TSSessionUX.dll

Description: TS Session UX

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 809fef24d707fe6d03f940afbbbbd7f3

File Size: 86.5 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1e00)
DllGetActivationFactory (Ordinal: 2, Address: 0x1b20)
DllGetClassObject (Ordinal: 3, Address: 0x1d00)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18000ff58)
CoCreateInstance (Address: 0x18000ff48)
CoGetMalloc (Address: 0x18000ff60)
CoMarshalInterface (Address: 0x18000ff70)
CoReleaseMarshalData (Address: 0x18000ff78)
CoTaskMemAlloc (Address: 0x18000ff50)
CoTaskMemFree (Address: 0x18000ff68)
CoTaskMemRealloc (Address: 0x18000ff88)
CreateStreamOnHGlobal (Address: 0x18000ff80)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18000ff98)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18000ffb0)
IsDebuggerPresent (Address: 0x18000ffa8)
OutputDebugStringW (Address: 0x18000ffb8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18000ffc8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18000ffd8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18000ffe8)
RaiseException (Address: 0x180010008)
SetLastError (Address: 0x180010000)
SetUnhandledExceptionFilter (Address: 0x18000fff0)
UnhandledExceptionFilter (Address: 0x18000fff8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180010018)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180010028)
HeapAlloc (Address: 0x180010038)
HeapFree (Address: 0x180010030)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180010048)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180010068)
FindResourceExW (Address: 0x180010080)
GetModuleFileNameA (Address: 0x180010058)
GetModuleHandleExW (Address: 0x180010070)
GetModuleHandleW (Address: 0x180010060)
GetProcAddress (Address: 0x180010090)
LoadResource (Address: 0x180010078)
LockResource (Address: 0x180010088)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800100a0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800100c8)
GetCurrentProcessId (Address: 0x1800100b0)
GetCurrentThreadId (Address: 0x1800100d0)
OpenProcessToken (Address: 0x1800100b8)
TerminateProcess (Address: 0x1800100c0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800100e8)
OpenProcess (Address: 0x1800100e0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800100f8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180010118)
RtlLookupFunctionEntry (Address: 0x180010110)
RtlVirtualUnwind (Address: 0x180010108)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180010148)
AcquireSRWLockShared (Address: 0x180010170)
CreateMutexExW (Address: 0x180010180)
CreateSemaphoreExW (Address: 0x180010178)
InitializeSRWLock (Address: 0x180010130)
OpenSemaphoreW (Address: 0x180010128)
ReleaseMutex (Address: 0x180010150)
ReleaseSemaphore (Address: 0x180010168)
ReleaseSRWLockExclusive (Address: 0x180010140)
ReleaseSRWLockShared (Address: 0x180010160)
WaitForSingleObject (Address: 0x180010158)
WaitForSingleObjectEx (Address: 0x180010138)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800101a0)
InitOnceComplete (Address: 0x180010190)
InitOnceExecuteOnce (Address: 0x180010198)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800101b0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800101c0)
EncodePointer (Address: 0x1800101c8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x1800101e8)
RoOriginateError (Address: 0x1800101f0)
RoOriginateErrorW (Address: 0x1800101f8)
RoTransformError (Address: 0x1800101d8)
SetRestrictedErrorInfo (Address: 0x1800101e0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180010218)
RoGetMatchingRestrictedErrorInfo (Address: 0x180010208)
RoReportFailedDelegate (Address: 0x180010210)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180010228)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x180010240)
WindowsCreateStringReference (Address: 0x180010250)
WindowsGetStringRawBuffer (Address: 0x180010248)
WindowsIsStringEmpty (Address: 0x180010238)
WindowsStringHasEmbeddedNull (Address: 0x180010258)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1800102d8)
__CxxFrameHandler3 (Address: 0x180010308)
__CxxFrameHandler4 (Address: 0x180010330)
__std_terminate (Address: 0x180010328)
_CxxThrowException (Address: 0x1800102e0)
_o___std_exception_copy (Address: 0x180010320)
_o___std_exception_destroy (Address: 0x180010318)
_o___std_type_info_destroy_list (Address: 0x180010310)
_o___stdio_common_vsnprintf_s (Address: 0x180010300)
_o___stdio_common_vswprintf (Address: 0x1800102f8)
_o__callnewh (Address: 0x1800102f0)
_o__cexit (Address: 0x1800102e8)
_o__configure_narrow_argv (Address: 0x180010268)
_o__crt_atexit (Address: 0x180010270)
_o__errno (Address: 0x180010278)
_o__execute_onexit_table (Address: 0x180010280)
_o__initialize_narrow_environment (Address: 0x180010288)
_o__initialize_onexit_table (Address: 0x180010290)
_o__invalid_parameter_noinfo (Address: 0x180010298)
_o__ltow (Address: 0x1800102a0)
_o__purecall (Address: 0x1800102a8)
_o__register_onexit_function (Address: 0x1800102b0)
_o__seh_filter_dll (Address: 0x1800102b8)
_o_free (Address: 0x1800102c8)
_o_malloc (Address: 0x1800102d0)
memcpy (Address: 0x1800102c0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180010340)
_initterm_e (Address: 0x180010348)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180010358)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180010380)
EventRegister (Address: 0x180010370)
EventSetInformation (Address: 0x180010368)
EventUnregister (Address: 0x180010388)
EventWriteTransfer (Address: 0x180010378)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

GetDesktopWindow (Address: 0x1800103a0)
PostMessageW (Address: 0x180010398)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1800103b0)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolQueueTask (Address: 0x1800103c0)