Windows.ApplicationModel.dll

Description: Windows ApplicationModel API Server

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6216

Architecture: 64-bit

Operating System: Windows NT

SHA256: e07d1478719868346e7944c199125703

File Size: 931.6 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xf420)
  • DllGetActivationFactory (Ordinal: 2, Address: 0xe850)
  • DllGetClassObject (Ordinal: 3, Address: 0xfa30)

Imported DLLs & Functions

api-ms-win-appmodel-state-l1-2-0.dll
  • CloseState (Address: 0x1800ae138)
  • GetStateRootFolder (Address: 0x1800ae140)
  • GetSystemAppDataKey (Address: 0x1800ae128)
  • OpenState (Address: 0x1800ae120)
  • OpenStateExplicit (Address: 0x1800ae130)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800ae150)
api-ms-win-core-apiquery-l2-1-0.dll
  • IsApiSetImplemented (Address: 0x1800ae160)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800ae170)
  • IsDebuggerPresent (Address: 0x1800ae180)
  • OutputDebugStringW (Address: 0x1800ae178)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800ae190)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800ae1a0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800ae1b0)
  • RaiseException (Address: 0x1800ae1d0)
  • SetLastError (Address: 0x1800ae1c8)
  • SetUnhandledExceptionFilter (Address: 0x1800ae1b8)
  • UnhandledExceptionFilter (Address: 0x1800ae1c0)
api-ms-win-core-file-l1-1-0.dll
  • CreateDirectoryW (Address: 0x1800ae1f0)
  • CreateFileW (Address: 0x1800ae1e8)
  • DeleteFileW (Address: 0x1800ae1f8)
  • GetFileInformationByHandle (Address: 0x1800ae1e0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800ae208)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800ae220)
  • HeapAlloc (Address: 0x1800ae228)
  • HeapFree (Address: 0x1800ae218)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800ae238)
  • LocalFree (Address: 0x1800ae240)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800ae260)
  • InterlockedFlushSList (Address: 0x1800ae258)
  • InterlockedPushEntrySList (Address: 0x1800ae250)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x1800ae278)
  • FreeLibrary (Address: 0x1800ae280)
  • GetModuleFileNameA (Address: 0x1800ae2c0)
  • GetModuleHandleExW (Address: 0x1800ae2b8)
  • GetModuleHandleW (Address: 0x1800ae290)
  • GetProcAddress (Address: 0x1800ae298)
  • LoadLibraryExW (Address: 0x1800ae288)
  • LoadResource (Address: 0x1800ae2b0)
  • LoadStringW (Address: 0x1800ae2a0)
  • LockResource (Address: 0x1800ae2a8)
  • SizeofResource (Address: 0x1800ae270)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800ae2d0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800ae2e0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800ae308)
  • GetCurrentProcessId (Address: 0x1800ae310)
  • GetCurrentThread (Address: 0x1800ae328)
  • GetCurrentThreadId (Address: 0x1800ae2f0)
  • GetProcessId (Address: 0x1800ae2f8)
  • OpenProcessToken (Address: 0x1800ae300)
  • OpenThreadToken (Address: 0x1800ae320)
  • TerminateProcess (Address: 0x1800ae318)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800ae340)
  • OpenProcess (Address: 0x1800ae338)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800ae350)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1800ae360)
api-ms-win-core-quirks-l1-1-0.dll
  • QuirkIsEnabledForPackage (Address: 0x1800ae370)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800ae3a8)
  • RegCreateKeyExW (Address: 0x1800ae388)
  • RegGetValueW (Address: 0x1800ae398)
  • RegNotifyChangeKeyValue (Address: 0x1800ae390)
  • RegOpenKeyExW (Address: 0x1800ae3a0)
  • RegQueryValueExW (Address: 0x1800ae380)
  • RegSetValueExW (Address: 0x1800ae3b0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800ae3c0)
  • MultiByteToWideChar (Address: 0x1800ae3c8)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x1800ae3d8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800ae440)
  • AcquireSRWLockShared (Address: 0x1800ae448)
  • CreateEventExW (Address: 0x1800ae468)
  • CreateEventW (Address: 0x1800ae3e8)
  • CreateMutexExW (Address: 0x1800ae408)
  • CreateSemaphoreExW (Address: 0x1800ae438)
  • DeleteCriticalSection (Address: 0x1800ae410)
