKeyExW (Address: 0x18004a578)
RegQueryInfoKeyW (Address: 0x18004a570)
RegQueryValueExW (Address: 0x18004a560)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004a590)
RtlLookupFunctionEntry (Address: 0x18004a598)
RtlVirtualUnwind (Address: 0x18004a5a0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathAppendW (Address: 0x18004a5e8)
PathCombineW (Address: 0x18004a5c0)
PathFindExtensionW (Address: 0x18004a5e0)
PathFindFileNameW (Address: 0x18004a5b8)
PathIsRootW (Address: 0x18004a5d8)
PathIsUNCW (Address: 0x18004a5c8)
PathRemoveFileSpecW (Address: 0x18004a5b0)
PathSkipRootW (Address: 0x18004a5d0)
PathStripToRootW (Address: 0x18004a5f0)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x18004a600)
StrCmpICW (Address: 0x18004a610)
StrCmpNIW (Address: 0x18004a608)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18004a620)

api-ms-win-core-string-l2-1-0.dll

CharUpperBuffW (Address: 0x18004a630)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenW (Address: 0x18004a640)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004a698)
AcquireSRWLockShared (Address: 0x18004a6a0)
CreateEventW (Address: 0x18004a6c0)
CreateMutexExW (Address: 0x18004a678)
CreateMutexW (Address: 0x18004a6b0)
CreateSemaphoreExW (Address: 0x18004a680)
DeleteCriticalSection (Address: 0x18004a6b8)
EnterCriticalSection (Address: 0x18004a6f0)
InitializeCriticalSectionAndSpinCount (Address: 0x18004a6e0)
InitializeCriticalSectionEx (Address: 0x18004a6e8)
InitializeSRWLock (Address: 0x18004a6d0)
LeaveCriticalSection (Address: 0x18004a6a8)
OpenSemaphoreW (Address: 0x18004a670)
ReleaseMutex (Address: 0x18004a658)
ReleaseSemaphore (Address: 0x18004a650)
ReleaseSRWLockExclusive (Address: 0x18004a690)
ReleaseSRWLockShared (Address: 0x18004a688)
ResetEvent (Address: 0x18004a6c8)
SetEvent (Address: 0x18004a6d8)
WaitForSingleObject (Address: 0x18004a668)
WaitForSingleObjectEx (Address: 0x18004a660)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18004a718)
InitOnceComplete (Address: 0x18004a700)
InitOnceExecuteOnce (Address: 0x18004a710)
Sleep (Address: 0x18004a708)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x18004a728)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x18004a748)
GetSystemTimeAsFileTime (Address: 0x18004a740)
GetTickCount (Address: 0x18004a738)
GetWindowsDirectoryW (Address: 0x18004a750)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004a768)
CreateThreadpoolTimer (Address: 0x18004a778)
SetThreadpoolTimer (Address: 0x18004a770)
WaitForThreadpoolTimerCallbacks (Address: 0x18004a760)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x18004a790)
DeleteTimerQueueTimer (Address: 0x18004a788)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18004a7a0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18004a7b0)
EncodePointer (Address: 0x18004a7b8)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x18004a7d0)
RoOriginateErrorW (Address: 0x18004a7c8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18004a7e0)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18004a808)
HSTRING_UserFree64 (Address: 0x18004a818)
HSTRING_UserMarshal (Address: 0x18004a820)
HSTRING_UserMarshal64 (Address: 0x18004a800)
HSTRING_UserSize (Address: 0x18004a828)
HSTRING_UserSize64 (Address: 0x18004a810)
HSTRING_UserUnmarshal (Address: 0x18004a7f8)
HSTRING_UserUnmarshal64 (Address: 0x18004a7f0)
WindowsCreateString (Address: 0x18004a838)
WindowsCreateStringReference (Address: 0x18004a830)
WindowsGetStringRawBuffer (Address: 0x18004a850)
WindowsIsStringEmpty (Address: 0x18004a848)
WindowsStringHasEmbeddedNull (Address: 0x18004a840)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18004a8c0)
__CxxFrameHandler3 (Address: 0x18004a8c8)
__std_terminate (Address: 0x18004a8d0)
_o___std_type_info_destroy_list (Address: 0x18004a908)
_o___stdio_common_vswprintf (Address: 0x18004a900)
_o__cexit (Address: 0x18004a8f8)
_o__configure_narrow_argv (Address: 0x18004a8f0)
_o__crt_atexit (Address: 0x18004a8e8)
_o__errno (Address: 0x18004a8e0)
_o__execute_onexit_table (Address: 0x18004a8d8)
_o__initialize_narrow_environment (Address: 0x18004a860)
_o__initialize_onexit_table (Address: 0x18004a868)
_o__invalid_parameter_noinfo (Address: 0x18004a870)
_o__purecall (Address: 0x18004a878)
_o__recalloc (Address: 0x18004a880)
_o__register_onexit_function (Address: 0x18004a888)
_o__seh_filter_dll (Address: 0x18004a890)
_o__ui64tow_s (Address: 0x18004a898)
_o__ultow_s (Address: 0x18004a8a0)
_o_free (Address: 0x18004a8b0)
_o_toupper (Address: 0x18004a8b8)
memcmp (Address: 0x18004a910)
memcpy (Address: 0x18004a918)
memmove (Address: 0x18004a8a8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18004a928)
_initterm_e (Address: 0x18004a930)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18004a940)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18004a960)
EventProviderEnabled (Address: 0x18004a968)
EventRegister (Address: 0x18004a978)
EventSetInformation (Address: 0x18004a970)
EventUnregister (Address: 0x18004a958)
EventWriteTransfer (Address: 0x18004a950)

