tsmf.dll

Description: RDP MF Plugin

Version: 10.0.19041.5965

Architecture: 64-bit

Operating System: Windows NT

SHA256: 0b75f079f6913c1db39c2b9cd6d6cddf

File Size: 418.2 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x4370)
DllGetClassObject (Ordinal: 2, Address: 0x43b0)
DllRegisterServer (Ordinal: 3, Address: 0x44f0)
DllUnregisterServer (Ordinal: 4, Address: 0x4610)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180052d80)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180052d90)
IsDebuggerPresent (Address: 0x180052da8)
OutputDebugStringA (Address: 0x180052da0)
OutputDebugStringW (Address: 0x180052d98)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180052db8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180052dc8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180052de0)
RaiseException (Address: 0x180052df0)
SetLastError (Address: 0x180052dd8)
SetUnhandledExceptionFilter (Address: 0x180052de8)
UnhandledExceptionFilter (Address: 0x180052df8)

api-ms-win-core-featurestaging-l1-1-0.dll

RecordFeatureUsage (Address: 0x180052e10)
SubscribeFeatureStateChangeNotification (Address: 0x180052e08)
UnsubscribeFeatureStateChangeNotification (Address: 0x180052e18)

api-ms-win-core-file-l1-1-0.dll

ReadFileEx (Address: 0x180052e30)
WriteFile (Address: 0x180052e28)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180052e40)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180052e60)
HeapAlloc (Address: 0x180052e50)
HeapFree (Address: 0x180052e58)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180052e70)
LocalFree (Address: 0x180052e78)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x180052e88)

api-ms-win-core-io-l1-1-1.dll

CancelIo (Address: 0x180052e98)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180052ef0)
FindResourceExW (Address: 0x180052ef8)
FreeLibrary (Address: 0x180052ea8)
FreeLibraryAndExitThread (Address: 0x180052ee8)
GetModuleFileNameA (Address: 0x180052ed0)
GetModuleFileNameW (Address: 0x180052eb0)
GetModuleHandleExA (Address: 0x180052f00)
GetModuleHandleExW (Address: 0x180052f08)
GetModuleHandleW (Address: 0x180052ec8)
GetProcAddress (Address: 0x180052ed8)
LoadLibraryExW (Address: 0x180052ec0)
LoadResource (Address: 0x180052ee0)
SizeofResource (Address: 0x180052eb8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x180052f18)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180052f38)
GetThreadLocale (Address: 0x180052f30)
SetThreadLocale (Address: 0x180052f28)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180052f88)
GetCurrentProcess (Address: 0x180052f70)
GetCurrentProcessId (Address: 0x180052f78)
GetCurrentThreadId (Address: 0x180052f80)
OpenThread (Address: 0x180052f68)
ProcessIdToSessionId (Address: 0x180052f90)
QueueUserAPC (Address: 0x180052f98)
SwitchToThread (Address: 0x180052f60)
TerminateProcess (Address: 0x180052f48)
TlsAlloc (Address: 0x180052fa8)
TlsFree (Address: 0x180052fa0)
TlsGetValue (Address: 0x180052f50)
TlsSetValue (Address: 0x180052f58)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x180052fc0)
OpenProcess (Address: 0x180052fb8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180052fd0)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleBaseNameW (Address: 0x180052fe0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180052ff0)
RtlLookupFunctionEntry (Address: 0x180052ff8)
RtlVirtualUnwind (Address: 0x180053000)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x180053010)
MultiByteToWideChar (Address: 0x180053018)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180053028)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180053038)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x1800530a8)
CreateMutexExW (Address: 0x180053058)
CreateSemaphoreExW (Address: 0x180053098)
DeleteCriticalSection (Address: 0x180053048)
EnterCriticalSection (Address: 0x1800530a0)
InitializeCriticalSection (Address: 0x180053080)
LeaveCriticalSection (Address: 0x180053088)
OpenSemaphoreW (Address: 0x180053060)
ReleaseMutex (Address: 0x180053070)
ReleaseSemaphore (Address: 0x180053090)
ResetEvent (Address: 0x180053050)
SetEvent (Address: 0x1800530b0)
WaitForSingleObject (Address: 0x180053078)
WaitForSingleObjectEx (Address: 0x180053068)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800530c0)
Sleep (Address: 0x1800530c8)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x1800530d8)
WaitForMultipleObjects (Address: 0x1800530e0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1800530f8)
GetSystemInfo (Address: 0x1800530f0)
GetSystemTimeAsFileTime (Address: 0x180053110)
GetTickCount (Address: 0x180053108)
GetTickCount64 (Address: 0x180053100)

