Windows.Devices.Picker.dll

Description: Device Picker

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: e76d827677042e82fb84319075741321

File Size: 473.0 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x54c0)
DllGetActivationFactory (Ordinal: 2, Address: 0x5530)
DllGetClassObject (Ordinal: 3, Address: 0x5710)
ServiceMain (Ordinal: 4, Address: 0x5110)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18005bef8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18005bf18)
IsDebuggerPresent (Address: 0x18005bf10)
OutputDebugStringW (Address: 0x18005bf08)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18005bf28)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18005bf38)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18005bf68)
RaiseException (Address: 0x18005bf60)
SetLastError (Address: 0x18005bf50)
SetUnhandledExceptionFilter (Address: 0x18005bf48)
UnhandledExceptionFilter (Address: 0x18005bf58)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x18005bf80)
RecordFeatureUsage (Address: 0x18005bf78)
SubscribeFeatureStateChangeNotification (Address: 0x18005bf90)
UnsubscribeFeatureStateChangeNotification (Address: 0x18005bf88)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18005bfa0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18005bfb0)
HeapAlloc (Address: 0x18005bfc0)
HeapFree (Address: 0x18005bfb8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18005bfd0)
LocalFree (Address: 0x18005bfd8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18005c020)
FindResourceExW (Address: 0x18005c018)
GetModuleFileNameA (Address: 0x18005c000)
GetModuleHandleExW (Address: 0x18005c008)
GetModuleHandleW (Address: 0x18005bff0)
GetProcAddress (Address: 0x18005bff8)
LoadResource (Address: 0x18005c010)
LockResource (Address: 0x18005bfe8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18005c030)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18005c050)
GetCurrentProcess (Address: 0x18005c070)
GetCurrentProcessId (Address: 0x18005c068)
GetCurrentThreadId (Address: 0x18005c040)
GetProcessId (Address: 0x18005c048)
OpenProcessToken (Address: 0x18005c060)
TerminateProcess (Address: 0x18005c058)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18005c080)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18005c090)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18005c0c0)
RegCreateKeyExW (Address: 0x18005c0a8)
RegEnumKeyExW (Address: 0x18005c0d8)
RegGetValueW (Address: 0x18005c0b0)
RegNotifyChangeKeyValue (Address: 0x18005c0d0)
RegOpenKeyExW (Address: 0x18005c0c8)
RegQueryInfoKeyW (Address: 0x18005c0b8)
RegSetValueExW (Address: 0x18005c0a0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18005c0e8)
RtlLookupFunctionEntry (Address: 0x18005c0f0)
RtlVirtualUnwind (Address: 0x18005c0f8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18005c108)

api-ms-win-core-string-l2-1-0.dll

CharUpperBuffW (Address: 0x18005c118)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18005c1c0)
AcquireSRWLockShared (Address: 0x18005c1b0)
CreateEventExW (Address: 0x18005c178)
CreateEventW (Address: 0x18005c1a8)
CreateMutexExW (Address: 0x18005c1b8)
CreateSemaphoreExW (Address: 0x18005c198)
DeleteCriticalSection (Address: 0x18005c188)
EnterCriticalSection (Address: 0x18005c190)
InitializeCriticalSectionEx (Address: 0x18005c180)
InitializeSRWLock (Address: 0x18005c1c8)
LeaveCriticalSection (Address: 0x18005c1a0)
OpenSemaphoreW (Address: 0x18005c128)
ReleaseMutex (Address: 0x18005c138)
ReleaseSemaphore (Address: 0x18005c140)
ReleaseSRWLockExclusive (Address: 0x18005c168)
ReleaseSRWLockShared (Address: 0x18005c158)
ResetEvent (Address: 0x18005c150)
SetEvent (Address: 0x18005c160)
WaitForMultipleObjectsEx (Address: 0x18005c148)
WaitForSingleObject (Address: 0x18005c130)
WaitForSingleObjectEx (Address: 0x18005c170)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18005c1d8)
InitOnceComplete (Address: 0x18005c1e0)
InitOnceExecuteOnce (Address: 0x18005c1f8)
Sleep (Address: 0x18005c200)
SleepConditionVariableSRW (Address: 0x18005c1e8)
WakeAllConditionVariable (Address: 0x18005c1f0)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x18005c210)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18005c228)
GetTickCount (Address: 0x18005c230)
GetTickCount64 (Address: 0x18005c220)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18005c250)
CloseThreadpoolWait (Address: 0x18005c258)
CreateThreadpoolTimer (Address: 0x18005c278)
CreateThreadpoolWait (Address: 0x18005c270)
SetThreadpoolTimer (Address: 0x18005c240)
SetThreadpoolWait (Address: 0x18005c260)
WaitForThreadpoolTimerCallbacks (Address: 0x18005c248)
WaitForThreadpoolWaitCallbacks (Address: 0x18005c268)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18005c288)
EncodePointer (Address: 0x18005c290)

api-ms-win-devices-query-l1-1-0.dll

DevFindProperty (Address: 0x18005c2a8)
DevFreeObjectProperties (Address: 0x18005c2a0)

