Windows.ApplicationModel.Core.dll

Description: Windows Application Model Core API

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: e640a5ccd20dc12310f1fb48a3b7e043

File Size: 218.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3780)
DllGetActivationFactory (Ordinal: 2, Address: 0x3800)
DllGetClassObject (Ordinal: 3, Address: 0x39e0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18002ad88)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18002ada8)
CoCreateInstance (Address: 0x18002ada0)
CoGetApartmentType (Address: 0x18002ad98)
CoGetCallContext (Address: 0x18002adb8)
CoGetInterfaceAndReleaseStream (Address: 0x18002adc8)
CoMarshalInterface (Address: 0x18002add0)
CoReleaseMarshalData (Address: 0x18002adb0)
CoTaskMemAlloc (Address: 0x18002add8)
CreateStreamOnHGlobal (Address: 0x18002adc0)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18002ade8)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18002ae98)
CStdStubBuffer2_CountRefs (Address: 0x18002ae50)
CStdStubBuffer2_Disconnect (Address: 0x18002ae28)
CStdStubBuffer2_QueryInterface (Address: 0x18002ae08)
NdrProxyForwardingFunction3 (Address: 0x18002ae88)
NdrProxyForwardingFunction4 (Address: 0x18002ae70)
NdrProxyForwardingFunction5 (Address: 0x18002ae90)
ObjectStublessClient10 (Address: 0x18002ae48)
ObjectStublessClient11 (Address: 0x18002ae58)
ObjectStublessClient12 (Address: 0x18002ae68)
ObjectStublessClient13 (Address: 0x18002ae18)
ObjectStublessClient14 (Address: 0x18002ae60)
ObjectStublessClient15 (Address: 0x18002ae80)
ObjectStublessClient16 (Address: 0x18002ae78)
ObjectStublessClient17 (Address: 0x18002ae40)
ObjectStublessClient3 (Address: 0x18002ae38)
ObjectStublessClient4 (Address: 0x18002ae10)
ObjectStublessClient6 (Address: 0x18002ae30)
ObjectStublessClient7 (Address: 0x18002ae20)
ObjectStublessClient8 (Address: 0x18002adf8)
ObjectStublessClient9 (Address: 0x18002ae00)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002aeb8)
IsDebuggerPresent (Address: 0x18002aea8)
OutputDebugStringW (Address: 0x18002aeb0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002aec8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002aed8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002aef0)
RaiseException (Address: 0x18002aee8)
SetLastError (Address: 0x18002af08)
SetUnhandledExceptionFilter (Address: 0x18002aef8)
UnhandledExceptionFilter (Address: 0x18002af00)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18002af20)
DeleteFileW (Address: 0x18002af28)
GetFileAttributesW (Address: 0x18002af18)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002af38)
DuplicateHandle (Address: 0x18002af40)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002af58)
HeapAlloc (Address: 0x18002af50)
HeapFree (Address: 0x18002af60)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18002af78)
LocalFree (Address: 0x18002af70)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18002af98)
GetModuleHandleExW (Address: 0x18002afa0)
GetModuleHandleW (Address: 0x18002af88)
GetProcAddress (Address: 0x18002af90)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002afb0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x18002aff0)
GetCurrentProcess (Address: 0x18002aff8)
GetCurrentProcessId (Address: 0x18002afc0)
GetCurrentThread (Address: 0x18002afc8)
GetCurrentThreadId (Address: 0x18002b000)
InitializeProcThreadAttributeList (Address: 0x18002afd8)
OpenProcessToken (Address: 0x18002b010)
OpenThreadToken (Address: 0x18002b008)
SetThreadToken (Address: 0x18002afd0)
TerminateProcess (Address: 0x18002afe0)
UpdateProcThreadAttribute (Address: 0x18002afe8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18002b020)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002b030)

api-ms-win-core-psapi-l1-1-0.dll

K32EnumProcesses (Address: 0x18002b040)

api-ms-win-core-psm-key-l1-1-0.dll

PsmGetKeyFromToken (Address: 0x18002b050)

