PresentationHost_v0400.dll

Description: Windows Presentation Foundation Host Library

Version: 4.8.4536.0

Architecture: 64-bit

Operating System: Windows

SHA256: b591801ee20fa56dad6eb1cf36d4fa5c

File Size: 296.4 KB

Uploaded At: Dec. 1, 2025, 8:30 a.m.

Views: 25

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllMain (Ordinal: 1, Address: 0x2c00)
Activate (Ordinal: 2, Address: 0x2fa0)
Deactivate (Ordinal: 3, Address: 0x3ac0)
ForwardTranslateAccelerator (Ordinal: 4, Address: 0x3700)
SaveToHistory (Ordinal: 5, Address: 0x3c40)
LoadFromHistory (Ordinal: 6, Address: 0x3ca0)
ProcessUnhandledException (Ordinal: 7, Address: 0x4190)
CreateIDispatchSTAForwarder (Ordinal: 8, Address: 0x1a970)
SetFakeActiveWindow (Ordinal: 9, Address: 0x2a10)
DllRegisterServer (Ordinal: 10, Address: 0x2d80)
DllUnregisterServer (Ordinal: 11, Address: 0x2ea0)
ProcessCommandLine (Ordinal: 12, Address: 0x20710)
DRMInitEnvironment (Ordinal: 601, Address: 0x19470)
DRMCreateBoundLicense (Ordinal: 602, Address: 0x19500)
DRMCreateLicenseStorageSession (Ordinal: 603, Address: 0x19570)
DRMCreateEnablingBitsDecryptor (Ordinal: 604, Address: 0x195f0)
DRMCreateEnablingBitsEncryptor (Ordinal: 605, Address: 0x19660)
DRMEncrypt (Ordinal: 606, Address: 0x196d0)
DRMDecrypt (Ordinal: 607, Address: 0x19750)
DRMGetInfo (Ordinal: 608, Address: 0x197d0)
DRMGetBoundLicenseObjectCount (Ordinal: 609, Address: 0x19840)
DRMGetBoundLicenseObject (Ordinal: 610, Address: 0x198a0)
DRMGetBoundLicenseAttribute (Ordinal: 611, Address: 0x19900)
DRMGetSignedIssuanceLicense (Ordinal: 612, Address: 0x19980)
DRMGetServiceLocation (Ordinal: 613, Address: 0x19a30)
DRMCloseEnvironmentHandle (Ordinal: 614, Address: 0x19ab0)
DRMCloseHandle (Ordinal: 615, Address: 0x19b00)

Imported DLLs & Functions

ADVAPI32.dll

AddAccessAllowedAce (Address: 0x18002b118)
AddAce (Address: 0x18002b128)
CopySid (Address: 0x18002b0e0)
CreateProcessAsUserW (Address: 0x18002b0a8)
CreateRestrictedToken (Address: 0x18002b0a0)
CreateWellKnownSid (Address: 0x18002b0b8)
EqualSid (Address: 0x18002b0b0)
GetAce (Address: 0x18002b120)
GetAclInformation (Address: 0x18002b100)
GetKernelObjectSecurity (Address: 0x18002b0e8)
GetLengthSid (Address: 0x18002b108)
GetSecurityDescriptorDacl (Address: 0x18002b0f0)
GetSidSubAuthority (Address: 0x18002b090)
GetSidSubAuthorityCount (Address: 0x18002b098)
GetTokenInformation (Address: 0x18002b088)
GetTraceEnableFlags (Address: 0x18002b050)
GetTraceEnableLevel (Address: 0x18002b058)
GetTraceLoggerHandle (Address: 0x18002b060)
InitializeAcl (Address: 0x18002b110)
LsaClose (Address: 0x18002b0d8)
LsaLookupPrivilegeValue (Address: 0x18002b0c8)
LsaNtStatusToWinError (Address: 0x18002b0d0)
LsaOpenPolicy (Address: 0x18002b0c0)
OpenProcessToken (Address: 0x18002b080)
RegCloseKey (Address: 0x18002b018)
RegCreateKeyExW (Address: 0x18002b040)
RegDeleteKeyW (Address: 0x18002b020)
RegDeleteValueW (Address: 0x18002b048)
RegEnumKeyExW (Address: 0x18002b030)
RegEnumKeyW (Address: 0x18002b078)
RegEnumValueW (Address: 0x18002b070)
RegisterTraceGuidsW (Address: 0x18002b068)
RegOpenKeyExW (Address: 0x18002b008)
RegQueryInfoKeyW (Address: 0x18002b028)
RegQueryValueExW (Address: 0x18002b010)
RegSetValueExW (Address: 0x18002b038)
SetTokenInformation (Address: 0x18002b0f8)
TraceEvent (Address: 0x18002b000)

