Windows.Devices.Enumeration.dll

Description: Windows.Devices.Enumeration

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 76ebc301027855bfe5c8e4a4f1da4376

File Size: 527.8 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

AqsFreeDevQueryFilter (Ordinal: 1, Address: 0x1ca30)
AqsToDevQueryFilter (Ordinal: 2, Address: 0x3cc0)
DllCanUnloadNow (Ordinal: 3, Address: 0x2f10)
DllGetActivationFactory (Ordinal: 4, Address: 0x2f80)
DllGetClassObject (Ordinal: 5, Address: 0x1ab0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18005d3f8)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18005d438)
CoCreateInstance (Address: 0x18005d430)
CoDecrementMTAUsage (Address: 0x18005d460)
CoGetApartmentType (Address: 0x18005d428)
CoGetCallContext (Address: 0x18005d440)
CoIncrementMTAUsage (Address: 0x18005d458)
CoTaskMemAlloc (Address: 0x18005d410)
CoTaskMemFree (Address: 0x18005d418)
IIDFromString (Address: 0x18005d408)
PropVariantClear (Address: 0x18005d420)
StringFromCLSID (Address: 0x18005d450)
StringFromGUID2 (Address: 0x18005d448)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18005d470)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18005d490)
IsDebuggerPresent (Address: 0x18005d488)
OutputDebugStringW (Address: 0x18005d480)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18005d4a0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18005d4b0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18005d4d8)
RaiseException (Address: 0x18005d4e0)
SetLastError (Address: 0x18005d4c0)
SetUnhandledExceptionFilter (Address: 0x18005d4c8)
UnhandledExceptionFilter (Address: 0x18005d4d0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18005d4f0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18005d510)
HeapAlloc (Address: 0x18005d508)
HeapFree (Address: 0x18005d500)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18005d520)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18005d538)
FindResourceExW (Address: 0x18005d570)
FreeLibrary (Address: 0x18005d578)
GetModuleFileNameA (Address: 0x18005d558)
GetModuleHandleExW (Address: 0x18005d560)
GetModuleHandleW (Address: 0x18005d580)
GetProcAddress (Address: 0x18005d568)
LoadLibraryExW (Address: 0x18005d588)
LoadResource (Address: 0x18005d550)
LoadStringW (Address: 0x18005d530)
LockResource (Address: 0x18005d548)
SizeofResource (Address: 0x18005d540)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18005d598)
GetThreadPreferredUILanguages (Address: 0x18005d5a0)
SetThreadPreferredUILanguages (Address: 0x18005d5a8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18005d5b8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18005d5d8)
GetCurrentProcessId (Address: 0x18005d5e8)
GetCurrentThreadId (Address: 0x18005d5e0)
GetProcessId (Address: 0x18005d5c8)
OpenProcessToken (Address: 0x18005d5f0)
TerminateProcess (Address: 0x18005d5d0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18005d600)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18005d610)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18005d628)
RegGetValueW (Address: 0x18005d630)
RegOpenKeyExW (Address: 0x18005d620)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18005d650)
RtlLookupFunctionEntry (Address: 0x18005d648)
RtlVirtualUnwind (Address: 0x18005d640)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18005d660)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18005d6b0)
AcquireSRWLockShared (Address: 0x18005d690)
CreateMutexExW (Address: 0x18005d698)
CreateSemaphoreExW (Address: 0x18005d6c0)
DeleteCriticalSection (Address: 0x18005d670)
EnterCriticalSection (Address: 0x18005d6c8)
InitializeCriticalSection (Address: 0x18005d6f0)
InitializeCriticalSectionEx (Address: 0x18005d6d0)
InitializeSRWLock (Address: 0x18005d680)
LeaveCriticalSection (Address: 0x18005d6e8)
OpenSemaphoreW (Address: 0x18005d6b8)
ReleaseMutex (Address: 0x18005d6a0)
ReleaseSemaphore (Address: 0x18005d6e0)
ReleaseSRWLockExclusive (Address: 0x18005d678)
ReleaseSRWLockShared (Address: 0x18005d6a8)
WaitForSingleObject (Address: 0x18005d688)
WaitForSingleObjectEx (Address: 0x18005d6d8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18005d720)
InitOnceInitialize (Address: 0x18005d710)
Sleep (Address: 0x18005d700)
SleepConditionVariableSRW (Address: 0x18005d708)
WakeAllConditionVariable (Address: 0x18005d718)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x18005d740)
GetSystemTimeAsFileTime (Address: 0x18005d730)
GetTickCount (Address: 0x18005d738)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18005d758)
CreateThreadpoolTimer (Address: 0x18005d750)
FreeLibraryWhenCallbackReturns (Address: 0x18005d778)
SetThreadpoolTimer (Address: 0x18005d768)
TrySubmitThreadpoolCallback (Address: 0x18005d770)
WaitForThreadpoolTimerCallbacks (Address: 0x18005d760)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18005d788)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18005d798)
EncodePointer (Address: 0x18005d7a0)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18005d7d0)
RoOriginateError (Address: 0x18005d7b8)
RoOriginateErrorW (Address: 0x18005d7b0)
RoTransformError (Address: 0x18005d7c8)
SetRestrictedErrorInfo (Address: 0x18005d7c0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18005d7f0)
RoGetMatchingRestrictedErrorInfo (Address: 0x18005d7e0)
RoReportFailedDelegate (Address: 0x18005d7e8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18005d800)
RoGetActivationFactory (Address: 0x18005d808)
RoInitialize (Address: 0x18005d810)
RoUninitialize (Address: 0x18005d818)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18005d888)
HSTRING_UserFree64 (Address: 0x18005d898)
HSTRING_UserMarshal (Address: 0x18005d8a0)
HSTRING_UserMarshal64 (Address: 0x18005d880)
HSTRING_UserSize (Address: 0x18005d8a8)
HSTRING_UserSize64 (Address: 0x18005d848)
HSTRING_UserUnmarshal (Address: 0x18005d878)
HSTRING_UserUnmarshal64 (Address: 0x18005d870)
WindowsCompareStringOrdinal (Address: 0x18005d890)
WindowsCreateString (Address: 0x18005d858)
WindowsCreateStringReference (Address: 0x18005d838)
WindowsDeleteString (Address: 0x18005d860)
WindowsDuplicateString (Address: 0x18005d850)
WindowsGetStringRawBuffer (Address: 0x18005d868)
WindowsIsStringEmpty (Address: 0x18005d830)
WindowsStringHasEmbeddedNull (Address: 0x18005d840)
WindowsSubstringWithSpecifiedLength (Address: 0x18005d828)

