Windows.UI.dll

Description: Windows Runtime UI Foundation DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: b57cdb3838bc6d174d7de6191d155643

File Size: 1.2 MB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 1500, Address: 0x1e990)
DllCanUnloadNow (Ordinal: 1501, Address: 0x24450)
DllGetActivationFactory (Ordinal: 1502, Address: 0x20780)
DllGetClassObject (Ordinal: 1503, Address: 0x22450)
DllRegisterServer (Ordinal: 1504, Address: 0x4e550)
DllUnregisterServer (Ordinal: 1505, Address: 0x4e580)
(Ordinal: 1600, Address: 0x9240)
CreateControlInput (Ordinal: 1601, Address: 0x58bf0)
(Ordinal: 1602, Address: 0x55410)
CreateControlInputEx (Ordinal: 1603, Address: 0x1e2c0)
(Ordinal: 1604, Address: 0x55450)
(Ordinal: 1700, Address: 0x1dda0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800ee130)

api-ms-win-core-atoms-l1-1-0.dll

GlobalAddAtomW (Address: 0x1800ee140)
GlobalDeleteAtom (Address: 0x1800ee148)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800ee168)
IsDebuggerPresent (Address: 0x1800ee158)
OutputDebugStringW (Address: 0x1800ee160)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800ee178)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800ee188)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800ee1b8)
RaiseException (Address: 0x1800ee198)
SetLastError (Address: 0x1800ee1b0)
SetUnhandledExceptionFilter (Address: 0x1800ee1a8)
UnhandledExceptionFilter (Address: 0x1800ee1a0)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x1800ee1c8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800ee1e0)
DuplicateHandle (Address: 0x1800ee1d8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800ee1f8)
HeapAlloc (Address: 0x1800ee200)
HeapFree (Address: 0x1800ee1f0)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1800ee210)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