GDI32.dll

BitBlt (Address: 0x18002b150)
CreateCompatibleBitmap (Address: 0x18002b168)
CreateCompatibleDC (Address: 0x18002b170)
CreateSolidBrush (Address: 0x18002b178)
DeleteDC (Address: 0x18002b148)
DeleteObject (Address: 0x18002b158)
GetDeviceCaps (Address: 0x18002b180)
GetObjectW (Address: 0x18002b138)
GetStockObject (Address: 0x18002b140)
SelectObject (Address: 0x18002b160)

KERNEL32.dll

ActivateActCtx (Address: 0x18002b360)
CloseHandle (Address: 0x18002b238)
CreateActCtxW (Address: 0x18002b358)
CreateEventW (Address: 0x18002b1e0)
CreateFileMappingW (Address: 0x18002b430)
CreateFileW (Address: 0x18002b380)
CreateMutexW (Address: 0x18002b270)
CreateProcessW (Address: 0x18002b3a0)
CreateTimerQueueTimer (Address: 0x18002b2f0)
CreateToolhelp32Snapshot (Address: 0x18002b218)
DeactivateActCtx (Address: 0x18002b368)
DecodePointer (Address: 0x18002b1c8)
DeleteCriticalSection (Address: 0x18002b1b0)
DeleteTimerQueueTimer (Address: 0x18002b2f8)
DisableThreadLibraryCalls (Address: 0x18002b1c0)
EncodePointer (Address: 0x18002b488)
EnterCriticalSection (Address: 0x18002b240)
ExitProcess (Address: 0x18002b200)
ExpandEnvironmentStringsW (Address: 0x18002b2e0)
FileTimeToSystemTime (Address: 0x18002b320)
FindClose (Address: 0x18002b2b0)
FindFirstFileW (Address: 0x18002b2a8)
FindResourceExW (Address: 0x18002b428)
FindResourceW (Address: 0x18002b198)
FlushInstructionCache (Address: 0x18002b458)
FormatMessageW (Address: 0x18002b348)
FreeLibrary (Address: 0x18002b4d8)
GetCommandLineW (Address: 0x18002b330)
GetCurrentProcess (Address: 0x18002b290)
GetCurrentProcessId (Address: 0x18002b220)
GetCurrentThread (Address: 0x18002b4e8)
GetCurrentThreadId (Address: 0x18002b4e0)
GetEnvironmentVariableW (Address: 0x18002b398)
GetExitCodeProcess (Address: 0x18002b3a8)
GetFileAttributesExW (Address: 0x18002b318)
GetLastError (Address: 0x18002b3b8)
GetLocaleInfoW (Address: 0x18002b418)
GetModuleFileNameW (Address: 0x18002b1a8)
GetModuleHandleW (Address: 0x18002b4c8)
GetNativeSystemInfo (Address: 0x18002b390)
GetProcAddress (Address: 0x18002b4d0)
GetProcessHeap (Address: 0x18002b470)
GetProcessTimes (Address: 0x18002b288)
GetStartupInfoW (Address: 0x18002b328)
GetSystemDefaultUILanguage (Address: 0x18002b408)
GetSystemDirectoryW (Address: 0x18002b208)
GetSystemTimeAsFileTime (Address: 0x18002b298)
GetTempFileNameW (Address: 0x18002b378)
GetTempPathW (Address: 0x18002b370)
GetThreadContext (Address: 0x18002b3e0)
GetUserDefaultLangID (Address: 0x18002b2b8)
GetUserDefaultUILanguage (Address: 0x18002b410)
GetVersionExW (Address: 0x18002b1d0)
GlobalAlloc (Address: 0x18002b1f8)
GlobalLock (Address: 0x18002b258)
GlobalUnlock (Address: 0x18002b250)
HeapAlloc (Address: 0x18002b480)
HeapFree (Address: 0x18002b478)
InitializeCriticalSectionEx (Address: 0x18002b1b8)
InitializeSListHead (Address: 0x18002b498)
InterlockedPopEntrySList (Address: 0x18002b468)
InterlockedPushEntrySList (Address: 0x18002b460)
IsDebuggerPresent (Address: 0x18002b2e8)
IsProcessorFeaturePresent (Address: 0x18002b4a8)
IsWow64Process (Address: 0x18002b2d8)
LeaveCriticalSection (Address: 0x18002b248)
LoadLibraryExA (Address: 0x18002b440)
LoadLibraryExW (Address: 0x18002b1a0)
LoadLibraryW (Address: 0x18002b2a0)
LoadResource (Address: 0x18002b190)
LocalAlloc (Address: 0x18002b300)
LocalFree (Address: 0x18002b308)
LockResource (Address: 0x18002b210)
lstrcmpiW (Address: 0x18002b3c8)
lstrcmpW (Address: 0x18002b268)
MapViewOfFile (Address: 0x18002b438)
Module32FirstW (Address: 0x18002b228)
Module32NextW (Address: 0x18002b230)
MulDiv (Address: 0x18002b260)
MultiByteToWideChar (Address: 0x18002b3b0)
OpenEventW (Address: 0x18002b338)
OpenProcess (Address: 0x18002b2c8)
OutputDebugStringW (Address: 0x18002b490)
QueryPerformanceCounter (Address: 0x18002b4a0)
QueueUserWorkItem (Address: 0x18002b1e8)
RaiseException (Address: 0x18002b3c0)
RegisterWaitForSingleObject (Address: 0x18002b2d0)
ReleaseActCtx (Address: 0x18002b350)
ReleaseMutex (Address: 0x18002b278)
ResetEvent (Address: 0x18002b310)
ResumeThread (Address: 0x18002b3e8)
SearchPathW (Address: 0x18002b400)
SetEvent (Address: 0x18002b1d8)
SetLastError (Address: 0x18002b4f0)
SetThreadContext (Address: 0x18002b3d8)
SetUnhandledExceptionFilter (Address: 0x18002b4b0)
SizeofResource (Address: 0x18002b280)
SuspendThread (Address: 0x18002b3f0)
SwitchToThread (Address: 0x18002b340)
TerminateProcess (Address: 0x18002b2c0)
UnhandledExceptionFilter (Address: 0x18002b4b8)
UnmapViewOfFile (Address: 0x18002b420)
VirtualAlloc (Address: 0x18002b450)
VirtualFree (Address: 0x18002b448)
VirtualProtect (Address: 0x18002b3f8)
VirtualQuery (Address: 0x18002b3d0)
WaitForMultipleObjects (Address: 0x18002b4f8)
WaitForSingleObject (Address: 0x18002b1f0)
WaitForSingleObjectEx (Address: 0x18002b4c0)
WriteFile (Address: 0x18002b388)

