CapabilityAccessManagerClient.dll

Description: Capability Access Manager Client

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: b4e14d5798a57d44762d241f2d395043

File Size: 168.0 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xcf90)
DllGetActivationFactory (Ordinal: 2, Address: 0xd030)
DllGetClassObject (Ordinal: 3, Address: 0xcfc0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CLSIDFromString (Address: 0x10027074)
CoCreateFreeThreadedMarshaler (Address: 0x10027060)
CoCreateInstance (Address: 0x10027058)
CoGetInterfaceAndReleaseStream (Address: 0x10027064)
CoMarshalInterface (Address: 0x10027068)
CoReleaseMarshalData (Address: 0x1002706c)
CoSetProxyBlanket (Address: 0x10027054)
CoTaskMemAlloc (Address: 0x1002705c)
CreateStreamOnHGlobal (Address: 0x10027070)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1002707c)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1002709c)
CStdStubBuffer2_CountRefs (Address: 0x100270b4)
CStdStubBuffer2_Disconnect (Address: 0x100270d4)
CStdStubBuffer2_QueryInterface (Address: 0x1002708c)
NdrProxyForwardingFunction3 (Address: 0x100270a8)
NdrProxyForwardingFunction4 (Address: 0x100270d0)
NdrProxyForwardingFunction5 (Address: 0x100270cc)
ObjectStublessClient10 (Address: 0x100270b8)
ObjectStublessClient11 (Address: 0x100270b0)
ObjectStublessClient12 (Address: 0x100270a0)
ObjectStublessClient13 (Address: 0x10027084)
ObjectStublessClient14 (Address: 0x10027090)
ObjectStublessClient15 (Address: 0x10027088)
ObjectStublessClient16 (Address: 0x100270ac)
ObjectStublessClient17 (Address: 0x100270bc)
ObjectStublessClient18 (Address: 0x10027098)
ObjectStublessClient3 (Address: 0x10027094)
ObjectStublessClient6 (Address: 0x100270c8)
ObjectStublessClient7 (Address: 0x100270a4)
ObjectStublessClient8 (Address: 0x100270c4)
ObjectStublessClient9 (Address: 0x100270c0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100270dc)
IsDebuggerPresent (Address: 0x100270e4)
OutputDebugStringW (Address: 0x100270e0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100270ec)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100270f4)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10027108)
RaiseException (Address: 0x1002710c)
SetLastError (Address: 0x10027100)
SetUnhandledExceptionFilter (Address: 0x10027104)
UnhandledExceptionFilter (Address: 0x100270fc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10027114)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1002711c)
HeapAlloc (Address: 0x10027124)
HeapFree (Address: 0x10027120)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10027130)
LocalFree (Address: 0x1002712c)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x10027138)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10027148)
GetModuleFileNameA (Address: 0x1002714c)
GetModuleHandleExW (Address: 0x10027140)
GetModuleHandleW (Address: 0x10027150)
GetProcAddress (Address: 0x10027144)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10027158)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10027168)
GetCurrentProcessId (Address: 0x10027170)
GetCurrentThreadId (Address: 0x10027164)
OpenProcessToken (Address: 0x1002716c)
TerminateProcess (Address: 0x10027160)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1002717c)
OpenProcess (Address: 0x10027178)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10027184)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10027198)
RegCreateKeyExW (Address: 0x10027190)
RegEnumKeyExW (Address: 0x10027194)
RegGetValueW (Address: 0x1002718c)
RegOpenKeyExW (Address: 0x100271a4)
RegQueryInfoKeyW (Address: 0x100271a0)
RegSetValueExW (Address: 0x1002719c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100271c4)
AcquireSRWLockShared (Address: 0x100271d8)
CreateEventW (Address: 0x100271e0)
CreateMutexExW (Address: 0x100271d4)
CreateSemaphoreExW (Address: 0x100271ac)
DeleteCriticalSection (Address: 0x100271e8)
EnterCriticalSection (Address: 0x100271ec)
InitializeCriticalSectionAndSpinCount (Address: 0x100271b4)
InitializeCriticalSectionEx (Address: 0x100271e4)
InitializeSRWLock (Address: 0x100271dc)
LeaveCriticalSection (Address: 0x100271f0)
OpenSemaphoreW (Address: 0x100271cc)
ReleaseMutex (Address: 0x100271bc)
ReleaseSemaphore (Address: 0x100271b0)
ReleaseSRWLockExclusive (Address: 0x100271c0)
ReleaseSRWLockShared (Address: 0x100271d0)
WaitForSingleObject (Address: 0x100271b8)
WaitForSingleObjectEx (Address: 0x100271c8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x100271fc)
WaitOnAddress (Address: 0x10027200)
WakeByAddressAll (Address: 0x100271f8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x10027208)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10027218)
CreateThreadpoolTimer (Address: 0x1002721c)
SetThreadpoolTimer (Address: 0x10027210)
WaitForThreadpoolTimerCallbacks (Address: 0x10027214)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10027224)
EncodePointer (Address: 0x10027228)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10027240)
RoOriginateError (Address: 0x10027238)
RoOriginateErrorW (Address: 0x10027230)
RoTransformError (Address: 0x1002723c)
SetRestrictedErrorInfo (Address: 0x10027234)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10027248)
RoGetMatchingRestrictedErrorInfo (Address: 0x1002724c)
RoReportFailedDelegate (Address: 0x10027250)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x10027258)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x10027264)
HSTRING_UserMarshal (Address: 0x10027268)
HSTRING_UserSize (Address: 0x1002726c)
HSTRING_UserUnmarshal (Address: 0x10027260)
WindowsCreateString (Address: 0x10027278)
WindowsCreateStringReference (Address: 0x10027274)
WindowsDeleteString (Address: 0x1002727c)
WindowsDuplicateString (Address: 0x10027270)
WindowsGetStringRawBuffer (Address: 0x10027280)
WindowsIsStringEmpty (Address: 0x10027284)
WindowsStringHasEmbeddedNull (Address: 0x10027288)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x10027300)
__std_terminate (Address: 0x100272fc)
_CxxThrowException (Address: 0x100272cc)
_except_handler4_common (Address: 0x100272c8)
_o___std_exception_copy (Address: 0x100272f4)
_o___std_exception_destroy (Address: 0x100272f0)
_o___std_type_info_destroy_list (Address: 0x100272ec)
_o___stdio_common_vsnprintf_s (Address: 0x100272e8)
_o___stdio_common_vswprintf (Address: 0x100272e4)
_o__callnewh (Address: 0x100272dc)
_o__cexit (Address: 0x100272d8)
_o__configure_narrow_argv (Address: 0x100272f8)
_o__crt_atexit (Address: 0x100272e0)
_o__errno (Address: 0x100272d4)
_o__execute_onexit_table (Address: 0x100272d0)
_o__initialize_narrow_environment (Address: 0x10027290)
_o__initialize_onexit_table (Address: 0x10027294)
_o__invalid_parameter_noinfo (Address: 0x10027298)
_o__invalid_parameter_noinfo_noreturn (Address: 0x1002729c)
_o__purecall (Address: 0x100272a0)
_o__register_onexit_function (Address: 0x100272a4)
_o__seh_filter_dll (Address: 0x100272a8)
_o__wcsicmp (Address: 0x100272b0)
_o_ceil (Address: 0x100272b4)
_o_free (Address: 0x100272b8)
_o_malloc (Address: 0x100272bc)
_o_terminate (Address: 0x100272c0)
_o_towlower (Address: 0x100272c4)
memcmp (Address: 0x10027304)
memcpy (Address: 0x10027308)
memmove (Address: 0x100272ac)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x10027310)
_initterm_e (Address: 0x10027314)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1002731c)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x10027324)
GetTraceEnableLevel (Address: 0x10027328)
GetTraceLoggerHandle (Address: 0x1002732c)
RegisterTraceGuidsW (Address: 0x10027334)
TraceMessage (Address: 0x10027330)
UnregisterTraceGuids (Address: 0x10027338)

