Windows.UI.BlockedShutdown.dll

Description: Blocked Shutdown User Experience

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6033

Architecture: 64-bit

Operating System: Windows NT

SHA256: fe86b74ecca9d21ba7cd255e5004664f

File Size: 399.5 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x51c0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x4f20)
  • DllGetClassObject (Ordinal: 3, Address: 0x50d0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180047030)
  • CoCreateInstance (Address: 0x180046ff0)
  • CoDecrementMTAUsage (Address: 0x180046ff8)
  • CoGetContextToken (Address: 0x180047020)
  • CoIncrementMTAUsage (Address: 0x180047038)
  • CoMarshalInterface (Address: 0x180047040)
  • CoReleaseMarshalData (Address: 0x180047048)
  • CoTaskMemAlloc (Address: 0x180047010)
  • CoTaskMemFree (Address: 0x180047008)
  • CoTaskMemRealloc (Address: 0x180047028)
  • CoWaitForMultipleHandles (Address: 0x180047000)
  • CreateStreamOnHGlobal (Address: 0x180047018)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x180047058)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180047070)
  • IsDebuggerPresent (Address: 0x180047078)
  • OutputDebugStringW (Address: 0x180047068)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180047088)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180047098)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800470a8)
  • RaiseException (Address: 0x1800470c0)
  • SetLastError (Address: 0x1800470c8)
  • SetUnhandledExceptionFilter (Address: 0x1800470b0)
  • UnhandledExceptionFilter (Address: 0x1800470b8)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x1800470d8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800470e8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180047100)
  • HeapAlloc (Address: 0x180047108)
  • HeapFree (Address: 0x1800470f8)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180047118)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180047128)
  • GetModuleFileNameA (Address: 0x180047148)
  • GetModuleHandleExW (Address: 0x180047130)
  • GetModuleHandleW (Address: 0x180047138)
  • GetProcAddress (Address: 0x180047140)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180047158)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180047168)
  • GetCurrentProcessId (Address: 0x180047188)
  • GetCurrentThreadId (Address: 0x180047170)
  • OpenProcessToken (Address: 0x180047180)
  • TerminateProcess (Address: 0x180047178)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800471a0)
  • OpenProcess (Address: 0x180047198)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800471b0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800471c8)
  • RegOpenKeyExW (Address: 0x1800471c0)
  • RegQueryValueExW (Address: 0x1800471d0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800471e0)
  • RtlLookupFunctionEntry (Address: 0x1800471e8)
  • RtlVirtualUnwind (Address: 0x1800471f0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180047298)
  • AcquireSRWLockShared (Address: 0x180047248)
  • CreateEventExW (Address: 0x180047238)
  • CreateEventW (Address: 0x1800472a0)
  • CreateMutexExW (Address: 0x180047250)
  • CreateSemaphoreExW (Address: 0x180047208)
  • DeleteCriticalSection (Address: 0x180047220)
  • EnterCriticalSection (Address: 0x180047290)
  • InitializeCriticalSection (Address: 0x180047258)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180047210)
  • InitializeSRWLock (Address: 0x180047218)
  • LeaveCriticalSection (Address: 0x180047200)
  • OpenSemaphoreW (Address: 0x180047288)
  • ReleaseMutex (Address: 0x180047260)
  • ReleaseSemaphore (Address: 0x180047228)
  • ReleaseSRWLockExclusive (Address: 0x180047278)
  • ReleaseSRWLockShared (Address: 0x180047280)
  • ResetEvent (Address: 0x180047270)
  • SetEvent (Address: 0x180047240)
  • WaitForSingleObject (Address: 0x180047230)
  • WaitForSingleObjectEx (Address: 0x180047268)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800472b0)
  • InitOnceComplete (Address: 0x1800472c0)
  • InitOnceExecuteOnce (Address: 0x1800472b8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800472d0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800472e0)
  • EncodePointer (Address: 0x1800472e8)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180047318)
  • RoOriginateError (Address: 0x180047310)
  • RoOriginateErrorW (Address: 0x180047308)
  • RoTransformError (Address: 0x1800472f8)
  • SetRestrictedErrorInfo (Address: 0x180047300)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x180047328)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x180047338)
  • RoReportFailedDelegate (Address: 0x180047330)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x180047350)
  • RoGetActivationFactory (Address: 0x180047348)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x180047390)
  • WindowsConcatString (Address: 0x180047388)
