windowsdefenderapplicationguardcsp.dll

Description: Microsoft Defender Application Guard CSP

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: a35b507e500f2f7c6c62c28f2e219ca2

File Size: 83.0 KB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 3

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x4530)
  • DllGetClassObject (Ordinal: 2, Address: 0x4550)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateGuid (Address: 0x18000d5e8)
  • CoCreateInstance (Address: 0x18000d600)
  • CoInitializeEx (Address: 0x18000d5e0)
  • CoTaskMemAlloc (Address: 0x18000d608)
  • CoTaskMemFree (Address: 0x18000d5f0)
  • CoUninitialize (Address: 0x18000d5f8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18000d628)
  • IsDebuggerPresent (Address: 0x18000d620)
  • OutputDebugStringW (Address: 0x18000d618)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18000d640)
  • SetLastError (Address: 0x18000d638)
  • SetUnhandledExceptionFilter (Address: 0x18000d648)
  • UnhandledExceptionFilter (Address: 0x18000d650)
api-ms-win-core-file-l1-1-0.dll
  • GetDiskFreeSpaceExW (Address: 0x18000d660)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18000d670)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18000d688)
  • HeapAlloc (Address: 0x18000d690)
  • HeapFree (Address: 0x18000d680)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18000d6a8)
  • LocalFree (Address: 0x18000d6a0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18000d6b8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18000d6d0)
  • FreeLibrary (Address: 0x18000d6c8)
  • GetModuleFileNameA (Address: 0x18000d6e0)
  • GetModuleHandleExW (Address: 0x18000d6d8)
  • GetModuleHandleW (Address: 0x18000d6f0)
  • GetProcAddress (Address: 0x18000d6e8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18000d700)
api-ms-win-core-path-l1-1-0.dll
  • PathCchAppend (Address: 0x18000d710)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x18000d730)
  • GetCurrentProcess (Address: 0x18000d728)
  • GetCurrentProcessId (Address: 0x18000d740)
  • GetCurrentThreadId (Address: 0x18000d738)
  • TerminateProcess (Address: 0x18000d720)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18000d750)
api-ms-win-core-processtopology-obsolete-l1-1-0.dll
  • GetActiveProcessorCount (Address: 0x18000d760)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18000d770)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18000d798)
  • RegCreateKeyExW (Address: 0x18000d790)
  • RegDeleteValueW (Address: 0x18000d7a8)
  • RegGetValueW (Address: 0x18000d788)
  • RegOpenKeyExW (Address: 0x18000d7a0)
  • RegSetValueExW (Address: 0x18000d780)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18000d7c8)
  • RtlLookupFunctionEntry (Address: 0x18000d7b8)
  • RtlVirtualUnwind (Address: 0x18000d7c0)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x18000d7d8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18000d7f0)
  • CreateMutexExW (Address: 0x18000d828)
  • CreateSemaphoreExW (Address: 0x18000d7f8)
  • OpenSemaphoreW (Address: 0x18000d818)
  • ReleaseMutex (Address: 0x18000d7e8)
  • ReleaseSemaphore (Address: 0x18000d810)
  • ReleaseSRWLockExclusive (Address: 0x18000d800)
  • WaitForSingleObject (Address: 0x18000d808)
  • WaitForSingleObjectEx (Address: 0x18000d820)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18000d848)
  • InitOnceComplete (Address: 0x18000d840)
  • Sleep (Address: 0x18000d838)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18000d858)
  • GetTickCount (Address: 0x18000d868)
  • GetWindowsDirectoryW (Address: 0x18000d860)
api-ms-win-core-sysinfo-l1-2-1.dll
  • GetPhysicallyInstalledSystemMemory (Address: 0x18000d878)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18000d908)
  • __CxxFrameHandler3 (Address: 0x18000d910)
  • __CxxFrameHandler4 (Address: 0x18000d958)
  • _CxxThrowException (Address: 0x18000d918)
  • _o___std_exception_copy (Address: 0x18000d930)
  • _o___std_exception_destroy (Address: 0x18000d928)
  • _o___std_type_info_destroy_list (Address: 0x18000d920)
  • _o___stdio_common_vsnprintf_s (Address: 0x18000d950)
  • _o___stdio_common_vswprintf (Address: 0x18000d948)
  • _o__callnewh (Address: 0x18000d940)
  • _o__cexit (Address: 0x18000d938)
  • _o__configure_narrow_argv (Address: 0x18000d888)
  • _o__crt_atexit (Address: 0x18000d890)
  • _o__errno (Address: 0x18000d898)
  • _o__execute_onexit_table (Address: 0x18000d8a0)
  • _o__initialize_narrow_environment (Address: 0x18000d8a8)
  • _o__initialize_onexit_table (Address: 0x18000d8b0)
  • _o__invalid_parameter_noinfo (Address: 0x18000d8b8)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18000d8c0)
  • _o__register_onexit_function (Address: 0x18000d8c8)
  • _o__seh_filter_dll (Address: 0x18000d8d0)
  • _o__wcsicmp (Address: 0x18000d8e0)
  • _o_free (Address: 0x18000d8e8)
  • _o_malloc (Address: 0x18000d8f0)
  • _o_memcpy_s (Address: 0x18000d8f8)
  • _o_toupper (Address: 0x18000d900)
  • memcpy (Address: 0x18000d960)
  • memmove (Address: 0x18000d8d8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18000d978)
  • _initterm_e (Address: 0x18000d970)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18000d988)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventProviderEnabled (Address: 0x18000d9a8)
  • EventRegister (Address: 0x18000d998)
  • EventSetInformation (Address: 0x18000d9b0)
  • EventUnregister (Address: 0x18000d9b8)
  • EventWriteTransfer (Address: 0x18000d9a0)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18000d9c8)
OLEAUT32.dll
  • SafeArrayCreate (Address: 0x18000d590)
  • SafeArrayDestroy (Address: 0x18000d598)
  • SafeArrayGetLBound (Address: 0x18000d580)
  • SafeArrayGetUBound (Address: 0x18000d578)
  • SafeArrayLock (Address: 0x18000d588)
  • SafeArrayUnlock (Address: 0x18000d5c0)
  • SysAllocString (Address: 0x18000d5b8)
  • SysFreeString (Address: 0x18000d5b0)
  • VariantClear (Address: 0x18000d5a8)
  • VariantInit (Address: 0x18000d5a0)
policymanager.dll
  • EnterprisePolicyManagerStore_DeleteProviderContextSidAreaPolicy (Address: 0x18000d9f8)
  • EnterprisePolicyManagerStore_EvaluatePoliciesUpdateCurrent (Address: 0x18000d9e8)
  • EnterprisePolicyManagerStore_GetProviderContextSidAreaPolicyValue (Address: 0x18000d9e0)
  • EnterprisePolicyManagerStore_PublishAnyDelayedWnfs (Address: 0x18000d9d8)
  • EnterprisePolicyManagerStore_SetProviderContextSidAreaPolicyValue (Address: 0x18000d9f0)
SLC.dll
  • SLGetWindowsInformationDWORD (Address: 0x18000d5d0)