Windows.System.Launcher.dll

Description: Windows.System.Launcher

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 6a9d6a57d6f2f9cef623dda95e26b98c

File Size: 739.0 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x2f40)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x2c70)
  • DllGetClassObject (Ordinal: 3, Address: 0x2e50)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-internal-l1-1-1.dll
  • GetPackageFullNameFromToken (Address: 0x18008e7e8)
api-ms-win-appmodel-runtime-internal-l1-1-2.dll
  • GetEffectivePackageStatusForUser (Address: 0x18008e7f8)
api-ms-win-appmodel-runtime-internal-l1-1-4.dll
  • GetExtensionProperty (Address: 0x18008e810)
  • GetExtensionProperty2 (Address: 0x18008e818)
  • IsOnDemandRegistrationSupportedForExtensionCategory (Address: 0x18008e808)
api-ms-win-appmodel-state-l1-2-0.dll
  • CloseState (Address: 0x18008e830)
  • GetSystemAppDataKey (Address: 0x18008e828)
  • OpenStateExplicit (Address: 0x18008e838)
api-ms-win-appmodel-unlock-l1-1-0.dll
  • IsDeveloperModeEnabled (Address: 0x18008e848)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18008e858)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x18008e8a0)
  • CoCreateFreeThreadedMarshaler (Address: 0x18008e868)
  • CoCreateGuid (Address: 0x18008e890)
  • CoCreateInstance (Address: 0x18008e878)
  • CoGetCallContext (Address: 0x18008e888)
  • CoGetInterfaceAndReleaseStream (Address: 0x18008e8a8)
  • CoMarshalInterface (Address: 0x18008e8b0)
  • CoReleaseMarshalData (Address: 0x18008e8c0)
  • CoTaskMemAlloc (Address: 0x18008e870)
  • CoTaskMemFree (Address: 0x18008e880)
  • CoWaitForMultipleHandles (Address: 0x18008e898)
  • CreateStreamOnHGlobal (Address: 0x18008e8b8)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18008e8d0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18008e8e8)
  • IsDebuggerPresent (Address: 0x18008e8f0)
  • OutputDebugStringW (Address: 0x18008e8e0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18008e900)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18008e910)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18008e940)
  • RaiseException (Address: 0x18008e938)
  • SetLastError (Address: 0x18008e920)
  • SetUnhandledExceptionFilter (Address: 0x18008e930)
  • UnhandledExceptionFilter (Address: 0x18008e928)
api-ms-win-core-file-l1-1-0.dll
  • GetFileAttributesW (Address: 0x18008e950)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18008e960)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18008e970)
  • HeapAlloc (Address: 0x18008e978)
  • HeapFree (Address: 0x18008e980)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18008e990)
  • LocalFree (Address: 0x18008e998)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18008e9c8)
  • GetModuleFileNameA (Address: 0x18008e9b0)
  • GetModuleHandleExW (Address: 0x18008e9d0)
  • GetModuleHandleW (Address: 0x18008e9a8)
  • GetProcAddress (Address: 0x18008e9b8)
  • LoadStringW (Address: 0x18008e9c0)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18008e9e0)
api-ms-win-core-path-l1-1-0.dll
  • PathCchAppend (Address: 0x18008e9f0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18008ea00)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18008ea38)
  • GetCurrentProcessId (Address: 0x18008ea20)
  • GetCurrentThread (Address: 0x18008ea28)
  • GetCurrentThreadId (Address: 0x18008ea48)
  • GetProcessId (Address: 0x18008ea10)
  • OpenProcessToken (Address: 0x18008ea40)
  • OpenThreadToken (Address: 0x18008ea18)
  • TerminateProcess (Address: 0x18008ea30)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x18008ea58)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18008ea68)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x18008ea78)
api-ms-win-core-quirks-l1-1-0.dll
  • QuirkIsEnabled (Address: 0x18008ea88)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18008ea98)
  • RegCreateKeyExW (Address: 0x18008eaa8)
  • RegGetValueW (Address: 0x18008eab0)
  • RegOpenKeyExW (Address: 0x18008eab8)
  • RegQueryValueExW (Address: 0x18008eaa0)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyW (Address: 0x18008eac8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18008ead8)
  • RtlLookupFunctionEntry (Address: 0x18008eae8)
