MrmCoreR.dll

Description: Microsoft Windows MRM

Version: 10.0.19041.5915

Architecture: 32-bit

Operating System: Windows NT

SHA256: 740ebefbd9626a9bad1edadb986f2932

File Size: 780.4 KB

Uploaded At: Dec. 1, 2025, 8 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x4cc20)
DllGetActivationFactory (Ordinal: 2, Address: 0x4ccf0)
DllGetClassObject (Ordinal: 3, Address: 0x4cb50)
GetInternalReferenceBlobForManifestValue (Ordinal: 4, Address: 0x74860)
GetMergedSystemPri (Ordinal: 5, Address: 0x76800)
GetMergedSystemPriEx (Ordinal: 6, Address: 0x76830)
GetStringValueForManifestField (Ordinal: 7, Address: 0x45500)
MergeResourcePackPri (Ordinal: 8, Address: 0x76880)
MergeSystemPriFiles (Ordinal: 9, Address: 0x768e0)
ResourceManagerQueueGetCurrentDepth (Ordinal: 10, Address: 0x192e0)
ResourceManagerQueueGetGlobalFlags (Ordinal: 11, Address: 0x748e0)
ResourceManagerQueueGetMrtCachePathForPackage (Ordinal: 12, Address: 0x74900)
ResourceManagerQueueGetString (Ordinal: 13, Address: 0x486c0)
ResourceManagerQueueGetStringDirect (Ordinal: 14, Address: 0x74970)
ResourceManagerQueueIsResourceReference (Ordinal: 15, Address: 0x2f650)
ResourceManagerQueueReset (Ordinal: 16, Address: 0x18d30)
ResourceManagerQueueSetGlobalFlags (Ordinal: 17, Address: 0x749b0)
ShouldMergeInproc (Ordinal: 18, Address: 0x4a1a0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x100b30c0)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x100b3124)
CStdStubBuffer2_CountRefs (Address: 0x100b3114)
CStdStubBuffer2_Disconnect (Address: 0x100b30f0)
CStdStubBuffer2_QueryInterface (Address: 0x100b30e4)
NdrProxyForwardingFunction3 (Address: 0x100b30e0)
NdrProxyForwardingFunction4 (Address: 0x100b30dc)
NdrProxyForwardingFunction5 (Address: 0x100b30d4)
ObjectStublessClient10 (Address: 0x100b30cc)
ObjectStublessClient11 (Address: 0x100b3118)
ObjectStublessClient12 (Address: 0x100b3120)
ObjectStublessClient13 (Address: 0x100b30e8)
ObjectStublessClient14 (Address: 0x100b311c)
ObjectStublessClient15 (Address: 0x100b3130)
ObjectStublessClient16 (Address: 0x100b30d8)
ObjectStublessClient17 (Address: 0x100b30c8)
ObjectStublessClient18 (Address: 0x100b3100)
ObjectStublessClient19 (Address: 0x100b3110)
ObjectStublessClient20 (Address: 0x100b3104)
ObjectStublessClient21 (Address: 0x100b312c)
ObjectStublessClient22 (Address: 0x100b30f8)
ObjectStublessClient23 (Address: 0x100b3108)
ObjectStublessClient3 (Address: 0x100b30fc)
ObjectStublessClient4 (Address: 0x100b3134)
ObjectStublessClient5 (Address: 0x100b310c)
ObjectStublessClient6 (Address: 0x100b30d0)
ObjectStublessClient7 (Address: 0x100b30ec)
ObjectStublessClient8 (Address: 0x100b3128)
ObjectStublessClient9 (Address: 0x100b30f4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100b3140)
IsDebuggerPresent (Address: 0x100b313c)
OutputDebugStringW (Address: 0x100b3144)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100b314c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100b3154)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100b3168)
RaiseException (Address: 0x100b3164)
SetLastError (Address: 0x100b315c)
SetUnhandledExceptionFilter (Address: 0x100b316c)
UnhandledExceptionFilter (Address: 0x100b3160)

