Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll

Description: Windows Runtime Display Enhancement Management DLL

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: b1abe6348e30231efb72924c7b0749a3

File Size: 166.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x4340)
DllGetActivationFactory (Ordinal: 2, Address: 0x43d0)
DllGetClassObject (Ordinal: 3, Address: 0x45b0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18001dcc0)
CoCreateInstance (Address: 0x18001dcc8)
CoGetInterfaceAndReleaseStream (Address: 0x18001dcd0)
CoMarshalInterface (Address: 0x18001dcb8)
CoReleaseMarshalData (Address: 0x18001dce0)
CoTaskMemAlloc (Address: 0x18001dcd8)
CreateStreamOnHGlobal (Address: 0x18001dcb0)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18001dcf0)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18001dd18)
CStdStubBuffer2_CountRefs (Address: 0x18001dd10)
CStdStubBuffer2_Disconnect (Address: 0x18001dd28)
CStdStubBuffer2_QueryInterface (Address: 0x18001dd38)
NdrProxyForwardingFunction3 (Address: 0x18001dd00)
NdrProxyForwardingFunction4 (Address: 0x18001dd40)
NdrProxyForwardingFunction5 (Address: 0x18001dd48)
ObjectStublessClient3 (Address: 0x18001dd20)
ObjectStublessClient6 (Address: 0x18001dd08)
ObjectStublessClient7 (Address: 0x18001dd30)
ObjectStublessClient8 (Address: 0x18001dd50)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001dd60)
IsDebuggerPresent (Address: 0x18001dd68)
OutputDebugStringW (Address: 0x18001dd70)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001dd98)
RaiseException (Address: 0x18001dd90)
SetLastError (Address: 0x18001dda0)
SetUnhandledExceptionFilter (Address: 0x18001dd88)
UnhandledExceptionFilter (Address: 0x18001dd80)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001ddb0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001ddc8)
HeapAlloc (Address: 0x18001ddc0)
HeapFree (Address: 0x18001ddd0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18001dde0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001de00)
GetModuleFileNameA (Address: 0x18001ddf8)
GetModuleHandleExW (Address: 0x18001ddf0)
GetModuleHandleW (Address: 0x18001de08)
GetProcAddress (Address: 0x18001de10)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001de20)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18001de40)
GetCurrentProcessId (Address: 0x18001de48)
GetCurrentThreadId (Address: 0x18001de50)
OpenProcessToken (Address: 0x18001de38)
TerminateProcess (Address: 0x18001de30)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18001de60)
OpenProcess (Address: 0x18001de68)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001de78)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001de98)
RtlLookupFunctionEntry (Address: 0x18001de88)
RtlVirtualUnwind (Address: 0x18001de90)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001ded8)
AcquireSRWLockShared (Address: 0x18001def0)
CreateEventExW (Address: 0x18001dee0)
CreateMutexExW (Address: 0x18001df10)
CreateSemaphoreExW (Address: 0x18001df00)
DeleteCriticalSection (Address: 0x18001def8)
InitializeCriticalSection (Address: 0x18001dea8)
InitializeSRWLock (Address: 0x18001dee8)
OpenSemaphoreW (Address: 0x18001df20)
ReleaseMutex (Address: 0x18001dec8)
ReleaseSemaphore (Address: 0x18001dec0)
ReleaseSRWLockExclusive (Address: 0x18001df18)
ReleaseSRWLockShared (Address: 0x18001df08)
ResetEvent (Address: 0x18001deb8)
WaitForSingleObject (Address: 0x18001deb0)
WaitForSingleObjectEx (Address: 0x18001ded0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18001df30)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18001df40)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x18001df60)
CreateThreadpoolWait (Address: 0x18001df50)
SetThreadpoolWait (Address: 0x18001df58)
WaitForThreadpoolWaitCallbacks (Address: 0x18001df68)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18001df78)
EncodePointer (Address: 0x18001df80)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18001df90)
RoOriginateError (Address: 0x18001dfa0)
RoOriginateErrorW (Address: 0x18001df98)
RoTransformError (Address: 0x18001dfb0)
