CoreMessaging.dll

Description: Microsoft CoreMessaging Dll

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: d71234fc4cb49dbb755c902815646067

File Size: 963.0 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 21

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CoreUICallComputeMaximumMessageSize (Ordinal: 1, Address: 0x29e0)
CoreUICallCreateConversationHost (Ordinal: 2, Address: 0x488a0)
CoreUICallCreateEndpointHost (Ordinal: 3, Address: 0x486f0)
CoreUICallCreateEndpointHostWithSendPriority (Ordinal: 4, Address: 0x48700)
CoreUICallGetAddressOfParameterInBuffer (Ordinal: 5, Address: 0x923e0)
CoreUICallReceive (Ordinal: 6, Address: 0x3b870)
CoreUICallSend (Ordinal: 7, Address: 0x2a70)
CoreUICallSendVaList (Ordinal: 8, Address: 0x92450)
CoreUIConfigureTestHost (Ordinal: 9, Address: 0x84c60)
CoreUIConfigureUserIntegration (Ordinal: 10, Address: 0x84c70)
CoreUICreate (Ordinal: 11, Address: 0x489e0)
CoreUICreateAnonymousStream (Ordinal: 12, Address: 0x92890)
CoreUICreateClientWindowIDManager (Ordinal: 13, Address: 0x703a0)
CoreUICreateEx (Ordinal: 14, Address: 0x4ca50)
CoreUICreateSystemWindowIDManager (Ordinal: 15, Address: 0x53ed0)
CoreUIInitializeTestService (Ordinal: 16, Address: 0x90c10)
CoreUIOpenExisting (Ordinal: 17, Address: 0x4e480)
CoreUIRouteToTestRegistrar (Ordinal: 18, Address: 0x90c30)
CoreUIUninitializeTestService (Ordinal: 19, Address: 0x90ca0)
CreateDispatcherQueueController (Ordinal: 20, Address: 0x5c00)
CreateDispatcherQueueForCurrentThread (Ordinal: 21, Address: 0x950c0)
DllCanUnloadNow (Ordinal: 22, Address: 0x51720)
DllGetActivationFactory (Ordinal: 23, Address: 0x52460)
DllGetClassObject (Ordinal: 24, Address: 0x951e0)
GetDispatcherQueueForCurrentThread (Ordinal: 25, Address: 0x51c50)
MsgBlobCreateShared (Ordinal: 26, Address: 0x46220)
MsgBlobCreateStack (Ordinal: 27, Address: 0x4a1f0)
MsgBufferShare (Ordinal: 28, Address: 0x43a30)
MsgRelease (Ordinal: 29, Address: 0x44270)
MsgStringCreateShared (Ordinal: 30, Address: 0x43aa0)
MsgStringCreateStack (Ordinal: 31, Address: 0x4a980)
ServiceMain (Ordinal: 32, Address: 0x565f0)
SvchostPushServiceGlobals (Ordinal: 33, Address: 0x55990)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180096048)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180096058)
IsDebuggerPresent (Address: 0x180096060)
OutputDebugStringW (Address: 0x180096068)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180096090)
RaiseException (Address: 0x180096088)
SetLastError (Address: 0x180096098)
SetUnhandledExceptionFilter (Address: 0x180096080)
UnhandledExceptionFilter (Address: 0x180096078)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x1800960a8)

api-ms-win-core-file-l1-1-0.dll

LocalFileTimeToFileTime (Address: 0x1800960b8)
ReadFile (Address: 0x1800960c8)
WriteFile (Address: 0x1800960c0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800960e8)
DuplicateHandle (Address: 0x1800960e0)
GetHandleInformation (Address: 0x1800960d8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800960f8)
HeapAlloc (Address: 0x180096120)
HeapCreate (Address: 0x180096100)
HeapDestroy (Address: 0x180096110)
HeapFree (Address: 0x180096118)
HeapSize (Address: 0x180096108)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x180096130)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180096158)
InterlockedFlushSList (Address: 0x180096150)
InterlockedPopEntrySList (Address: 0x180096160)
InterlockedPushEntrySList (Address: 0x180096148)
QueryDepthSList (Address: 0x180096140)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x180096170)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800961a8)
FreeLibrary (Address: 0x1800961c0)
GetModuleFileNameA (Address: 0x180096190)
GetModuleFileNameW (Address: 0x180096188)
GetModuleHandleExW (Address: 0x1800961b0)
GetModuleHandleW (Address: 0x1800961b8)
GetProcAddress (Address: 0x180096180)
LoadLibraryExA (Address: 0x1800961a0)
LoadLibraryExW (Address: 0x180096198)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800961d8)
GetLocaleInfoW (Address: 0x1800961e0)
LCMapStringW (Address: 0x1800961d0)

