Windows.Internal.CapturePicker.dll

Description: Capture Picker Experience

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 22909cd001aa4fd10674296c88930706

File Size: 170.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x2ba0)
DllGetActivationFactory (Ordinal: 2, Address: 0x29c0)
DllGetClassObject (Ordinal: 3, Address: 0x2c20)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180021140)
CoCreateInstance (Address: 0x180021160)
CoGetInterfaceAndReleaseStream (Address: 0x180021158)
CoMarshalInterface (Address: 0x180021138)
CoReleaseMarshalData (Address: 0x180021128)
CoTaskMemAlloc (Address: 0x180021150)
CoTaskMemFree (Address: 0x180021120)
CoTaskMemRealloc (Address: 0x180021148)
CreateStreamOnHGlobal (Address: 0x180021130)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180021170)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180021188)
IsDebuggerPresent (Address: 0x180021180)
OutputDebugStringW (Address: 0x180021190)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800211b8)
RaiseException (Address: 0x1800211b0)
SetLastError (Address: 0x1800211a8)
SetUnhandledExceptionFilter (Address: 0x1800211a0)
UnhandledExceptionFilter (Address: 0x1800211c0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800211d0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800211f0)
HeapAlloc (Address: 0x1800211e8)
HeapFree (Address: 0x1800211e0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180021200)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180021210)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180021228)
FindResourceExW (Address: 0x180021230)
GetModuleFileNameA (Address: 0x180021240)
GetModuleHandleExW (Address: 0x180021248)
GetModuleHandleW (Address: 0x180021220)
GetProcAddress (Address: 0x180021250)
LoadResource (Address: 0x180021258)
LockResource (Address: 0x180021238)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180021268)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180021290)
GetCurrentProcessId (Address: 0x180021288)
GetCurrentThreadId (Address: 0x180021298)
OpenProcessToken (Address: 0x180021280)
TerminateProcess (Address: 0x180021278)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800212b0)
OpenProcess (Address: 0x1800212a8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800212c0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800212d0)
RegEnumKeyExW (Address: 0x1800212e0)
RegGetValueW (Address: 0x1800212f0)
RegOpenKeyExW (Address: 0x1800212d8)
RegQueryInfoKeyW (Address: 0x1800212e8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180021310)
RtlLookupFunctionEntry (Address: 0x180021308)
RtlVirtualUnwind (Address: 0x180021300)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180021320)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180021370)
AcquireSRWLockShared (Address: 0x180021350)
CreateMutexExW (Address: 0x180021358)
CreateSemaphoreExW (Address: 0x180021368)
DeleteCriticalSection (Address: 0x1800213a8)
EnterCriticalSection (Address: 0x180021360)
InitializeCriticalSectionEx (Address: 0x180021390)
InitializeSRWLock (Address: 0x180021330)
LeaveCriticalSection (Address: 0x180021378)
OpenSemaphoreW (Address: 0x180021340)
ReleaseMutex (Address: 0x180021398)
ReleaseSemaphore (Address: 0x180021380)
ReleaseSRWLockExclusive (Address: 0x180021338)
ReleaseSRWLockShared (Address: 0x180021348)
WaitForSingleObject (Address: 0x180021388)
WaitForSingleObjectEx (Address: 0x1800213a0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800213c8)
InitOnceComplete (Address: 0x1800213d0)
InitOnceExecuteOnce (Address: 0x1800213b8)
Sleep (Address: 0x1800213c0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800213e8)
GetTickCount (Address: 0x1800213e0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800213f8)
CreateThreadpoolTimer (Address: 0x180021408)
SetThreadpoolTimer (Address: 0x180021410)
WaitForThreadpoolTimerCallbacks (Address: 0x180021400)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180021420)
EncodePointer (Address: 0x180021428)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180021438)
RoOriginateError (Address: 0x180021440)
RoOriginateErrorW (Address: 0x180021448)
RoTransformError (Address: 0x180021450)
SetRestrictedErrorInfo (Address: 0x180021458)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180021468)
RoGetMatchingRestrictedErrorInfo (Address: 0x180021478)
RoReportFailedDelegate (Address: 0x180021470)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180021490)
RoGetActivationFactory (Address: 0x180021488)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x1800214c0)
WindowsCreateString (Address: 0x1800214d8)
WindowsCreateStringReference (Address: 0x1800214a8)
WindowsDeleteString (Address: 0x1800214c8)
WindowsDuplicateString (Address: 0x1800214d0)
WindowsGetStringRawBuffer (Address: 0x1800214a0)
WindowsIsStringEmpty (Address: 0x1800214b0)
WindowsStringHasEmbeddedNull (Address: 0x1800214b8)
WindowsSubstringWithSpecifiedLength (Address: 0x1800214e0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180021570)
__CxxFrameHandler3 (Address: 0x180021598)
__CxxFrameHandler4 (Address: 0x1800215d8)
__std_terminate (Address: 0x1800215d0)
_CxxThrowException (Address: 0x1800215a0)
_o___std_exception_copy (Address: 0x1800215c8)
_o___std_exception_destroy (Address: 0x1800215c0)
_o___std_type_info_destroy_list (Address: 0x1800215b8)
_o___stdio_common_vsnprintf_s (Address: 0x1800215b0)
_o___stdio_common_vswprintf (Address: 0x1800215a8)
_o__callnewh (Address: 0x180021590)
_o__cexit (Address: 0x180021588)
_o__configure_narrow_argv (Address: 0x180021580)
_o__crt_atexit (Address: 0x180021578)
_o__errno (Address: 0x1800214f0)
_o__execute_onexit_table (Address: 0x1800214f8)
_o__get_errno (Address: 0x180021500)
_o__initialize_narrow_environment (Address: 0x180021508)
_o__initialize_onexit_table (Address: 0x180021510)
_o__invalid_parameter_noinfo (Address: 0x180021518)
_o__purecall (Address: 0x180021520)
_o__register_onexit_function (Address: 0x180021528)
_o__seh_filter_dll (Address: 0x180021530)
_o__set_errno (Address: 0x180021538)
_o__wcsicmp (Address: 0x180021548)
_o_free (Address: 0x180021550)
_o_malloc (Address: 0x180021558)
_o_terminate (Address: 0x180021560)
_o_toupper (Address: 0x180021568)
memcmp (Address: 0x1800215e0)
memcpy (Address: 0x1800215e8)
memmove (Address: 0x180021540)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800215f8)
_initterm_e (Address: 0x180021600)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180021610)
wcscspn (Address: 0x180021618)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180021630)
EventProviderEnabled (Address: 0x180021650)
EventRegister (Address: 0x180021638)
EventSetInformation (Address: 0x180021640)
EventUnregister (Address: 0x180021648)
EventWriteTransfer (Address: 0x180021628)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x180021660)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x180021678)
SHTaskPoolQueueTask (Address: 0x180021670)