Geolocation.dll

Description: Geolocation Runtime DLL

Version: 10.0.19041.6033

Architecture: 32-bit

Operating System: Windows NT

SHA256: 148d73ffdae2592311a7858086914fdc

File Size: 373.5 KB

Uploaded At: Dec. 1, 2025, 7:56 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1dc20)
DllGetActivationFactory (Ordinal: 2, Address: 0x1eb60)
DllGetClassObject (Ordinal: 3, Address: 0x312c0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10055060)
CoCreateInstance (Address: 0x10055054)
CoDecrementMTAUsage (Address: 0x1005507c)
CoGetApartmentType (Address: 0x1005504c)
CoGetCallerTID (Address: 0x10055058)
CoGetInterfaceAndReleaseStream (Address: 0x10055084)
CoIncrementMTAUsage (Address: 0x10055068)
CoInitializeEx (Address: 0x10055050)
CoMarshalInterface (Address: 0x10055078)
CoQueryProxyBlanket (Address: 0x10055074)
CoReleaseMarshalData (Address: 0x10055064)
CoSetProxyBlanket (Address: 0x10055070)
CoTaskMemAlloc (Address: 0x1005506c)
CoTaskMemFree (Address: 0x1005505c)
CoUninitialize (Address: 0x10055048)
CreateStreamOnHGlobal (Address: 0x10055080)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1005508c)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1005509c)
IsDebuggerPresent (Address: 0x10055098)
OutputDebugStringW (Address: 0x10055094)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100550a4)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100550ac)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100550bc)
RaiseException (Address: 0x100550c4)
SetLastError (Address: 0x100550b8)
SetUnhandledExceptionFilter (Address: 0x100550c0)
UnhandledExceptionFilter (Address: 0x100550b4)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100550d0)
DuplicateHandle (Address: 0x100550cc)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100550d8)
HeapAlloc (Address: 0x100550dc)
HeapFree (Address: 0x100550e0)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x100550e8)
GetModuleHandleExW (Address: 0x100550ec)
GetModuleHandleW (Address: 0x100550f4)
GetProcAddress (Address: 0x100550f0)
LoadStringW (Address: 0x100550f8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10055104)
GetGeoInfoW (Address: 0x10055108)
GetUserGeoID (Address: 0x10055100)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10055114)
GetCurrentProcessId (Address: 0x10055110)
GetCurrentThread (Address: 0x1005512c)
GetCurrentThreadId (Address: 0x10055120)
OpenProcessToken (Address: 0x10055128)
OpenThreadToken (Address: 0x1005511c)
SetThreadToken (Address: 0x10055124)
TerminateProcess (Address: 0x10055118)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x10055134)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1005513c)

