Windows.Media.Devices.dll

Description: Windows Runtime media device server DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 10b1a0651d63a41767c02269c1fe2a19

File Size: 579.1 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllGetActivationFactory (Ordinal: 1, Address: 0x19630)
DllCanUnloadNow (Ordinal: 2, Address: 0x1f60)
DllGetClassObject (Ordinal: 3, Address: 0x1d130)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18006cee8)

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x18006cf18)
CoCreateFreeThreadedMarshaler (Address: 0x18006cf20)
CoCreateInstance (Address: 0x18006cf68)
CoGetApartmentType (Address: 0x18006cf28)
CoGetInterfaceAndReleaseStream (Address: 0x18006cf78)
CoImpersonateClient (Address: 0x18006cf08)
CoInitializeEx (Address: 0x18006cf70)
CoMarshalInterface (Address: 0x18006cf58)
CoReleaseMarshalData (Address: 0x18006cef8)
CoRevertToSelf (Address: 0x18006cf38)
CoTaskMemAlloc (Address: 0x18006cf10)
CoTaskMemFree (Address: 0x18006cf88)
CoTaskMemRealloc (Address: 0x18006cf48)
CoUninitialize (Address: 0x18006cf80)
CoWaitForMultipleHandles (Address: 0x18006cf40)
CreateStreamOnHGlobal (Address: 0x18006cf50)
PropVariantClear (Address: 0x18006cf60)
StringFromCLSID (Address: 0x18006cf30)
StringFromGUID2 (Address: 0x18006cf00)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18006cf98)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18006cff8)
CStdStubBuffer2_CountRefs (Address: 0x18006cfb0)
CStdStubBuffer2_Disconnect (Address: 0x18006d040)
CStdStubBuffer2_QueryInterface (Address: 0x18006cfd8)
NdrProxyForwardingFunction3 (Address: 0x18006d018)
NdrProxyForwardingFunction4 (Address: 0x18006d000)
NdrProxyForwardingFunction5 (Address: 0x18006d008)
ObjectStublessClient10 (Address: 0x18006cfe8)
ObjectStublessClient11 (Address: 0x18006cfa8)
ObjectStublessClient12 (Address: 0x18006cfb8)
ObjectStublessClient13 (Address: 0x18006cfd0)
ObjectStublessClient14 (Address: 0x18006cfe0)
ObjectStublessClient15 (Address: 0x18006cff0)
ObjectStublessClient16 (Address: 0x18006d028)
ObjectStublessClient17 (Address: 0x18006d038)
ObjectStublessClient3 (Address: 0x18006cfc8)
ObjectStublessClient6 (Address: 0x18006d010)
ObjectStublessClient7 (Address: 0x18006cfc0)
ObjectStublessClient8 (Address: 0x18006d020)
ObjectStublessClient9 (Address: 0x18006d030)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18006d060)
IsDebuggerPresent (Address: 0x18006d050)
OutputDebugStringW (Address: 0x18006d058)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18006d070)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18006d080)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18006d0b0)
RaiseException (Address: 0x18006d0a0)
SetLastError (Address: 0x18006d0a8)
SetUnhandledExceptionFilter (Address: 0x18006d098)
UnhandledExceptionFilter (Address: 0x18006d090)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x18006d0d0)
RecordFeatureUsage (Address: 0x18006d0c8)
SubscribeFeatureStateChangeNotification (Address: 0x18006d0d8)
UnsubscribeFeatureStateChangeNotification (Address: 0x18006d0c0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18006d0e8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18006d0f8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18006d118)
HeapAlloc (Address: 0x18006d120)
HeapDestroy (Address: 0x18006d128)
HeapFree (Address: 0x18006d110)
HeapReAlloc (Address: 0x18006d108)
HeapSize (Address: 0x18006d130)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18006d148)
LocalFree (Address: 0x18006d140)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18006d158)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x18006d168)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18006d190)
GetModuleHandleExW (Address: 0x18006d1b0)
GetModuleHandleW (Address: 0x18006d180)
GetProcAddress (Address: 0x18006d198)
LoadLibraryExW (Address: 0x18006d1a0)
LoadResource (Address: 0x18006d188)
LockResource (Address: 0x18006d1a8)
SizeofResource (Address: 0x18006d178)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x18006d1c0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18006d1d0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18006d1f8)
