AppResolver.dll
Description: App Resolver
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5794
Architecture: 32-bit
Operating System: Windows NT
SHA256: 087caa12057dee1dceec904b739e50ae
File Size: 459.1 KB
Uploaded At: Dec. 1, 2025, 7:53 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- (Ordinal: 1, Address: 0x26d60)
- DllCanUnloadNow (Ordinal: 2, Address: 0x11810)
- DllGetActivationFactory (Ordinal: 3, Address: 0x117d0)
- DllGetClassObject (Ordinal: 4, Address: 0x117f0)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- ClosePackageInfo (Address: 0x100641b4)
- GetPackageInfo (Address: 0x100641b0)
- OpenPackageInfoByFullName (Address: 0x100641ac)
- PackageFamilyNameFromFullName (Address: 0x100641a8)
api-ms-win-appmodel-runtime-l1-1-3.dll
- GetStagedPackagePathByFullName2 (Address: 0x100641bc)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x100641cc)
- IsDebuggerPresent (Address: 0x100641c4)
- OutputDebugStringW (Address: 0x100641c8)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x100641d4)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x100641dc)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x100641f4)
- RaiseException (Address: 0x100641f0)
- SetLastError (Address: 0x100641e8)
- SetUnhandledExceptionFilter (Address: 0x100641ec)
- UnhandledExceptionFilter (Address: 0x100641e4)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x10064208)
- CreateDirectoryW (Address: 0x10064204)
- CreateFileW (Address: 0x1006420c)
- DeleteFileW (Address: 0x100641fc)
- GetFileSizeEx (Address: 0x10064210)
- GetLongPathNameW (Address: 0x10064200)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x10064218)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x10064220)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x10064228)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x10064234)
- HeapAlloc (Address: 0x1006423c)
- HeapFree (Address: 0x10064238)
- HeapReAlloc (Address: 0x10064230)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x10064244)
- LocalFree (Address: 0x10064248)
- LocalReAlloc (Address: 0x1006424c)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x10064254)
- GlobalUnlock (Address: 0x10064258)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x10064260)
api-ms-win-core-largeinteger-l1-1-0.dll
- MulDiv (Address: 0x10064268)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1006427c)
- GetModuleFileNameA (Address: 0x10064278)
- GetModuleFileNameW (Address: 0x10064274)
- GetModuleHandleExW (Address: 0x10064270)
- GetModuleHandleW (Address: 0x10064284)
- GetProcAddress (Address: 0x10064280)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x10064298)
- GetThreadPreferredUILanguages (Address: 0x10064294)
- GetUserDefaultLCID (Address: 0x1006428c)
- GetUserGeoID (Address: 0x10064290)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- GetUserDefaultUILanguage (Address: 0x100642a0)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x100642ac)
- MapViewOfFile (Address: 0x100642a8)
- ReadProcessMemory (Address: 0x100642b4)
- UnmapViewOfFile (Address: 0x100642b0)
api-ms-win-core-memory-l1-1-1.dll
- PrefetchVirtualMemory (Address: 0x100642bc)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCombine (Address: 0x100642cc)
- PathCchAppend (Address: 0x100642dc)
- PathCchCombine (Address: 0x100642d4)
- PathCchFindExtension (Address: 0x100642d8)
- PathCchRemoveBackslash (Address: 0x100642c4)
- PathCchRemoveExtension (Address: 0x100642d0)
- PathCchRemoveFileSpec (Address: 0x100642c8)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x100642e4)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1006430c)
- GetCurrentProcessId (Address: 0x100642f4)
- GetCurrentThread (Address: 0x100642fc)
- GetCurrentThreadId (Address: 0x100642f8)
- GetProcessTimes (Address: 0x100642ec)
- OpenProcessToken (Address: 0x10064304)
- OpenThreadToken (Address: 0x10064308)