msvcp_win.dll

?_Xlength_error@std@@YAXPBD@Z (Address: 0x10027340)

ntdll.dll

NtQueryWnfStateData (Address: 0x10027348)
RtlCapabilityCheck (Address: 0x10027354)
RtlInitUnicodeString (Address: 0x10027350)
RtlSubscribeWnfStateChangeNotification (Address: 0x1002734c)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x10027358)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10027030)
CStdStubBuffer_Connect (Address: 0x10027004)
CStdStubBuffer_CountRefs (Address: 0x10027048)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10027028)
CStdStubBuffer_DebugServerRelease (Address: 0x1002703c)
CStdStubBuffer_Disconnect (Address: 0x10027034)
CStdStubBuffer_Invoke (Address: 0x10027018)
CStdStubBuffer_IsIIDSupported (Address: 0x10027044)
CStdStubBuffer_QueryInterface (Address: 0x1002704c)
IUnknown_AddRef_Proxy (Address: 0x10027024)
IUnknown_QueryInterface_Proxy (Address: 0x10027040)
IUnknown_Release_Proxy (Address: 0x10027000)
NdrCStdStubBuffer_Release (Address: 0x10027014)
NdrCStdStubBuffer2_Release (Address: 0x10027008)
NdrDllCanUnloadNow (Address: 0x10027010)
NdrDllGetClassObject (Address: 0x1002700c)
NdrOleAllocate (Address: 0x10027038)
NdrOleFree (Address: 0x1002702c)
NdrStubCall2 (Address: 0x10027020)
NdrStubForwardingFunction (Address: 0x1002701c)