mscoree.dll

CLRCreateInstance (Address: 0x18002b940)
CoEEShutDownCOM (Address: 0x18002b938)
LoadLibraryShim (Address: 0x18002b948)

ntdll.dll

RtlCaptureContext (Address: 0x18002b958)
RtlGetVersion (Address: 0x18002b978)
RtlInitUnicodeString (Address: 0x18002b960)
RtlLookupFunctionEntry (Address: 0x18002b970)
RtlVirtualUnwind (Address: 0x18002b968)

ole32.dll

CLSIDFromProgID (Address: 0x18002b9d0)
CLSIDFromString (Address: 0x18002b9e0)
CoAllowSetForegroundWindow (Address: 0x18002b9f8)
CoCreateInstance (Address: 0x18002b9a8)
CoGetClassObject (Address: 0x18002b990)
CoInitialize (Address: 0x18002b998)
CoMarshalInterThreadInterfaceInStream (Address: 0x18002b9c8)
CoRegisterClassObject (Address: 0x18002ba28)
CoRegisterMessageFilter (Address: 0x18002b9e8)
CoReleaseMarshalData (Address: 0x18002b9f0)
CoRevokeClassObject (Address: 0x18002ba20)
CoTaskMemAlloc (Address: 0x18002b9a0)
CoTaskMemFree (Address: 0x18002b9d8)
CoTaskMemRealloc (Address: 0x18002b988)
CoUninitialize (Address: 0x18002ba00)
CoUnmarshalInterface (Address: 0x18002b9b8)
CreateBindCtx (Address: 0x18002ba18)
CreateStreamOnHGlobal (Address: 0x18002ba38)
OleCreateMenuDescriptor (Address: 0x18002ba08)
OleDestroyMenuDescriptor (Address: 0x18002ba10)
OleInitialize (Address: 0x18002ba30)
OleLockRunning (Address: 0x18002ba48)
OleTranslateAccelerator (Address: 0x18002b9c0)
OleUninitialize (Address: 0x18002ba40)
StringFromGUID2 (Address: 0x18002b9b0)