api-ms-win-security-base-l1-1-0.dll

DuplicateTokenEx (Address: 0x18004a988)
GetSecurityDescriptorControl (Address: 0x18004a998)
GetSidSubAuthority (Address: 0x18004a990)
GetTokenInformation (Address: 0x18004a9a0)

api-ms-win-shcore-comhelpers-l1-1-0.dll

IUnknown_Set (Address: 0x18004a9b0)
IUnknown_SetSite (Address: 0x18004a9b8)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x18004a9c8)

api-ms-win-shcore-path-l1-1-0.dll

(Address: 0x18004a9d8)

api-ms-win-shcore-registry-l1-1-0.dll

SHGetValueW (Address: 0x18004a9e8)

api-ms-win-shcore-stream-l1-1-0.dll

IStream_Copy (Address: 0x18004aa10)
IStream_Read (Address: 0x18004aa08)
IStream_Reset (Address: 0x18004aa00)
IStream_Size (Address: 0x18004aa18)
IStream_Write (Address: 0x18004aa20)
SHCreateMemStream (Address: 0x18004a9f8)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOverStream (Address: 0x18004aa38)
CreateStreamOverRandomAccessStream (Address: 0x18004aa30)

api-ms-win-shcore-sysinfo-l1-1-0.dll

IsOS (Address: 0x18004aa48)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThread (Address: 0x18004aa58)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18004aa68)

ntdll.dll

NtQueryInformationFile (Address: 0x18004aa78)
NtSetInformationFile (Address: 0x18004aa88)
RtlAddAccessAllowedAce (Address: 0x18004aaa8)
RtlCreateAcl (Address: 0x18004aaa0)
RtlCreateSecurityDescriptor (Address: 0x18004aa98)
RtlNtStatusToDosError (Address: 0x18004aa80)
RtlSetDaclSecurityDescriptor (Address: 0x18004aa90)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18004a1c0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18004a1d0)
CStdStubBuffer_DebugServerRelease (Address: 0x18004a1a8)
CStdStubBuffer_Invoke (Address: 0x18004a190)
CStdStubBuffer_IsIIDSupported (Address: 0x18004a170)
IUnknown_AddRef_Proxy (Address: 0x18004a1a0)
IUnknown_QueryInterface_Proxy (Address: 0x18004a188)
IUnknown_Release_Proxy (Address: 0x18004a1b8)
NdrCStdStubBuffer2_Release (Address: 0x18004a160)
NdrDllCanUnloadNow (Address: 0x18004a180)
NdrDllGetClassObject (Address: 0x18004a168)
NdrOleAllocate (Address: 0x18004a1b0)
NdrOleFree (Address: 0x18004a1c8)
NdrStubCall3 (Address: 0x18004a178)
NdrStubForwardingFunction (Address: 0x18004a198)

SHCORE.dll

(Address: 0x18004a1e0)
(Address: 0x18004a1e8)
(Address: 0x18004a1f0)
(Address: 0x18004a1f8)