AppResolver.dll
Description: App Resolver
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 64-bit
Operating System: Windows NT
SHA256: 4a323333b5faed73d672a24bccb981de
File Size: 585.7 KB
Uploaded At: Dec. 1, 2025, 7:22 a.m.
Views: 13
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- (Ordinal: 1, Address: 0x1ed90)
- DllCanUnloadNow (Ordinal: 2, Address: 0x2fe0)
- DllGetActivationFactory (Ordinal: 3, Address: 0x2d10)
- DllGetClassObject (Ordinal: 4, Address: 0x2ef0)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- ClosePackageInfo (Address: 0x18006ea50)
- GetPackageInfo (Address: 0x18006ea48)
- OpenPackageInfoByFullName (Address: 0x18006ea40)
- PackageFamilyNameFromFullName (Address: 0x18006ea38)
api-ms-win-appmodel-runtime-l1-1-3.dll
- GetStagedPackagePathByFullName2 (Address: 0x18006ea60)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18006ea70)
- IsDebuggerPresent (Address: 0x18006ea78)
- OutputDebugStringW (Address: 0x18006ea80)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18006ea90)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18006eaa0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18006eab8)
- RaiseException (Address: 0x18006ead0)
- SetLastError (Address: 0x18006eab0)
- SetUnhandledExceptionFilter (Address: 0x18006eac8)
- UnhandledExceptionFilter (Address: 0x18006eac0)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x18006eaf0)
- CreateDirectoryW (Address: 0x18006eae0)
- CreateFileW (Address: 0x18006eb08)
- DeleteFileW (Address: 0x18006eaf8)
- GetFileSizeEx (Address: 0x18006eb00)
- GetLongPathNameW (Address: 0x18006eae8)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x18006eb18)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x18006eb28)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18006eb38)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18006eb50)
- HeapAlloc (Address: 0x18006eb60)
- HeapFree (Address: 0x18006eb48)
- HeapReAlloc (Address: 0x18006eb58)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x18006eb80)
- LocalFree (Address: 0x18006eb78)
- LocalReAlloc (Address: 0x18006eb70)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x18006eb98)
- GlobalUnlock (Address: 0x18006eb90)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x18006eba8)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x18006ebb8)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x18006ebe8)
- GetModuleFileNameA (Address: 0x18006ebf0)
- GetModuleFileNameW (Address: 0x18006ebd8)
- GetModuleHandleExW (Address: 0x18006ebe0)
- GetModuleHandleW (Address: 0x18006ebc8)
- GetProcAddress (Address: 0x18006ebd0)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18006ec10)
- GetThreadPreferredUILanguages (Address: 0x18006ec00)
- GetUserDefaultLCID (Address: 0x18006ec08)
- GetUserGeoID (Address: 0x18006ec18)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetUserDefaultUILanguage (Address: 0x18006ec28)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x18006ec40)
- MapViewOfFile (Address: 0x18006ec38)
- ReadProcessMemory (Address: 0x18006ec48)
- UnmapViewOfFile (Address: 0x18006ec50)
api-ms-win-core-memory-l1-1-1.dll
- PrefetchVirtualMemory (Address: 0x18006ec60)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCombine (Address: 0x18006ec98)