api-ms-win-core-psm-app-l1-1-0.dll

PsmQueryCurrentAppState (Address: 0x10055144)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x1005514c)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x10055154)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1005515c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10055194)
AcquireSRWLockShared (Address: 0x10055184)
CreateEventExW (Address: 0x10055188)
CreateEventW (Address: 0x100551a8)
CreateMutexExW (Address: 0x10055164)
CreateSemaphoreExW (Address: 0x100551b4)
DeleteCriticalSection (Address: 0x100551b8)
EnterCriticalSection (Address: 0x100551a4)
InitializeCriticalSection (Address: 0x10055174)
InitializeCriticalSectionEx (Address: 0x10055178)
InitializeSRWLock (Address: 0x1005519c)
LeaveCriticalSection (Address: 0x10055170)
OpenEventW (Address: 0x1005516c)
OpenSemaphoreW (Address: 0x1005518c)
ReleaseMutex (Address: 0x10055180)
ReleaseSemaphore (Address: 0x10055168)
ReleaseSRWLockExclusive (Address: 0x100551a0)
ReleaseSRWLockShared (Address: 0x100551b0)
SetEvent (Address: 0x100551ac)
TryAcquireSRWLockExclusive (Address: 0x10055198)
WaitForSingleObject (Address: 0x1005517c)
WaitForSingleObjectEx (Address: 0x10055190)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x100551c0)
Sleep (Address: 0x100551c8)
SleepConditionVariableSRW (Address: 0x100551cc)
WakeAllConditionVariable (Address: 0x100551c4)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100551d4)
GetTickCount (Address: 0x100551d8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100551fc)
CloseThreadpoolWait (Address: 0x100551f4)
CreateThreadpoolTimer (Address: 0x100551ec)
CreateThreadpoolWait (Address: 0x100551f8)
FreeLibraryWhenCallbackReturns (Address: 0x100551e0)
SetThreadpoolTimer (Address: 0x100551e4)
SetThreadpoolWait (Address: 0x100551f0)
TrySubmitThreadpoolCallback (Address: 0x10055204)
WaitForThreadpoolTimerCallbacks (Address: 0x100551e8)
WaitForThreadpoolWaitCallbacks (Address: 0x10055200)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10055210)
EncodePointer (Address: 0x1005520c)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x10055228)
RoOriginateError (Address: 0x10055218)
RoOriginateErrorW (Address: 0x10055224)
RoTransformError (Address: 0x1005521c)
SetRestrictedErrorInfo (Address: 0x10055220)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10055230)
RoGetMatchingRestrictedErrorInfo (Address: 0x10055234)
RoReportFailedDelegate (Address: 0x10055238)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x10055248)
RoInitialize (Address: 0x10055244)
RoUninitialize (Address: 0x10055240)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x10055254)
HSTRING_UserMarshal (Address: 0x10055250)
HSTRING_UserSize (Address: 0x10055270)
HSTRING_UserUnmarshal (Address: 0x1005525c)
WindowsCreateString (Address: 0x10055268)
WindowsCreateStringReference (Address: 0x10055274)
WindowsDeleteString (Address: 0x10055258)
WindowsDuplicateString (Address: 0x1005526c)
WindowsGetStringLen (Address: 0x1005527c)
WindowsGetStringRawBuffer (Address: 0x10055264)
WindowsIsStringEmpty (Address: 0x10055278)
WindowsStringHasEmbeddedNull (Address: 0x10055260)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x10055284)
EventRegister (Address: 0x1005528c)
EventSetInformation (Address: 0x10055288)
EventUnregister (Address: 0x10055290)
EventWriteTransfer (Address: 0x10055294)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1005529c)
ImpersonateSelf (Address: 0x100552a0)
RevertToSelf (Address: 0x100552a4)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x100552ac)

BiWinrt.dll

BiRtCreateEventForApp (Address: 0x10055000)
BiRtDeleteEventForApp (Address: 0x10055004)

combase.dll

(Address: 0x100552c0)
(Address: 0x100552c4)
(Address: 0x100552cc)
(Address: 0x100552d0)
(Address: 0x100552d8)
(Address: 0x100552dc)
(Address: 0x100552e0)
(Address: 0x100552ec)
(Address: 0x100552f0)
(Address: 0x100552f8)
(Address: 0x100552fc)
(Address: 0x10055308)
(Address: 0x1005530c)
(Address: 0x10055310)
(Address: 0x10055318)
(Address: 0x1005532c)
(Address: 0x10055330)
CStdStubBuffer_AddRef (Address: 0x100552e4)
CStdStubBuffer_Connect (Address: 0x100552d4)
CStdStubBuffer_CountRefs (Address: 0x100552c8)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10055300)
CStdStubBuffer_DebugServerRelease (Address: 0x100552b8)
CStdStubBuffer_Disconnect (Address: 0x100552b4)
CStdStubBuffer_Invoke (Address: 0x1005531c)
CStdStubBuffer_IsIIDSupported (Address: 0x10055314)
CStdStubBuffer_QueryInterface (Address: 0x100552bc)
CStdStubBuffer2_Connect (Address: 0x10055328)
CStdStubBuffer2_CountRefs (Address: 0x10055304)
CStdStubBuffer2_Disconnect (Address: 0x100552f4)
CStdStubBuffer2_QueryInterface (Address: 0x100552e8)
NdrCStdStubBuffer_Release (Address: 0x10055320)
NdrCStdStubBuffer2_Release (Address: 0x10055324)