api-ms-win-core-localization-obsolete-l1-2-0.dll

GetNumberFormatW (Address: 0x1800961f0)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180096200)
VirtualFree (Address: 0x180096210)
VirtualProtect (Address: 0x180096208)
VirtualQuery (Address: 0x180096218)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180096280)
GetCurrentProcess (Address: 0x180096290)
GetCurrentProcessId (Address: 0x180096258)
GetCurrentThread (Address: 0x180096260)
GetCurrentThreadId (Address: 0x180096250)
GetThreadPriority (Address: 0x180096248)
OpenProcessToken (Address: 0x180096230)
OpenThread (Address: 0x180096288)
OpenThreadToken (Address: 0x180096270)
SetThreadPriority (Address: 0x180096238)
TerminateProcess (Address: 0x180096298)
TlsAlloc (Address: 0x180096278)
TlsFree (Address: 0x180096228)
TlsGetValue (Address: 0x180096240)
TlsSetValue (Address: 0x180096268)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800962a8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800962b8)
QueryPerformanceFrequency (Address: 0x1800962c0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800962d8)
RtlCaptureStackBackTrace (Address: 0x1800962e8)
RtlLookupFunctionEntry (Address: 0x1800962e0)
RtlVirtualUnwind (Address: 0x1800962d0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800962f8)
CompareStringW (Address: 0x180096300)
MultiByteToWideChar (Address: 0x180096310)
WideCharToMultiByte (Address: 0x180096308)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180096340)
AcquireSRWLockShared (Address: 0x180096328)
CreateEventW (Address: 0x1800963a0)
CreateMutexExW (Address: 0x180096360)
CreateSemaphoreExW (Address: 0x180096358)
CreateWaitableTimerExW (Address: 0x180096348)
DeleteCriticalSection (Address: 0x1800963a8)
EnterCriticalSection (Address: 0x1800963d0)
InitializeCriticalSection (Address: 0x1800963b0)
InitializeCriticalSectionEx (Address: 0x180096378)
InitializeSRWLock (Address: 0x180096350)
LeaveCriticalSection (Address: 0x1800963c8)
OpenSemaphoreW (Address: 0x180096368)
ReleaseMutex (Address: 0x180096380)
ReleaseSemaphore (Address: 0x180096388)
ReleaseSRWLockExclusive (Address: 0x180096330)
ReleaseSRWLockShared (Address: 0x180096338)
ResetEvent (Address: 0x1800963b8)
SetEvent (Address: 0x1800963c0)
SetWaitableTimer (Address: 0x180096390)
WaitForMultipleObjectsEx (Address: 0x180096370)
WaitForSingleObject (Address: 0x180096320)
WaitForSingleObjectEx (Address: 0x180096398)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1800963f8)
Sleep (Address: 0x1800963e0)
WaitOnAddress (Address: 0x1800963f0)
WakeByAddressAll (Address: 0x1800963e8)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x180096408)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x180096418)
GetSystemTime (Address: 0x180096438)
GetSystemTimeAsFileTime (Address: 0x180096428)
GetTickCount (Address: 0x180096430)
GetTickCount64 (Address: 0x180096420)

api-ms-win-core-threadpool-l1-2-0.dll

CallbackMayRunLong (Address: 0x180096448)
CloseThreadpoolTimer (Address: 0x180096468)
CloseThreadpoolWait (Address: 0x180096478)
CreateThreadpoolTimer (Address: 0x180096460)
CreateThreadpoolWait (Address: 0x180096480)
SetThreadpoolTimer (Address: 0x180096458)
SetThreadpoolWait (Address: 0x180096470)
WaitForThreadpoolTimerCallbacks (Address: 0x180096450)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x180096490)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800964a0)
EncodePointer (Address: 0x1800964a8)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800964c8)
EventUnregister (Address: 0x1800964c0)
EventWriteTransfer (Address: 0x1800964b8)