OLEAUT32.dll

DispCallFunc (Address: 0x18002b548)
LoadRegTypeLib (Address: 0x18002b558)
LoadTypeLib (Address: 0x18002b528)
OleCreateFontIndirect (Address: 0x18002b550)
SysAllocString (Address: 0x18002b508)
SysAllocStringByteLen (Address: 0x18002b530)
SysAllocStringLen (Address: 0x18002b560)
SysFreeString (Address: 0x18002b510)
SysStringLen (Address: 0x18002b518)
VariantClear (Address: 0x18002b540)
VariantCopy (Address: 0x18002b568)
VariantInit (Address: 0x18002b538)
VarUI4FromStr (Address: 0x18002b520)

PSAPI.DLL

GetMappedFileNameW (Address: 0x18002b578)

SHELL32.dll

CommandLineToArgvW (Address: 0x18002b588)
ShellExecuteExW (Address: 0x18002b5a0)
ShellExecuteW (Address: 0x18002b590)
SHGetFolderPathW (Address: 0x18002b5a8)
SHGetKnownFolderPath (Address: 0x18002b598)

SHLWAPI.dll

AssocQueryStringW (Address: 0x18002b5d0)
PathAppendW (Address: 0x18002b5c8)
PathCombineW (Address: 0x18002b5c0)
PathFindExtensionW (Address: 0x18002b5d8)
PathIsURLW (Address: 0x18002b5e0)
UrlCreateFromPathW (Address: 0x18002b5b8)

ucrtbase_clr0400.dll

__stdio_common_vswprintf (Address: 0x18002bae0)
__stdio_common_vswprintf_s (Address: 0x18002bad0)
_beginthreadex (Address: 0x18002bae8)
_callnewh (Address: 0x18002bb40)
_cexit (Address: 0x18002ba60)
_configure_narrow_argv (Address: 0x18002ba98)
_crt_atexit (Address: 0x18002ba58)
_errno (Address: 0x18002bb10)
_execute_onexit_table (Address: 0x18002ba78)
_initialize_narrow_environment (Address: 0x18002ba90)
_initialize_onexit_table (Address: 0x18002ba88)
_initterm (Address: 0x18002ba70)
_initterm_e (Address: 0x18002bb58)
_invalid_parameter_noinfo (Address: 0x18002bb18)
_recalloc (Address: 0x18002bb08)
_register_onexit_function (Address: 0x18002ba80)
_seh_filter_dll (Address: 0x18002baa0)
_ultow_s (Address: 0x18002bac8)
_wcsicmp (Address: 0x18002bb30)
_wcslwr_s (Address: 0x18002bac0)
_wcsnicmp (Address: 0x18002baf0)
bsearch (Address: 0x18002bb50)
free (Address: 0x18002bb20)
isdigit (Address: 0x18002bab0)
iswdigit (Address: 0x18002baa8)
malloc (Address: 0x18002bb38)
terminate (Address: 0x18002ba68)
tolower (Address: 0x18002bab8)
wcscat_s (Address: 0x18002baf8)
wcscmp (Address: 0x18002bb48)
wcscpy_s (Address: 0x18002bb00)
wcsncmp (Address: 0x18002bad8)
wcsncpy_s (Address: 0x18002bb28)

urlmon.dll

CoInternetCombineUrl (Address: 0x18002bb90)
CoInternetCreateSecurityManager (Address: 0x18002bb68)
CoInternetParseUrl (Address: 0x18002bb98)
CompareSecurityIds (Address: 0x18002bbb8)
CreateURLMoniker (Address: 0x18002bba0)
CreateURLMonikerEx (Address: 0x18002bb78)
GetClassFileOrMime (Address: 0x18002bb80)
RegisterBindStatusCallback (Address: 0x18002bb70)
URLDownloadToCacheFileW (Address: 0x18002bb88)
UrlMkGetSessionOption (Address: 0x18002bbb0)
URLOpenBlockingStreamW (Address: 0x18002bba8)