- PathCchAppend (Address: 0x18006ec88)
- PathCchCombine (Address: 0x18006ec80)
- PathCchFindExtension (Address: 0x18006ec78)
- PathCchRemoveBackslash (Address: 0x18006ec70)
- PathCchRemoveExtension (Address: 0x18006ec90)
- PathCchRemoveFileSpec (Address: 0x18006eca0)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x18006ecb0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x18006ecf0)
- GetCurrentProcessId (Address: 0x18006ecc8)
- GetCurrentThread (Address: 0x18006ece8)
- GetCurrentThreadId (Address: 0x18006ecd0)
- GetProcessTimes (Address: 0x18006ecc0)
- OpenProcessToken (Address: 0x18006ece0)
- OpenThreadToken (Address: 0x18006ed00)
- ProcessIdToSessionId (Address: 0x18006ecd8)
- TerminateProcess (Address: 0x18006ecf8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x18006ed10)
- OpenProcess (Address: 0x18006ed18)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18006ed28)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x18006ed38)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18006ed58)
- RegCreateKeyExW (Address: 0x18006ed78)
- RegDeleteValueW (Address: 0x18006ed70)
- RegEnumValueW (Address: 0x18006ed80)
- RegGetValueW (Address: 0x18006ed50)
- RegOpenKeyExW (Address: 0x18006ed48)
- RegQueryInfoKeyW (Address: 0x18006ed88)
- RegQueryValueExW (Address: 0x18006ed68)
- RegSetValueExW (Address: 0x18006ed60)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x18006ed98)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x18006edb8)
- RtlLookupFunctionEntry (Address: 0x18006eda8)
- RtlVirtualUnwind (Address: 0x18006edb0)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x18006edc8)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrlenW (Address: 0x18006edd8)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18006ee88)
- AcquireSRWLockShared (Address: 0x18006ee78)
- CreateEventExW (Address: 0x18006ee40)
- CreateEventW (Address: 0x18006ee70)
- CreateMutexExW (Address: 0x18006ee08)
- CreateSemaphoreExW (Address: 0x18006ee00)
- DeleteCriticalSection (Address: 0x18006ee20)
- EnterCriticalSection (Address: 0x18006ee18)
- InitializeCriticalSection (Address: 0x18006ee58)
- InitializeCriticalSectionAndSpinCount (Address: 0x18006ee28)
- InitializeCriticalSectionEx (Address: 0x18006ee38)
- InitializeSRWLock (Address: 0x18006ede8)
- LeaveCriticalSection (Address: 0x18006ee10)
- OpenEventW (Address: 0x18006ee98)
- OpenSemaphoreW (Address: 0x18006edf0)
- ReleaseMutex (Address: 0x18006ee68)
- ReleaseSemaphore (Address: 0x18006edf8)
- ReleaseSRWLockExclusive (Address: 0x18006ee90)
- ReleaseSRWLockShared (Address: 0x18006ee80)
- ResetEvent (Address: 0x18006ee60)
- SetEvent (Address: 0x18006ee48)
- WaitForSingleObject (Address: 0x18006ee50)
- WaitForSingleObjectEx (Address: 0x18006ee30)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x18006eeb0)
- InitOnceComplete (Address: 0x18006eea8)
- InitOnceExecuteOnce (Address: 0x18006eeb8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x18006eec8)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x18006eed8)
- CreateThreadpoolTimer (Address: 0x18006eee8)
- SetThreadpoolTimer (Address: 0x18006eef0)
