EmailApis.dll

Description: DLL for EmailRT

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 4c6d8eecdbe5ebc61ce7af1c0e7c47c3

File Size: 790.5 KB

Uploaded At: Dec. 1, 2025, 7:56 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x2d7a0)
DllGetActivationFactory (Ordinal: 2, Address: 0x2d800)
DllGetClassObject (Ordinal: 3, Address: 0x2d7d0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100b6034)
IsDebuggerPresent (Address: 0x100b6040)
OutputDebugStringA (Address: 0x100b6038)
OutputDebugStringW (Address: 0x100b603c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100b6048)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100b6050)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100b6060)
RaiseException (Address: 0x100b6064)
SetLastError (Address: 0x100b6068)
SetUnhandledExceptionFilter (Address: 0x100b605c)
UnhandledExceptionFilter (Address: 0x100b6058)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x100b6074)
CreateFileW (Address: 0x100b6070)
DeleteFileW (Address: 0x100b6080)
FindClose (Address: 0x100b6088)
FindFirstFileW (Address: 0x100b6078)
FindNextFileW (Address: 0x100b6090)
GetFullPathNameW (Address: 0x100b6084)
GetTempFileNameW (Address: 0x100b608c)
RemoveDirectoryW (Address: 0x100b607c)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x100b6098)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100b60a0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100b60b0)
HeapAlloc (Address: 0x100b60ac)
HeapFree (Address: 0x100b60a8)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100b60b8)
LocalFree (Address: 0x100b60bc)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100b60d0)
FindResourceExW (Address: 0x100b60d8)
FreeLibrary (Address: 0x100b60e8)
GetModuleFileNameA (Address: 0x100b60dc)
GetModuleFileNameW (Address: 0x100b60c4)
GetModuleHandleExW (Address: 0x100b60cc)
GetModuleHandleW (Address: 0x100b60e4)
GetProcAddress (Address: 0x100b60d4)
LoadLibraryExW (Address: 0x100b60ec)
LoadResource (Address: 0x100b60c8)
SizeofResource (Address: 0x100b60e0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x100b60f4)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100b60fc)

api-ms-win-core-path-l1-1-0.dll

PathAllocCombine (Address: 0x100b6104)
PathCchCombine (Address: 0x100b6108)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100b6110)
GetCurrentProcessId (Address: 0x100b6124)
GetCurrentThread (Address: 0x100b6128)
GetCurrentThreadId (Address: 0x100b6118)
OpenProcessToken (Address: 0x100b611c)
OpenThreadToken (Address: 0x100b612c)
SetThreadToken (Address: 0x100b6120)
TerminateProcess (Address: 0x100b6114)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100b6134)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100b613c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100b6144)
RegCreateKeyExW (Address: 0x100b6158)
RegDeleteValueW (Address: 0x100b6148)
RegEnumKeyExW (Address: 0x100b6154)
RegOpenKeyExW (Address: 0x100b6150)
RegQueryInfoKeyW (Address: 0x100b615c)
RegSetValueExW (Address: 0x100b614c)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x100b6164)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x100b616c)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x100b6174)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x100b617c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100b61a8)
AcquireSRWLockShared (Address: 0x100b61c0)
CreateEventExW (Address: 0x100b61b4)
CreateEventW (Address: 0x100b61a0)
CreateMutexExW (Address: 0x100b61d0)
CreateSemaphoreExW (Address: 0x100b61ac)
DeleteCriticalSection (Address: 0x100b61c8)
EnterCriticalSection (Address: 0x100b61bc)
InitializeCriticalSection (Address: 0x100b6188)
InitializeCriticalSectionEx (Address: 0x100b61c4)
InitializeSRWLock (Address: 0x100b61cc)
LeaveCriticalSection (Address: 0x100b6184)
OpenSemaphoreW (Address: 0x100b6190)
ReleaseMutex (Address: 0x100b6198)
ReleaseSemaphore (Address: 0x100b61a4)
ReleaseSRWLockExclusive (Address: 0x100b618c)
ReleaseSRWLockShared (Address: 0x100b61b0)
SetEvent (Address: 0x100b61b8)
WaitForSingleObject (Address: 0x100b619c)
WaitForSingleObjectEx (Address: 0x100b6194)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100b61d8)
InitOnceComplete (Address: 0x100b61dc)
InitOnceExecuteOnce (Address: 0x100b61e4)
Sleep (Address: 0x100b61e0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100b61f0)
GetTickCount (Address: 0x100b61ec)
GetTickCount64 (Address: 0x100b61f4)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x100b6218)
CloseThreadpoolWork (Address: 0x100b6214)
CreateThreadpoolWait (Address: 0x100b620c)
CreateThreadpoolWork (Address: 0x100b6208)
FreeLibraryWhenCallbackReturns (Address: 0x100b6210)
SetThreadpoolWait (Address: 0x100b61fc)
SubmitThreadpoolWork (Address: 0x100b6204)
WaitForThreadpoolWaitCallbacks (Address: 0x100b6200)