api-ms-win-core-featurestaging-l1-1-0.dll

GetFeatureEnabledState (Address: 0x100b3174)
RecordFeatureUsage (Address: 0x100b3178)
SubscribeFeatureStateChangeNotification (Address: 0x100b317c)
UnsubscribeFeatureStateChangeNotification (Address: 0x100b3180)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x100b31a0)
CreateDirectoryW (Address: 0x100b319c)
CreateFileW (Address: 0x100b3198)
DeleteFileW (Address: 0x100b3194)
FindClose (Address: 0x100b31a8)
FindFirstFileW (Address: 0x100b318c)
FindNextFileW (Address: 0x100b3190)
FlushFileBuffers (Address: 0x100b31b8)
GetDriveTypeW (Address: 0x100b3188)
GetFileAttributesExW (Address: 0x100b31b0)
GetFileAttributesW (Address: 0x100b31c4)
GetFileSizeEx (Address: 0x100b31bc)
GetFinalPathNameByHandleW (Address: 0x100b31c0)
GetTempFileNameW (Address: 0x100b31ac)
ReadFile (Address: 0x100b31a4)
WriteFile (Address: 0x100b31b4)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x100b31cc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100b31d4)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100b31dc)
HeapAlloc (Address: 0x100b31e0)
HeapFree (Address: 0x100b31e4)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x100b31ec)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x100b31f4)

api-ms-win-core-libraryloader-l1-2-0.dll

FindStringOrdinal (Address: 0x100b3208)
FreeLibrary (Address: 0x100b3200)
GetModuleFileNameA (Address: 0x100b3214)
GetModuleFileNameW (Address: 0x100b3204)
GetModuleHandleExW (Address: 0x100b31fc)
GetModuleHandleW (Address: 0x100b3210)
GetProcAddress (Address: 0x100b320c)
LoadLibraryExW (Address: 0x100b3218)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100b322c)
GetGeoInfoW (Address: 0x100b3228)
GetThreadPreferredUILanguages (Address: 0x100b3220)
GetUserGeoID (Address: 0x100b3224)

api-ms-win-core-localization-private-l1-1-0.dll

_AddMUIStringToCache (Address: 0x100b3238)
_GetMUIStringFromCache (Address: 0x100b323c)
_OpenMuiStringCache (Address: 0x100b3234)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x100b3244)
MapViewOfFile (Address: 0x100b324c)
UnmapViewOfFile (Address: 0x100b3248)