api-ms-win-core-psm-tc-l1-1-0.dll

PsmRegisterDynamicProcess (Address: 0x18002b060)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002b078)
RegCreateKeyExW (Address: 0x18002b080)
RegDeleteTreeW (Address: 0x18002b088)
RegDeleteValueW (Address: 0x18002b070)
RegGetValueW (Address: 0x18002b0b0)
RegOpenCurrentUser (Address: 0x18002b090)
RegOpenKeyExW (Address: 0x18002b0a0)
RegQueryValueExW (Address: 0x18002b098)
RegSetValueExW (Address: 0x18002b0a8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18002b0c8)
RtlLookupFunctionEntry (Address: 0x18002b0d0)
RtlVirtualUnwind (Address: 0x18002b0c0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18002b100)
AcquireSRWLockShared (Address: 0x18002b0f8)
CreateMutexExW (Address: 0x18002b110)
CreateSemaphoreExW (Address: 0x18002b0e8)
InitializeSRWLock (Address: 0x18002b118)
OpenSemaphoreW (Address: 0x18002b0f0)
ReleaseMutex (Address: 0x18002b130)
ReleaseSemaphore (Address: 0x18002b128)
ReleaseSRWLockExclusive (Address: 0x18002b108)
ReleaseSRWLockShared (Address: 0x18002b0e0)
WaitForSingleObject (Address: 0x18002b138)
WaitForSingleObjectEx (Address: 0x18002b120)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18002b148)
Sleep (Address: 0x18002b150)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18002b170)
GetTickCount (Address: 0x18002b160)
GetTickCount64 (Address: 0x18002b168)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18002b188)
EncodePointer (Address: 0x18002b180)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18002b198)
RoGetActivationFactory (Address: 0x18002b1a0)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18002b230)
HSTRING_UserFree64 (Address: 0x18002b1c0)
HSTRING_UserMarshal (Address: 0x18002b1e0)
HSTRING_UserMarshal64 (Address: 0x18002b220)
HSTRING_UserSize (Address: 0x18002b228)
HSTRING_UserSize64 (Address: 0x18002b210)
HSTRING_UserUnmarshal (Address: 0x18002b1f8)
HSTRING_UserUnmarshal64 (Address: 0x18002b1d0)
WindowsConcatString (Address: 0x18002b1e8)
WindowsCreateString (Address: 0x18002b218)
WindowsCreateStringReference (Address: 0x18002b1b8)
WindowsDeleteString (Address: 0x18002b208)
WindowsDuplicateString (Address: 0x18002b1f0)
WindowsGetStringLen (Address: 0x18002b1c8)
WindowsGetStringRawBuffer (Address: 0x18002b1b0)
WindowsIsStringEmpty (Address: 0x18002b1d8)
WindowsStringHasEmbeddedNull (Address: 0x18002b200)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18002b240)
EventProviderEnabled (Address: 0x18002b250)
EventRegister (Address: 0x18002b268)
EventSetInformation (Address: 0x18002b258)
EventUnregister (Address: 0x18002b260)
EventWriteTransfer (Address: 0x18002b248)

api-ms-win-security-provider-l1-1-0.dll

GetNamedSecurityInfoW (Address: 0x18002b278)
GetSecurityInfo (Address: 0x18002b280)
SetNamedSecurityInfoW (Address: 0x18002b288)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18002b298)
SHTaskPoolQueueTask (Address: 0x18002b2a0)

msvcrt.dll

__C_specific_handler (Address: 0x18002b2c8)
__CxxFrameHandler3 (Address: 0x18002b2d8)
__dllonexit (Address: 0x18002b338)
_amsg_exit (Address: 0x18002b318)
_callnewh (Address: 0x18002b2e8)
_initterm (Address: 0x18002b2d0)
_lock (Address: 0x18002b350)
_onexit (Address: 0x18002b2b8)
_purecall (Address: 0x18002b330)
_unlock (Address: 0x18002b340)
_vsnwprintf (Address: 0x18002b300)
_XcptFilter (Address: 0x18002b320)
free (Address: 0x18002b328)
malloc (Address: 0x18002b308)
memcmp (Address: 0x18002b2f8)
memcpy (Address: 0x18002b310)
memcpy_s (Address: 0x18002b348)
memmove (Address: 0x18002b2f0)
memmove_s (Address: 0x18002b2e0)
memset (Address: 0x18002b358)
realloc (Address: 0x18002b2c0)
toupper (Address: 0x18002b2b0)

ntdll.dll

EtwEventRegister (Address: 0x18002b3b8)
EtwEventUnregister (Address: 0x18002b3c8)
EtwEventWrite (Address: 0x18002b3c0)
NtClose (Address: 0x18002b390)
NtDeviceIoControlFile (Address: 0x18002b388)
NtOpenFile (Address: 0x18002b3a0)
NtOpenProcessToken (Address: 0x18002b380)
NtQueryInformationToken (Address: 0x18002b398)
RtlAllocateHeap (Address: 0x18002b3d0)
RtlCopySid (Address: 0x18002b370)
RtlFreeHeap (Address: 0x18002b3e0)
RtlIsParentOfChildAppContainer (Address: 0x18002b3d8)
RtlLengthSid (Address: 0x18002b368)
RtlNtStatusToDosError (Address: 0x18002b3a8)
RtlQueryTokenHostIdAsUlong64 (Address: 0x18002b378)
ZwQueryWnfStateData (Address: 0x18002b3b0)

profapi.dll

(Address: 0x18002b3f0)
(Address: 0x18002b3f8)
(Address: 0x18002b400)
(Address: 0x18002b420)
(Address: 0x18002b418)
(Address: 0x18002b410)
(Address: 0x18002b408)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18002ad08)
CStdStubBuffer_Connect (Address: 0x18002ad68)
CStdStubBuffer_CountRefs (Address: 0x18002ad18)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18002acf8)
CStdStubBuffer_DebugServerRelease (Address: 0x18002ad50)
CStdStubBuffer_Disconnect (Address: 0x18002ad58)
CStdStubBuffer_Invoke (Address: 0x18002ace0)
CStdStubBuffer_IsIIDSupported (Address: 0x18002ad78)
CStdStubBuffer_QueryInterface (Address: 0x18002ad20)
IUnknown_AddRef_Proxy (Address: 0x18002acf0)
IUnknown_QueryInterface_Proxy (Address: 0x18002ad60)
IUnknown_Release_Proxy (Address: 0x18002ad10)
NdrCStdStubBuffer_Release (Address: 0x18002ad40)
NdrCStdStubBuffer2_Release (Address: 0x18002ad28)
NdrDllCanUnloadNow (Address: 0x18002ad38)
NdrDllGetClassObject (Address: 0x18002ad30)
NdrOleAllocate (Address: 0x18002ad48)
NdrOleFree (Address: 0x18002ad00)
NdrStubCall3 (Address: 0x18002ad70)
NdrStubForwardingFunction (Address: 0x18002ace8)