AppExtension.dll

Description: AppExtension API

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 7b0df197ef382d45f92662918f3241e5

File Size: 204.0 KB

Uploaded At: Dec. 1, 2025, 7:22 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x8c50)
DllGetActivationFactory (Ordinal: 2, Address: 0x8850)
DllGetClassObject (Ordinal: 3, Address: 0x10110)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-internal-l1-1-1.dll

GetPackageStatus (Address: 0x180026fb0)

api-ms-win-appmodel-runtime-l1-1-0.dll

PackageFamilyNameFromFullName (Address: 0x180026fc0)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180026fd0)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180027038)
CoCreateGuid (Address: 0x180027048)
CoCreateInstance (Address: 0x180026fe8)
CoGetApartmentType (Address: 0x180027000)
CoGetCallContext (Address: 0x180026fe0)
CoGetCallerTID (Address: 0x180026ff8)
CoGetInterfaceAndReleaseStream (Address: 0x180027010)
CoMarshalInterface (Address: 0x180027028)
CoReleaseMarshalData (Address: 0x180027020)
CoRevertToSelf (Address: 0x180027018)
CoTaskMemAlloc (Address: 0x180027030)
CoTaskMemFree (Address: 0x180026ff0)
CoWaitForMultipleHandles (Address: 0x180027040)
CreateStreamOnHGlobal (Address: 0x180027050)
StringFromCLSID (Address: 0x180027008)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180027060)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180027080)
IsDebuggerPresent (Address: 0x180027078)
OutputDebugStringW (Address: 0x180027070)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180027090)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800270a0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800270d0)
RaiseException (Address: 0x1800270b8)
SetLastError (Address: 0x1800270b0)
SetUnhandledExceptionFilter (Address: 0x1800270c8)
UnhandledExceptionFilter (Address: 0x1800270c0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800270e0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800270f8)
HeapAlloc (Address: 0x1800270f0)
HeapFree (Address: 0x180027100)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x180027110)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180027148)
FreeLibrary (Address: 0x180027158)
GetModuleFileNameA (Address: 0x180027150)
GetModuleHandleExW (Address: 0x180027138)
GetModuleHandleW (Address: 0x180027140)
GetProcAddress (Address: 0x180027128)
LoadLibraryExW (Address: 0x180027120)
LoadStringW (Address: 0x180027130)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180027168)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180027178)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180027190)
GetCurrentProcessId (Address: 0x180027198)
GetCurrentThread (Address: 0x1800271a8)
GetCurrentThreadId (Address: 0x1800271b0)
GetProcessId (Address: 0x1800271c0)
OpenProcessToken (Address: 0x1800271a0)
OpenThreadToken (Address: 0x1800271b8)
TerminateProcess (Address: 0x180027188)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800271d0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800271e0)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1800271f0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180027210)
RegNotifyChangeKeyValue (Address: 0x180027208)
RegOpenKeyExW (Address: 0x180027218)
RegQueryValueExW (Address: 0x180027200)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180027230)
RtlLookupFunctionEntry (Address: 0x180027238)
RtlVirtualUnwind (Address: 0x180027228)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180027248)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x180027258)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180027278)
AcquireSRWLockShared (Address: 0x180027288)
CreateEventExW (Address: 0x1800272d0)
CreateEventW (Address: 0x1800272f0)
CreateMutexExW (Address: 0x1800272a0)
CreateSemaphoreExW (Address: 0x1800272e0)
DeleteCriticalSection (Address: 0x1800272e8)
EnterCriticalSection (Address: 0x1800272f8)
InitializeCriticalSectionEx (Address: 0x180027298)
InitializeSRWLock (Address: 0x180027268)
LeaveCriticalSection (Address: 0x1800272c8)
OpenSemaphoreW (Address: 0x1800272a8)
ReleaseMutex (Address: 0x1800272b8)
ReleaseSemaphore (Address: 0x1800272d8)
ReleaseSRWLockExclusive (Address: 0x180027290)
ReleaseSRWLockShared (Address: 0x180027270)
SetEvent (Address: 0x180027280)
WaitForMultipleObjectsEx (Address: 0x180027300)
WaitForSingleObject (Address: 0x1800272c0)
WaitForSingleObjectEx (Address: 0x1800272b0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180027310)
Sleep (Address: 0x180027318)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180027330)
GetTickCount (Address: 0x180027328)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx (Address: 0x180027340)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180027350)
EncodePointer (Address: 0x180027358)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180027368)
RoOriginateError (Address: 0x180027388)
RoOriginateErrorW (Address: 0x180027378)
RoTransformError (Address: 0x180027380)
SetRestrictedErrorInfo (Address: 0x180027370)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1800273a8)
RoGetMatchingRestrictedErrorInfo (Address: 0x1800273a0)
RoReportFailedDelegate (Address: 0x180027398)