GetCurrentProcess (Address: 0x18006d208)
GetCurrentProcessId (Address: 0x18006d200)
GetCurrentThread (Address: 0x18006d210)
GetCurrentThreadId (Address: 0x18006d1e8)
OpenProcessToken (Address: 0x18006d1f0)
OpenThreadToken (Address: 0x18006d218)
ProcessIdToSessionId (Address: 0x18006d220)
TerminateProcess (Address: 0x18006d1e0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18006d238)
OpenProcess (Address: 0x18006d230)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18006d248)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18006d258)
RegGetValueW (Address: 0x18006d270)
RegOpenKeyExW (Address: 0x18006d268)
RegQueryValueExW (Address: 0x18006d260)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18006d280)
RtlLookupFunctionEntry (Address: 0x18006d288)
RtlVirtualUnwind (Address: 0x18006d290)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathParseIconLocationW (Address: 0x18006d2a0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18006d2b0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18006d328)
AcquireSRWLockShared (Address: 0x18006d320)
CreateEventExW (Address: 0x18006d300)
CreateEventW (Address: 0x18006d350)
CreateMutexExW (Address: 0x18006d2c8)
CreateSemaphoreExW (Address: 0x18006d2f8)
DeleteCriticalSection (Address: 0x18006d2d8)
EnterCriticalSection (Address: 0x18006d2d0)
InitializeCriticalSectionAndSpinCount (Address: 0x18006d360)
InitializeCriticalSectionEx (Address: 0x18006d318)
InitializeSRWLock (Address: 0x18006d358)
LeaveCriticalSection (Address: 0x18006d2e8)
OpenSemaphoreW (Address: 0x18006d310)
ReleaseMutex (Address: 0x18006d338)
ReleaseSemaphore (Address: 0x18006d340)
ReleaseSRWLockExclusive (Address: 0x18006d2e0)
ReleaseSRWLockShared (Address: 0x18006d2c0)
ResetEvent (Address: 0x18006d348)
SetEvent (Address: 0x18006d308)
WaitForSingleObject (Address: 0x18006d2f0)
WaitForSingleObjectEx (Address: 0x18006d330)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18006d378)
InitOnceComplete (Address: 0x18006d380)
InitOnceExecuteOnce (Address: 0x18006d370)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x18006d390)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x18006d3a0)
GetSystemTimeAsFileTime (Address: 0x18006d3a8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18006d3d8)
CloseThreadpoolWait (Address: 0x18006d3c0)
CreateThreadpoolTimer (Address: 0x18006d3e8)
CreateThreadpoolWait (Address: 0x18006d3c8)
SetThreadpoolTimer (Address: 0x18006d3d0)
SetThreadpoolWait (Address: 0x18006d3e0)
WaitForThreadpoolTimerCallbacks (Address: 0x18006d3f0)
WaitForThreadpoolWaitCallbacks (Address: 0x18006d3b8)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18006d400)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18006d410)
EncodePointer (Address: 0x18006d418)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18006d428)
RoOriginateError (Address: 0x18006d440)
RoOriginateErrorW (Address: 0x18006d438)
RoTransformError (Address: 0x18006d448)
SetRestrictedErrorInfo (Address: 0x18006d430)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18006d458)
RoGetMatchingRestrictedErrorInfo (Address: 0x18006d460)
RoReportFailedDelegate (Address: 0x18006d468)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18006d488)
RoGetActivationFactory (Address: 0x18006d490)
RoInitialize (Address: 0x18006d478)
RoUninitialize (Address: 0x18006d480)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18006d4b8)
HSTRING_UserFree64 (Address: 0x18006d4c8)
HSTRING_UserMarshal (Address: 0x18006d4d0)
HSTRING_UserMarshal64 (Address: 0x18006d4b0)
HSTRING_UserSize (Address: 0x18006d4d8)
HSTRING_UserSize64 (Address: 0x18006d4c0)
HSTRING_UserUnmarshal (Address: 0x18006d4a8)
HSTRING_UserUnmarshal64 (Address: 0x18006d4a0)
WindowsCompareStringOrdinal (Address: 0x18006d4e0)
WindowsCreateString (Address: 0x18006d518)
WindowsCreateStringReference (Address: 0x18006d4f0)
WindowsDeleteString (Address: 0x18006d4e8)
WindowsDuplicateString (Address: 0x18006d4f8)
WindowsGetStringRawBuffer (Address: 0x18006d510)
WindowsIsStringEmpty (Address: 0x18006d500)
WindowsStringHasEmbeddedNull (Address: 0x18006d508)

