Windows.Internal.PredictionUnit.dll

Description: Prediction Unit

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 95c82bf31e199f3991eeaf3b2d425f18

File Size: 504.5 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x5190)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x4ec0)
  • DllGetClassObject (Ordinal: 3, Address: 0x50a0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180063728)
  • CoCreateInstance (Address: 0x180063710)
  • CoGetApartmentType (Address: 0x180063738)
  • CoMarshalInterface (Address: 0x180063718)
  • CoReleaseMarshalData (Address: 0x180063750)
  • CoTaskMemAlloc (Address: 0x180063708)
  • CoTaskMemFree (Address: 0x180063748)
  • CoWaitForMultipleHandles (Address: 0x180063730)
  • CreateStreamOnHGlobal (Address: 0x180063720)
  • PropVariantClear (Address: 0x180063740)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x180063760)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180063770)
  • IsDebuggerPresent (Address: 0x180063780)
  • OutputDebugStringW (Address: 0x180063778)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180063790)
  • RaiseException (Address: 0x180063798)
  • SetLastError (Address: 0x1800637a0)
  • SetUnhandledExceptionFilter (Address: 0x1800637a8)
  • UnhandledExceptionFilter (Address: 0x1800637b0)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x1800637c0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800637d0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800637e8)
  • HeapAlloc (Address: 0x1800637f0)
  • HeapFree (Address: 0x1800637e0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180063800)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180063820)
  • GetModuleFileNameA (Address: 0x180063828)
  • GetModuleHandleExW (Address: 0x180063810)
  • GetModuleHandleW (Address: 0x180063818)
  • GetProcAddress (Address: 0x180063830)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180063840)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180063858)
  • GetCurrentProcessId (Address: 0x180063870)
  • GetCurrentThreadId (Address: 0x180063850)
  • OpenProcessToken (Address: 0x180063868)
  • TerminateProcess (Address: 0x180063860)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x180063888)
  • OpenProcess (Address: 0x180063880)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180063898)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800638b8)
  • RtlLookupFunctionEntry (Address: 0x1800638a8)
  • RtlVirtualUnwind (Address: 0x1800638b0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800638d0)
  • WideCharToMultiByte (Address: 0x1800638c8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800638f0)
  • AcquireSRWLockShared (Address: 0x180063928)
  • CreateEventExW (Address: 0x180063908)
  • CreateMutexExW (Address: 0x180063920)
  • CreateSemaphoreExW (Address: 0x180063948)
  • DeleteCriticalSection (Address: 0x180063900)
  • EnterCriticalSection (Address: 0x180063968)
  • InitializeCriticalSectionEx (Address: 0x180063960)
  • InitializeSRWLock (Address: 0x180063950)
  • LeaveCriticalSection (Address: 0x180063958)
  • OpenSemaphoreW (Address: 0x180063918)
  • ReleaseMutex (Address: 0x180063940)
  • ReleaseSemaphore (Address: 0x1800638e8)
  • ReleaseSRWLockExclusive (Address: 0x1800638f8)
  • ReleaseSRWLockShared (Address: 0x180063910)
  • SetEvent (Address: 0x180063938)
  • WaitForSingleObject (Address: 0x180063930)
  • WaitForSingleObjectEx (Address: 0x1800638e0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x180063988)
  • InitOnceComplete (Address: 0x180063978)
  • InitOnceExecuteOnce (Address: 0x180063980)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180063998)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800639b0)
  • CreateThreadpoolTimer (Address: 0x1800639a8)
  • SetThreadpoolTimer (Address: 0x1800639b8)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800639c0)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x1800639d8)
  • GetTimeZoneInformation (Address: 0x1800639d0)
  • SystemTimeToTzSpecificLocalTime (Address: 0x1800639e0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800639f0)
  • EncodePointer (Address: 0x1800639f8)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180063a08)
  • RoOriginateError (Address: 0x180063a18)
  • RoOriginateErrorW (Address: 0x180063a10)
  • RoTransformError (Address: 0x180063a28)
  • SetRestrictedErrorInfo (Address: 0x180063a20)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x180063a38)
  • RoGetActivationFactory (Address: 0x180063a40)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x180063a78)
  • WindowsCreateStringReference (Address: 0x180063a68)
  • WindowsDeleteString (Address: 0x180063a70)
  • WindowsDuplicateString (Address: 0x180063a80)
  • WindowsGetStringRawBuffer (Address: 0x180063a50)
  • WindowsIsStringEmpty (Address: 0x180063a58)
  • WindowsStringHasEmbeddedNull (Address: 0x180063a60)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x180063a90)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180063b70)
  • __CxxFrameHandler3 (Address: 0x180063c08)
  • __CxxFrameHandler4 (Address: 0x180063be0)
  • __std_terminate (Address: 0x180063bd8)
  • _CxxThrowException (Address: 0x180063bf0)
  • _o___acrt_iob_func (Address: 0x180063bd0)
  • _o___std_exception_copy (Address: 0x180063bc8)
  • _o___std_exception_destroy (Address: 0x180063bc0)
  • _o___std_type_info_destroy_list (Address: 0x180063bb8)
  • _o___stdio_common_vfprintf (Address: 0x180063bb0)
  • _o___stdio_common_vsnprintf_s (Address: 0x180063ba8)
  • _o___stdio_common_vsprintf_s (Address: 0x180063ba0)
  • _o___stdio_common_vswprintf (Address: 0x180063b98)
  • _o__callnewh (Address: 0x180063b90)
  • _o__cexit (Address: 0x180063b88)
  • _o__configure_narrow_argv (Address: 0x180063b80)
  • _o__crt_atexit (Address: 0x180063b78)
  • _o__errno (Address: 0x180063aa0)
  • _o__execute_onexit_table (Address: 0x180063aa8)
  • _o__initialize_narrow_environment (Address: 0x180063ab0)
  • _o__initialize_onexit_table (Address: 0x180063ab8)
  • _o__invalid_parameter_noinfo (Address: 0x180063ac0)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180063ac8)
  • _o__purecall (Address: 0x180063ad0)
  • _o__register_onexit_function (Address: 0x180063ad8)
  • _o__seh_filter_dll (Address: 0x180063ae0)
