XpsPrint.dll

Description: XPS Printing DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 298295464ac3da34dbee585b908a00e7

File Size: 1.4 MB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 2, Address: 0x58520)
StartXpsPrintJob (Ordinal: 3, Address: 0x581e0)
(Ordinal: 4, Address: 0x58b90)
(Ordinal: 5, Address: 0x5dee0)
(Ordinal: 6, Address: 0x5e040)
StartXpsPrintJob1 (Ordinal: 7, Address: 0x58960)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x180119c90)
CoCreateInstance (Address: 0x180119cb0)
CoCreateInstanceEx (Address: 0x180119c98)
CoGetMalloc (Address: 0x180119cc0)
CoInitializeEx (Address: 0x180119cb8)
CoSetProxyBlanket (Address: 0x180119ca0)
CoTaskMemAlloc (Address: 0x180119cd8)
CoTaskMemFree (Address: 0x180119c88)
CoUninitialize (Address: 0x180119cc8)
CreateStreamOnHGlobal (Address: 0x180119ca8)
StringFromCLSID (Address: 0x180119cd0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180119cf8)
IsDebuggerPresent (Address: 0x180119cf0)
OutputDebugStringW (Address: 0x180119ce8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180119d08)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180119d18)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180119d28)
SetLastError (Address: 0x180119d40)
SetUnhandledExceptionFilter (Address: 0x180119d30)
UnhandledExceptionFilter (Address: 0x180119d38)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x180119da0)
CreateFileW (Address: 0x180119d58)
DeleteFileW (Address: 0x180119d88)
FindClose (Address: 0x180119d90)
FindFirstFileW (Address: 0x180119d78)
FindNextFileW (Address: 0x180119d68)
FlushFileBuffers (Address: 0x180119d70)
GetFileAttributesW (Address: 0x180119d60)
ReadFile (Address: 0x180119d98)
SetEndOfFile (Address: 0x180119db0)
SetFilePointer (Address: 0x180119d50)
SetFilePointerEx (Address: 0x180119da8)
WriteFile (Address: 0x180119d80)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x180119dc0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180119dd8)
DuplicateHandle (Address: 0x180119dd0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180119df8)
HeapAlloc (Address: 0x180119de8)
HeapFree (Address: 0x180119df0)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x180119e08)
GlobalFree (Address: 0x180119e10)
LocalFree (Address: 0x180119e18)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x180119e28)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x180119e38)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x180119e78)
FreeLibraryAndExitThread (Address: 0x180119e50)
GetModuleFileNameA (Address: 0x180119e48)
GetModuleHandleExW (Address: 0x180119e70)
GetModuleHandleW (Address: 0x180119e58)
GetProcAddress (Address: 0x180119e68)
LoadLibraryExW (Address: 0x180119e60)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x180119e88)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180119e98)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180119ea8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180119ee0)
ExitProcess (Address: 0x180119ee8)
GetCurrentProcess (Address: 0x180119ef8)
GetCurrentProcessId (Address: 0x180119f10)
GetCurrentThread (Address: 0x180119ed0)
GetCurrentThreadId (Address: 0x180119ef0)
GetProcessTimes (Address: 0x180119f00)
OpenThreadToken (Address: 0x180119ed8)
ResumeThread (Address: 0x180119ec8)
SetThreadToken (Address: 0x180119ec0)
TerminateProcess (Address: 0x180119eb8)
TlsSetValue (Address: 0x180119f08)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180119f20)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180119f30)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180119f40)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180119f60)
RegOpenKeyExW (Address: 0x180119f58)
RegQueryValueExW (Address: 0x180119f50)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180119f80)
RtlLookupFunctionEntry (Address: 0x180119f70)
RtlVirtualUnwind (Address: 0x180119f78)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x180119f98)
GetStringTypeW (Address: 0x180119f90)
MultiByteToWideChar (Address: 0x180119fa0)
WideCharToMultiByte (Address: 0x180119fa8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18011a038)
AcquireSRWLockShared (Address: 0x18011a008)
CreateEventW (Address: 0x180119fe0)
CreateMutexExW (Address: 0x18011a050)
CreateSemaphoreExW (Address: 0x18011a020)
DeleteCriticalSection (Address: 0x180119fe8)
EnterCriticalSection (Address: 0x18011a010)
InitializeCriticalSection (Address: 0x180119fd0)
InitializeCriticalSectionAndSpinCount (Address: 0x18011a000)
InitializeCriticalSectionEx (Address: 0x180119fd8)
LeaveCriticalSection (Address: 0x180119ff8)
OpenSemaphoreW (Address: 0x18011a048)
ReleaseMutex (Address: 0x18011a040)
ReleaseSemaphore (Address: 0x18011a018)
ReleaseSRWLockExclusive (Address: 0x180119fc0)
ReleaseSRWLockShared (Address: 0x180119ff0)
ResetEvent (Address: 0x18011a030)
SetEvent (Address: 0x180119fc8)
WaitForSingleObject (Address: 0x180119fb8)
WaitForSingleObjectEx (Address: 0x18011a028)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18011a068)
InitOnceComplete (Address: 0x18011a070)
Sleep (Address: 0x18011a078)
SleepConditionVariableSRW (Address: 0x18011a080)
WakeAllConditionVariable (Address: 0x18011a060)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18011a090)
GetTickCount (Address: 0x18011a098)
GetTickCount64 (Address: 0x18011a0a0)