msvcp110_win.dll

_Nan (Address: 0x10055338)
?_Orphan_all@_Container_base0@std@@QAEXXZ (Address: 0x1005535c)
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z (Address: 0x10055340)
?_Syserror_map@std@@YAPBDH@Z (Address: 0x1005534c)
?_Winerror_map@std@@YAPBDH@Z (Address: 0x10055354)
?_Xbad_alloc@std@@YAXXZ (Address: 0x10055344)
?_Xbad_function_call@std@@YAXXZ (Address: 0x1005533c)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x10055350)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x10055358)
??0id@locale@std@@QAE@I@Z (Address: 0x10055348)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100553e0)
__dllonexit (Address: 0x10055394)
_amsg_exit (Address: 0x100553ac)
_callnewh (Address: 0x100553b4)
_CIfmod (Address: 0x10055378)
_CxxThrowException (Address: 0x10055374)
_except_handler4_common (Address: 0x1005537c)
_ftol2 (Address: 0x10055370)
_initterm (Address: 0x100553a4)
_isnan (Address: 0x10055388)
_lock (Address: 0x1005539c)
_onexit (Address: 0x10055384)
_purecall (Address: 0x100553d0)
_unlock (Address: 0x10055398)
_vsnprintf_s (Address: 0x100553c0)
_vsnwprintf (Address: 0x100553d8)
_XcptFilter (Address: 0x100553b0)
??_V@YAXPAX@Z (Address: 0x100553dc)
??0exception@@QAE@ABV0@@Z (Address: 0x100553c4)
??0exception@@QAE@XZ (Address: 0x100553c8)
??1exception@@UAE@XZ (Address: 0x100553cc)
??1type_info@@UAE@XZ (Address: 0x10055380)
??3@YAXPAX@Z (Address: 0x100553e8)
?terminate@@YAXXZ (Address: 0x100553a0)
free (Address: 0x100553a8)
malloc (Address: 0x100553e4)
memcmp (Address: 0x1005536c)
memcpy (Address: 0x10055368)
memcpy_s (Address: 0x100553d4)
memmove (Address: 0x10055364)
memmove_s (Address: 0x100553bc)
memset (Address: 0x100553b8)
realloc (Address: 0x1005538c)
wcsnlen (Address: 0x10055390)

ntdll.dll

NtCreateCrossVmEvent (Address: 0x10055400)
NtQuerySystemInformation (Address: 0x100553f0)
RtlGUIDFromString (Address: 0x100553f8)
RtlInitUnicodeString (Address: 0x100553fc)
RtlQueryPackageIdentityEx (Address: 0x10055404)
RtlReportException (Address: 0x100553f4)
RtlSubscribeWnfStateChangeNotification (Address: 0x10055408)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1005540c)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x10055410)

OLEAUT32.dll

SysFreeString (Address: 0x1005500c)
SysStringLen (Address: 0x10055010)

RPCRT4.dll

IUnknown_AddRef_Proxy (Address: 0x10055020)
IUnknown_QueryInterface_Proxy (Address: 0x10055038)
IUnknown_Release_Proxy (Address: 0x10055028)
NdrDllCanUnloadNow (Address: 0x1005502c)
NdrDllGetClassObject (Address: 0x10055024)
NdrOleAllocate (Address: 0x1005501c)
NdrOleFree (Address: 0x10055034)
NdrStubCall2 (Address: 0x10055018)
NdrStubForwardingFunction (Address: 0x10055030)

USERENV.dll

UnloadUserProfile (Address: 0x10055040)