  • EnterCriticalSection (Address: 0x1800ae420)
  • InitializeCriticalSectionEx (Address: 0x1800ae3f8)
  • InitializeSRWLock (Address: 0x1800ae470)
  • LeaveCriticalSection (Address: 0x1800ae418)
  • OpenSemaphoreW (Address: 0x1800ae430)
  • ReleaseMutex (Address: 0x1800ae400)
  • ReleaseSemaphore (Address: 0x1800ae458)
  • ReleaseSRWLockExclusive (Address: 0x1800ae450)
  • ReleaseSRWLockShared (Address: 0x1800ae478)
  • SetEvent (Address: 0x1800ae460)
  • WaitForSingleObject (Address: 0x1800ae428)
  • WaitForSingleObjectEx (Address: 0x1800ae3f0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800ae4a0)
  • InitOnceComplete (Address: 0x1800ae490)
  • InitOnceExecuteOnce (Address: 0x1800ae498)
  • Sleep (Address: 0x1800ae488)
  • WaitOnAddress (Address: 0x1800ae4b0)
  • WakeByAddressAll (Address: 0x1800ae4a8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800ae4c8)
  • GetTickCount (Address: 0x1800ae4d0)
  • GetTickCount64 (Address: 0x1800ae4c0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800ae518)
  • CloseThreadpoolWait (Address: 0x1800ae4f8)
  • CloseThreadpoolWork (Address: 0x1800ae538)
  • CreateThreadpoolTimer (Address: 0x1800ae528)
  • CreateThreadpoolWait (Address: 0x1800ae500)
  • CreateThreadpoolWork (Address: 0x1800ae508)
  • FreeLibraryWhenCallbackReturns (Address: 0x1800ae510)
  • SetThreadpoolTimer (Address: 0x1800ae520)
  • SetThreadpoolWait (Address: 0x1800ae4e8)
  • SubmitThreadpoolWork (Address: 0x1800ae530)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800ae4f0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1800ae4e0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800ae550)
  • EncodePointer (Address: 0x1800ae548)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800ae600)
  • __CxxFrameHandler3 (Address: 0x1800ae608)
  • __CxxFrameHandler4 (Address: 0x1800ae688)
  • __std_terminate (Address: 0x1800ae680)
  • _CxxThrowException (Address: 0x1800ae610)
  • _o___std_exception_copy (Address: 0x1800ae648)
  • _o___std_exception_destroy (Address: 0x1800ae640)
  • _o___std_type_info_destroy_list (Address: 0x1800ae638)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800ae618)
  • _o___stdio_common_vswprintf (Address: 0x1800ae678)
  • _o___stdio_common_vswscanf (Address: 0x1800ae670)
  • _o__callnewh (Address: 0x1800ae668)
  • _o__cexit (Address: 0x1800ae660)
  • _o__configure_narrow_argv (Address: 0x1800ae628)
  • _o__crt_atexit (Address: 0x1800ae620)
  • _o__errno (Address: 0x1800ae658)
  • _o__execute_onexit_table (Address: 0x1800ae650)
  • _o__get_errno (Address: 0x1800ae560)
  • _o__initialize_narrow_environment (Address: 0x1800ae568)
  • _o__initialize_onexit_table (Address: 0x1800ae570)
  • _o__invalid_parameter_noinfo (Address: 0x1800ae578)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800ae580)
  • _o__mkgmtime64 (Address: 0x1800ae588)
  • _o__purecall (Address: 0x1800ae590)
  • _o__register_onexit_function (Address: 0x1800ae598)
  • _o__seh_filter_dll (Address: 0x1800ae5a0)
  • _o__set_errno (Address: 0x1800ae5a8)
  • _o__wcsicmp (Address: 0x1800ae5b0)
  • _o__wtof (Address: 0x1800ae5c0)
  • _o_free (Address: 0x1800ae5c8)
  • _o_iswspace (Address: 0x1800ae5d0)
  • _o_malloc (Address: 0x1800ae5d8)
  • _o_realloc (Address: 0x1800ae5e0)
  • _o_terminate (Address: 0x1800ae5e8)
  • _o_toupper (Address: 0x1800ae5f0)
  • _o_wcstok_s (Address: 0x1800ae5f8)
  • memcmp (Address: 0x1800ae690)
  • memcpy (Address: 0x1800ae698)
  • memmove (Address: 0x1800ae5b8)
  • wcschr (Address: 0x1800ae630)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800ae6a8)
  • _initterm_e (Address: 0x1800ae6b0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800ae6d8)
  • wcscmp (Address: 0x1800ae6d0)
  • wcscspn (Address: 0x1800ae6c0)
  • wcsncmp (Address: 0x1800ae6c8)
api-ms-win-crt-time-l1-1-0.dll
  • _time64 (Address: 0x1800ae6e8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1800ae718)
  • EventProviderEnabled (Address: 0x1800ae720)
  • EventRegister (Address: 0x1800ae710)
  • EventSetInformation (Address: 0x1800ae700)
  • EventUnregister (Address: 0x1800ae708)
  • EventWriteTransfer (Address: 0x1800ae6f8)