SetRestrictedErrorInfo (Address: 0x18001dfa8)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18001dfd0)
RoGetMatchingRestrictedErrorInfo (Address: 0x18001dfc8)
RoReportFailedDelegate (Address: 0x18001dfc0)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18001dfe0)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18001e008)
HSTRING_UserFree64 (Address: 0x18001e018)
HSTRING_UserMarshal (Address: 0x18001e020)
HSTRING_UserMarshal64 (Address: 0x18001e000)
HSTRING_UserSize (Address: 0x18001e028)
HSTRING_UserSize64 (Address: 0x18001e010)
HSTRING_UserUnmarshal (Address: 0x18001e060)
HSTRING_UserUnmarshal64 (Address: 0x18001dff0)
WindowsCreateString (Address: 0x18001e050)
WindowsCreateStringReference (Address: 0x18001e048)
WindowsDeleteString (Address: 0x18001e030)
WindowsDuplicateString (Address: 0x18001dff8)
WindowsGetStringRawBuffer (Address: 0x18001e058)
WindowsIsStringEmpty (Address: 0x18001e040)
WindowsStringHasEmbeddedNull (Address: 0x18001e038)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18001e138)
__C_specific_handler_noexcept (Address: 0x18001e148)
__CxxFrameHandler3 (Address: 0x18001e0c8)
__CxxFrameHandler4 (Address: 0x18001e140)
__std_terminate (Address: 0x18001e130)
_CxxThrowException (Address: 0x18001e0d0)
_o___std_exception_copy (Address: 0x18001e128)
_o___std_exception_destroy (Address: 0x18001e120)
_o___std_type_info_destroy_list (Address: 0x18001e118)
_o___stdio_common_vsnprintf_s (Address: 0x18001e110)
_o___stdio_common_vswprintf (Address: 0x18001e108)
_o__callnewh (Address: 0x18001e100)
_o__cexit (Address: 0x18001e0f8)
_o__configure_narrow_argv (Address: 0x18001e0e0)
_o__crt_atexit (Address: 0x18001e0d8)
_o__errno (Address: 0x18001e0f0)
_o__execute_onexit_table (Address: 0x18001e0e8)
_o__initialize_narrow_environment (Address: 0x18001e070)
_o__initialize_onexit_table (Address: 0x18001e078)
_o__invalid_parameter_noinfo (Address: 0x18001e080)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18001e088)
_o__purecall (Address: 0x18001e090)
_o__register_onexit_function (Address: 0x18001e098)
_o__seh_filter_dll (Address: 0x18001e0a0)
_o_free (Address: 0x18001e0b0)
_o_malloc (Address: 0x18001e0b8)
_o_terminate (Address: 0x18001e0c0)
memcmp (Address: 0x18001e150)
memcpy (Address: 0x18001e158)
memmove (Address: 0x18001e0a8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18001e170)
_initterm_e (Address: 0x18001e168)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18001e180)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18001e1b8)
GetTraceEnableLevel (Address: 0x18001e190)
GetTraceLoggerHandle (Address: 0x18001e198)
RegisterTraceGuidsW (Address: 0x18001e1a8)
TraceMessage (Address: 0x18001e1a0)
UnregisterTraceGuids (Address: 0x18001e1b0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18001e1c8)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18001e1d8)
SHTaskPoolQueueTask (Address: 0x18001e1e0)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x18001e1f8)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18001e1f0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18001dc28)
CStdStubBuffer_Connect (Address: 0x18001dbf0)
CStdStubBuffer_CountRefs (Address: 0x18001dc60)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18001dc18)
CStdStubBuffer_DebugServerRelease (Address: 0x18001dc90)
CStdStubBuffer_Disconnect (Address: 0x18001dc98)
CStdStubBuffer_Invoke (Address: 0x18001dc00)
CStdStubBuffer_IsIIDSupported (Address: 0x18001dbf8)
CStdStubBuffer_QueryInterface (Address: 0x18001dc68)
IUnknown_AddRef_Proxy (Address: 0x18001dc10)
IUnknown_QueryInterface_Proxy (Address: 0x18001dc80)
IUnknown_Release_Proxy (Address: 0x18001dc88)
NdrClientCall3 (Address: 0x18001dc38)
NdrCStdStubBuffer_Release (Address: 0x18001dc30)
NdrCStdStubBuffer2_Release (Address: 0x18001dbe8)
NdrDllCanUnloadNow (Address: 0x18001dca0)
NdrDllGetClassObject (Address: 0x18001dbe0)
NdrOleAllocate (Address: 0x18001dc70)
NdrOleFree (Address: 0x18001dc20)
NdrStubCall3 (Address: 0x18001dc78)
NdrStubForwardingFunction (Address: 0x18001dc08)
RpcBindingBind (Address: 0x18001dc40)
RpcBindingCreateW (Address: 0x18001dc48)
RpcBindingFree (Address: 0x18001dc50)
RpcExceptionFilter (Address: 0x18001dc58)