WwaApi.dll

Description: Microsoft Web Application Host API library

Version: 10.0.19041.5198

Architecture: 64-bit

Operating System: Windows NT

SHA256: de1eb72b7511d89ccbfd1b0cbd0e649d

File Size: 556.0 KB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x2c250)
DllGetActivationFactory (Ordinal: 2, Address: 0x1c00)
DllGetClassObject (Ordinal: 3, Address: 0x2c2a0)
DllRegisterServer (Ordinal: 4, Address: 0x2c320)
DllUnregisterServer (Ordinal: 5, Address: 0x2c350)
GetProxyDllInfo (Ordinal: 6, Address: 0x2c380)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18006efc0)
CoCreateInstance (Address: 0x18006efc8)
CoGetApartmentType (Address: 0x18006efd8)
CoMarshalInterface (Address: 0x18006efa8)
CoReleaseMarshalData (Address: 0x18006efb8)
CoTaskMemAlloc (Address: 0x18006efa0)
CoWaitForMultipleHandles (Address: 0x18006efd0)
CreateStreamOnHGlobal (Address: 0x18006efb0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18006efe8)
IsDebuggerPresent (Address: 0x18006eff0)
OutputDebugStringW (Address: 0x18006eff8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18006f028)
RaiseException (Address: 0x18006f008)
SetLastError (Address: 0x18006f020)
SetUnhandledExceptionFilter (Address: 0x18006f010)
UnhandledExceptionFilter (Address: 0x18006f018)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18006f038)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18006f058)
HeapAlloc (Address: 0x18006f048)
HeapFree (Address: 0x18006f050)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18006f090)
GetModuleFileNameA (Address: 0x18006f098)
GetModuleHandleExW (Address: 0x18006f080)
GetModuleHandleW (Address: 0x18006f070)
GetProcAddress (Address: 0x18006f068)
LoadLibraryExW (Address: 0x18006f078)
LoadStringW (Address: 0x18006f088)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18006f0a8)

api-ms-win-core-misc-l1-1-0.dll

FormatMessageW (Address: 0x18006f0c0)
Sleep (Address: 0x18006f0b8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18006f0e8)
GetCurrentProcessId (Address: 0x18006f0d8)
GetCurrentThreadId (Address: 0x18006f0f0)
OpenProcessToken (Address: 0x18006f0d0)
TerminateProcess (Address: 0x18006f0e0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18006f100)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18006f110)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18006f190)
AcquireSRWLockShared (Address: 0x18006f198)
CreateEventExW (Address: 0x18006f1a8)
CreateMutexExW (Address: 0x18006f180)
CreateSemaphoreExW (Address: 0x18006f150)
DeleteCriticalSection (Address: 0x18006f140)
EnterCriticalSection (Address: 0x18006f120)
InitializeCriticalSectionEx (Address: 0x18006f148)
InitializeSRWLock (Address: 0x18006f128)
LeaveCriticalSection (Address: 0x18006f130)
OpenSemaphoreW (Address: 0x18006f178)
ReleaseMutex (Address: 0x18006f168)
ReleaseSemaphore (Address: 0x18006f158)
ReleaseSRWLockExclusive (Address: 0x18006f188)
ReleaseSRWLockShared (Address: 0x18006f1a0)
SetEvent (Address: 0x18006f138)
WaitForSingleObject (Address: 0x18006f160)
WaitForSingleObjectEx (Address: 0x18006f170)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x18006f1b8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18006f1c8)
GetTickCount (Address: 0x18006f1d0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18006f1e8)
EncodePointer (Address: 0x18006f1e0)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18006f210)
RoOriginateError (Address: 0x18006f218)
RoOriginateErrorW (Address: 0x18006f200)
RoTransformError (Address: 0x18006f1f8)
SetRestrictedErrorInfo (Address: 0x18006f208)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18006f228)
RoGetMatchingRestrictedErrorInfo (Address: 0x18006f238)
RoReportFailedDelegate (Address: 0x18006f230)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18006f248)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18006f280)
HSTRING_UserFree64 (Address: 0x18006f290)
HSTRING_UserMarshal (Address: 0x18006f2d0)
HSTRING_UserMarshal64 (Address: 0x18006f2a8)
HSTRING_UserSize (Address: 0x18006f2a0)
HSTRING_UserSize64 (Address: 0x18006f288)
HSTRING_UserUnmarshal (Address: 0x18006f270)
HSTRING_UserUnmarshal64 (Address: 0x18006f268)
WindowsCompareStringOrdinal (Address: 0x18006f2b8)
WindowsCreateString (Address: 0x18006f260)
WindowsCreateStringReference (Address: 0x18006f258)
WindowsDeleteString (Address: 0x18006f278)
WindowsDuplicateString (Address: 0x18006f298)
WindowsGetStringRawBuffer (Address: 0x18006f2c8)
WindowsIsStringEmpty (Address: 0x18006f2b0)
WindowsStringHasEmbeddedNull (Address: 0x18006f2c0)