MulDiv (Address: 0x1800ee220)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800ee238)
GetModuleFileNameA (Address: 0x1800ee260)
GetModuleFileNameW (Address: 0x1800ee240)
GetModuleHandleExW (Address: 0x1800ee230)
GetModuleHandleW (Address: 0x1800ee248)
GetProcAddress (Address: 0x1800ee258)
LoadLibraryExW (Address: 0x1800ee250)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800ee270)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800ee2b0)
GetCurrentProcessId (Address: 0x1800ee280)
GetCurrentThread (Address: 0x1800ee2d0)
GetCurrentThreadId (Address: 0x1800ee290)
GetProcessId (Address: 0x1800ee2a8)
OpenProcessToken (Address: 0x1800ee298)
TerminateProcess (Address: 0x1800ee2c0)
TlsAlloc (Address: 0x1800ee2c8)
TlsFree (Address: 0x1800ee2b8)
TlsGetValue (Address: 0x1800ee288)
TlsSetValue (Address: 0x1800ee2a0)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x1800ee2e8)
OpenProcess (Address: 0x1800ee2e0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800ee2f8)
QueryPerformanceFrequency (Address: 0x1800ee300)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x1800ee310)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800ee328)
RegGetValueW (Address: 0x1800ee320)
RegOpenKeyExW (Address: 0x1800ee330)
RegQueryValueExW (Address: 0x1800ee338)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800ee348)
RtlLookupFunctionEntry (Address: 0x1800ee350)
RtlVirtualUnwind (Address: 0x1800ee358)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x1800ee368)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrStrIW (Address: 0x1800ee378)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800ee388)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800ee400)
AcquireSRWLockShared (Address: 0x1800ee3b8)
CreateEventExW (Address: 0x1800ee408)
CreateEventW (Address: 0x1800ee3d0)
CreateMutexExW (Address: 0x1800ee3a0)
CreateSemaphoreExW (Address: 0x1800ee3d8)
DeleteCriticalSection (Address: 0x1800ee3c8)
EnterCriticalSection (Address: 0x1800ee420)
InitializeCriticalSectionEx (Address: 0x1800ee398)
InitializeSRWLock (Address: 0x1800ee430)
LeaveCriticalSection (Address: 0x1800ee3f0)
OpenSemaphoreW (Address: 0x1800ee3c0)
ReleaseMutex (Address: 0x1800ee3f8)
ReleaseSemaphore (Address: 0x1800ee410)
ReleaseSRWLockExclusive (Address: 0x1800ee418)
ReleaseSRWLockShared (Address: 0x1800ee3b0)
SetEvent (Address: 0x1800ee3a8)
SleepEx (Address: 0x1800ee428)
WaitForSingleObject (Address: 0x1800ee3e0)
WaitForSingleObjectEx (Address: 0x1800ee3e8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800ee450)
InitOnceComplete (Address: 0x1800ee458)
InitOnceExecuteOnce (Address: 0x1800ee448)
Sleep (Address: 0x1800ee440)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800ee468)
GetTickCount (Address: 0x1800ee470)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimePreciseAsFileTime (Address: 0x1800ee480)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800ee4b0)
CloseThreadpoolWait (Address: 0x1800ee4c0)
CreateThreadpoolTimer (Address: 0x1800ee4a0)
CreateThreadpoolWait (Address: 0x1800ee490)
SetThreadpoolTimer (Address: 0x1800ee4a8)
SetThreadpoolWait (Address: 0x1800ee4c8)
WaitForThreadpoolTimerCallbacks (Address: 0x1800ee4b8)
WaitForThreadpoolWaitCallbacks (Address: 0x1800ee498)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x1800ee4e0)
DeleteTimerQueueTimer (Address: 0x1800ee4d8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800ee4f8)
EncodePointer (Address: 0x1800ee4f0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x1800ee528)
GetTraceEnableLevel (Address: 0x1800ee510)
GetTraceLoggerHandle (Address: 0x1800ee530)
RegisterTraceGuidsW (Address: 0x1800ee518)
TraceMessage (Address: 0x1800ee508)
UnregisterTraceGuids (Address: 0x1800ee520)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800ee548)
EventRegister (Address: 0x1800ee540)
EventSetInformation (Address: 0x1800ee560)
EventUnregister (Address: 0x1800ee558)
EventWriteTransfer (Address: 0x1800ee550)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x1800ee570)
GetTokenInformation (Address: 0x1800ee578)

api-ms-win-security-lsalookup-l1-1-0.dll

LsaLookupClose (Address: 0x1800ee5a0)
LsaLookupFreeMemory (Address: 0x1800ee598)
LsaLookupGetDomainInfo (Address: 0x1800ee588)
LsaLookupOpenLocalPolicy (Address: 0x1800ee590)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x1800ee5b0)

api-ms-win-shcore-scaling-l1-1-0.dll

GetScaleFactorForDevice (Address: 0x1800ee5c0)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x1800ee5d8)
GetScaleFactorForMonitor (Address: 0x1800ee5d0)