api-ms-win-rtcore-ntuser-synch-l1-1-0.dll

MsgWaitForMultipleObjectsEx (Address: 0x1800273b8)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DispatchMessageW (Address: 0x1800273d8)
PeekMessageW (Address: 0x1800273c8)
PostQuitMessage (Address: 0x1800273e0)
TranslateMessage (Address: 0x1800273d0)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180027408)
DuplicateTokenEx (Address: 0x1800273f0)
GetLengthSid (Address: 0x1800273f8)
GetTokenInformation (Address: 0x180027400)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180027418)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x180027430)
SHTaskPoolQueueTask (Address: 0x180027428)

AppXDeploymentClient.dll

(Address: 0x180026f88)
(Address: 0x180026f78)
(Address: 0x180026f80)
(Address: 0x180026f90)

combase.dll

(Address: 0x180027440)

msvcrt.dll

__C_specific_handler (Address: 0x1800274b0)
__CxxFrameHandler3 (Address: 0x180027530)
__dllonexit (Address: 0x180027470)
_amsg_exit (Address: 0x1800274a8)
_callnewh (Address: 0x180027500)
_CxxThrowException (Address: 0x180027488)
_initterm (Address: 0x180027468)
_lock (Address: 0x180027480)
_onexit (Address: 0x1800274c8)
_purecall (Address: 0x1800274e8)
_unlock (Address: 0x180027490)
_vsnprintf_s (Address: 0x1800274f0)
_vsnwprintf (Address: 0x180027538)
_XcptFilter (Address: 0x1800274d8)
??_V@YAXPEAX@Z (Address: 0x180027528)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800274d0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800274b8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180027478)
??0exception@@QEAA@XZ (Address: 0x180027520)
??1exception@@UEAA@XZ (Address: 0x180027518)
??1type_info@@UEAA@XZ (Address: 0x180027458)
??3@YAXPEAX@Z (Address: 0x1800274f8)
?terminate@@YAXXZ (Address: 0x180027540)
?what@exception@@UEBAPEBDXZ (Address: 0x1800274a0)
free (Address: 0x180027498)
malloc (Address: 0x1800274e0)
memcpy (Address: 0x180027460)
memcpy_s (Address: 0x1800274c0)
memmove (Address: 0x180027548)
memmove_s (Address: 0x180027510)
memset (Address: 0x180027550)
realloc (Address: 0x180027450)
wcschr (Address: 0x180027508)

ntdll.dll

NtQueryInformationToken (Address: 0x180027570)
RtlAcquireSRWLockExclusive (Address: 0x180027598)
RtlAcquireSRWLockShared (Address: 0x180027588)
RtlAllocateHeap (Address: 0x180027560)
RtlCompareUnicodeString (Address: 0x1800275d0)
RtlConvertSidToUnicodeString (Address: 0x1800275c0)
RtlFreeHeap (Address: 0x180027578)
RtlFreeUnicodeString (Address: 0x1800275c8)
RtlInitializeGenericTableAvl (Address: 0x1800275b0)
RtlInitUnicodeString (Address: 0x180027568)
RtlInsertElementGenericTableAvl (Address: 0x1800275a8)
RtlLookupElementGenericTableAvl (Address: 0x1800275b8)
RtlNtStatusToDosErrorNoTeb (Address: 0x1800275a0)
RtlReleaseSRWLockExclusive (Address: 0x180027590)
RtlReleaseSRWLockShared (Address: 0x180027580)

PROPSYS.dll

(Address: 0x180026fa0)

twinapi.appcore.dll

(Address: 0x1800275e0)
(Address: 0x1800275e8)