Windows.Storage.ApplicationData.dll

Description: Windows Application Data API Server

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 47371ec98350e3fb7cfd5c603816bdaf

File Size: 401.1 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CleanupTemporaryState (Ordinal: 1, Address: 0x25360)
DllCanUnloadNow (Ordinal: 2, Address: 0x140a0)
DllGetActivationFactory (Ordinal: 3, Address: 0x120a0)
DllGetClassObject (Ordinal: 4, Address: 0x24460)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18004b220)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18004b2c0)
CStdStubBuffer2_CountRefs (Address: 0x18004b288)
CStdStubBuffer2_Disconnect (Address: 0x18004b2b8)
CStdStubBuffer2_QueryInterface (Address: 0x18004b230)
NdrProxyForwardingFunction3 (Address: 0x18004b2b0)
NdrProxyForwardingFunction4 (Address: 0x18004b248)
NdrProxyForwardingFunction5 (Address: 0x18004b250)
ObjectStublessClient10 (Address: 0x18004b280)
ObjectStublessClient11 (Address: 0x18004b290)
ObjectStublessClient12 (Address: 0x18004b2a8)
ObjectStublessClient13 (Address: 0x18004b270)
ObjectStublessClient14 (Address: 0x18004b298)
ObjectStublessClient15 (Address: 0x18004b238)
ObjectStublessClient16 (Address: 0x18004b2a0)
ObjectStublessClient17 (Address: 0x18004b278)
ObjectStublessClient18 (Address: 0x18004b240)
ObjectStublessClient3 (Address: 0x18004b2c8)
ObjectStublessClient6 (Address: 0x18004b258)
ObjectStublessClient7 (Address: 0x18004b2d0)
ObjectStublessClient8 (Address: 0x18004b260)
ObjectStublessClient9 (Address: 0x18004b268)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004b2f0)
IsDebuggerPresent (Address: 0x18004b2e0)
OutputDebugStringW (Address: 0x18004b2e8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004b300)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004b310)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004b330)
RaiseException (Address: 0x18004b338)
SetLastError (Address: 0x18004b340)
SetUnhandledExceptionFilter (Address: 0x18004b328)
UnhandledExceptionFilter (Address: 0x18004b320)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x18004b350)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18004b368)
CreateFileW (Address: 0x18004b378)
DeleteFileW (Address: 0x18004b388)
FindClose (Address: 0x18004b380)
FindFirstFileW (Address: 0x18004b3b0)
FindNextFileW (Address: 0x18004b3a0)
GetDiskFreeSpaceExW (Address: 0x18004b398)
GetFileAttributesW (Address: 0x18004b370)
GetFileInformationByHandle (Address: 0x18004b360)
RemoveDirectoryW (Address: 0x18004b3a8)
SetFileAttributesW (Address: 0x18004b390)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004b3c0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004b3d0)
HeapAlloc (Address: 0x18004b3e0)
HeapFree (Address: 0x18004b3d8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18004b3f0)
LocalFree (Address: 0x18004b3f8)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18004b408)
GetModuleHandleExW (Address: 0x18004b418)
GetModuleHandleW (Address: 0x18004b410)
GetProcAddress (Address: 0x18004b428)
LoadStringW (Address: 0x18004b420)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004b438)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18004b448)
GetCurrentProcessId (Address: 0x18004b450)
GetCurrentThread (Address: 0x18004b468)
GetCurrentThreadId (Address: 0x18004b458)
OpenProcessToken (Address: 0x18004b478)
ProcessIdToSessionId (Address: 0x18004b470)
TerminateProcess (Address: 0x18004b460)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18004b488)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004b498)

api-ms-win-core-psm-app-l1-1-0.dll

PsmQueryCurrentAppState (Address: 0x18004b4a8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18004b4c0)
RegEnumKeyExW (Address: 0x18004b4b8)
RegGetValueW (Address: 0x18004b4c8)
RegOpenKeyExW (Address: 0x18004b4d0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004b4e8)
RtlLookupFunctionEntry (Address: 0x18004b4f0)
RtlVirtualUnwind (Address: 0x18004b4e0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18004b500)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004b518)
AcquireSRWLockShared (Address: 0x18004b520)
CreateEventExW (Address: 0x18004b578)
CreateMutexExW (Address: 0x18004b580)
CreateSemaphoreExW (Address: 0x18004b530)
DeleteCriticalSection (Address: 0x18004b548)
EnterCriticalSection (Address: 0x18004b538)
InitializeCriticalSectionEx (Address: 0x18004b570)
InitializeSRWLock (Address: 0x18004b5a0)
LeaveCriticalSection (Address: 0x18004b528)
OpenSemaphoreW (Address: 0x18004b568)
ReleaseMutex (Address: 0x18004b558)
ReleaseSemaphore (Address: 0x18004b540)
ReleaseSRWLockExclusive (Address: 0x18004b598)
ReleaseSRWLockShared (Address: 0x18004b510)
ResetEvent (Address: 0x18004b590)
SetEvent (Address: 0x18004b588)
WaitForSingleObject (Address: 0x18004b550)
WaitForSingleObjectEx (Address: 0x18004b560)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18004b5b0)
Sleep (Address: 0x18004b5b8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18004b5d8)
GetSystemTimeAsFileTime (Address: 0x18004b5d0)
GetTickCount (Address: 0x18004b5c8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004b638)
CloseThreadpoolWait (Address: 0x18004b620)
CloseThreadpoolWork (Address: 0x18004b628)
CreateThreadpoolTimer (Address: 0x18004b608)
CreateThreadpoolWait (Address: 0x18004b610)
CreateThreadpoolWork (Address: 0x18004b618)
FreeLibraryWhenCallbackReturns (Address: 0x18004b630)
SetThreadpoolTimer (Address: 0x18004b600)
SetThreadpoolWait (Address: 0x18004b5f8)
SubmitThreadpoolWork (Address: 0x18004b5e8)
WaitForThreadpoolTimerCallbacks (Address: 0x18004b640)
WaitForThreadpoolWaitCallbacks (Address: 0x18004b5f0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18004b658)
EncodePointer (Address: 0x18004b650)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x18004b688)
EventRegister (Address: 0x18004b670)
EventSetInformation (Address: 0x18004b668)
EventUnregister (Address: 0x18004b680)
EventWriteTransfer (Address: 0x18004b678)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x18004b6c0)
GetLengthSid (Address: 0x18004b698)
GetTokenInformation (Address: 0x18004b6a8)
ImpersonateLoggedOnUser (Address: 0x18004b6b8)
IsValidSecurityDescriptor (Address: 0x18004b6a0)
IsValidSid (Address: 0x18004b6c8)
RevertToSelf (Address: 0x18004b6b0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18004b6d8)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18004b6e0)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18004b6f0)
SHTaskPoolQueueTask (Address: 0x18004b6f8)