  • _o_ceil (Address: 0x180063af0)
  • _o_exp (Address: 0x180063af8)
  • _o_fflush (Address: 0x180063b00)
  • _o_floor (Address: 0x180063b08)
  • _o_free (Address: 0x180063b10)
  • _o_log (Address: 0x180063b18)
  • _o_log10 (Address: 0x180063b20)
  • _o_log2 (Address: 0x180063b28)
  • _o_malloc (Address: 0x180063b30)
  • _o_pow (Address: 0x180063b38)
  • _o_realloc (Address: 0x180063b40)
  • _o_strtod (Address: 0x180063b48)
  • _o_strtol (Address: 0x180063b50)
  • _o_terminate (Address: 0x180063b58)
  • _o_wcstod (Address: 0x180063b60)
  • _o_wcstol (Address: 0x180063b68)
  • memchr (Address: 0x180063bf8)
  • memcmp (Address: 0x180063be8)
  • memcpy (Address: 0x180063ae8)
  • memmove (Address: 0x180063c00)
  • strchr (Address: 0x180063c10)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180063c20)
  • _initterm_e (Address: 0x180063c28)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180063c38)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x180063c60)
  • EventRegister (Address: 0x180063c58)
  • EventSetInformation (Address: 0x180063c48)
  • EventUnregister (Address: 0x180063c50)
  • EventWriteTransfer (Address: 0x180063c68)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x180063c78)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x180063c90)
  • SHTaskPoolQueueTask (Address: 0x180063c88)
msvcp_win.dll
  • _Wcscoll (Address: 0x180063df0)
  • _Wcsxfrm (Address: 0x180063df8)
  • ?_BADOFF@std@@3_JB (Address: 0x180063ea8)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180063e70)
  • ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180063e58)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x180063de8)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x180063e18)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180063e60)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x180063e68)
  • ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z (Address: 0x180063d90)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180063cc8)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180063ee0)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x180063db0)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x180063ca8)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180063da8)
  • ?_Random_device@std@@YAIXZ (Address: 0x180063e90)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x180063cd0)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180063ed8)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x180063e88)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x180063d18)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x180063e78)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180063ea0)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180063e98)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x180063de0)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x180063e38)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x180063e30)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180063d88)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180063eb8)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x180063ca0)
  • ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x180063ec0)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180063ed0)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180063d20)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x180063e20)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x180063e48)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x180063e40)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180063cb8)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180063dc8)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180063d10)
  • ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180063dc0)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180063cc0)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180063da0)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x180063e28)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x180063e08)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x180063d60)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x180063db8)
  • ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x180063e00)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x180063e10)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180063d08)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180063d28)
  • ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x180063e50)
  • ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x180063d78)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x180063cf8)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x180063d30)
  • ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x180063e80)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x180063d48)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x180063d98)
  • ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x180063d80)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x180063cd8)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x180063d58)
  • ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x180063ec8)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x180063cb0)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x180063d50)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180063d00)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x180063d68)
  • ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x180063dd8)
  • ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x180063dd0)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180063ce0)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x180063d70)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x180063eb0)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x180063ce8)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x180063d40)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x180063cf0)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x180063d38)
PROPSYS.dll
  • (Address: 0x1800636e0)
  • PropVariantToDouble (Address: 0x1800636d0)
  • PropVariantToFileTime (Address: 0x1800636d8)
  • PropVariantToString (Address: 0x1800636f0)
  • PropVariantToStringAlloc (Address: 0x1800636f8)
  • PSCreateMemoryPropertyStore (Address: 0x1800636e8)