- WaitForThreadpoolTimerCallbacks (Address: 0x18006eee0)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x18006ef08)
- EncodePointer (Address: 0x18006ef00)
api-ms-win-core-winrt-error-l1-1-0.dll
- RoOriginateError (Address: 0x18006ef20)
- RoOriginateErrorW (Address: 0x18006ef18)
- SetRestrictedErrorInfo (Address: 0x18006ef28)
api-ms-win-core-winrt-error-l1-1-1.dll
- RoGetMatchingRestrictedErrorInfo (Address: 0x18006ef38)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x18006ef50)
- RoGetActivationFactory (Address: 0x18006ef48)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateString (Address: 0x18006ef90)
- WindowsCreateStringReference (Address: 0x18006ef70)
- WindowsDeleteString (Address: 0x18006ef60)
- WindowsDuplicateString (Address: 0x18006ef68)
- WindowsGetStringRawBuffer (Address: 0x18006ef80)
- WindowsIsStringEmpty (Address: 0x18006ef88)
- WindowsStringHasEmbeddedNull (Address: 0x18006ef78)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x18006efa0)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x18006f010)
- __CxxFrameHandler3 (Address: 0x18006f060)
- __CxxFrameHandler4 (Address: 0x18006f0c8)
- __std_terminate (Address: 0x18006f0c0)
- _CxxThrowException (Address: 0x18006f068)
- _o___std_exception_copy (Address: 0x18006f0b8)
- _o___std_exception_destroy (Address: 0x18006f0b0)
- _o___std_type_info_destroy_list (Address: 0x18006f0a8)
- _o___stdio_common_vsnprintf_s (Address: 0x18006f080)
- _o___stdio_common_vswprintf (Address: 0x18006f078)
- _o___stdio_common_vswscanf (Address: 0x18006f070)
- _o__callnewh (Address: 0x18006f048)
- _o__cexit (Address: 0x18006f040)
- _o__configure_narrow_argv (Address: 0x18006f038)
- _o__crt_atexit (Address: 0x18006f030)
- _o__errno (Address: 0x18006f028)
- _o__execute_onexit_table (Address: 0x18006f020)
- _o__get_errno (Address: 0x18006f018)
- _o__initialize_narrow_environment (Address: 0x18006f0a0)
- _o__initialize_onexit_table (Address: 0x18006f098)
- _o__invalid_parameter_noinfo (Address: 0x18006f090)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x18006f088)
- _o__itow_s (Address: 0x18006efb0)
- _o__purecall (Address: 0x18006efb8)
- _o__register_onexit_function (Address: 0x18006efc0)
- _o__seh_filter_dll (Address: 0x18006efc8)
- _o__set_errno (Address: 0x18006efd0)
- _o__ui64tow_s (Address: 0x18006efd8)
- _o__wcstoui64 (Address: 0x18006efe0)
- _o__wtoi (Address: 0x18006eff0)
- _o_free (Address: 0x18006eff8)
- _o_malloc (Address: 0x18006f000)
- _o_towupper (Address: 0x18006f008)
- memcmp (Address: 0x18006f0d0)
- memcpy (Address: 0x18006f0d8)
- memmove (Address: 0x18006efe8)
- wcschr (Address: 0x18006f050)
- wcsrchr (Address: 0x18006f058)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x18006f0f0)
- _initterm_e (Address: 0x18006f0e8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x18006f100)
- wcscmp (Address: 0x18006f108)
- wcsspn (Address: 0x18006f110)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x18006f140)
- EventRegister (Address: 0x18006f120)
- EventSetInformation (Address: 0x18006f128)
- EventUnregister (Address: 0x18006f130)
- EventWriteTransfer (Address: 0x18006f138)
api-ms-win-security-base-l1-1-0.dll
- DuplicateTokenEx (Address: 0x18006f178)
- GetAce (Address: 0x18006f160)
- GetFileSecurityW (Address: 0x18006f150)