api-ms-win-downlevel-advapi32-l1-1-0.dll

GetTokenInformation (Address: 0x18006f2e0)

api-ms-win-downlevel-kernel32-l1-1-0.dll

QueueUserWorkItem (Address: 0x18006f2f0)

api-ms-win-downlevel-shlwapi-l2-1-0.dll

SHGetThreadRef (Address: 0x18006f300)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18006f320)
GetTraceEnableLevel (Address: 0x18006f318)
GetTraceLoggerHandle (Address: 0x18006f338)
RegisterTraceGuidsW (Address: 0x18006f328)
TraceMessage (Address: 0x18006f310)
UnregisterTraceGuids (Address: 0x18006f330)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolQueueTask (Address: 0x18006f348)

combase.dll

(Address: 0x18006f370)
(Address: 0x18006f390)
(Address: 0x18006f378)
(Address: 0x18006f380)
(Address: 0x18006f388)
(Address: 0x18006f398)
(Address: 0x18006f3a0)
(Address: 0x18006f3a8)
(Address: 0x18006f3b8)
(Address: 0x18006f3c0)
(Address: 0x18006f3d0)
(Address: 0x18006f3d8)
(Address: 0x18006f3e0)
(Address: 0x18006f3f0)
(Address: 0x18006f3f8)
(Address: 0x18006f400)
(Address: 0x18006f410)
(Address: 0x18006f418)
(Address: 0x18006f420)
(Address: 0x18006f360)
(Address: 0x18006f358)
(Address: 0x18006f368)
CStdStubBuffer2_Connect (Address: 0x18006f3e8)
CStdStubBuffer2_CountRefs (Address: 0x18006f408)
CStdStubBuffer2_Disconnect (Address: 0x18006f3c8)
CStdStubBuffer2_QueryInterface (Address: 0x18006f3b0)

msvcrt.dll

__C_specific_handler (Address: 0x18006f468)
__dllonexit (Address: 0x18006f480)
_amsg_exit (Address: 0x18006f458)
_initterm (Address: 0x18006f460)
_lock (Address: 0x18006f470)
_onexit (Address: 0x18006f488)
_purecall (Address: 0x18006f438)
_unlock (Address: 0x18006f478)
_vsnwprintf (Address: 0x18006f498)
_XcptFilter (Address: 0x18006f450)
free (Address: 0x18006f448)
malloc (Address: 0x18006f440)
memcmp (Address: 0x18006f490)
memcpy_s (Address: 0x18006f430)
memset (Address: 0x18006f4a0)

ntdll.dll

RtlCaptureContext (Address: 0x18006f4c0)
RtlDeleteCriticalSection (Address: 0x18006f4d0)
RtlIsCriticalSectionLocked (Address: 0x18006f4c8)
RtlLookupFunctionEntry (Address: 0x18006f4b8)
RtlVirtualUnwind (Address: 0x18006f4b0)

OLEAUT32.dll

SysAllocString (Address: 0x18006eec8)
SysAllocStringLen (Address: 0x18006eed0)
SysFreeString (Address: 0x18006eed8)
SysStringLen (Address: 0x18006eec0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18006ef20)
CStdStubBuffer_Connect (Address: 0x18006ef48)
CStdStubBuffer_CountRefs (Address: 0x18006ef10)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18006ef30)
CStdStubBuffer_DebugServerRelease (Address: 0x18006eef8)
CStdStubBuffer_Disconnect (Address: 0x18006eef0)
CStdStubBuffer_Invoke (Address: 0x18006ef88)
CStdStubBuffer_IsIIDSupported (Address: 0x18006ef40)
CStdStubBuffer_QueryInterface (Address: 0x18006ef50)
IUnknown_AddRef_Proxy (Address: 0x18006ef38)
IUnknown_QueryInterface_Proxy (Address: 0x18006eee8)
IUnknown_Release_Proxy (Address: 0x18006ef18)
NdrCStdStubBuffer_Release (Address: 0x18006ef58)
NdrCStdStubBuffer2_Release (Address: 0x18006ef60)
NdrDllCanUnloadNow (Address: 0x18006ef70)
NdrDllGetClassObject (Address: 0x18006ef68)
NdrDllRegisterProxy (Address: 0x18006ef78)
NdrDllUnregisterProxy (Address: 0x18006ef80)
NdrOleAllocate (Address: 0x18006ef00)
NdrOleFree (Address: 0x18006ef28)
NdrStubCall3 (Address: 0x18006ef08)
NdrStubForwardingFunction (Address: 0x18006ef90)

urlmon.dll

CreateUri (Address: 0x18006f4e0)