api-ms-win-core-processenvironment-l1-1-0.dll

GetEnvironmentVariableW (Address: 0x100b3254)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x100b3268)
GetCurrentProcess (Address: 0x100b3270)
GetCurrentProcessId (Address: 0x100b3278)
GetCurrentThread (Address: 0x100b3264)
GetCurrentThreadId (Address: 0x100b326c)
OpenProcessToken (Address: 0x100b3274)
OpenThreadToken (Address: 0x100b3260)
TerminateProcess (Address: 0x100b325c)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x100b3280)
OpenProcess (Address: 0x100b3284)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100b328c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100b32b0)
RegCreateKeyExW (Address: 0x100b32ac)
RegDeleteValueW (Address: 0x100b32a0)
RegGetValueW (Address: 0x100b3298)
RegNotifyChangeKeyValue (Address: 0x100b329c)
RegOpenCurrentUser (Address: 0x100b3294)
RegOpenKeyExW (Address: 0x100b32a8)
RegSetValueExW (Address: 0x100b32a4)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x100b32c4)
CompareStringOrdinal (Address: 0x100b32bc)
MultiByteToWideChar (Address: 0x100b32b8)
WideCharToMultiByte (Address: 0x100b32c0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100b32f0)
AcquireSRWLockShared (Address: 0x100b32e0)
CreateEventExW (Address: 0x100b32fc)
CreateEventW (Address: 0x100b330c)
CreateMutexExW (Address: 0x100b32f8)
CreateSemaphoreExW (Address: 0x100b32e8)
DeleteCriticalSection (Address: 0x100b32d4)
EnterCriticalSection (Address: 0x100b32dc)
InitializeCriticalSectionAndSpinCount (Address: 0x100b3300)
InitializeCriticalSectionEx (Address: 0x100b32cc)
InitializeSRWLock (Address: 0x100b32f4)
LeaveCriticalSection (Address: 0x100b32d0)
OpenSemaphoreW (Address: 0x100b3308)
ReleaseMutex (Address: 0x100b32e4)
ReleaseSemaphore (Address: 0x100b331c)
ReleaseSRWLockExclusive (Address: 0x100b32ec)
ReleaseSRWLockShared (Address: 0x100b3314)
ResetEvent (Address: 0x100b3318)
SetEvent (Address: 0x100b3310)
WaitForSingleObject (Address: 0x100b32d8)
WaitForSingleObjectEx (Address: 0x100b3304)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x100b3328)
SignalObjectAndWait (Address: 0x100b3324)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x100b3330)
GetSystemTimeAsFileTime (Address: 0x100b3334)
GetSystemWindowsDirectoryW (Address: 0x100b333c)
GetTickCount (Address: 0x100b3338)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100b334c)
CreateThreadpoolTimer (Address: 0x100b3344)
SetThreadpoolTimer (Address: 0x100b3350)
WaitForThreadpoolTimerCallbacks (Address: 0x100b3348)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x100b3358)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100b3360)
EncodePointer (Address: 0x100b3364)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x100b342c)
__std_terminate (Address: 0x100b3428)
_CxxThrowException (Address: 0x100b33ec)
_except_handler4_common (Address: 0x100b33e8)
_o___std_exception_copy (Address: 0x100b3418)
_o___std_exception_destroy (Address: 0x100b3414)
_o___std_type_info_destroy_list (Address: 0x100b3410)
_o___stdio_common_vsnprintf_s (Address: 0x100b340c)
_o___stdio_common_vswprintf (Address: 0x100b3408)
_o__callnewh (Address: 0x100b3404)
_o__cexit (Address: 0x100b3400)
_o__configure_narrow_argv (Address: 0x100b33fc)
_o__crt_atexit (Address: 0x100b33f8)
_o__errno (Address: 0x100b33f4)
_o__execute_onexit_table (Address: 0x100b33f0)
_o__initialize_narrow_environment (Address: 0x100b336c)
_o__initialize_onexit_table (Address: 0x100b3370)
_o__invalid_parameter_noinfo (Address: 0x100b3374)
_o__itow_s (Address: 0x100b3378)
_o__purecall (Address: 0x100b337c)
_o__register_onexit_function (Address: 0x100b3380)
_o__seh_filter_dll (Address: 0x100b3384)
_o__ui64tow_s (Address: 0x100b3388)
_o__wcsicmp (Address: 0x100b3390)
_o__wcsnicmp (Address: 0x100b3394)
_o__wcstoi64 (Address: 0x100b3398)
_o__wtof (Address: 0x100b339c)
_o__wtoi (Address: 0x100b33a0)
_o_bsearch (Address: 0x100b33a4)
_o_free (Address: 0x100b33a8)
_o_isalpha (Address: 0x100b33ac)
_o_iswalnum (Address: 0x100b33b0)
_o_iswctype (Address: 0x100b33b4)
_o_iswdigit (Address: 0x100b33b8)
_o_iswspace (Address: 0x100b33bc)
_o_malloc (Address: 0x100b33c0)
_o_memcpy_s (Address: 0x100b33c4)
_o_qsort_s (Address: 0x100b33c8)
_o_terminate (Address: 0x100b33cc)
_o_toupper (Address: 0x100b33d0)
_o_towlower (Address: 0x100b33d4)
_o_towupper (Address: 0x100b33d8)
_o_wcscpy_s (Address: 0x100b33dc)
_o_wcsncpy_s (Address: 0x100b33e0)
_o_wcstoul (Address: 0x100b33e4)
memcmp (Address: 0x100b3430)
memcpy (Address: 0x100b3434)
memmove (Address: 0x100b338c)
wcschr (Address: 0x100b3424)
wcsrchr (Address: 0x100b3420)
wcsstr (Address: 0x100b341c)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100b3440)
_initterm_e (Address: 0x100b343c)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100b344c)
wcsncmp (Address: 0x100b3448)
wcsnlen (Address: 0x100b3450)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x100b3464)
EventRegister (Address: 0x100b3458)
EventSetInformation (Address: 0x100b3468)
EventUnregister (Address: 0x100b3460)
EventWriteTransfer (Address: 0x100b345c)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x100b3470)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100b347c)
SHTaskPoolQueueTask (Address: 0x100b3478)