  • RtlVirtualUnwind (Address: 0x18008eae0)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindExtensionW (Address: 0x18008eaf8)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrStrIW (Address: 0x18008eb08)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18008eb18)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18008eb88)
  • AcquireSRWLockShared (Address: 0x18008eba8)
  • CreateEventExW (Address: 0x18008eb48)
  • CreateMutexExW (Address: 0x18008eb68)
  • CreateSemaphoreExW (Address: 0x18008eb38)
  • DeleteCriticalSection (Address: 0x18008ebb0)
  • EnterCriticalSection (Address: 0x18008eb30)
  • InitializeCriticalSectionEx (Address: 0x18008eb70)
  • InitializeSRWLock (Address: 0x18008eb90)
  • LeaveCriticalSection (Address: 0x18008eb80)
  • OpenSemaphoreW (Address: 0x18008eb50)
  • ReleaseMutex (Address: 0x18008eb58)
  • ReleaseSemaphore (Address: 0x18008eb98)
  • ReleaseSRWLockExclusive (Address: 0x18008eba0)
  • ReleaseSRWLockShared (Address: 0x18008eb78)
  • SetEvent (Address: 0x18008eb28)
  • WaitForSingleObject (Address: 0x18008eb40)
  • WaitForSingleObjectEx (Address: 0x18008eb60)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18008ebc8)
  • InitOnceComplete (Address: 0x18008ebe0)
  • InitOnceExecuteOnce (Address: 0x18008ebd0)
  • Sleep (Address: 0x18008ebe8)
  • SleepConditionVariableSRW (Address: 0x18008ebc0)
  • WakeAllConditionVariable (Address: 0x18008ebd8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x18008ec08)
  • GetSystemTimeAsFileTime (Address: 0x18008ebf8)
  • GetTickCount (Address: 0x18008ec00)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetProductInfo (Address: 0x18008ec18)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18008ec28)
  • CreateThreadpoolTimer (Address: 0x18008ec30)
  • SetThreadpoolTimer (Address: 0x18008ec38)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18008ec40)
api-ms-win-core-timezone-l1-1-0.dll
  • SystemTimeToFileTime (Address: 0x18008ec50)
api-ms-win-core-url-l1-1-0.dll
  • UrlEscapeW (Address: 0x18008ec60)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18008ec70)
  • EncodePointer (Address: 0x18008ec78)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x18008eca0)
  • RoOriginateError (Address: 0x18008eca8)
  • RoOriginateErrorW (Address: 0x18008ec88)
  • RoTransformError (Address: 0x18008ec98)
  • SetRestrictedErrorInfo (Address: 0x18008ec90)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18008ecc0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18008ecb8)
  • RoReportFailedDelegate (Address: 0x18008ecc8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18008ece0)
  • RoGetActivationFactory (Address: 0x18008ecd8)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
  • RoCreatePropertySetSerializer (Address: 0x18008ecf0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x18008ed38)
  • WindowsConcatString (Address: 0x18008ed30)
  • WindowsCreateString (Address: 0x18008ed00)
  • WindowsCreateStringReference (Address: 0x18008ed48)
  • WindowsDeleteString (Address: 0x18008ed20)
  • WindowsDuplicateString (Address: 0x18008ed10)
  • WindowsGetStringLen (Address: 0x18008ed40)
  • WindowsGetStringRawBuffer (Address: 0x18008ed28)
  • WindowsIsStringEmpty (Address: 0x18008ed08)
  • WindowsStringHasEmbeddedNull (Address: 0x18008ed18)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18008ed60)
  • EventRegister (Address: 0x18008ed70)
  • EventSetInformation (Address: 0x18008ed58)
  • EventUnregister (Address: 0x18008ed78)
  • EventWriteTransfer (Address: 0x18008ed68)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x18008ed88)
  • GetSidSubAuthority (Address: 0x18008ed98)
  • GetTokenInformation (Address: 0x18008ed90)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x18008eda8)
api-ms-win-shcore-obsolete-l1-1-0.dll
  • SHStrDupW (Address: 0x18008edb8)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18008edd0)
  • SHTaskPoolQueueTask (Address: 0x18008edc8)
api-ms-win-shlwapi-winrt-storage-l1-1-1.dll
  • AssocCreate (Address: 0x18008ede0)
combase.dll
  • (Address: 0x18008edf0)
  • (Address: 0x18008edf8)
  • (Address: 0x18008ee00)
  • (Address: 0x18008ee08)
msvcp110_win.dll
  • _Wcscoll (Address: 0x18008ee28)
  • _Wcsxfrm (Address: 0x18008ee30)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18008eeb0)
  • ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18008ee80)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18008eee8)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18008ee50)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18008eeb8)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18008ee48)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x18008eef0)
  • ?_Winerror_map@std@@YAPEBDH@Z (Address: 0x18008ee60)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x18008ee58)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18008eee0)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18008eec8)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18008ee68)
  • ??_7_Facet_base@std@@6B@ (Address: 0x18008ee38)
  • ??_7facet@locale@std@@6B@ (Address: 0x18008ee40)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18008eed8)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x18008ee18)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18008eea8)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x18008eed0)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x18008ee20)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x18008eea0)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x18008eec0)
  • ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x18008ee78)
  • ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x18008ee70)
  • ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x18008ee98)
  • ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x18008ee90)
  • ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x18008ee88)
msvcrt.dll
  • __C_specific_handler (Address: 0x18008eff0)
  • __CxxFrameHandler3 (Address: 0x18008efd8)
  • __dllonexit (Address: 0x18008f030)
  • _amsg_exit (Address: 0x18008f008)
  • _callnewh (Address: 0x18008ef98)
  • _CxxThrowException (Address: 0x18008f018)
  • _initterm (Address: 0x18008f028)
  • _lock (Address: 0x18008f020)
  • _onexit (Address: 0x18008efe0)
  • _purecall (Address: 0x18008efb0)
  • _ui64tow_s (Address: 0x18008ef60)
  • _unlock (Address: 0x18008efd0)
  • _vsnprintf_s (Address: 0x18008ef38)
  • _vsnwprintf (Address: 0x18008f040)
  • _wcsicmp (Address: 0x18008ef28)
  • _wtoi (Address: 0x18008ef58)
  • _XcptFilter (Address: 0x18008f000)
  • ??_V@YAXPEAX@Z (Address: 0x18008efa8)
  • ??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x18008ef78)
  • ??0bad_cast@@QEAA@PEBD@Z (Address: 0x18008ef70)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18008ef50)
  • ??0exception@@QEAA@XZ (Address: 0x18008ef48)
  • ??1bad_cast@@UEAA@XZ (Address: 0x18008ef80)
  • ??1exception@@UEAA@XZ (Address: 0x18008ef40)
  • ??1type_info@@UEAA@XZ (Address: 0x18008efa0)
  • ??3@YAXPEAX@Z (Address: 0x18008efe8)
  • ?terminate@@YAXXZ (Address: 0x18008efb8)
  • free (Address: 0x18008f010)
  • malloc (Address: 0x18008f048)
  • mbstowcs (Address: 0x18008ef30)
  • memcmp (Address: 0x18008eff8)
  • memcpy (Address: 0x18008f038)
  • memcpy_s (Address: 0x18008ef08)
  • memmove (Address: 0x18008efc0)
  • memmove_s (Address: 0x18008efc8)
  • memset (Address: 0x18008f050)
  • realloc (Address: 0x18008ef00)
  • sprintf_s (Address: 0x18008ef10)
  • strchr (Address: 0x18008ef88)
  • wcscat_s (Address: 0x18008ef20)
  • wcschr (Address: 0x18008ef90)
  • wcscpy_s (Address: 0x18008ef18)
  • wcsnlen (Address: 0x18008ef68)
ntdll.dll
  • NtQueryInformationToken (Address: 0x18008f068)
  • NtQueryWnfStateData (Address: 0x18008f090)
  • RtlAllocateHeap (Address: 0x18008f070)
  • RtlCompareUnicodeString (Address: 0x18008f080)
  • RtlFreeHeap (Address: 0x18008f060)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x18008f0a8)
  • RtlInitUnicodeString (Address: 0x18008f088)
  • RtlIsMultiSessionSku (Address: 0x18008f0a0)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x18008f078)
  • RtlPublishWnfStateData (Address: 0x18008f098)
  • RtlQueryPackageClaims (Address: 0x18008f0b0)
OLEAUT32.dll
  • SysAllocString (Address: 0x18008e7a0)
  • VariantInit (Address: 0x18008e7a8)
RPCRT4.dll
  • I_RpcBindingInqLocalClientPID (Address: 0x18008e7b8)
Windows.Storage.dll
  • (Address: 0x18008e7d0)
  • SHCreateItemFromParsingName (Address: 0x18008e7d8)
  • STORAGE_CStorageItem_GetValidatedStorageItem (Address: 0x18008e7c8)