api-ms-win-devices-query-l1-1-0.dll

DevCloseObjectQuery (Address: 0x18005d8d0)
DevCreateObjectQuery (Address: 0x18005d8c0)
DevCreateObjectQueryFromId (Address: 0x18005d8c8)
DevFindProperty (Address: 0x18005d8b8)
DevFreeObjectProperties (Address: 0x18005d8d8)
DevGetObjectProperties (Address: 0x18005d8e0)

api-ms-win-devices-query-l1-1-1.dll

DevCreateObjectQueryEx (Address: 0x18005d8f0)
DevCreateObjectQueryFromIdEx (Address: 0x18005d900)
DevGetObjectPropertiesEx (Address: 0x18005d8f8)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18005d918)
GetTraceEnableLevel (Address: 0x18005d920)
GetTraceLoggerHandle (Address: 0x18005d928)
RegisterTraceGuidsW (Address: 0x18005d930)
TraceMessage (Address: 0x18005d938)
UnregisterTraceGuids (Address: 0x18005d910)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x18005d968)
EventRegister (Address: 0x18005d960)
EventSetInformation (Address: 0x18005d948)
EventUnregister (Address: 0x18005d958)
EventWriteTransfer (Address: 0x18005d950)

api-ms-win-security-base-l1-1-0.dll

DuplicateToken (Address: 0x18005d980)
GetTokenInformation (Address: 0x18005d978)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOverStream (Address: 0x18005d990)

api-ms-win-shcore-thread-l1-1-0.dll

SHGetThreadRef (Address: 0x18005d9a0)