msvcrt.dll

__C_specific_handler (Address: 0x18004b738)
__CxxFrameHandler3 (Address: 0x18004b728)
__dllonexit (Address: 0x18004b7a0)
_amsg_exit (Address: 0x18004b750)
_callnewh (Address: 0x18004b778)
_initterm (Address: 0x18004b748)
_lock (Address: 0x18004b730)
_onexit (Address: 0x18004b708)
_purecall (Address: 0x18004b790)
_unlock (Address: 0x18004b740)
_vsnwprintf (Address: 0x18004b710)
_XcptFilter (Address: 0x18004b758)
free (Address: 0x18004b788)
malloc (Address: 0x18004b780)
memcmp (Address: 0x18004b768)
memcpy (Address: 0x18004b770)
memcpy_s (Address: 0x18004b798)
memmove (Address: 0x18004b760)
memmove_s (Address: 0x18004b720)
memset (Address: 0x18004b7a8)
toupper (Address: 0x18004b718)

ntdll.dll

EtwEventEnabled (Address: 0x18004b7b8)
EtwEventRegister (Address: 0x18004b7c0)
EtwEventUnregister (Address: 0x18004b7c8)
EtwEventWrite (Address: 0x18004b818)
NtQueryInformationThread (Address: 0x18004b848)
NtQueryInformationToken (Address: 0x18004b838)
NtSetInformationFile (Address: 0x18004b858)
NtSetInformationThread (Address: 0x18004b840)
RtlAcquireSRWLockExclusive (Address: 0x18004b7e8)
RtlAcquireSRWLockShared (Address: 0x18004b7d8)
RtlConvertSidToUnicodeString (Address: 0x18004b800)
RtlCopySid (Address: 0x18004b828)
RtlDeleteCriticalSection (Address: 0x18004b870)
RtlEnterCriticalSection (Address: 0x18004b868)
RtlFreeUnicodeString (Address: 0x18004b808)
RtlGetAppContainerSidType (Address: 0x18004b830)
RtlInitializeCriticalSection (Address: 0x18004b878)
RtlInitializeSRWLock (Address: 0x18004b7f0)
RtlLeaveCriticalSection (Address: 0x18004b860)
RtlNtStatusToDosErrorNoTeb (Address: 0x18004b850)
RtlReleaseSRWLockExclusive (Address: 0x18004b7e0)
RtlReleaseSRWLockShared (Address: 0x18004b7d0)
RtlValidSid (Address: 0x18004b7f8)
WinSqmIncrementDWORD (Address: 0x18004b810)
WinSqmSetDWORD (Address: 0x18004b880)
WinSqmSetString (Address: 0x18004b820)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18004b208)
CStdStubBuffer_Connect (Address: 0x18004b188)
CStdStubBuffer_CountRefs (Address: 0x18004b1f8)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18004b1f0)
CStdStubBuffer_DebugServerRelease (Address: 0x18004b1d0)
CStdStubBuffer_Disconnect (Address: 0x18004b1c8)
CStdStubBuffer_Invoke (Address: 0x18004b1b8)
CStdStubBuffer_IsIIDSupported (Address: 0x18004b190)
CStdStubBuffer_QueryInterface (Address: 0x18004b1e0)
I_RpcExceptionFilter (Address: 0x18004b148)
IUnknown_AddRef_Proxy (Address: 0x18004b1e8)
IUnknown_QueryInterface_Proxy (Address: 0x18004b1b0)
IUnknown_Release_Proxy (Address: 0x18004b200)
NdrClientCall3 (Address: 0x18004b158)
NdrCStdStubBuffer_Release (Address: 0x18004b168)
NdrCStdStubBuffer2_Release (Address: 0x18004b180)
NdrDllCanUnloadNow (Address: 0x18004b170)
NdrDllGetClassObject (Address: 0x18004b178)
NdrOleAllocate (Address: 0x18004b1d8)
NdrOleFree (Address: 0x18004b210)
NdrStubCall3 (Address: 0x18004b198)
NdrStubForwardingFunction (Address: 0x18004b1c0)
RpcBindingFromStringBindingW (Address: 0x18004b1a8)
RpcBindingSetAuthInfoExW (Address: 0x18004b160)
RpcStringBindingComposeW (Address: 0x18004b1a0)
RpcStringFreeW (Address: 0x18004b150)