  • WindowsCreateString (Address: 0x180047380)
  • WindowsCreateStringReference (Address: 0x180047378)
  • WindowsDeleteString (Address: 0x180047370)
  • WindowsDuplicateString (Address: 0x180047368)
  • WindowsGetStringLen (Address: 0x180047360)
  • WindowsGetStringRawBuffer (Address: 0x180047398)
  • WindowsIsStringEmpty (Address: 0x1800473a0)
  • WindowsStringHasEmbeddedNull (Address: 0x1800473a8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180047428)
  • __CxxFrameHandler3 (Address: 0x180047480)
  • __CxxFrameHandler4 (Address: 0x180047470)
  • __std_terminate (Address: 0x180047460)
  • _CxxThrowException (Address: 0x180047488)
  • _o___std_exception_copy (Address: 0x1800474a0)
  • _o___std_exception_destroy (Address: 0x180047498)
  • _o___std_type_info_destroy_list (Address: 0x180047490)
  • _o___stdio_common_vsnprintf_s (Address: 0x180047458)
  • _o___stdio_common_vswprintf (Address: 0x180047448)
  • _o__callnewh (Address: 0x180047438)
  • _o__cexit (Address: 0x180047430)
  • _o__configure_narrow_argv (Address: 0x180047450)
  • _o__crt_atexit (Address: 0x180047440)
  • _o__errno (Address: 0x1800473b8)
  • _o__execute_onexit_table (Address: 0x1800473c0)
  • _o__initialize_narrow_environment (Address: 0x1800473c8)
  • _o__initialize_onexit_table (Address: 0x1800473d0)
  • _o__invalid_parameter_noinfo (Address: 0x1800473d8)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800473e0)
  • _o__purecall (Address: 0x1800473e8)
  • _o__register_onexit_function (Address: 0x1800473f0)
  • _o__seh_filter_dll (Address: 0x1800473f8)
  • _o_free (Address: 0x180047408)
  • _o_malloc (Address: 0x180047410)
  • _o_realloc (Address: 0x180047418)
  • _o_terminate (Address: 0x180047420)
  • memcpy (Address: 0x1800474a8)
  • memmove (Address: 0x180047400)
  • wcsrchr (Address: 0x180047478)
  • wcsstr (Address: 0x180047468)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800474c0)
  • _initterm_e (Address: 0x1800474b8)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800474d8)
  • wcslen (Address: 0x1800474d0)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1800474f0)
  • EventRegister (Address: 0x1800474f8)
  • EventSetInformation (Address: 0x1800474e8)
  • EventUnregister (Address: 0x180047500)
  • EventWriteTransfer (Address: 0x180047508)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x180047518)
msvcp_win.dll
  • _Cnd_broadcast (Address: 0x180047600)
  • _Cnd_destroy_in_situ (Address: 0x180047620)
  • _Cnd_init_in_situ (Address: 0x180047630)
  • _Cnd_wait (Address: 0x180047568)
  • _Mtx_destroy_in_situ (Address: 0x180047618)
  • _Mtx_init_in_situ (Address: 0x180047628)
  • _Mtx_lock (Address: 0x180047580)
  • _Mtx_unlock (Address: 0x180047578)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x1800475c8)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180047558)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180047608)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180047590)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180047588)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180047550)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180047560)
  • ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x1800475b8)
  • ?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z (Address: 0x180047640)
  • ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z (Address: 0x1800475e0)
  • ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ (Address: 0x1800475e8)
  • ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x1800475c0)
  • ?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ (Address: 0x180047538)
  • ?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ (Address: 0x1800475a0)
  • ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180047638)
  • ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z (Address: 0x1800475f8)
  • ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180047540)
  • ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180047648)
  • ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180047528)
  • ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180047530)
  • ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z (Address: 0x1800475d0)
  • ?_ReportUnobservedException@details@Concurrency@@YAXXZ (Address: 0x180047598)
  • ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ (Address: 0x1800475a8)
  • ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z (Address: 0x1800475d8)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x180047570)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800475f0)
  • ?_XGetLastError@std@@YAXXZ (Address: 0x1800475b0)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180047548)
  • ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ (Address: 0x180047610)
SHCORE.dll
  • SHTaskPoolQueueTask (Address: 0x180046fe0)
wincorlib.DLL
