ExtendedSecurityUpdatesAI.dll

Description: Extended Security Updates AI plug-in

Version: 10.0.19041.6449

Architecture: 64-bit

Operating System: Windows NT

SHA256: 35f2bb11e197b93832d2c747878c7919

File Size: 144.5 KB

Uploaded At: Dec. 1, 2025, 8:27 a.m.

Views: 26

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x11860)
DllCsiGetHandler (Ordinal: 2, Address: 0x11880)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x18001af10)
CoQueryProxyBlanket (Address: 0x18001af08)
CoSetProxyBlanket (Address: 0x18001af18)
CoTaskMemFree (Address: 0x18001af20)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001af40)
IsDebuggerPresent (Address: 0x18001af38)
OutputDebugStringW (Address: 0x18001af30)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001af60)
SetLastError (Address: 0x18001af68)
SetUnhandledExceptionFilter (Address: 0x18001af58)
UnhandledExceptionFilter (Address: 0x18001af50)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001af78)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001afa0)
HeapAlloc (Address: 0x18001af90)
HeapDestroy (Address: 0x18001af98)
HeapFree (Address: 0x18001af88)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x18001afb0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001aff0)
FreeLibrary (Address: 0x18001afc8)
GetModuleFileNameA (Address: 0x18001afd8)
GetModuleHandleExW (Address: 0x18001afe0)
GetModuleHandleW (Address: 0x18001afc0)
GetProcAddress (Address: 0x18001afe8)
LoadLibraryExW (Address: 0x18001afd0)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18001b000)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001b010)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18001b038)
GetCurrentProcessId (Address: 0x18001b028)
GetCurrentThreadId (Address: 0x18001b030)
TerminateProcess (Address: 0x18001b020)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001b048)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001b058)
RegOpenKeyExW (Address: 0x18001b068)
RegQueryValueExW (Address: 0x18001b060)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x18001b078)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001b0b0)
AcquireSRWLockShared (Address: 0x18001b0f0)
CreateMutexExW (Address: 0x18001b0f8)
CreateSemaphoreExW (Address: 0x18001b088)
DeleteCriticalSection (Address: 0x18001b0d0)
EnterCriticalSection (Address: 0x18001b0e8)
InitializeCriticalSection (Address: 0x18001b100)
InitializeCriticalSectionEx (Address: 0x18001b0e0)
LeaveCriticalSection (Address: 0x18001b090)
OpenSemaphoreW (Address: 0x18001b0a0)
ReleaseMutex (Address: 0x18001b0d8)
ReleaseSemaphore (Address: 0x18001b0c0)
ReleaseSRWLockExclusive (Address: 0x18001b098)
ReleaseSRWLockShared (Address: 0x18001b0c8)
WaitForSingleObject (Address: 0x18001b0b8)
WaitForSingleObjectEx (Address: 0x18001b0a8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18001b110)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18001b120)
GetTickCount (Address: 0x18001b130)
GetVersionExW (Address: 0x18001b128)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x18001b140)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18001b158)
CreateThreadpoolTimer (Address: 0x18001b168)
SetThreadpoolTimer (Address: 0x18001b150)
WaitForThreadpoolTimerCallbacks (Address: 0x18001b160)

AzureCheck.dll

IsAzureVM (Address: 0x18001aed8)

msvcrt.dll

__C_specific_handler (Address: 0x18001b290)
__CxxFrameHandler3 (Address: 0x18001b178)
__dllonexit (Address: 0x18001b1e8)
_amsg_exit (Address: 0x18001b228)
_callnewh (Address: 0x18001b270)
_CxxThrowException (Address: 0x18001b248)
_initterm (Address: 0x18001b218)
_lock (Address: 0x18001b200)
_onexit (Address: 0x18001b1e0)
_purecall (Address: 0x18001b280)
_snprintf_s (Address: 0x18001b1b8)
_unlock (Address: 0x18001b1f8)
_vsnprintf_s (Address: 0x18001b180)
_vsnwprintf (Address: 0x18001b1f0)
_wcsnicmp (Address: 0x18001b1c8)
_XcptFilter (Address: 0x18001b230)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18001b260)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18001b258)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18001b1a0)
??0exception@@QEAA@XZ (Address: 0x18001b190)
??1exception@@UEAA@XZ (Address: 0x18001b198)
??1type_info@@UEAA@XZ (Address: 0x18001b208)
??3@YAXPEAX@Z (Address: 0x18001b288)
?terminate@@YAXXZ (Address: 0x18001b210)
?what@exception@@UEBAPEBDXZ (Address: 0x18001b250)
free (Address: 0x18001b220)
malloc (Address: 0x18001b278)
memcmp (Address: 0x18001b1d8)
memcpy (Address: 0x18001b240)
memcpy_s (Address: 0x18001b188)
memmove (Address: 0x18001b238)
memmove_s (Address: 0x18001b1a8)
memset (Address: 0x18001b298)
strncmp (Address: 0x18001b1b0)
swscanf (Address: 0x18001b268)
time (Address: 0x18001b1d0)
wcstoul (Address: 0x18001b1c0)

netutils.dll

NetApiBufferFree (Address: 0x18001b2a8)

ntdll.dll

DbgPrint (Address: 0x18001b2c0)
DbgPrintEx (Address: 0x18001b360)
LdrGetDllHandle (Address: 0x18001b300)
LdrGetProcedureAddress (Address: 0x18001b318)
LdrLoadDll (Address: 0x18001b2e8)
LdrUnloadDll (Address: 0x18001b2f8)
NtClose (Address: 0x18001b2d8)
NtCreateFile (Address: 0x18001b2c8)
NtOpenKey (Address: 0x18001b308)
NtQueryLicenseValue (Address: 0x18001b388)
NtQueryValueKey (Address: 0x18001b2b8)
NtWriteFile (Address: 0x18001b310)
RtlAllocateHeap (Address: 0x18001b368)
RtlCaptureContext (Address: 0x18001b380)
RtlCreateUnicodeStringFromAsciiz (Address: 0x18001b2e0)
RtlDeleteCriticalSection (Address: 0x18001b350)
RtlDosPathNameToNtPathName_U (Address: 0x18001b2f0)
RtlEnterCriticalSection (Address: 0x18001b340)
RtlFreeHeap (Address: 0x18001b2d0)
RtlInitializeCriticalSection (Address: 0x18001b338)
RtlLeaveCriticalSection (Address: 0x18001b330)
RtlLookupFunctionEntry (Address: 0x18001b378)
RtlQueryEnvironmentVariable_U (Address: 0x18001b320)
RtlRaiseStatus (Address: 0x18001b328)
RtlReAllocateHeap (Address: 0x18001b370)
RtlTimeToTimeFields (Address: 0x18001b348)
RtlVirtualUnwind (Address: 0x18001b358)

OLEAUT32.dll

SysAllocString (Address: 0x18001aee8)
SysFreeString (Address: 0x18001aef0)
VariantInit (Address: 0x18001aef8)