combase.dll

(Address: 0x18005d9c8)
(Address: 0x18005d9d8)
(Address: 0x18005d9e0)
(Address: 0x18005d9f0)
(Address: 0x18005d9f8)
(Address: 0x18005da00)
(Address: 0x18005da08)
(Address: 0x18005da10)
(Address: 0x18005da20)
(Address: 0x18005da28)
(Address: 0x18005da30)
(Address: 0x18005da38)
(Address: 0x18005da40)
(Address: 0x18005da48)
(Address: 0x18005da60)
(Address: 0x18005da70)
(Address: 0x18005da78)
(Address: 0x18005da80)
(Address: 0x18005daa8)
CStdStubBuffer_AddRef (Address: 0x18005da88)
CStdStubBuffer_Connect (Address: 0x18005d9b8)
CStdStubBuffer_CountRefs (Address: 0x18005d9e8)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18005daa0)
CStdStubBuffer_DebugServerRelease (Address: 0x18005da68)
CStdStubBuffer_Disconnect (Address: 0x18005d9c0)
CStdStubBuffer_Invoke (Address: 0x18005dab0)
CStdStubBuffer_IsIIDSupported (Address: 0x18005da58)
CStdStubBuffer_QueryInterface (Address: 0x18005d9d0)
CStdStubBuffer2_Connect (Address: 0x18005da50)
CStdStubBuffer2_CountRefs (Address: 0x18005d9b0)
CStdStubBuffer2_Disconnect (Address: 0x18005da98)
CStdStubBuffer2_QueryInterface (Address: 0x18005da90)
NdrCStdStubBuffer_Release (Address: 0x18005dab8)
NdrCStdStubBuffer2_Release (Address: 0x18005da18)

msvcrt.dll

__C_specific_handler (Address: 0x18005dba0)
__CxxFrameHandler3 (Address: 0x18005db00)
__dllonexit (Address: 0x18005db10)
_aligned_free (Address: 0x18005db50)
_aligned_malloc (Address: 0x18005db58)
_amsg_exit (Address: 0x18005db30)
_callnewh (Address: 0x18005db48)
_errno (Address: 0x18005db70)
_initterm (Address: 0x18005db28)
_lock (Address: 0x18005db20)
_onexit (Address: 0x18005db08)
_purecall (Address: 0x18005dbb0)
_unlock (Address: 0x18005db18)
_vsnwprintf (Address: 0x18005dac8)
_wcsicmp (Address: 0x18005db60)
_wtoi (Address: 0x18005db68)
_XcptFilter (Address: 0x18005db40)
cosf (Address: 0x18005dad8)
free (Address: 0x18005db88)
malloc (Address: 0x18005db90)
memcmp (Address: 0x18005dae0)
memcpy (Address: 0x18005dae8)
memcpy_s (Address: 0x18005dbb8)
memmove (Address: 0x18005daf0)
memmove_s (Address: 0x18005dba8)
memset (Address: 0x18005daf8)
realloc (Address: 0x18005db80)
sinf (Address: 0x18005dbc8)
swprintf_s (Address: 0x18005db98)
toupper (Address: 0x18005dbc0)
wcschr (Address: 0x18005db78)
wcscspn (Address: 0x18005db38)
wcsstr (Address: 0x18005dad0)

ntdll.dll

NtQueryWnfStateData (Address: 0x18005dbe8)
RtlGUIDFromString (Address: 0x18005dbd8)
RtlSubscribeWnfStateChangeNotification (Address: 0x18005dbe0)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18005dbf0)

OLEAUT32.dll

VariantTimeToSystemTime (Address: 0x18005d310)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x18005d3d8)
IUnknown_AddRef_Proxy (Address: 0x18005d3a0)
IUnknown_QueryInterface_Proxy (Address: 0x18005d3c8)
IUnknown_Release_Proxy (Address: 0x18005d3b8)
MesDecodeBufferHandleCreate (Address: 0x18005d338)
MesDecodeIncrementalHandleCreate (Address: 0x18005d330)
MesEncodeDynBufferHandleCreate (Address: 0x18005d328)
MesHandleFree (Address: 0x18005d320)
NdrClientCall3 (Address: 0x18005d360)
NdrDllCanUnloadNow (Address: 0x18005d390)
NdrDllGetClassObject (Address: 0x18005d388)
NdrMesTypeDecode3 (Address: 0x18005d358)
NdrMesTypeEncode3 (Address: 0x18005d348)
NdrOleAllocate (Address: 0x18005d3c0)
NdrOleFree (Address: 0x18005d3a8)
NdrStubCall3 (Address: 0x18005d3d0)
NdrStubForwardingFunction (Address: 0x18005d398)
RpcBindingFree (Address: 0x18005d3b0)
RpcBindingFromStringBindingW (Address: 0x18005d370)
RpcBindingSetOption (Address: 0x18005d368)
RpcExceptionFilter (Address: 0x18005d340)
RpcServerInqCallAttributesW (Address: 0x18005d3e8)
RpcSsDestroyClientContext (Address: 0x18005d380)
RpcStringBindingComposeW (Address: 0x18005d378)
RpcStringFreeW (Address: 0x18005d350)
UuidCreate (Address: 0x18005d3e0)