api-ms-win-core-url-l1-1-0.dll

UrlEscapeW (Address: 0x100b6220)
UrlUnescapeW (Address: 0x100b6224)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100b622c)
EncodePointer (Address: 0x100b6230)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100b6248)
EventRegister (Address: 0x100b6240)
EventSetInformation (Address: 0x100b6238)
EventUnregister (Address: 0x100b6244)
EventWriteTransfer (Address: 0x100b623c)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x100b6258)
OpenSCManagerW (Address: 0x100b6254)
OpenServiceW (Address: 0x100b6250)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x100b6260)

AppointmentApis.dll

CreatePropertiesFromRecurrencePattern (Address: 0x100b6000)
CreateRecurrencePatternFromProperties (Address: 0x100b6004)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100b62cc)
__dllonexit (Address: 0x100b626c)
_amsg_exit (Address: 0x100b6278)
_callnewh (Address: 0x100b6294)
_errno (Address: 0x100b62a4)
_except_handler4_common (Address: 0x100b6274)
_initterm (Address: 0x100b6280)
_lock (Address: 0x100b6290)
_onexit (Address: 0x100b628c)
_purecall (Address: 0x100b62bc)
_unlock (Address: 0x100b6268)
_vsnwprintf (Address: 0x100b62b4)
_vsnwprintf_s (Address: 0x100b62a8)
_XcptFilter (Address: 0x100b6270)
free (Address: 0x100b62c8)
malloc (Address: 0x100b62c4)
memcmp (Address: 0x100b6288)
memcpy (Address: 0x100b627c)
memcpy_s (Address: 0x100b6284)
memmove (Address: 0x100b62b8)
memmove_s (Address: 0x100b62ac)
memset (Address: 0x100b62d0)
realloc (Address: 0x100b62b0)
wcschr (Address: 0x100b629c)
wcsncmp (Address: 0x100b62a0)
wcsncpy_s (Address: 0x100b62c0)
wcstoul (Address: 0x100b6298)

ntdll.dll

RtlQueryWnfStateData (Address: 0x100b62d8)
RtlSubscribeWnfStateChangeNotification (Address: 0x100b62dc)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100b62e0)

SystemEventsBrokerClient.dll

SebCreateEmailNotificationEvent (Address: 0x100b600c)
SebDeleteEvent (Address: 0x100b6010)

UserDataPlatformHelperUtil.dll

GenerateUserModeServiceName (Address: 0x100b6018)
GetUserContextFromHandle (Address: 0x100b601c)
GetUserTokenFromContext (Address: 0x100b6024)
IsCommsSystemService (Address: 0x100b602c)
RunServicesInProc (Address: 0x100b6020)
StartAndWaitForServiceForUser (Address: 0x100b6028)