api-ms-win-security-base-l1-1-0.dll
  • CopySid (Address: 0x1800ae730)
  • DuplicateTokenEx (Address: 0x1800ae738)
  • EqualSid (Address: 0x1800ae740)
  • GetLengthSid (Address: 0x1800ae748)
  • GetTokenInformation (Address: 0x1800ae750)
api-ms-win-security-base-l1-2-2.dll
  • DeriveCapabilitySidsFromName (Address: 0x1800ae760)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x1800ae770)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x1800ae780)
api-ms-win-shcore-stream-l1-1-0.dll
  • IStream_Read (Address: 0x1800ae7a0)
  • IStream_Reset (Address: 0x1800ae7a8)
  • IStream_Write (Address: 0x1800ae798)
  • SHCreateMemStream (Address: 0x1800ae790)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x1800ae7c0)
  • SHTaskPoolQueueTask (Address: 0x1800ae7b8)
api-ms-win-shcore-thread-l1-1-0.dll
  • SHGetThreadRef (Address: 0x1800ae7d0)
combase.dll
  • (Address: 0x1800ae7e0)
  • (Address: 0x1800ae7e8)
  • (Address: 0x1800ae800)
  • (Address: 0x1800ae810)
  • (Address: 0x1800ae818)
  • (Address: 0x1800ae828)
  • (Address: 0x1800ae830)
  • (Address: 0x1800ae840)
  • (Address: 0x1800ae848)
  • (Address: 0x1800ae850)
  • (Address: 0x1800ae860)
  • (Address: 0x1800ae868)
  • (Address: 0x1800ae890)
  • (Address: 0x1800ae898)
  • (Address: 0x1800ae8a0)
  • (Address: 0x1800ae8a8)
  • (Address: 0x1800ae8b0)
  • (Address: 0x1800ae8c8)
  • (Address: 0x1800ae8d0)
  • (Address: 0x1800ae8d8)
  • (Address: 0x1800ae8e8)
  • (Address: 0x1800ae8f0)
  • (Address: 0x1800ae908)
  • CStdStubBuffer_AddRef (Address: 0x1800ae900)
  • CStdStubBuffer_Connect (Address: 0x1800ae878)
  • CStdStubBuffer_CountRefs (Address: 0x1800ae858)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800ae8c0)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1800ae820)
  • CStdStubBuffer_Disconnect (Address: 0x1800ae808)
  • CStdStubBuffer_Invoke (Address: 0x1800ae888)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1800ae7f8)
  • CStdStubBuffer_QueryInterface (Address: 0x1800ae838)
  • CStdStubBuffer2_Connect (Address: 0x1800ae7f0)
  • CStdStubBuffer2_CountRefs (Address: 0x1800ae8b8)
  • CStdStubBuffer2_Disconnect (Address: 0x1800ae8e0)
  • CStdStubBuffer2_QueryInterface (Address: 0x1800ae8f8)
  • NdrCStdStubBuffer_Release (Address: 0x1800ae880)
  • NdrCStdStubBuffer2_Release (Address: 0x1800ae870)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800ae918)
ntdll.dll
  • NtOpenProcessTokenEx (Address: 0x1800ae998)
  • NtQueryInformationToken (Address: 0x1800ae968)
  • RtlAcquireSRWLockExclusive (Address: 0x1800ae990)
  • RtlAcquireSRWLockShared (Address: 0x1800ae948)
  • RtlAllocateHeap (Address: 0x1800ae958)
  • RtlCaptureContext (Address: 0x1800ae9c0)
  • RtlCompareUnicodeString (Address: 0x1800ae980)
  • RtlConvertSidToUnicodeString (Address: 0x1800ae930)
  • RtlFreeHeap (Address: 0x1800ae970)
  • RtlFreeUnicodeString (Address: 0x1800ae928)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800ae9a8)
  • RtlInitializeGenericTableAvl (Address: 0x1800ae938)
  • RtlInitUnicodeString (Address: 0x1800ae950)
  • RtlInsertElementGenericTableAvl (Address: 0x1800ae940)
  • RtlLookupElementGenericTableAvl (Address: 0x1800ae9c8)
  • RtlLookupFunctionEntry (Address: 0x1800ae9b8)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1800ae978)
  • RtlQueryPackageClaims (Address: 0x1800ae988)
  • RtlReleaseSRWLockExclusive (Address: 0x1800ae9a0)
  • RtlReleaseSRWLockShared (Address: 0x1800ae960)
  • RtlVirtualUnwind (Address: 0x1800ae9b0)
OLEAUT32.dll
  • SysFreeString (Address: 0x1800ae0b0)
  • SysStringLen (Address: 0x1800ae0b8)
RPCRT4.dll
  • I_RpcBindingInqLocalClientPID (Address: 0x1800ae100)
  • IUnknown_AddRef_Proxy (Address: 0x1800ae0c8)
  • IUnknown_QueryInterface_Proxy (Address: 0x1800ae0f8)
  • IUnknown_Release_Proxy (Address: 0x1800ae0e8)
  • NdrDllCanUnloadNow (Address: 0x1800ae110)
  • NdrDllGetClassObject (Address: 0x1800ae0d8)
  • NdrOleAllocate (Address: 0x1800ae0f0)
  • NdrOleFree (Address: 0x1800ae0e0)
  • NdrStubCall3 (Address: 0x1800ae108)
  • NdrStubForwardingFunction (Address: 0x1800ae0d0)
twinapi.appcore.dll
  • (Address: 0x1800ae9d8)
  • (Address: 0x1800ae9e0)
  • (Address: 0x1800ae9e8)