api-ms-win-crt-math-l1-1-0.dll

sinf (Address: 0x18006d528)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18006d5a0)
__CxxFrameHandler3 (Address: 0x18006d5a8)
__CxxFrameHandler4 (Address: 0x18006d560)
__std_terminate (Address: 0x18006d650)
_CxxThrowException (Address: 0x18006d5b0)
_o___std_exception_copy (Address: 0x18006d648)
_o___std_exception_destroy (Address: 0x18006d640)
_o___std_type_info_destroy_list (Address: 0x18006d638)
_o___stdio_common_vsnprintf_s (Address: 0x18006d630)
_o___stdio_common_vswprintf (Address: 0x18006d628)
_o___stdio_common_vswscanf (Address: 0x18006d620)
_o__aligned_free (Address: 0x18006d618)
_o__aligned_malloc (Address: 0x18006d610)
_o__callnewh (Address: 0x18006d608)
_o__cexit (Address: 0x18006d600)
_o__configure_narrow_argv (Address: 0x18006d5f8)
_o__crt_atexit (Address: 0x18006d5f0)
_o__errno (Address: 0x18006d5e8)
_o__execute_onexit_table (Address: 0x18006d5e0)
_o__get_errno (Address: 0x18006d5c8)
_o__initialize_narrow_environment (Address: 0x18006d5d8)
_o__initialize_onexit_table (Address: 0x18006d5d0)
_o__invalid_parameter_noinfo (Address: 0x18006d5b8)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18006d558)
_o__purecall (Address: 0x18006d538)
_o__register_onexit_function (Address: 0x18006d540)
_o__seh_filter_dll (Address: 0x18006d548)
_o__set_errno (Address: 0x18006d550)
_o__wcsicmp (Address: 0x18006d568)
_o_free (Address: 0x18006d578)
_o_malloc (Address: 0x18006d580)
_o_realloc (Address: 0x18006d588)
_o_terminate (Address: 0x18006d590)
_o_wcscpy_s (Address: 0x18006d598)
memcmp (Address: 0x18006d5c0)
memcpy (Address: 0x18006d658)
memmove (Address: 0x18006d570)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18006d670)
_initterm_e (Address: 0x18006d668)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18006d688)
wcsncmp (Address: 0x18006d680)

api-ms-win-devices-config-l1-1-1.dll

CM_Register_Notification (Address: 0x18006d6a0)
CM_Unregister_Notification (Address: 0x18006d698)

api-ms-win-devices-query-l1-1-0.dll

DevFreeObjectProperties (Address: 0x18006d6b8)
DevGetObjectProperties (Address: 0x18006d6b0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18006d6d8)
GetTraceEnableLevel (Address: 0x18006d6e0)
GetTraceLoggerHandle (Address: 0x18006d6e8)
RegisterTraceGuidsW (Address: 0x18006d6f0)
TraceMessage (Address: 0x18006d6c8)
UnregisterTraceGuids (Address: 0x18006d6d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18006d700)
EventRegister (Address: 0x18006d708)
EventSetInformation (Address: 0x18006d710)
EventUnregister (Address: 0x18006d720)
EventWriteTransfer (Address: 0x18006d718)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18006d730)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x18006d740)

api-ms-win-shcore-stream-l1-1-0.dll

SHCreateMemStream (Address: 0x18006d750)

api-ms-win-shcore-stream-winrt-l1-1-0.dll

CreateRandomAccessStreamOverStream (Address: 0x18006d760)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18006d778)
SHTaskPoolGetUniqueContext (Address: 0x18006d780)
SHTaskPoolQueueTask (Address: 0x18006d770)

MMDevAPI.DLL

(Address: 0x18006ce08)
(Address: 0x18006ce00)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18006d790)

ntdll.dll

RtlQueryWnfStateData (Address: 0x18006d7a0)
RtlSubscribeWnfStateChangeNotification (Address: 0x18006d7a8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18006d7b0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18006ce48)
CStdStubBuffer_Connect (Address: 0x18006cea0)
CStdStubBuffer_CountRefs (Address: 0x18006ce58)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18006ce18)
CStdStubBuffer_DebugServerRelease (Address: 0x18006ce70)
CStdStubBuffer_Disconnect (Address: 0x18006ce78)
CStdStubBuffer_Invoke (Address: 0x18006cea8)
CStdStubBuffer_IsIIDSupported (Address: 0x18006ce98)
CStdStubBuffer_QueryInterface (Address: 0x18006ce60)
IUnknown_AddRef_Proxy (Address: 0x18006ce50)
IUnknown_QueryInterface_Proxy (Address: 0x18006ce80)
IUnknown_Release_Proxy (Address: 0x18006ce90)
NdrClientCall3 (Address: 0x18006ced8)
NdrCStdStubBuffer_Release (Address: 0x18006ce40)
NdrCStdStubBuffer2_Release (Address: 0x18006ce20)
NdrDllCanUnloadNow (Address: 0x18006ce38)
NdrDllGetClassObject (Address: 0x18006ce28)
NdrOleAllocate (Address: 0x18006ce68)
NdrOleFree (Address: 0x18006ce30)
NdrStubCall3 (Address: 0x18006ce88)
NdrStubForwardingFunction (Address: 0x18006cec8)
RpcBindingFree (Address: 0x18006ceb8)
RpcBindingFromStringBindingW (Address: 0x18006ceb0)
RpcStringBindingComposeW (Address: 0x18006ced0)
RpcStringFreeW (Address: 0x18006cec0)