Windows.Data.Activities.dll

Description: Activities DataModel

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: ecc756d095bc7dc8eb7f9ecf3c05feda

File Size: 523.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x13e0)
DllGetActivationFactory (Ordinal: 2, Address: 0x305c0)
DllGetClassObject (Ordinal: 3, Address: 0x30600)
GetProxyDllInfo (Ordinal: 4, Address: 0x2ff00)
GetSetting (Ordinal: 5, Address: 0x30680)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1800631f8)
CoCreateInstance (Address: 0x180063228)
CoDecrementMTAUsage (Address: 0x180063238)
CoGetCallContext (Address: 0x180063200)
CoGetInterfaceAndReleaseStream (Address: 0x180063230)
CoGetMalloc (Address: 0x180063220)
CoIncrementMTAUsage (Address: 0x180063258)
CoInitializeEx (Address: 0x180063248)
CoMarshalInterface (Address: 0x180063270)
CoReleaseMarshalData (Address: 0x180063210)
CoTaskMemAlloc (Address: 0x180063208)
CoTaskMemFree (Address: 0x180063268)
CoTaskMemRealloc (Address: 0x180063260)
CoUninitialize (Address: 0x180063240)
CoWaitForMultipleHandles (Address: 0x180063250)
CreateStreamOnHGlobal (Address: 0x180063218)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180063280)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

ObjectStublessClient3 (Address: 0x180063298)
ObjectStublessClient4 (Address: 0x1800632b0)
ObjectStublessClient5 (Address: 0x1800632a0)
ObjectStublessClient6 (Address: 0x1800632b8)
ObjectStublessClient7 (Address: 0x180063290)
ObjectStublessClient8 (Address: 0x1800632a8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800632d8)
IsDebuggerPresent (Address: 0x1800632d0)
OutputDebugStringW (Address: 0x1800632c8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800632e8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800632f8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180063310)
RaiseException (Address: 0x180063308)
SetLastError (Address: 0x180063320)
SetUnhandledExceptionFilter (Address: 0x180063328)
UnhandledExceptionFilter (Address: 0x180063318)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180063338)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180063358)
HeapAlloc (Address: 0x180063348)
HeapFree (Address: 0x180063350)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180063370)
LocalFree (Address: 0x180063368)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800633b8)
FindResourceExW (Address: 0x180063388)
FreeLibrary (Address: 0x180063390)
GetModuleFileNameA (Address: 0x180063398)
GetModuleHandleExW (Address: 0x1800633a8)
GetModuleHandleW (Address: 0x1800633c0)
GetProcAddress (Address: 0x1800633b0)
LoadResource (Address: 0x1800633a0)
LockResource (Address: 0x180063380)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800633d0)
GetLocaleInfoW (Address: 0x1800633d8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180063400)
GetCurrentProcess (Address: 0x180063408)
GetCurrentProcessId (Address: 0x1800633e8)
GetCurrentThread (Address: 0x1800633f8)
GetCurrentThreadId (Address: 0x180063420)
OpenProcessToken (Address: 0x1800633f0)
OpenThreadToken (Address: 0x180063410)
TerminateProcess (Address: 0x180063418)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180063430)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180063440)