api-ms-win-security-accesshlpr-l1-1-0.dll

FreeTransientObjectSecurityDescriptor (Address: 0x1800964d8)
QueryTransientObjectSecurityDescriptor (Address: 0x1800964e0)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x1800964f8)
RevertToSelf (Address: 0x1800964f0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSecurityDescriptorToStringSecurityDescriptorW (Address: 0x180096510)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180096508)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180096520)
SetServiceStatus (Address: 0x180096528)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180096550)
OpenSCManagerW (Address: 0x180096540)
OpenServiceW (Address: 0x180096548)
StartServiceW (Address: 0x180096538)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x180096560)

msvcrt.dll

__C_specific_handler (Address: 0x180096620)
__CxxFrameHandler3 (Address: 0x1800965d0)
__dllonexit (Address: 0x180096588)
_aligned_free (Address: 0x180096638)
_aligned_offset_malloc (Address: 0x180096630)
_amsg_exit (Address: 0x1800965e8)
_callnewh (Address: 0x180096610)
_CxxThrowException (Address: 0x180096578)
_initterm (Address: 0x1800965a8)
_lock (Address: 0x180096598)
_onexit (Address: 0x180096580)
_purecall (Address: 0x180096618)
_unlock (Address: 0x180096628)
_vsnprintf_s (Address: 0x180096678)
_vsnwprintf (Address: 0x180096668)
_wcsicmp (Address: 0x1800965b8)
_XcptFilter (Address: 0x1800965f0)
??_V@YAXPEAX@Z (Address: 0x1800965b0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180096660)
??0exception@@QEAA@XZ (Address: 0x180096680)
??1exception@@UEAA@XZ (Address: 0x180096658)
??1type_info@@UEAA@XZ (Address: 0x1800965f8)
??3@YAXPEAX@Z (Address: 0x180096600)
?terminate@@YAXXZ (Address: 0x180096608)
free (Address: 0x1800965e0)
malloc (Address: 0x1800965d8)
memchr (Address: 0x180096570)
memcmp (Address: 0x1800965c8)
memcpy (Address: 0x180096590)
memcpy_s (Address: 0x180096670)
memmove (Address: 0x1800965c0)
memmove_s (Address: 0x180096688)
memset (Address: 0x1800965a0)
realloc (Address: 0x180096640)
sqrt (Address: 0x180096690)
swprintf_s (Address: 0x180096648)
wcscpy_s (Address: 0x180096650)

ntdll.dll

AlpcGetMessageAttribute (Address: 0x180096710)
AlpcInitializeMessageAttribute (Address: 0x180096750)
NtAllocateReserveObject (Address: 0x1800966c8)
NtAlpcAcceptConnectPort (Address: 0x1800966a8)
NtAlpcConnectPortEx (Address: 0x1800966f0)
NtAlpcCreatePort (Address: 0x1800966b0)
NtAlpcDisconnectPort (Address: 0x1800966c0)
NtAlpcImpersonateClientOfPort (Address: 0x1800966f8)
NtAlpcQueryInformation (Address: 0x1800966a0)
NtAlpcSendWaitReceivePort (Address: 0x180096718)
NtAssociateWaitCompletionPacket (Address: 0x1800966e0)
NtCancelWaitCompletionPacket (Address: 0x180096728)
NtClose (Address: 0x180096720)
NtCreateIoCompletion (Address: 0x1800966e8)
NtCreateWaitCompletionPacket (Address: 0x180096730)
NtQuerySystemInformation (Address: 0x180096748)
NtRemoveIoCompletionEx (Address: 0x1800966d0)
NtSetIoCompletionEx (Address: 0x1800966d8)
RtlClearThreadWorkOnBehalfTicket (Address: 0x180096700)
RtlFreeUnicodeString (Address: 0x180096738)
RtlGetAppContainerNamedObjectPath (Address: 0x180096740)
RtlInitUnicodeString (Address: 0x1800966b8)
RtlSetThreadWorkOnBehalfTicket (Address: 0x180096708)

WS2_32.dll

bind (Address: 0x180096038)
closesocket (Address: 0x180096018)
listen (Address: 0x180096008)
setsockopt (Address: 0x180096010)
WSACleanup (Address: 0x180096028)
WSAIoctl (Address: 0x180096000)
WSASocketW (Address: 0x180096020)
WSAStartup (Address: 0x180096030)