KERNELBASE.dll

AppXGetOSMaxVersionTested (Address: 0x100b3030)
GetCurrentPackageApplicationResourcesContext (Address: 0x100b3004)
GetCurrentPackageFamilyName (Address: 0x100b3040)
GetCurrentPackageFullName (Address: 0x100b3044)
GetCurrentPackageGlobalizationContext (Address: 0x100b3014)
GetCurrentPackageId (Address: 0x100b300c)
GetCurrentPackageInfo (Address: 0x100b302c)
GetCurrentPackageInfo2 (Address: 0x100b3028)
GetCurrentPackageInfo3 (Address: 0x100b3024)
GetCurrentPackageResourcesContext (Address: 0x100b3000)
GetPackageGlobalizationProperty (Address: 0x100b3018)
GetPackagePathByFullName (Address: 0x100b304c)
GetPackagePathByFullName2 (Address: 0x100b3020)
GetPackageResourcesProperty (Address: 0x100b3008)
GetPackageStatusForUser (Address: 0x100b303c)
GetStagedPackageOrigin (Address: 0x100b3048)
GetStagedPackagePathByFullName2 (Address: 0x100b301c)
GetSystemMetadataPathForPackage (Address: 0x100b3034)
LocalAlloc (Address: 0x100b3054)
OpenGlobalizationUserSettingsKey (Address: 0x100b3050)
PackageFamilyNameFromFullName (Address: 0x100b3038)
PackageIdFromFullName (Address: 0x100b3010)
Sleep (Address: 0x100b3058)

ntdll.dll

NtClose (Address: 0x100b34a8)
NtQueryInformationToken (Address: 0x100b34b4)
NtQuerySystemInformation (Address: 0x100b3494)
NtQueryWnfStateData (Address: 0x100b34bc)
RtlAcquireSRWLockExclusive (Address: 0x100b34a0)
RtlAcquireSRWLockShared (Address: 0x100b34a4)
RtlCheckSandboxedToken (Address: 0x100b3488)
RtlCompareUnicodeString (Address: 0x100b34c8)
RtlConvertDeviceFamilyInfoToString (Address: 0x100b3484)
RtlGetDeviceFamilyInfoEnum (Address: 0x100b348c)
RtlInitializeSRWLock (Address: 0x100b34b0)
RtlInitUnicodeString (Address: 0x100b349c)
RtlPublishWnfStateData (Address: 0x100b3498)
RtlReleaseSRWLockExclusive (Address: 0x100b34c4)
RtlReleaseSRWLockShared (Address: 0x100b34ac)
RtlReportException (Address: 0x100b3490)
RtlSubscribeWnfStateChangeNotification (Address: 0x100b34b8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100b34c0)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x100b30ac)
CStdStubBuffer_Connect (Address: 0x100b30b4)
CStdStubBuffer_CountRefs (Address: 0x100b307c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x100b3090)
CStdStubBuffer_DebugServerRelease (Address: 0x100b3094)
CStdStubBuffer_Disconnect (Address: 0x100b309c)
CStdStubBuffer_Invoke (Address: 0x100b3070)
CStdStubBuffer_IsIIDSupported (Address: 0x100b3098)
CStdStubBuffer_QueryInterface (Address: 0x100b30a0)
IUnknown_AddRef_Proxy (Address: 0x100b308c)
IUnknown_QueryInterface_Proxy (Address: 0x100b30a8)
IUnknown_Release_Proxy (Address: 0x100b30b0)
NdrCStdStubBuffer_Release (Address: 0x100b306c)
NdrCStdStubBuffer2_Release (Address: 0x100b3060)
NdrDllCanUnloadNow (Address: 0x100b3068)
NdrDllGetClassObject (Address: 0x100b3064)
NdrOleAllocate (Address: 0x100b30b8)
NdrOleFree (Address: 0x100b30a4)
NdrStubCall2 (Address: 0x100b3078)
NdrStubForwardingFunction (Address: 0x100b3074)
RpcStringFreeW (Address: 0x100b3088)
UuidCreate (Address: 0x100b3080)
UuidToStringW (Address: 0x100b3084)