- ProcessIdToSessionId (Address: 0x100642f0)
- TerminateProcess (Address: 0x10064300)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x10064318)
- OpenProcess (Address: 0x10064314)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x10064320)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x10064328)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1006434c)
- RegCreateKeyExW (Address: 0x10064330)
- RegDeleteValueW (Address: 0x10064344)
- RegEnumValueW (Address: 0x10064348)
- RegGetValueW (Address: 0x10064340)
- RegOpenKeyExW (Address: 0x10064350)
- RegQueryInfoKeyW (Address: 0x1006433c)
- RegQueryValueExW (Address: 0x10064338)
- RegSetValueExW (Address: 0x10064334)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x10064358)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x10064360)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrlenW (Address: 0x10064368)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x100643ac)
- AcquireSRWLockShared (Address: 0x100643a0)
- CreateEventExW (Address: 0x100643b0)
- CreateEventW (Address: 0x100643c8)
- CreateMutexExW (Address: 0x1006438c)
- CreateSemaphoreExW (Address: 0x10064384)
- DeleteCriticalSection (Address: 0x10064390)
- EnterCriticalSection (Address: 0x10064388)
- InitializeCriticalSection (Address: 0x1006439c)
- InitializeCriticalSectionAndSpinCount (Address: 0x10064398)
- InitializeCriticalSectionEx (Address: 0x10064394)
- InitializeSRWLock (Address: 0x100643c0)
- LeaveCriticalSection (Address: 0x1006437c)
- OpenEventW (Address: 0x100643bc)
- OpenSemaphoreW (Address: 0x100643c4)
- ReleaseMutex (Address: 0x10064370)
- ReleaseSemaphore (Address: 0x10064380)
- ReleaseSRWLockExclusive (Address: 0x100643b4)
- ReleaseSRWLockShared (Address: 0x100643a8)
- ResetEvent (Address: 0x100643b8)
- SetEvent (Address: 0x100643a4)
- WaitForSingleObject (Address: 0x10064374)
- WaitForSingleObjectEx (Address: 0x10064378)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x100643d4)
- InitOnceComplete (Address: 0x100643d0)
- InitOnceExecuteOnce (Address: 0x100643d8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x100643e0)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x100643e8)
- CreateThreadpoolTimer (Address: 0x100643f0)
- SetThreadpoolTimer (Address: 0x100643f4)
- WaitForThreadpoolTimerCallbacks (Address: 0x100643ec)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x10064400)
- EncodePointer (Address: 0x100643fc)
api-ms-win-core-winrt-error-l1-1-0.dll
- RoOriginateError (Address: 0x1006440c)
- RoOriginateErrorW (Address: 0x10064408)
- SetRestrictedErrorInfo (Address: 0x10064410)
api-ms-win-core-winrt-error-l1-1-1.dll
- RoGetMatchingRestrictedErrorInfo (Address: 0x10064418)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x10064420)
- RoGetActivationFactory (Address: 0x10064424)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCreateString (Address: 0x10064430)
- WindowsCreateStringReference (Address: 0x10064434)
- WindowsDeleteString (Address: 0x1006442c)
- WindowsDuplicateString (Address: 0x10064444)
- WindowsGetStringRawBuffer (Address: 0x10064438)
- WindowsIsStringEmpty (Address: 0x1006443c)
- WindowsStringHasEmbeddedNull (Address: 0x10064440)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x100644d8)
- __std_terminate (Address: 0x100644d4)
- _CxxThrowException (Address: 0x100644b8)
- _except_handler4_common (Address: 0x10064480)
- _o___std_exception_copy (Address: 0x100644d0)
- _o___std_exception_destroy (Address: 0x100644cc)
- _o___std_type_info_destroy_list (Address: 0x100644c8)
- _o___stdio_common_vsnprintf_s (Address: 0x100644c4)
- _o___stdio_common_vswprintf (Address: 0x100644c0)
- _o___stdio_common_vswscanf (Address: 0x100644bc)
- _o__callnewh (Address: 0x100644ac)
- _o__cexit (Address: 0x100644a8)
- _o__configure_narrow_argv (Address: 0x100644a4)
- _o__crt_atexit (Address: 0x100644a0)