api-ms-win-devices-query-l1-1-1.dll

DevGetObjectPropertiesEx (Address: 0x18005c2b8)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18005c2e0)
GetTraceEnableLevel (Address: 0x18005c2e8)
GetTraceLoggerHandle (Address: 0x18005c2c8)
RegisterTraceGuidsW (Address: 0x18005c2d8)
TraceMessage (Address: 0x18005c2f0)
UnregisterTraceGuids (Address: 0x18005c2d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18005c300)
EventRegister (Address: 0x18005c310)
EventSetInformation (Address: 0x18005c318)
EventUnregister (Address: 0x18005c308)
EventWriteTransfer (Address: 0x18005c320)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x18005c330)
GetLengthSid (Address: 0x18005c338)
GetTokenInformation (Address: 0x18005c348)
MakeAbsoluteSD (Address: 0x18005c340)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18005c360)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18005c358)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18005c378)
SetServiceStatus (Address: 0x18005c370)

api-ms-win-shcore-registry-l1-1-0.dll

SHEnumValueW (Address: 0x18005c388)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18005c398)
SHTaskPoolQueueTask (Address: 0x18005c3a0)

combase.dll

(Address: 0x18005c3b0)
(Address: 0x18005c3b8)
(Address: 0x18005c3c0)
(Address: 0x18005c3c8)
(Address: 0x18005c3d8)
(Address: 0x18005c3e0)
(Address: 0x18005c3f0)
(Address: 0x18005c3f8)
(Address: 0x18005c400)
(Address: 0x18005c408)
(Address: 0x18005c428)
(Address: 0x18005c430)
(Address: 0x18005c438)
(Address: 0x18005c440)
(Address: 0x18005c448)
(Address: 0x18005c450)
(Address: 0x18005c458)
(Address: 0x18005c460)
(Address: 0x18005c468)
(Address: 0x18005c470)
(Address: 0x18005c488)
(Address: 0x18005c4a0)
(Address: 0x18005c4a8)
(Address: 0x18005c4b0)
(Address: 0x18005c4b8)
(Address: 0x18005c4c8)
(Address: 0x18005c4d8)
(Address: 0x18005c4e8)
(Address: 0x18005c4f8)
CStdStubBuffer_AddRef (Address: 0x18005c3d0)
CStdStubBuffer_Connect (Address: 0x18005c4c0)
CStdStubBuffer_CountRefs (Address: 0x18005c418)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18005c3e8)
CStdStubBuffer_DebugServerRelease (Address: 0x18005c4f0)
CStdStubBuffer_Disconnect (Address: 0x18005c4e0)
CStdStubBuffer_Invoke (Address: 0x18005c410)
CStdStubBuffer_IsIIDSupported (Address: 0x18005c4d0)
CStdStubBuffer_QueryInterface (Address: 0x18005c500)
CStdStubBuffer2_Connect (Address: 0x18005c420)
CStdStubBuffer2_CountRefs (Address: 0x18005c508)
CStdStubBuffer2_Disconnect (Address: 0x18005c498)
CStdStubBuffer2_QueryInterface (Address: 0x18005c490)
NdrCStdStubBuffer_Release (Address: 0x18005c478)
NdrCStdStubBuffer2_Release (Address: 0x18005c480)

msvcrt.dll

__C_specific_handler (Address: 0x18005c570)
__CxxFrameHandler3 (Address: 0x18005c620)
__dllonexit (Address: 0x18005c548)
_amsg_exit (Address: 0x18005c588)
_callnewh (Address: 0x18005c5b8)
_CxxThrowException (Address: 0x18005c5a8)
_get_errno (Address: 0x18005c518)
_initterm (Address: 0x18005c578)
_lock (Address: 0x18005c558)
_onexit (Address: 0x18005c540)
_purecall (Address: 0x18005c5c8)
_set_errno (Address: 0x18005c520)
_unlock (Address: 0x18005c550)
_vsnprintf_s (Address: 0x18005c5d8)
_vsnwprintf (Address: 0x18005c5e0)
_XcptFilter (Address: 0x18005c590)
??_V@YAXPEAX@Z (Address: 0x18005c5f8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18005c5b0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18005c600)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18005c5e8)
??0exception@@QEAA@XZ (Address: 0x18005c5f0)
??1exception@@UEAA@XZ (Address: 0x18005c610)
??1type_info@@UEAA@XZ (Address: 0x18005c560)
??3@YAXPEAX@Z (Address: 0x18005c608)
?terminate@@YAXXZ (Address: 0x18005c568)
?what@exception@@UEBAPEBDXZ (Address: 0x18005c5d0)
free (Address: 0x18005c580)
malloc (Address: 0x18005c5c0)
memcmp (Address: 0x18005c538)
memcpy (Address: 0x18005c5a0)
memcpy_s (Address: 0x18005c618)
memmove (Address: 0x18005c598)
memmove_s (Address: 0x18005c528)
memset (Address: 0x18005c628)
realloc (Address: 0x18005c530)

ntdll.dll

NtQueryWnfStateData (Address: 0x18005c640)
RtlPublishWnfStateData (Address: 0x18005c648)
RtlSubscribeWnfStateChangeNotification (Address: 0x18005c638)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18005c650)

RPCRT4.dll

I_RpcBindingInqLocalClientPID (Address: 0x18005bea8)
IUnknown_AddRef_Proxy (Address: 0x18005bec0)
IUnknown_QueryInterface_Proxy (Address: 0x18005bec8)
IUnknown_Release_Proxy (Address: 0x18005be98)
NdrDllCanUnloadNow (Address: 0x18005beb0)
NdrDllGetClassObject (Address: 0x18005bea0)
NdrOleAllocate (Address: 0x18005bed8)
NdrOleFree (Address: 0x18005beb8)
NdrStubCall3 (Address: 0x18005be90)
NdrStubForwardingFunction (Address: 0x18005bed0)

SHCORE.dll

(Address: 0x18005bee8)