combase.dll

(Address: 0x1800ee5e8)
(Address: 0x1800ee5f0)
(Address: 0x1800ee5f8)
(Address: 0x1800ee600)
(Address: 0x1800ee608)
(Address: 0x1800ee618)
(Address: 0x1800ee620)
(Address: 0x1800ee628)
(Address: 0x1800ee630)
(Address: 0x1800ee638)
(Address: 0x1800ee640)
(Address: 0x1800ee648)
(Address: 0x1800ee650)
(Address: 0x1800ee658)
(Address: 0x1800ee660)
(Address: 0x1800ee680)
(Address: 0x1800ee688)
(Address: 0x1800ee698)
(Address: 0x1800ee6b0)
(Address: 0x1800ee6b8)
(Address: 0x1800ee6c8)
(Address: 0x1800ee6d0)
(Address: 0x1800ee6d8)
(Address: 0x1800ee6e0)
(Address: 0x1800ee6e8)
(Address: 0x1800ee6f8)
(Address: 0x1800ee708)
(Address: 0x1800ee710)
(Address: 0x1800ee720)
(Address: 0x1800ee728)
(Address: 0x1800ee730)
(Address: 0x1800ee738)
(Address: 0x1800ee740)
(Address: 0x1800ee748)
(Address: 0x1800ee758)
(Address: 0x1800ee760)
(Address: 0x1800ee768)
(Address: 0x1800ee770)
(Address: 0x1800ee780)
CStdStubBuffer_AddRef (Address: 0x1800ee6f0)
CStdStubBuffer_Connect (Address: 0x1800ee668)
CStdStubBuffer_CountRefs (Address: 0x1800ee6c0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800ee750)
CStdStubBuffer_DebugServerRelease (Address: 0x1800ee6a0)
CStdStubBuffer_Disconnect (Address: 0x1800ee690)
CStdStubBuffer_Invoke (Address: 0x1800ee778)
CStdStubBuffer_IsIIDSupported (Address: 0x1800ee678)
CStdStubBuffer_QueryInterface (Address: 0x1800ee6a8)
CStdStubBuffer2_Connect (Address: 0x1800ee670)
CStdStubBuffer2_CountRefs (Address: 0x1800ee610)
CStdStubBuffer2_Disconnect (Address: 0x1800ee718)
CStdStubBuffer2_QueryInterface (Address: 0x1800ee700)

InputHost.dll

CreateInputSystemClientConnection (Address: 0x1800edf00)

msvcrt.dll

__C_specific_handler (Address: 0x1800ee7b8)
__CxxFrameHandler3 (Address: 0x1800ee8a8)
__dllonexit (Address: 0x1800ee798)
_amsg_exit (Address: 0x1800ee7d8)
_callnewh (Address: 0x1800ee8c8)
_CxxThrowException (Address: 0x1800ee890)
_finite (Address: 0x1800ee8c0)
_initterm (Address: 0x1800ee7c0)
_isnan (Address: 0x1800ee8b8)
_lock (Address: 0x1800ee7a8)
_onexit (Address: 0x1800ee790)
_purecall (Address: 0x1800ee810)
_unlock (Address: 0x1800ee7a0)
_vsnprintf_s (Address: 0x1800ee7f0)
_vsnwprintf (Address: 0x1800ee828)
_XcptFilter (Address: 0x1800ee7e0)
??_V@YAXPEAX@Z (Address: 0x1800ee830)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800ee7f8)
??0exception@@QEAA@XZ (Address: 0x1800ee800)
??1exception@@UEAA@XZ (Address: 0x1800ee808)
??1type_info@@UEAA@XZ (Address: 0x1800ee8a0)
??3@YAXPEAX@Z (Address: 0x1800ee818)
?terminate@@YAXXZ (Address: 0x1800ee7b0)
atan2 (Address: 0x1800ee888)
cos (Address: 0x1800ee880)
cosf (Address: 0x1800ee878)
floorf (Address: 0x1800ee870)
fmod (Address: 0x1800ee868)
free (Address: 0x1800ee7d0)
malloc (Address: 0x1800ee7c8)
memcmp (Address: 0x1800ee860)
memcpy (Address: 0x1800ee858)
memcpy_s (Address: 0x1800ee820)
memmove (Address: 0x1800ee850)
memmove_s (Address: 0x1800ee7e8)
memset (Address: 0x1800ee848)
realloc (Address: 0x1800ee8b0)
sin (Address: 0x1800ee840)
sinf (Address: 0x1800ee838)
sqrt (Address: 0x1800ee898)
sqrtf (Address: 0x1800ee8d0)

ntdll.dll

NtQueryWnfStateData (Address: 0x1800ee900)
RtlGetDeviceFamilyInfoEnum (Address: 0x1800ee908)
RtlIsMultiSessionSku (Address: 0x1800ee8f8)
RtlIsParentOfChildAppContainer (Address: 0x1800ee910)
RtlLoadString (Address: 0x1800ee8e0)
RtlSubscribeWnfStateChangeNotification (Address: 0x1800ee8e8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800ee8f0)