api-ms-win-core-sysinfo-l1-2-0.dll

VerSetConditionMask (Address: 0x18011a0b0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18011a0c8)
CreateThreadpoolTimer (Address: 0x18011a0d0)
SetThreadpoolTimer (Address: 0x18011a0c0)
WaitForThreadpoolTimerCallbacks (Address: 0x18011a0d8)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueue (Address: 0x18011a0f0)
CreateTimerQueueTimer (Address: 0x18011a100)
DeleteTimerQueueEx (Address: 0x18011a0f8)
DeleteTimerQueueTimer (Address: 0x18011a0e8)
QueueUserWorkItem (Address: 0x18011a110)
UnregisterWaitEx (Address: 0x18011a108)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18011a128)
EncodePointer (Address: 0x18011a120)

api-ms-win-core-version-l1-1-0.dll

VerQueryValueW (Address: 0x18011a138)

api-ms-win-core-version-l1-1-1.dll

GetFileVersionInfoSizeW (Address: 0x18011a148)
GetFileVersionInfoW (Address: 0x18011a150)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18011a178)
GetTraceEnableLevel (Address: 0x18011a160)
GetTraceLoggerHandle (Address: 0x18011a180)
RegisterTraceGuidsW (Address: 0x18011a168)
TraceMessage (Address: 0x18011a188)
UnregisterTraceGuids (Address: 0x18011a170)

api-ms-win-eventing-provider-l1-1-0.dll

EventEnabled (Address: 0x18011a1b8)
EventRegister (Address: 0x18011a1a8)
EventSetInformation (Address: 0x18011a1a0)
EventUnregister (Address: 0x18011a198)
EventWrite (Address: 0x18011a1c0)
EventWriteTransfer (Address: 0x18011a1b0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18011a1d0)

api-ms-win-shcore-stream-l1-1-0.dll

SHCreateStreamOnFileW (Address: 0x18011a1e0)

api-ms-win-shlwapi-ie-l1-1-0.dll

PathIsDirectoryW (Address: 0x18011a1f0)