- GetSecurityDescriptorSacl (Address: 0x18006f158)
- GetSidSubAuthority (Address: 0x18006f168)
- GetTokenInformation (Address: 0x18006f170)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x18006f188)
api-ms-win-shcore-stream-l1-1-0.dll
- SHCreateStreamOnFileW (Address: 0x18006f198)
api-ms-win-shell-namespace-l1-1-0.dll
- ILClone (Address: 0x18006f1a8)
- ILCloneFirst (Address: 0x18006f1b8)
- ILCombine (Address: 0x18006f208)
- ILFindLastID (Address: 0x18006f1c8)
- ILFree (Address: 0x18006f1d8)
- ILGetSize (Address: 0x18006f210)
- ILIsEqual (Address: 0x18006f1f8)
- ILIsParent (Address: 0x18006f1f0)
- SHBindToFolderIDListParentEx (Address: 0x18006f1e8)
- SHBindToObject (Address: 0x18006f220)
- SHBindToParent (Address: 0x18006f1c0)
- SHCreateItemFromIDList (Address: 0x18006f1d0)
- SHCreateItemFromParsingName (Address: 0x18006f1e0)
- SHCreateItemWithParent (Address: 0x18006f1b0)
- SHGetIDListFromObject (Address: 0x18006f218)
- SHParseDisplayName (Address: 0x18006f200)
Bcp47Langs.dll
- GetUserLanguages (Address: 0x18006e6e0)
GDI32.dll
- CreateCompatibleDC (Address: 0x18006e700)
- CreateDIBSection (Address: 0x18006e6f8)
- DeleteDC (Address: 0x18006e718)
- DeleteObject (Address: 0x18006e720)
- GdiAlphaBlend (Address: 0x18006e710)
- GetObjectW (Address: 0x18006e6f0)
- SelectObject (Address: 0x18006e728)
- StretchDIBits (Address: 0x18006e708)
msvcp_win.dll
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18006f230)
ntdll.dll
- NtQueryInformationProcess (Address: 0x18006f240)
- NtQueryInformationToken (Address: 0x18006f288)
- NtQueryWnfStateData (Address: 0x18006f290)
- RtlAcquireSRWLockExclusive (Address: 0x18006f2a0)
- RtlAllocateHeap (Address: 0x18006f2a8)
- RtlCompareUnicodeString (Address: 0x18006f278)
- RtlFreeHeap (Address: 0x18006f258)
- RtlInitUnicodeString (Address: 0x18006f260)
- RtlNtStatusToDosError (Address: 0x18006f248)
- RtlNtStatusToDosErrorNoTeb (Address: 0x18006f280)
- RtlPublishWnfStateData (Address: 0x18006f250)
- RtlReleaseSRWLockExclusive (Address: 0x18006f270)
- RtlSubscribeWnfStateChangeNotification (Address: 0x18006f298)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18006f268)
ole32.dll
- CoAllowSetForegroundWindow (Address: 0x18006f2b8)
- CoCreateFreeThreadedMarshaler (Address: 0x18006f318)
- CoCreateGuid (Address: 0x18006f320)
- CoCreateInstance (Address: 0x18006f2d8)
- CoGetCallContext (Address: 0x18006f308)
- CoGetInterfaceAndReleaseStream (Address: 0x18006f340)
- CoGetMalloc (Address: 0x18006f2f8)
- CoInitializeEx (Address: 0x18006f2c0)
- CoMarshalInterThreadInterfaceInStream (Address: 0x18006f330)
- CoReleaseMarshalData (Address: 0x18006f338)
- CoTaskMemAlloc (Address: 0x18006f2e8)
- CoTaskMemFree (Address: 0x18006f2e0)
- CoTaskMemRealloc (Address: 0x18006f2f0)
- CoUninitialize (Address: 0x18006f2c8)
- CoWaitForMultipleHandles (Address: 0x18006f300)
- CreateBindCtx (Address: 0x18006f348)
- PropVariantClear (Address: 0x18006f2d0)
- ReleaseStgMedium (Address: 0x18006f350)
- RoGetAgileReference (Address: 0x18006f328)
- StringFromGUID2 (Address: 0x18006f310)
SHCORE.dll
- (Address: 0x18006e758)
- (Address: 0x18006e778)
- (Address: 0x18006e780)
- (Address: 0x18006e790)
- (Address: 0x18006e798)