api-ms-win-core-psapi-l1-1-0.dll

K32GetProcessImageFileNameW (Address: 0x180063450)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180063488)
RegCreateKeyExW (Address: 0x180063470)
RegEnumValueW (Address: 0x180063460)
RegGetValueW (Address: 0x180063478)
RegOpenKeyExW (Address: 0x180063480)
RegSetValueExW (Address: 0x180063468)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x180063498)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800634b8)
RtlLookupFunctionEntry (Address: 0x1800634a8)
RtlVirtualUnwind (Address: 0x1800634b0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800634d0)
GetStringTypeW (Address: 0x1800634e0)
MultiByteToWideChar (Address: 0x1800634c8)
WideCharToMultiByte (Address: 0x1800634d8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180063560)
AcquireSRWLockShared (Address: 0x180063588)
CreateEventExW (Address: 0x180063550)
CreateEventW (Address: 0x1800634f8)
CreateMutexExW (Address: 0x180063530)
CreateSemaphoreExW (Address: 0x180063578)
DeleteCriticalSection (Address: 0x180063518)
EnterCriticalSection (Address: 0x180063568)
InitializeCriticalSectionEx (Address: 0x180063548)
InitializeSRWLock (Address: 0x180063580)
LeaveCriticalSection (Address: 0x1800634f0)
OpenSemaphoreW (Address: 0x180063528)
ReleaseMutex (Address: 0x180063500)
ReleaseSemaphore (Address: 0x180063538)
ReleaseSRWLockExclusive (Address: 0x180063570)
ReleaseSRWLockShared (Address: 0x180063540)
ResetEvent (Address: 0x180063520)
SetEvent (Address: 0x180063558)
WaitForSingleObject (Address: 0x180063510)
WaitForSingleObjectEx (Address: 0x180063508)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800635b0)
InitOnceComplete (Address: 0x180063598)
InitOnceExecuteOnce (Address: 0x1800635a8)
Sleep (Address: 0x1800635a0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800635c8)
GetTickCount (Address: 0x1800635c0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800635f0)
CreateThreadpoolTimer (Address: 0x1800635e8)
SetThreadpoolTimer (Address: 0x1800635d8)
WaitForThreadpoolTimerCallbacks (Address: 0x1800635e0)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x180063600)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180063618)
EncodePointer (Address: 0x180063610)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180063648)
RoOriginateError (Address: 0x180063638)
RoOriginateErrorW (Address: 0x180063628)
RoTransformError (Address: 0x180063630)
SetRestrictedErrorInfo (Address: 0x180063640)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180063668)
RoGetMatchingRestrictedErrorInfo (Address: 0x180063658)
RoReportFailedDelegate (Address: 0x180063660)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180063678)
RoInitialize (Address: 0x180063688)
RoUninitialize (Address: 0x180063680)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800636c8)
WindowsCreateStringReference (Address: 0x1800636b8)
WindowsDeleteString (Address: 0x1800636b0)
WindowsDuplicateString (Address: 0x1800636c0)
WindowsGetStringRawBuffer (Address: 0x180063698)
WindowsIsStringEmpty (Address: 0x1800636a0)
WindowsStringHasEmbeddedNull (Address: 0x1800636a8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800636f8)
EventRegister (Address: 0x1800636e8)
EventSetInformation (Address: 0x1800636d8)
EventUnregister (Address: 0x1800636f0)
EventWriteTransfer (Address: 0x1800636e0)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180063708)
DuplicateTokenEx (Address: 0x180063710)
GetLengthSid (Address: 0x180063720)
GetTokenInformation (Address: 0x180063718)
ImpersonateLoggedOnUser (Address: 0x180063730)
RevertToSelf (Address: 0x180063728)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180063740)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180063750)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180063758)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x180063768)

api-ms-win-shcore-registry-l1-1-0.dll

SHSetValueW (Address: 0x180063778)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x180063790)
SHTaskPoolQueueTask (Address: 0x180063788)

cdp.dll

CDPAccountFromWebAccount (Address: 0x1800637c8)
CDPCreateActivityStoreInfoInternal (Address: 0x1800637c0)
CDPGetActivityStore (Address: 0x1800637b0)
CDPGetActivityStoreForAccount (Address: 0x1800637d0)
CDPGetActivityStoreForStoreInfo (Address: 0x1800637b8)
CDPGetUserActivitySettings (Address: 0x1800637d8)
CDPInitialize (Address: 0x1800637a0)
CDPShutdown (Address: 0x1800637a8)