msvcrt.dll

__C_specific_handler (Address: 0x180053140)
__CxxFrameHandler3 (Address: 0x180053130)
__dllonexit (Address: 0x180053158)
_amsg_exit (Address: 0x180053188)
_callnewh (Address: 0x180053198)
_errno (Address: 0x180053178)
_initterm (Address: 0x180053180)
_lock (Address: 0x180053168)
_onexit (Address: 0x180053150)
_purecall (Address: 0x1800531b8)
_unlock (Address: 0x180053160)
_vsnwprintf (Address: 0x180053138)
_XcptFilter (Address: 0x180053190)
free (Address: 0x1800531b0)
log10f (Address: 0x1800531f8)
malloc (Address: 0x1800531a8)
memcmp (Address: 0x1800531e8)
memcpy (Address: 0x1800531e0)
memcpy_s (Address: 0x1800531f0)
memmove (Address: 0x1800531d8)
memset (Address: 0x1800531d0)
powf (Address: 0x180053148)
realloc (Address: 0x180053170)
wcscat_s (Address: 0x1800531c0)
wcscmp (Address: 0x180053200)
wcscpy_s (Address: 0x1800531c8)
wcsncpy_s (Address: 0x1800531a0)
wcsnlen (Address: 0x180053120)
wcsrchr (Address: 0x180053128)

ntdll.dll

RtlAreBitsSet (Address: 0x180053210)
RtlClearBits (Address: 0x180053218)
RtlFindClearBitsAndSet (Address: 0x180053220)
RtlGetActiveConsoleId (Address: 0x180053228)
RtlGetCurrentServiceSessionId (Address: 0x180053230)
RtlInitializeBitMap (Address: 0x180053240)
RtlMultiByteToUnicodeN (Address: 0x180053238)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x180052c18)
NdrClientCall3 (Address: 0x180052c20)
RpcBindingFree (Address: 0x180052c08)
RpcBindingFromStringBindingW (Address: 0x180052bf8)
RpcBindingSetAuthInfoExW (Address: 0x180052c00)
RpcStringBindingComposeW (Address: 0x180052bf0)
RpcStringFreeW (Address: 0x180052c10)

USER32.dll

ClientToScreen (Address: 0x180052c30)
CloseDesktop (Address: 0x180052c58)
CreateWindowExW (Address: 0x180052d00)
DefWindowProcW (Address: 0x180052d70)
DestroyWindow (Address: 0x180052d28)
DispatchMessageW (Address: 0x180052d30)
EnumChildWindows (Address: 0x180052c80)
EnumDisplayMonitors (Address: 0x180052ce0)
EnumWindows (Address: 0x180052c88)
FillRect (Address: 0x180052cb8)
GetAncestor (Address: 0x180052cd8)
GetClassInfoExW (Address: 0x180052d18)
GetClassNameW (Address: 0x180052c68)
GetClientRect (Address: 0x180052cb0)
GetDC (Address: 0x180052d68)
GetDesktopWindow (Address: 0x180052cf0)
GetMonitorInfoW (Address: 0x180052c40)
GetSystemMetrics (Address: 0x180052ce8)
GetUserObjectInformationW (Address: 0x180052c60)
GetWindowInfo (Address: 0x180052ca8)
GetWindowLongPtrW (Address: 0x180052cc0)
GetWindowRect (Address: 0x180052c38)
GetWindowRgn (Address: 0x180052ca0)
IsWindow (Address: 0x180052c50)
IsWindowVisible (Address: 0x180052c48)
KillTimer (Address: 0x180052d58)
LoadCursorW (Address: 0x180052cd0)
MapWindowPoints (Address: 0x180052c90)
MsgWaitForMultipleObjectsEx (Address: 0x180052d48)
OffsetRect (Address: 0x180052c98)
OpenInputDesktop (Address: 0x180052cf8)
PeekMessageW (Address: 0x180052d40)
PostMessageW (Address: 0x180052d20)
PostThreadMessageW (Address: 0x180052d50)
RegisterClassExW (Address: 0x180052d10)
SetTimer (Address: 0x180052d38)
SetWindowLongPtrW (Address: 0x180052cc8)
SetWinEventHook (Address: 0x180052c78)
UnhookWinEvent (Address: 0x180052c70)
UnregisterClassA (Address: 0x180052d60)
UnregisterClassW (Address: 0x180052d08)