HoloShellRuntime.dll

Description: Hologram Shell Runtime

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: 2601d1fa74977fe25f47440897ce67d5

File Size: 179.5 KB

Uploaded At: Dec. 1, 2025, 7:56 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1ed20)
DllGetActivationFactory (Ordinal: 2, Address: 0x1ece0)
DllGetClassObject (Ordinal: 3, Address: 0x1ed00)

Imported DLLs & Functions

api-ms-win-appmodel-identity-l1-2-0.dll

AppXFreeMemory (Address: 0x10029028)
AppXGetPackageCapabilities (Address: 0x1002902c)

api-ms-win-appmodel-runtime-l1-1-0.dll

GetPackageFamilyName (Address: 0x10029034)
GetPackageFullName (Address: 0x10029038)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1002904c)
CoCreateInstance (Address: 0x10029054)
CoGetApartmentType (Address: 0x10029058)
CoGetCallContext (Address: 0x10029064)
CoGetCallerTID (Address: 0x10029060)
CoGetInterfaceAndReleaseStream (Address: 0x1002905c)
CoGetMalloc (Address: 0x10029040)
CoMarshalInterface (Address: 0x1002906c)
CoReleaseMarshalData (Address: 0x10029048)
CoTaskMemAlloc (Address: 0x10029050)
CoTaskMemFree (Address: 0x10029068)
CoWaitForMultipleHandles (Address: 0x10029070)
CreateStreamOnHGlobal (Address: 0x10029044)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10029078)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10029084)
IsDebuggerPresent (Address: 0x10029080)
OutputDebugStringW (Address: 0x10029088)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10029090)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10029098)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100290a4)
RaiseException (Address: 0x100290b0)
SetLastError (Address: 0x100290a8)
SetUnhandledExceptionFilter (Address: 0x100290a0)
UnhandledExceptionFilter (Address: 0x100290ac)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x100290b8)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x100290c0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100290c8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100290d0)
HeapAlloc (Address: 0x100290d4)
HeapFree (Address: 0x100290d8)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x100290e0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x100290e8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x10029108)
FreeLibrary (Address: 0x100290f0)
GetModuleFileNameA (Address: 0x100290fc)
GetModuleHandleExW (Address: 0x10029100)
GetModuleHandleW (Address: 0x100290f4)
GetProcAddress (Address: 0x100290f8)
LoadStringW (Address: 0x10029104)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x10029110)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10029118)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1002912c)
GetCurrentProcess (Address: 0x10029120)
GetCurrentProcessId (Address: 0x10029128)
GetCurrentThreadId (Address: 0x10029130)
GetProcessId (Address: 0x10029138)
OpenProcessToken (Address: 0x10029134)
TerminateProcess (Address: 0x10029124)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x10029140)
OpenProcess (Address: 0x10029144)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002914c)