- _o__errno (Address: 0x1006449c)
- _o__execute_onexit_table (Address: 0x10064498)
- _o__get_errno (Address: 0x10064494)
- _o__initialize_narrow_environment (Address: 0x10064490)
- _o__initialize_onexit_table (Address: 0x1006448c)
- _o__invalid_parameter_noinfo (Address: 0x10064488)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x10064484)
- _o__itow_s (Address: 0x1006444c)
- _o__purecall (Address: 0x10064450)
- _o__register_onexit_function (Address: 0x10064454)
- _o__seh_filter_dll (Address: 0x10064458)
- _o__set_errno (Address: 0x1006445c)
- _o__ui64tow_s (Address: 0x10064460)
- _o__wcstoui64 (Address: 0x10064464)
- _o__wtoi (Address: 0x1006446c)
- _o_ceil (Address: 0x10064470)
- _o_free (Address: 0x10064474)
- _o_malloc (Address: 0x10064478)
- _o_towupper (Address: 0x1006447c)
- memcmp (Address: 0x100644dc)
- memcpy (Address: 0x100644e0)
- memmove (Address: 0x10064468)
- wcschr (Address: 0x100644b0)
- wcsrchr (Address: 0x100644b4)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x100644e8)
- _initterm_e (Address: 0x100644ec)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x100644f4)
- wcsspn (Address: 0x100644f8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x10064504)
- EventRegister (Address: 0x10064500)
- EventSetInformation (Address: 0x10064508)
- EventUnregister (Address: 0x1006450c)
- EventWriteTransfer (Address: 0x10064510)
api-ms-win-security-base-l1-1-0.dll
- DuplicateTokenEx (Address: 0x10064518)
- GetAce (Address: 0x10064524)
- GetFileSecurityW (Address: 0x1006451c)
- GetSecurityDescriptorSacl (Address: 0x10064520)
- GetSidSubAuthority (Address: 0x10064528)
- GetTokenInformation (Address: 0x1006452c)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x10064534)
api-ms-win-shcore-stream-l1-1-0.dll
- SHCreateStreamOnFileW (Address: 0x1006453c)
api-ms-win-shell-namespace-l1-1-0.dll
- ILClone (Address: 0x10064564)
- ILCloneFirst (Address: 0x10064548)
- ILCombine (Address: 0x1006456c)
- ILFindLastID (Address: 0x10064568)
- ILFree (Address: 0x1006454c)
- ILGetSize (Address: 0x1006457c)
- ILIsEqual (Address: 0x1006455c)
- ILIsParent (Address: 0x10064544)
- SHBindToFolderIDListParentEx (Address: 0x10064574)
- SHBindToObject (Address: 0x10064580)
- SHBindToParent (Address: 0x10064570)
- SHCreateItemFromIDList (Address: 0x10064554)
- SHCreateItemFromParsingName (Address: 0x10064550)
- SHCreateItemWithParent (Address: 0x10064560)
- SHGetIDListFromObject (Address: 0x10064578)
- SHParseDisplayName (Address: 0x10064558)
Bcp47Langs.dll
- GetUserLanguages (Address: 0x10064000)
GDI32.dll
- CreateCompatibleDC (Address: 0x10064010)
- CreateDIBSection (Address: 0x1006400c)
- DeleteDC (Address: 0x1006401c)
- DeleteObject (Address: 0x10064020)
- GdiAlphaBlend (Address: 0x10064018)
- GetObjectW (Address: 0x10064008)
- SelectObject (Address: 0x10064024)
- StretchDIBits (Address: 0x10064014)
msvcp_win.dll
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10064588)
ntdll.dll
- NtQueryInformationProcess (Address: 0x10064594)
- NtQueryInformationToken (Address: 0x100645c4)
- NtQueryWnfStateData (Address: 0x100645a4)
- RtlAcquireSRWLockExclusive (Address: 0x100645a0)
- RtlAllocateHeap (Address: 0x100645b8)
- RtlCompareUnicodeString (Address: 0x100645a8)
- RtlFreeHeap (Address: 0x100645c0)
- RtlInitUnicodeString (Address: 0x100645b0)
- RtlNtStatusToDosError (Address: 0x10064598)
- RtlNtStatusToDosErrorNoTeb (Address: 0x100645ac)
- RtlPublishWnfStateData (Address: 0x10064590)
- RtlReleaseSRWLockExclusive (Address: 0x100645bc)
- RtlSubscribeWnfStateChangeNotification (Address: 0x100645b4)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1006459c)
ole32.dll
- CoAllowSetForegroundWindow (Address: 0x1006460c)
- CoCreateFreeThreadedMarshaler (Address: 0x10064604)
- CoCreateGuid (Address: 0x100645ec)
- CoCreateInstance (Address: 0x100645d4)
- CoGetCallContext (Address: 0x10064614)