msvcrt.dll

___lc_codepage_func (Address: 0x18011a320)
___lc_handle_func (Address: 0x18011a328)
___mb_cur_max_func (Address: 0x18011a278)
__C_specific_handler (Address: 0x18011a250)
__crtLCMapStringA (Address: 0x18011a228)
__crtLCMapStringW (Address: 0x18011a230)
__CxxFrameHandler3 (Address: 0x18011a2b8)
__dllonexit (Address: 0x18011a268)
__pctype_func (Address: 0x18011a338)
__uncaught_exception (Address: 0x18011a340)
_amsg_exit (Address: 0x18011a208)
_callnewh (Address: 0x18011a3b0)
_CxxThrowException (Address: 0x18011a3a8)
_errno (Address: 0x18011a360)
_finite (Address: 0x18011a378)
_initterm (Address: 0x18011a210)
_ismbblead (Address: 0x18011a438)
_isnan (Address: 0x18011a390)
_lock (Address: 0x18011a358)
_onexit (Address: 0x18011a270)
_purecall (Address: 0x18011a298)
_unlock (Address: 0x18011a350)
_vsnprintf (Address: 0x18011a370)
_vsnprintf_s (Address: 0x18011a2c0)
_vsnwprintf (Address: 0x18011a280)
_vsnwprintf_l (Address: 0x18011a380)
_wcsdup (Address: 0x18011a238)
_wcsicmp (Address: 0x18011a400)
_wsetlocale (Address: 0x18011a220)
_wtof (Address: 0x18011a3c8)
_XcptFilter (Address: 0x18011a2d8)
??_V@YAXPEAX@Z (Address: 0x18011a3f8)
??0bad_cast@@QEAA@AEBV0@@Z (Address: 0x18011a430)
??0bad_cast@@QEAA@PEBD@Z (Address: 0x18011a308)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18011a2f8)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18011a2d0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18011a2b0)
??0exception@@QEAA@XZ (Address: 0x18011a2a8)
??1bad_cast@@UEAA@XZ (Address: 0x18011a300)
??1exception@@UEAA@XZ (Address: 0x18011a2a0)
??1type_info@@UEAA@XZ (Address: 0x18011a3f0)
??3@YAXPEAX@Z (Address: 0x18011a290)
?terminate@@YAXXZ (Address: 0x18011a258)
?what@exception@@UEBAPEBDXZ (Address: 0x18011a2c8)
abort (Address: 0x18011a260)
calloc (Address: 0x18011a318)
free (Address: 0x18011a418)
isalnum (Address: 0x18011a2e8)
isdigit (Address: 0x18011a2f0)
islower (Address: 0x18011a218)
isspace (Address: 0x18011a410)
isupper (Address: 0x18011a330)
ldexp (Address: 0x18011a248)
ldiv (Address: 0x18011a3d0)
localeconv (Address: 0x18011a420)
malloc (Address: 0x18011a3d8)
memchr (Address: 0x18011a240)
memcmp (Address: 0x18011a2e0)
memcpy (Address: 0x18011a3a0)
memcpy_s (Address: 0x18011a288)
memmove (Address: 0x18011a398)
memmove_s (Address: 0x18011a3e0)
memset (Address: 0x18011a310)
setlocale (Address: 0x18011a348)
sprintf_s (Address: 0x18011a408)
strcspn (Address: 0x18011a428)
strncmp (Address: 0x18011a3b8)
swprintf_s (Address: 0x18011a3c0)
tolower (Address: 0x18011a200)
wcscpy_s (Address: 0x18011a3e8)
wcsrchr (Address: 0x18011a368)
wcstod (Address: 0x18011a388)

ntdll.dll

NtQueryInformationToken (Address: 0x18011a470)
RtlAcquireSRWLockExclusive (Address: 0x18011a460)
RtlAcquireSRWLockShared (Address: 0x18011a488)
RtlGetAppContainerSidType (Address: 0x18011a480)
RtlInitializeSRWLock (Address: 0x18011a450)
RtlNtStatusToDosError (Address: 0x18011a478)
RtlReleaseSRWLockExclusive (Address: 0x18011a458)
RtlReleaseSRWLockShared (Address: 0x18011a448)
WinSqmIncrementDWORD (Address: 0x18011a468)
WinSqmIsOptedIn (Address: 0x18011a490)

OLEAUT32.dll

SetErrorInfo (Address: 0x180119c10)
SysAllocString (Address: 0x180119c20)
SysAllocStringLen (Address: 0x180119bf8)
SysFreeString (Address: 0x180119c18)
SysStringLen (Address: 0x180119c00)
VariantClear (Address: 0x180119c08)
VariantInit (Address: 0x180119bf0)

RPCRT4.dll

RpcServerInqCallAttributesW (Address: 0x180119c40)
RpcStringFreeW (Address: 0x180119c48)
UuidCreateSequential (Address: 0x180119c30)
UuidToStringW (Address: 0x180119c38)

urlmon.dll

CreateUri (Address: 0x18011a4a0)

WINSPOOL.DRV

(Address: 0x180119c58)
(Address: 0x180119c60)
GetPrintExecutionData (Address: 0x180119c68)

XmlLite.dll

CreateXmlReader (Address: 0x180119c78)

xpsservices.dll

(Address: 0x18011a4b0)
(Address: 0x18011a4b8)