- (Address: 0x18006e7a0)
- (Address: 0x18006e7a8)
- (Address: 0x18006e7c0)
- (Address: 0x18006e7d8)
- (Address: 0x18006e7e8)
- (Address: 0x18006e7f0)
- GetScaleFactorForDevice (Address: 0x18006e750)
- IStream_Read (Address: 0x18006e738)
- IStream_Size (Address: 0x18006e760)
- IUnknown_GetSite (Address: 0x18006e7c8)
- IUnknown_QueryService (Address: 0x18006e740)
- IUnknown_Set (Address: 0x18006e7d0)
- SHAnsiToUnicode (Address: 0x18006e788)
- SHGetValueW (Address: 0x18006e770)
- SHQueryValueExW (Address: 0x18006e7b0)
- SHSetValueW (Address: 0x18006e768)
- SHStrDupW (Address: 0x18006e7e0)
- SHTaskPoolGetUniqueContext (Address: 0x18006e7b8)
- SHTaskPoolQueueTask (Address: 0x18006e748)
SHLWAPI.dll
- (Address: 0x18006e840)
- (Address: 0x18006e848)
- (Address: 0x18006e870)
- (Address: 0x18006e898)
- (Address: 0x18006e8a0)
- (Address: 0x18006e8b8)
- (Address: 0x18006e8d8)
- (Address: 0x18006e8e0)
- (Address: 0x18006e8e8)
- (Address: 0x18006e8f0)
- (Address: 0x18006e8f8)
- (Address: 0x18006e908)
- AssocCreate (Address: 0x18006e818)
- PathCommonPrefixW (Address: 0x18006e850)
- PathFileExistsW (Address: 0x18006e8c0)
- PathFindExtensionW (Address: 0x18006e858)
- PathFindFileNameW (Address: 0x18006e8a8)
- PathGetArgsW (Address: 0x18006e880)
- PathGetDriveNumberW (Address: 0x18006e820)
- PathIsFileSpecW (Address: 0x18006e8b0)
- PathIsPrefixW (Address: 0x18006e860)
- PathIsRelativeW (Address: 0x18006e830)
- PathIsUNCW (Address: 0x18006e828)
- PathIsURLW (Address: 0x18006e838)
- PathParseIconLocationW (Address: 0x18006e890)
- PathRemoveBlanksW (Address: 0x18006e878)
- PathRemoveExtensionW (Address: 0x18006e900)
- PathRemoveFileSpecW (Address: 0x18006e810)
- PathUnquoteSpacesW (Address: 0x18006e868)
- SHStrDupA (Address: 0x18006e8d0)
- StrChrW (Address: 0x18006e8c8)
- StrCmpW (Address: 0x18006e808)
- StrDupW (Address: 0x18006e800)
- StrStrIW (Address: 0x18006e888)
SLC.dll
- SLGetWindowsInformationDWORD (Address: 0x18006e918)
USER32.dll
- CharUpperBuffW (Address: 0x18006e998)
- CopyImage (Address: 0x18006e9a8)
- CreateIconIndirect (Address: 0x18006e9c0)
- CreatePopupMenu (Address: 0x18006e988)
- DefWindowProcW (Address: 0x18006e948)
- DestroyIcon (Address: 0x18006e9c8)
- DestroyMenu (Address: 0x18006e9e8)
- DestroyWindow (Address: 0x18006e968)
- FindWindowW (Address: 0x18006e938)
- GetDC (Address: 0x18006e9d8)
- GetMenuDefaultItem (Address: 0x18006e9f0)
- GetSysColor (Address: 0x18006e9b0)
- GetWindowLongPtrW (Address: 0x18006e950)
- GetWindowThreadProcessId (Address: 0x18006e9a0)
- InsertMenuW (Address: 0x18006e980)
- KillTimer (Address: 0x18006e970)
- LoadStringA (Address: 0x18006e990)
- LoadStringW (Address: 0x18006e9e0)
- MonitorFromPoint (Address: 0x18006e928)
- PostMessageW (Address: 0x18006e930)
- RegisterClipboardFormatW (Address: 0x18006e9f8)
- ReleaseDC (Address: 0x18006e9d0)
- SendNotifyMessageW (Address: 0x18006e958)
- SetTimer (Address: 0x18006e960)
- SetWindowLongPtrW (Address: 0x18006e940)
- SetWindowTextW (Address: 0x18006e978)
- SystemParametersInfoW (Address: 0x18006e9b8)
USERENV.dll
- GetProfileType (Address: 0x18006ea08)
Windows.Storage.dll
- (Address: 0x18006ea20)
- SHGetDesktopFolder (Address: 0x18006ea18)
- SHGetKnownFolderPath (Address: 0x18006ea28)