  • ?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z (Address: 0x1800476c0)
  • ?__abi_FailFast@@YAXXZ (Address: 0x180047828)
  • ?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z (Address: 0x1800476e8)
  • ?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z (Address: 0x1800476c8)
  • ?__abi_WinRTraiseAccessDeniedException@@YAXXZ (Address: 0x1800477f0)
  • ?__abi_WinRTraiseChangedStateException@@YAXXZ (Address: 0x180047818)
  • ?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ (Address: 0x180047800)
  • ?__abi_WinRTraiseCOMException@@YAXJ@Z (Address: 0x180047808)
  • ?__abi_WinRTraiseDisconnectedException@@YAXXZ (Address: 0x1800477d8)
  • ?__abi_WinRTraiseFailureException@@YAXXZ (Address: 0x1800477e0)
  • ?__abi_WinRTraiseInvalidArgumentException@@YAXXZ (Address: 0x1800477f8)
  • ?__abi_WinRTraiseInvalidCastException@@YAXXZ (Address: 0x180047668)
  • ?__abi_WinRTraiseNotImplementedException@@YAXXZ (Address: 0x180047670)
  • ?__abi_WinRTraiseNullReferenceException@@YAXXZ (Address: 0x180047810)
  • ?__abi_WinRTraiseObjectDisposedException@@YAXXZ (Address: 0x180047658)
  • ?__abi_WinRTraiseOperationCanceledException@@YAXXZ (Address: 0x1800477e8)
  • ?__abi_WinRTraiseOutOfBoundsException@@YAXXZ (Address: 0x180047820)
  • ?__abi_WinRTraiseOutOfMemoryException@@YAXXZ (Address: 0x180047848)
  • ?__abi_WinRTraiseWrongThreadException@@YAXXZ (Address: 0x180047660)
  • ??0ChangedStateException@Platform@@QE$AAA@XZ (Address: 0x180047788)
  • ??0Delegate@Platform@@QE$AAA@XZ (Address: 0x180047740)
  • ??0DisconnectedException@Platform@@QE$AAA@XZ (Address: 0x180047738)
  • ??0FailureException@Platform@@QE$AAA@XZ (Address: 0x180047778)
  • ??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z (Address: 0x180047718)
  • ??0InvalidArgumentException@Platform@@QE$AAA@XZ (Address: 0x180047708)
  • ??0NotImplementedException@Platform@@QE$AAA@XZ (Address: 0x1800476d8)
  • ??0NullReferenceException@Platform@@QE$AAA@XZ (Address: 0x180047728)
  • ??0Object@Platform@@QE$AAA@XZ (Address: 0x180047688)
  • ??0OutOfBoundsException@Platform@@QE$AAA@XZ (Address: 0x180047780)
  • ??0OutOfMemoryException@Platform@@QE$AAA@XZ (Address: 0x180047770)
  • ??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z (Address: 0x180047720)
  • ?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z (Address: 0x180047698)
  • ?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z (Address: 0x1800476b0)
  • ?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z (Address: 0x1800476d0)
  • ?CreateException@Exception@Platform@@SAPE$AAV12@H@Z (Address: 0x1800476b8)
  • ?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z (Address: 0x1800477c8)
  • ?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z (Address: 0x1800476f0)
  • ?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z (Address: 0x180047710)
  • ?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z (Address: 0x180047750)
  • ?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z (Address: 0x1800477b0)
  • ?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z (Address: 0x1800477c0)
  • ?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z (Address: 0x1800477b8)
  • ?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z (Address: 0x180047760)
  • ?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z (Address: 0x180047758)
  • ?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z (Address: 0x1800476a8)
  • ?Free@Heap@Details@Platform@@SAXPEAX@Z (Address: 0x180047690)
  • ?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ (Address: 0x1800477d0)
  • ?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z (Address: 0x180047840)
  • ?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z (Address: 0x180047748)
  • ?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z (Address: 0x1800476f8)
  • ?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z (Address: 0x180047838)
  • ?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ (Address: 0x1800477a0)
  • ?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z (Address: 0x180047798)
  • ?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z (Address: 0x1800476e0)
  • ?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z (Address: 0x180047700)
  • ?InitializeData@Details@Platform@@YAJH@Z (Address: 0x180047678)
  • ?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z (Address: 0x1800477a8)
  • ?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z (Address: 0x180047830)
  • ?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z (Address: 0x180047790)
  • ?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ (Address: 0x1800476a0)
  • ?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z (Address: 0x180047730)
  • ?ToString@uint32@default@@QEAAPE$AAVString@Platform@@XZ (Address: 0x180047768)
  • ?UninitializeData@Details@Platform@@YAXH@Z (Address: 0x180047680)