Windows.System.Profile.RetailInfo.dll

Description: Windows.System.Profile.RetailInfo Runtime DLL

Version: 10.0.19041.5198

Architecture: 64-bit

Operating System: Windows NT

SHA256: d1671e12479110e4638a842e44db8231

File Size: 138.0 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x2040)
DllGetActivationFactory (Ordinal: 2, Address: 0x1e60)
DllGetClassObject (Ordinal: 3, Address: 0x20b0)
GetProxyDllInfo (Ordinal: 4, Address: 0x1a70)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180019750)
CoCreateInstance (Address: 0x180019748)
CoGetCallContext (Address: 0x180019720)
CoMarshalInterface (Address: 0x180019730)
CoReleaseMarshalData (Address: 0x180019740)
CoTaskMemAlloc (Address: 0x180019718)
CoTaskMemFree (Address: 0x180019728)
CreateStreamOnHGlobal (Address: 0x180019738)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x180019760)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x180019828)
CStdStubBuffer2_CountRefs (Address: 0x1800197a8)
CStdStubBuffer2_Disconnect (Address: 0x180019770)
CStdStubBuffer2_QueryInterface (Address: 0x180019858)
NdrProxyForwardingFunction3 (Address: 0x180019820)
NdrProxyForwardingFunction4 (Address: 0x1800197c8)
NdrProxyForwardingFunction5 (Address: 0x180019850)
ObjectStublessClient10 (Address: 0x180019808)
ObjectStublessClient11 (Address: 0x1800197b0)
ObjectStublessClient12 (Address: 0x1800197c0)
ObjectStublessClient13 (Address: 0x180019840)
ObjectStublessClient14 (Address: 0x1800197b8)
ObjectStublessClient15 (Address: 0x180019780)
ObjectStublessClient16 (Address: 0x180019810)
ObjectStublessClient17 (Address: 0x180019800)
ObjectStublessClient18 (Address: 0x180019790)
ObjectStublessClient19 (Address: 0x180019788)
ObjectStublessClient20 (Address: 0x180019860)
ObjectStublessClient21 (Address: 0x180019818)
ObjectStublessClient22 (Address: 0x1800197a0)
ObjectStublessClient23 (Address: 0x180019778)
ObjectStublessClient24 (Address: 0x180019830)
ObjectStublessClient25 (Address: 0x180019838)
ObjectStublessClient26 (Address: 0x1800197f8)
ObjectStublessClient27 (Address: 0x180019798)
ObjectStublessClient3 (Address: 0x180019848)
ObjectStublessClient4 (Address: 0x1800197d0)
ObjectStublessClient6 (Address: 0x1800197e0)
ObjectStublessClient7 (Address: 0x1800197d8)
ObjectStublessClient8 (Address: 0x1800197e8)
ObjectStublessClient9 (Address: 0x1800197f0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180019878)
IsDebuggerPresent (Address: 0x180019870)
OutputDebugStringW (Address: 0x180019880)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180019890)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800198a0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800198b0)
RaiseException (Address: 0x1800198c0)
SetLastError (Address: 0x1800198d0)
SetUnhandledExceptionFilter (Address: 0x1800198b8)
UnhandledExceptionFilter (Address: 0x1800198c8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800198e0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180019900)
HeapAlloc (Address: 0x1800198f0)
HeapFree (Address: 0x1800198f8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180019918)
LocalFree (Address: 0x180019910)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180019938)
GetModuleFileNameA (Address: 0x180019948)
GetModuleHandleExW (Address: 0x180019930)
GetModuleHandleW (Address: 0x180019940)
GetProcAddress (Address: 0x180019928)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180019958)