- CoGetInterfaceAndReleaseStream (Address: 0x100645fc)
- CoGetMalloc (Address: 0x100645e4)
- CoInitializeEx (Address: 0x100645f0)
- CoMarshalInterThreadInterfaceInStream (Address: 0x100645f4)
- CoReleaseMarshalData (Address: 0x100645f8)
- CoTaskMemAlloc (Address: 0x100645dc)
- CoTaskMemFree (Address: 0x100645d8)
- CoTaskMemRealloc (Address: 0x100645e0)
- CoUninitialize (Address: 0x100645cc)
- CoWaitForMultipleHandles (Address: 0x10064610)
- CreateBindCtx (Address: 0x10064600)
- PropVariantClear (Address: 0x100645d0)
- ReleaseStgMedium (Address: 0x10064608)
- RoGetAgileReference (Address: 0x10064618)
- StringFromGUID2 (Address: 0x100645e8)
SHCORE.dll
- (Address: 0x1006403c)
- (Address: 0x1006404c)
- (Address: 0x10064050)
- (Address: 0x10064058)
- (Address: 0x1006405c)
- (Address: 0x10064060)
- (Address: 0x10064064)
- (Address: 0x10064078)
- (Address: 0x10064080)
- (Address: 0x10064084)
- GetScaleFactorForDevice (Address: 0x10064038)
- IStream_Read (Address: 0x1006402c)
- IStream_Size (Address: 0x10064040)
- IUnknown_GetSite (Address: 0x10064070)
- IUnknown_QueryService (Address: 0x10064030)
- IUnknown_Set (Address: 0x10064074)
- SHAnsiToUnicode (Address: 0x10064054)
- SHGetValueW (Address: 0x10064048)
- SHQueryValueExW (Address: 0x10064068)
- SHSetValueW (Address: 0x10064044)
- SHStrDupW (Address: 0x1006407c)
- SHTaskPoolGetUniqueContext (Address: 0x1006406c)
- SHTaskPoolQueueTask (Address: 0x10064034)
SHLWAPI.dll
- (Address: 0x1006408c)
- (Address: 0x10064090)
- (Address: 0x10064094)
- (Address: 0x100640a8)
- (Address: 0x100640ac)
- (Address: 0x100640c0)
- (Address: 0x100640d4)
- (Address: 0x100640d8)
- (Address: 0x100640dc)
- (Address: 0x100640e8)
- (Address: 0x10064108)
- (Address: 0x10064110)
- AssocCreate (Address: 0x100640fc)
- PathCommonPrefixW (Address: 0x100640b0)
- PathFileExistsW (Address: 0x100640ec)
- PathFindExtensionW (Address: 0x100640b4)
- PathFindFileNameW (Address: 0x100640e0)
- PathGetArgsW (Address: 0x100640c8)
- PathGetDriveNumberW (Address: 0x10064098)
- PathIsFileSpecW (Address: 0x100640e4)
- PathIsPrefixW (Address: 0x100640b8)
- PathIsRelativeW (Address: 0x100640a0)
- PathIsUNCW (Address: 0x1006409c)
- PathIsURLW (Address: 0x100640a4)
- PathParseIconLocationW (Address: 0x100640d0)
- PathRemoveBlanksW (Address: 0x100640c4)
- PathRemoveExtensionW (Address: 0x100640f4)
- PathRemoveFileSpecW (Address: 0x100640cc)
- PathUnquoteSpacesW (Address: 0x100640bc)
- SHStrDupA (Address: 0x1006410c)
- StrChrW (Address: 0x100640f0)
- StrCmpW (Address: 0x10064104)
- StrDupW (Address: 0x10064100)
- StrStrIW (Address: 0x100640f8)
SLC.dll
- SLGetWindowsInformationDWORD (Address: 0x10064118)
USER32.dll
- CharUpperBuffW (Address: 0x1006413c)
- CopyImage (Address: 0x10064134)
- CreateIconIndirect (Address: 0x10064128)
- CreatePopupMenu (Address: 0x10064150)
- DefWindowProcW (Address: 0x10064184)
- DestroyIcon (Address: 0x10064124)
- DestroyMenu (Address: 0x10064154)
- DestroyWindow (Address: 0x10064168)
- FindWindowW (Address: 0x1006417c)
- GetDC (Address: 0x1006414c)
- GetMenuDefaultItem (Address: 0x10064158)
- GetSysColor (Address: 0x10064130)
- GetWindowLongW (Address: 0x10064188)
- GetWindowThreadProcessId (Address: 0x1006415c)
- InsertMenuW (Address: 0x10064148)
- KillTimer (Address: 0x10064164)
- LoadStringA (Address: 0x10064140)
- LoadStringW (Address: 0x10064138)
- MonitorFromPoint (Address: 0x10064174)
- PostMessageW (Address: 0x10064178)
- RegisterClipboardFormatW (Address: 0x10064144)
- ReleaseDC (Address: 0x10064120)
- SendNotifyMessageW (Address: 0x10064170)
- SetTimer (Address: 0x1006416c)
- SetWindowLongW (Address: 0x10064180)
- SetWindowTextW (Address: 0x10064160)
- SystemParametersInfoW (Address: 0x1006412c)
USERENV.dll
- GetProfileType (Address: 0x10064190)
Windows.Storage.dll
- (Address: 0x100641a0)
- SHGetDesktopFolder (Address: 0x10064198)
- SHGetKnownFolderPath (Address: 0x1006419c)