msvcrt.dll

___lc_codepage_func (Address: 0x1800638a8)
___lc_collate_cp_func (Address: 0x1800639b0)
___lc_handle_func (Address: 0x1800639f0)
___mb_cur_max_func (Address: 0x180063890)
__C_specific_handler (Address: 0x180063828)
__crtCompareStringA (Address: 0x180063918)
__crtCompareStringW (Address: 0x180063910)
__crtLCMapStringA (Address: 0x180063928)
__crtLCMapStringW (Address: 0x180063920)
__CxxFrameHandler3 (Address: 0x180063a30)
__dllonexit (Address: 0x1800637e8)
__mb_cur_max (Address: 0x180063848)
__pctype_func (Address: 0x180063938)
_amsg_exit (Address: 0x1800639f8)
_callnewh (Address: 0x1800638f8)
_CxxThrowException (Address: 0x180063878)
_errno (Address: 0x180063a10)
_Getdays (Address: 0x180063958)
_Getmonths (Address: 0x180063960)
_Gettnames (Address: 0x180063988)
_initterm (Address: 0x180063818)
_ismbblead (Address: 0x1800638b0)
_lock (Address: 0x180063808)
_onexit (Address: 0x180063820)
_purecall (Address: 0x180063830)
_Strftime (Address: 0x180063990)
_unlock (Address: 0x1800637f0)
_vsnprintf_s (Address: 0x1800639d8)
_vsnwprintf (Address: 0x180063a18)
_W_Getdays (Address: 0x180063968)
_W_Getmonths (Address: 0x180063970)
_W_Gettnames (Address: 0x180063978)
_wcsdup (Address: 0x180063908)
_Wcsftime (Address: 0x180063980)
_wcsicmp (Address: 0x180063868)
_wsetlocale (Address: 0x180063930)
_XcptFilter (Address: 0x1800639e8)
??_V@YAXPEAX@Z (Address: 0x180063a20)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x1800638e0)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x1800638d0)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180063840)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180063860)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180063a08)
??0exception@@QEAA@XZ (Address: 0x180063a28)
??1bad_cast@@UEAA@XZ (Address: 0x1800638e8)
??1exception@@UEAA@XZ (Address: 0x1800639d0)
??1type_info@@UEAA@XZ (Address: 0x180063a00)
??3@YAXPEAX@Z (Address: 0x180063800)
?terminate@@YAXXZ (Address: 0x180063810)
?what@exception@@UEBAPEBDXZ (Address: 0x180063838)
abort (Address: 0x180063900)
bsearch_s (Address: 0x180063898)
calloc (Address: 0x180063948)
free (Address: 0x1800639e0)
isalnum (Address: 0x1800639c0)
isdigit (Address: 0x1800639c8)
islower (Address: 0x180063950)
isspace (Address: 0x180063998)
isupper (Address: 0x180063940)
ldexp (Address: 0x1800638b8)
localeconv (Address: 0x1800638d8)
malloc (Address: 0x1800638a0)
memchr (Address: 0x1800639a8)
memcmp (Address: 0x1800639b8)
memcpy (Address: 0x180063880)
memcpy_s (Address: 0x1800637f8)
memmove (Address: 0x180063888)
memmove_s (Address: 0x180063850)
memset (Address: 0x1800638f0)
realloc (Address: 0x180063858)
setlocale (Address: 0x180063870)
sprintf_s (Address: 0x1800638c0)
strcspn (Address: 0x1800638c8)
tolower (Address: 0x1800639a0)

ntdll.dll

RtlDeriveCapabilitySidsFromName (Address: 0x180063a40)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1800631a0)
CStdStubBuffer_Connect (Address: 0x180063168)
CStdStubBuffer_CountRefs (Address: 0x1800631b0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x180063190)
CStdStubBuffer_DebugServerRelease (Address: 0x1800631c8)
CStdStubBuffer_Disconnect (Address: 0x1800631d0)
CStdStubBuffer_Invoke (Address: 0x1800631e8)
CStdStubBuffer_IsIIDSupported (Address: 0x1800631e0)
CStdStubBuffer_QueryInterface (Address: 0x1800631b8)
IUnknown_AddRef_Proxy (Address: 0x180063170)
IUnknown_QueryInterface_Proxy (Address: 0x1800631d8)
IUnknown_Release_Proxy (Address: 0x1800631a8)
NdrCStdStubBuffer_Release (Address: 0x180063178)
NdrDllCanUnloadNow (Address: 0x180063180)
NdrDllGetClassObject (Address: 0x180063188)
NdrOleAllocate (Address: 0x1800631c0)
NdrOleFree (Address: 0x180063198)