api-ms-win-core-path-l1-1-0.dll

PathCchCombine (Address: 0x180019968)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180019998)
GetCurrentProcessId (Address: 0x180019988)
GetCurrentThread (Address: 0x180019990)
GetCurrentThreadId (Address: 0x1800199a0)
OpenProcessToken (Address: 0x180019978)
OpenThreadToken (Address: 0x1800199a8)
TerminateProcess (Address: 0x180019980)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800199b8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800199c8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180019a08)
RegCreateKeyExW (Address: 0x1800199e8)
RegEnumKeyExW (Address: 0x180019a10)
RegEnumValueW (Address: 0x1800199f0)
RegGetValueW (Address: 0x180019a00)
RegOpenKeyExW (Address: 0x1800199f8)
RegQueryInfoKeyW (Address: 0x1800199e0)
RegSetValueExW (Address: 0x1800199d8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180019a20)
RtlLookupFunctionEntry (Address: 0x180019a28)
RtlVirtualUnwind (Address: 0x180019a30)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180019a88)
AcquireSRWLockShared (Address: 0x180019a98)
CreateMutexExW (Address: 0x180019a60)
CreateSemaphoreExW (Address: 0x180019a78)
InitializeSRWLock (Address: 0x180019a70)
OpenSemaphoreW (Address: 0x180019a90)
ReleaseMutex (Address: 0x180019a58)
ReleaseSemaphore (Address: 0x180019a80)
ReleaseSRWLockExclusive (Address: 0x180019a68)
ReleaseSRWLockShared (Address: 0x180019a48)
WaitForSingleObject (Address: 0x180019a50)
WaitForSingleObjectEx (Address: 0x180019a40)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180019ab0)
InitOnceComplete (Address: 0x180019ac0)
InitOnceExecuteOnce (Address: 0x180019ab8)
Sleep (Address: 0x180019aa8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180019ad8)
GetTickCount (Address: 0x180019ad0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180019af0)
EncodePointer (Address: 0x180019ae8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180019b20)
RoOriginateError (Address: 0x180019b00)
RoOriginateErrorW (Address: 0x180019b18)
RoTransformError (Address: 0x180019b08)
SetRestrictedErrorInfo (Address: 0x180019b10)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180019b30)
RoGetMatchingRestrictedErrorInfo (Address: 0x180019b40)
RoReportFailedDelegate (Address: 0x180019b38)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180019b50)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x180019b88)
HSTRING_UserFree64 (Address: 0x180019b80)
HSTRING_UserMarshal (Address: 0x180019bb0)
HSTRING_UserMarshal64 (Address: 0x180019b70)
HSTRING_UserSize (Address: 0x180019bc8)
HSTRING_UserSize64 (Address: 0x180019b90)
HSTRING_UserUnmarshal (Address: 0x180019b68)
HSTRING_UserUnmarshal64 (Address: 0x180019b78)
WindowsCreateString (Address: 0x180019b98)
WindowsCreateStringReference (Address: 0x180019bc0)
WindowsDeleteString (Address: 0x180019ba8)
WindowsDuplicateString (Address: 0x180019ba0)
WindowsGetStringRawBuffer (Address: 0x180019bb8)
WindowsIsStringEmpty (Address: 0x180019bd0)
WindowsStringHasEmbeddedNull (Address: 0x180019b60)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180019bf8)
EventSetInformation (Address: 0x180019be0)
EventUnregister (Address: 0x180019be8)
EventWriteTransfer (Address: 0x180019bf0)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180019c08)
DuplicateTokenEx (Address: 0x180019c10)
GetLengthSid (Address: 0x180019c18)
GetTokenInformation (Address: 0x180019c28)
IsValidSid (Address: 0x180019c20)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180019c38)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180019c48)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x180019c58)
SHTaskPoolQueueTask (Address: 0x180019c60)

msvcrt.dll

__C_specific_handler (Address: 0x180019c88)
__CxxFrameHandler3 (Address: 0x180019c80)
__dllonexit (Address: 0x180019c98)
_amsg_exit (Address: 0x180019cb0)
_callnewh (Address: 0x180019d00)
_CxxThrowException (Address: 0x180019c70)
_initterm (Address: 0x180019cb8)
_lock (Address: 0x180019c78)
_onexit (Address: 0x180019ca0)
_purecall (Address: 0x180019d20)
_unlock (Address: 0x180019cc8)
_vsnprintf_s (Address: 0x180019d10)
_vsnwprintf (Address: 0x180019d28)
_XcptFilter (Address: 0x180019cd0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180019c90)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180019cc0)
??0exception@@QEAA@XZ (Address: 0x180019d18)
??1exception@@UEAA@XZ (Address: 0x180019cd8)
??1type_info@@UEAA@XZ (Address: 0x180019cf0)
?terminate@@YAXXZ (Address: 0x180019ca8)
?what@exception@@UEBAPEBDXZ (Address: 0x180019ce0)
free (Address: 0x180019cf8)
malloc (Address: 0x180019ce8)
memcmp (Address: 0x180019d08)
memcpy_s (Address: 0x180019d30)
memset (Address: 0x180019d38)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1800196d0)
CStdStubBuffer_Connect (Address: 0x180019678)
CStdStubBuffer_CountRefs (Address: 0x1800196f8)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800196a0)
CStdStubBuffer_DebugServerRelease (Address: 0x1800196b0)
CStdStubBuffer_Disconnect (Address: 0x180019698)
CStdStubBuffer_Invoke (Address: 0x180019690)
CStdStubBuffer_IsIIDSupported (Address: 0x180019680)
CStdStubBuffer_QueryInterface (Address: 0x180019700)
IUnknown_AddRef_Proxy (Address: 0x180019670)
IUnknown_QueryInterface_Proxy (Address: 0x180019688)
IUnknown_Release_Proxy (Address: 0x1800196e8)
NdrCStdStubBuffer_Release (Address: 0x1800196b8)
NdrCStdStubBuffer2_Release (Address: 0x1800196d8)
NdrDllCanUnloadNow (Address: 0x1800196c0)
NdrDllGetClassObject (Address: 0x1800196c8)
NdrOleAllocate (Address: 0x1800196f0)
NdrOleFree (Address: 0x1800196a8)
NdrStubCall3 (Address: 0x1800196e0)
NdrStubForwardingFunction (Address: 0x180019708)