AppExtension.dll

Description: AppExtension API

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 0c0dfb26f33783581de35ec530c3d064

File Size: 132.5 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x6cf0)
DllGetActivationFactory (Ordinal: 2, Address: 0x6cb0)
DllGetClassObject (Ordinal: 3, Address: 0x6cd0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-internal-l1-1-1.dll

GetPackageStatus (Address: 0x1001f01c)

api-ms-win-appmodel-runtime-l1-1-0.dll

PackageFamilyNameFromFullName (Address: 0x1001f024)

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1001f02c)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1001f064)
CoCreateGuid (Address: 0x1001f06c)
CoCreateInstance (Address: 0x1001f034)
CoGetApartmentType (Address: 0x1001f044)
CoGetCallContext (Address: 0x1001f050)
CoGetCallerTID (Address: 0x1001f038)
CoGetInterfaceAndReleaseStream (Address: 0x1001f04c)
CoGetMalloc (Address: 0x1001f03c)
CoMarshalInterface (Address: 0x1001f05c)
CoReleaseMarshalData (Address: 0x1001f058)
CoRevertToSelf (Address: 0x1001f048)
CoTaskMemAlloc (Address: 0x1001f060)
CoTaskMemFree (Address: 0x1001f040)
CoWaitForMultipleHandles (Address: 0x1001f068)
CreateStreamOnHGlobal (Address: 0x1001f054)
StringFromCLSID (Address: 0x1001f070)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1001f078)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1001f088)
IsDebuggerPresent (Address: 0x1001f084)
OutputDebugStringW (Address: 0x1001f080)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1001f090)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1001f098)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1001f0b0)
RaiseException (Address: 0x1001f0ac)
SetLastError (Address: 0x1001f0a0)
SetUnhandledExceptionFilter (Address: 0x1001f0a4)
UnhandledExceptionFilter (Address: 0x1001f0a8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1001f0b8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1001f0c8)
HeapAlloc (Address: 0x1001f0c0)
HeapFree (Address: 0x1001f0c4)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

RegisterWaitForSingleObject (Address: 0x1001f0d0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1001f0dc)
FreeLibrary (Address: 0x1001f0e0)
GetModuleFileNameA (Address: 0x1001f0ec)
GetModuleHandleExW (Address: 0x1001f0f0)
GetModuleHandleW (Address: 0x1001f0e8)
GetProcAddress (Address: 0x1001f0f4)
LoadLibraryExW (Address: 0x1001f0e4)
LoadStringW (Address: 0x1001f0d8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1001f0fc)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1001f104)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1001f118)
GetCurrentProcessId (Address: 0x1001f10c)
GetCurrentThread (Address: 0x1001f114)
GetCurrentThreadId (Address: 0x1001f124)
GetProcessId (Address: 0x1001f120)
OpenProcessToken (Address: 0x1001f128)
OpenThreadToken (Address: 0x1001f110)
TerminateProcess (Address: 0x1001f11c)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1001f130)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1001f138)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1001f140)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1001f148)
RegNotifyChangeKeyValue (Address: 0x1001f14c)
RegOpenKeyExW (Address: 0x1001f154)
RegQueryValueExW (Address: 0x1001f150)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1001f15c)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x1001f164)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1001f1b4)
AcquireSRWLockShared (Address: 0x1001f1a4)
CreateEventExW (Address: 0x1001f190)
CreateEventW (Address: 0x1001f174)
CreateMutexExW (Address: 0x1001f1a0)
CreateSemaphoreExW (Address: 0x1001f170)
DeleteCriticalSection (Address: 0x1001f198)
EnterCriticalSection (Address: 0x1001f184)
InitializeCriticalSectionEx (Address: 0x1001f194)
InitializeSRWLock (Address: 0x1001f19c)
LeaveCriticalSection (Address: 0x1001f17c)
OpenSemaphoreW (Address: 0x1001f188)
ReleaseMutex (Address: 0x1001f16c)
ReleaseSemaphore (Address: 0x1001f1ac)
ReleaseSRWLockExclusive (Address: 0x1001f1b8)
ReleaseSRWLockShared (Address: 0x1001f1b0)
SetEvent (Address: 0x1001f178)
WaitForMultipleObjectsEx (Address: 0x1001f180)
WaitForSingleObject (Address: 0x1001f1a8)
WaitForSingleObjectEx (Address: 0x1001f18c)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1001f1c4)
Sleep (Address: 0x1001f1c0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1001f1d0)
GetTickCount (Address: 0x1001f1cc)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx (Address: 0x1001f1d8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1001f1e0)
EncodePointer (Address: 0x1001f1e4)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x1001f1f0)
RoOriginateError (Address: 0x1001f1f8)
RoOriginateErrorW (Address: 0x1001f1ec)
RoTransformError (Address: 0x1001f1f4)
SetRestrictedErrorInfo (Address: 0x1001f1fc)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x1001f20c)
RoGetMatchingRestrictedErrorInfo (Address: 0x1001f208)
RoReportFailedDelegate (Address: 0x1001f204)