OLEAUT32.dll

VariantClear (Address: 0x1800edf10)

RPCRT4.dll

IUnknown_AddRef_Proxy (Address: 0x1800edf28)
IUnknown_QueryInterface_Proxy (Address: 0x1800edf40)
IUnknown_Release_Proxy (Address: 0x1800edf60)
NdrCStdStubBuffer_Release (Address: 0x1800edf78)
NdrCStdStubBuffer2_Release (Address: 0x1800edf80)
NdrDllCanUnloadNow (Address: 0x1800edf70)
NdrDllGetClassObject (Address: 0x1800edf68)
NdrDllRegisterProxy (Address: 0x1800edf58)
NdrDllUnregisterProxy (Address: 0x1800edf50)
NdrOleAllocate (Address: 0x1800edf38)
NdrOleFree (Address: 0x1800edf20)
NdrStubCall3 (Address: 0x1800edf48)
NdrStubForwardingFunction (Address: 0x1800edf30)
UuidHash (Address: 0x1800edf88)

SHCORE.dll

(Address: 0x1800edfa0)
(Address: 0x1800edfa8)
(Address: 0x1800edfb8)
SHTaskPoolAllowThreadReuse (Address: 0x1800edf98)
SHTaskPoolQueueTask (Address: 0x1800edfb0)

TextInputFramework.dll

NavigateFocusInfoCreate (Address: 0x1800edfc8)

USER32.dll

(Address: 0x1800ee030)
AreDpiAwarenessContextsEqual (Address: 0x1800ee020)
DispatchMessageW (Address: 0x1800ee010)
GetAsyncKeyState (Address: 0x1800ee088)
GetAwarenessFromDpiAwarenessContext (Address: 0x1800ee008)
GetClassInfoExW (Address: 0x1800edff8)
GetDpiForSystem (Address: 0x1800edff0)
GetDpiForWindow (Address: 0x1800ee028)
GetKeyState (Address: 0x1800ee090)
GetMessageTime (Address: 0x1800ee080)
GetMessageW (Address: 0x1800ee000)
GetPointerDevice (Address: 0x1800ee038)
GetPointerDeviceProperties (Address: 0x1800ee048)
GetPointerDeviceRects (Address: 0x1800ee040)
GetPointerDevices (Address: 0x1800ee060)
GetPointerInfo (Address: 0x1800ee058)
GetPointerInfoHistory (Address: 0x1800ee078)
GetPointerInputTransform (Address: 0x1800ee050)
GetPointerTouchInfoHistory (Address: 0x1800ee070)
GetQueueStatus (Address: 0x1800ee108)
GetRawPointerDeviceData (Address: 0x1800ee068)
GetThreadDpiAwarenessContext (Address: 0x1800edfe8)
GetWindowDpiAwarenessContext (Address: 0x1800ee018)
GetWindowFeedbackSetting (Address: 0x1800ee0f0)
GetWindowLongPtrW (Address: 0x1800ee0b0)
GetWindowLongW (Address: 0x1800ee0e8)
IsGUIThread (Address: 0x1800ee0d8)
PeekMessageW (Address: 0x1800ee100)
PostMessageW (Address: 0x1800ee0d0)
PostQuitMessage (Address: 0x1800ee0b8)
PostThreadMessageW (Address: 0x1800edfd8)
RegisterClassExW (Address: 0x1800ee098)
RegisterWindowMessageW (Address: 0x1800ee0c8)
SendMessageW (Address: 0x1800ee0c0)
SendNotifyMessageW (Address: 0x1800ee0e0)
SetWindowFeedbackSetting (Address: 0x1800ee0f8)
SetWindowLongPtrW (Address: 0x1800ee0a0)
TranslateMessage (Address: 0x1800edfe0)
UnregisterClassW (Address: 0x1800ee0a8)

WindowManagementAPI.dll

CreateWindowInformation (Address: 0x1800ee120)
CreateWindowLayout (Address: 0x1800ee118)