api-ms-win-core-registry-l1-1-0.dll

RegGetValueW (Address: 0x10029154)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10029184)
AcquireSRWLockShared (Address: 0x10029170)
CreateEventExW (Address: 0x10029160)
CreateMutexExW (Address: 0x10029174)
CreateSemaphoreExW (Address: 0x10029168)
DeleteCriticalSection (Address: 0x1002916c)
EnterCriticalSection (Address: 0x10029188)
InitializeCriticalSectionEx (Address: 0x10029198)
InitializeSRWLock (Address: 0x10029164)
LeaveCriticalSection (Address: 0x1002919c)
OpenSemaphoreW (Address: 0x1002917c)
ReleaseMutex (Address: 0x10029190)
ReleaseSemaphore (Address: 0x100291a0)
ReleaseSRWLockExclusive (Address: 0x1002918c)
ReleaseSRWLockShared (Address: 0x10029178)
SetEvent (Address: 0x1002915c)
WaitForSingleObject (Address: 0x10029194)
WaitForSingleObjectEx (Address: 0x10029180)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100291a8)
InitOnceComplete (Address: 0x100291b0)
InitOnceExecuteOnce (Address: 0x100291ac)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100291b8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100291cc)
CreateThreadpoolTimer (Address: 0x100291c4)
SetThreadpoolTimer (Address: 0x100291c8)
WaitForThreadpoolTimerCallbacks (Address: 0x100291c0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100291d4)
EncodePointer (Address: 0x100291d8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x100291e4)
RoOriginateError (Address: 0x100291e8)
RoOriginateErrorW (Address: 0x100291f0)
RoTransformError (Address: 0x100291ec)
SetRestrictedErrorInfo (Address: 0x100291e0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10029200)
RoGetMatchingRestrictedErrorInfo (Address: 0x100291fc)
RoReportFailedDelegate (Address: 0x100291f8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x10029210)
RoGetActivationFactory (Address: 0x10029208)
RoInitialize (Address: 0x1002920c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x10029234)
WindowsCreateString (Address: 0x10029218)
WindowsCreateStringReference (Address: 0x10029220)
WindowsDeleteString (Address: 0x1002922c)
WindowsDuplicateString (Address: 0x1002921c)
WindowsGetStringRawBuffer (Address: 0x10029230)
WindowsIsStringEmpty (Address: 0x10029224)
WindowsStringHasEmbeddedNull (Address: 0x10029228)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x10029284)
__std_terminate (Address: 0x10029280)
_CxxThrowException (Address: 0x1002927c)
_except_handler4_common (Address: 0x10029278)
_o___std_exception_copy (Address: 0x100292a8)
_o___std_exception_destroy (Address: 0x100292a4)
_o___std_type_info_destroy_list (Address: 0x100292a0)
_o___stdio_common_vsnprintf_s (Address: 0x10029294)
_o___stdio_common_vswprintf (Address: 0x10029288)
_o__callnewh (Address: 0x10029290)
_o__cexit (Address: 0x1002928c)
_o__configure_narrow_argv (Address: 0x1002929c)
_o__crt_atexit (Address: 0x10029298)
_o__errno (Address: 0x1002923c)
_o__execute_onexit_table (Address: 0x10029240)
_o__initialize_narrow_environment (Address: 0x10029244)
_o__initialize_onexit_table (Address: 0x10029248)
_o__invalid_parameter_noinfo (Address: 0x1002924c)
_o__purecall (Address: 0x10029250)
_o__register_onexit_function (Address: 0x10029254)
_o__seh_filter_dll (Address: 0x10029258)
_o__wcsicmp (Address: 0x10029260)
_o_free (Address: 0x10029264)
_o_malloc (Address: 0x10029268)
_o_realloc (Address: 0x1002926c)
_o_terminate (Address: 0x10029270)
_o_wcscpy_s (Address: 0x10029274)
memcmp (Address: 0x100292b0)
memcpy (Address: 0x100292b4)
memmove (Address: 0x1002925c)
wcschr (Address: 0x100292ac)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100292c0)
_initterm_e (Address: 0x100292bc)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100292c8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100292e0)
EventRegister (Address: 0x100292d8)
EventSetInformation (Address: 0x100292d0)
EventUnregister (Address: 0x100292d4)
EventWriteTransfer (Address: 0x100292dc)

api-ms-win-security-base-l1-1-0.dll

EqualSid (Address: 0x100292ec)
GetTokenInformation (Address: 0x100292e8)

api-ms-win-security-lsalookup-l2-1-0.dll

LookupAccountNameW (Address: 0x100292f4)

api-ms-win-security-provider-l1-1-0.dll

GetNamedSecurityInfoW (Address: 0x10029300)
SetEntriesInAclW (Address: 0x100292fc)
SetNamedSecurityInfoW (Address: 0x10029304)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1002930c)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x10029318)
SHTaskPoolQueueTask (Address: 0x10029314)

combase.dll

(Address: 0x10029320)
(Address: 0x10029324)

CoreMessaging.dll

CoreUICallCreateEndpointHost (Address: 0x10029018)
CoreUICallReceive (Address: 0x10029014)
CoreUICallSend (Address: 0x10029010)
CoreUICreate (Address: 0x1002900c)
MsgBufferShare (Address: 0x10029004)
MsgRelease (Address: 0x10029000)
MsgStringCreateShared (Address: 0x10029008)

CoreUIComponents.dll

CoreUIFactoryCreate (Address: 0x10029020)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x10029330)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1002932c)

ntdll.dll

NtQueryInformationProcess (Address: 0x10029344)
NtQueryInformationToken (Address: 0x10029350)
NtQueryWnfStateData (Address: 0x1002935c)
RtlAllocateHeap (Address: 0x10029354)
RtlCompareUnicodeString (Address: 0x10029348)
RtlDeriveCapabilitySidsFromName (Address: 0x1002933c)
RtlFreeHeap (Address: 0x1002934c)
RtlGetDeviceFamilyInfoEnum (Address: 0x10029338)
RtlInitUnicodeString (Address: 0x10029340)
RtlNtStatusToDosErrorNoTeb (Address: 0x10029358)

twinapi.appcore.dll

(Address: 0x10029364)
(Address: 0x10029368)