api-ms-win-rtcore-ntuser-synch-l1-1-0.dll

MsgWaitForMultipleObjectsEx (Address: 0x1001f214)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DispatchMessageW (Address: 0x1001f220)
PeekMessageW (Address: 0x1001f228)
PostQuitMessage (Address: 0x1001f21c)
TranslateMessage (Address: 0x1001f224)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x1001f234)
DuplicateTokenEx (Address: 0x1001f230)
GetLengthSid (Address: 0x1001f238)
GetTokenInformation (Address: 0x1001f23c)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x1001f244)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1001f24c)
SHTaskPoolQueueTask (Address: 0x1001f250)

AppXDeploymentClient.dll

(Address: 0x1001f004)
(Address: 0x1001f000)
(Address: 0x1001f00c)
(Address: 0x1001f008)

combase.dll

(Address: 0x1001f258)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001f28c)
__dllonexit (Address: 0x1001f288)
_amsg_exit (Address: 0x1001f27c)
_callnewh (Address: 0x1001f2ac)
_CxxThrowException (Address: 0x1001f2cc)
_except_handler4_common (Address: 0x1001f2b8)
_initterm (Address: 0x1001f278)
_lock (Address: 0x1001f2a8)
_onexit (Address: 0x1001f294)
_purecall (Address: 0x1001f264)
_unlock (Address: 0x1001f2dc)
_vsnprintf_s (Address: 0x1001f2b4)
_vsnwprintf (Address: 0x1001f260)
_XcptFilter (Address: 0x1001f2c0)
??_V@YAXPAX@Z (Address: 0x1001f2bc)
??0exception@@QAE@ABQBD@Z (Address: 0x1001f268)
??0exception@@QAE@ABQBDH@Z (Address: 0x1001f2d4)
??0exception@@QAE@ABV0@@Z (Address: 0x1001f2b0)
??0exception@@QAE@XZ (Address: 0x1001f2a4)
??1exception@@UAE@XZ (Address: 0x1001f2a0)
??1type_info@@UAE@XZ (Address: 0x1001f29c)
??3@YAXPAX@Z (Address: 0x1001f2d8)
?terminate@@YAXXZ (Address: 0x1001f280)
?what@exception@@UBEPBDXZ (Address: 0x1001f2d0)
free (Address: 0x1001f290)
malloc (Address: 0x1001f284)
memcpy (Address: 0x1001f2c8)
memcpy_s (Address: 0x1001f298)
memmove (Address: 0x1001f2c4)
memmove_s (Address: 0x1001f270)
memset (Address: 0x1001f2e0)
realloc (Address: 0x1001f26c)
wcschr (Address: 0x1001f274)

ntdll.dll

NtQueryInformationToken (Address: 0x1001f2f0)
RtlAcquireSRWLockExclusive (Address: 0x1001f304)
RtlAcquireSRWLockShared (Address: 0x1001f2fc)
RtlAllocateHeap (Address: 0x1001f2e8)
RtlCompareUnicodeString (Address: 0x1001f320)
RtlConvertSidToUnicodeString (Address: 0x1001f318)
RtlFreeHeap (Address: 0x1001f2f4)
RtlFreeUnicodeString (Address: 0x1001f31c)
RtlInitializeGenericTableAvl (Address: 0x1001f310)
RtlInitUnicodeString (Address: 0x1001f2ec)
RtlInsertElementGenericTableAvl (Address: 0x1001f30c)
RtlLookupElementGenericTableAvl (Address: 0x1001f314)
RtlNtStatusToDosErrorNoTeb (Address: 0x1001f308)
RtlReleaseSRWLockExclusive (Address: 0x1001f300)
RtlReleaseSRWLockShared (Address: 0x1001f2f8)

PROPSYS.dll

(Address: 0x1001f014)

twinapi.appcore.dll

(Address: 0x1001f328)
(Address: 0x1001f32c)