USER32.dll

BeginPaint (Address: 0x18002b6a0)
CallWindowProcW (Address: 0x18002b600)
CharNextW (Address: 0x18002b858)
CheckMenuItem (Address: 0x18002b6e0)
ClientToScreen (Address: 0x18002b638)
CreateAcceleratorTableW (Address: 0x18002b640)
CreateMenu (Address: 0x18002b710)
CreateWindowExW (Address: 0x18002b798)
DefWindowProcW (Address: 0x18002b820)
DestroyAcceleratorTable (Address: 0x18002b7d0)
DestroyMenu (Address: 0x18002b738)
DestroyWindow (Address: 0x18002b648)
DispatchMessageW (Address: 0x18002b838)
EnableMenuItem (Address: 0x18002b750)
EndPaint (Address: 0x18002b698)
FillRect (Address: 0x18002b610)
GetActiveWindow (Address: 0x18002b860)
GetClassInfoExW (Address: 0x18002b650)
GetClassInfoW (Address: 0x18002b6f0)
GetClassNameW (Address: 0x18002b808)
GetClientRect (Address: 0x18002b7a0)
GetDC (Address: 0x18002b5f0)
GetDesktopWindow (Address: 0x18002b7c8)
GetDlgItem (Address: 0x18002b680)
GetFocus (Address: 0x18002b688)
GetKeyState (Address: 0x18002b828)
GetMenuItemCount (Address: 0x18002b6c8)
GetMenuItemID (Address: 0x18002b7f0)
GetMenuItemInfoW (Address: 0x18002b748)
GetMenuStringW (Address: 0x18002b718)
GetMessageExtraInfo (Address: 0x18002b850)
GetMessageW (Address: 0x18002b810)
GetParent (Address: 0x18002b630)
GetSubMenu (Address: 0x18002b6d0)
GetSysColor (Address: 0x18002b668)
GetWindow (Address: 0x18002b7c0)
GetWindowLongPtrW (Address: 0x18002b7d8)
GetWindowLongW (Address: 0x18002b7e0)
GetWindowTextLengthW (Address: 0x18002b6b8)
GetWindowTextW (Address: 0x18002b6b0)
GetWindowThreadProcessId (Address: 0x18002b6e8)
InsertMenuW (Address: 0x18002b720)
InvalidateRect (Address: 0x18002b5f8)
InvalidateRgn (Address: 0x18002b608)
IsChild (Address: 0x18002b690)
IsWindow (Address: 0x18002b670)
KillTimer (Address: 0x18002b708)
LoadCursorW (Address: 0x18002b868)
LoadMenuW (Address: 0x18002b728)
LoadStringW (Address: 0x18002b740)
MessageBeep (Address: 0x18002b760)
MessageBoxW (Address: 0x18002b7f8)
MoveWindow (Address: 0x18002b778)
MsgWaitForMultipleObjects (Address: 0x18002b848)
PeekMessageW (Address: 0x18002b840)
PostMessageW (Address: 0x18002b818)
PostQuitMessage (Address: 0x18002b758)
PostThreadMessageW (Address: 0x18002b780)
RedrawWindow (Address: 0x18002b658)
RegisterClassExW (Address: 0x18002b6a8)
RegisterClassW (Address: 0x18002b7a8)
RegisterRawInputDevices (Address: 0x18002b700)
RegisterWindowMessageW (Address: 0x18002b6c0)
ReleaseCapture (Address: 0x18002b618)
ReleaseDC (Address: 0x18002b6d8)
RemoveMenu (Address: 0x18002b730)
ScreenToClient (Address: 0x18002b628)
SendMessageW (Address: 0x18002b678)
SetCapture (Address: 0x18002b620)
SetFocus (Address: 0x18002b790)
SetMessageExtraInfo (Address: 0x18002b830)
SetParent (Address: 0x18002b7b0)
SetTimer (Address: 0x18002b6f8)
SetWindowLongPtrW (Address: 0x18002b7b8)
SetWindowLongW (Address: 0x18002b7e8)
SetWindowPos (Address: 0x18002b660)
SetWindowTextW (Address: 0x18002b870)
ShowWindow (Address: 0x18002b788)
TranslateMessage (Address: 0x18002b800)
UnregisterClassW (Address: 0x18002b770)
WaitForInputIdle (Address: 0x18002b768)

VCRUNTIME140_CLR0400.dll

__C_specific_handler (Address: 0x18002b898)
__CxxFrameHandler3 (Address: 0x18002b8d0)
__std_type_info_destroy_list (Address: 0x18002b890)
__vcrt_InitializeCriticalSectionEx (Address: 0x18002b8b8)
_CxxThrowException (Address: 0x18002b8b0)
_purecall (Address: 0x18002b8c0)
memcmp (Address: 0x18002b8d8)
memcpy (Address: 0x18002b8a8)
memmove (Address: 0x18002b8a0)
memset (Address: 0x18002b888)
wcschr (Address: 0x18002b880)
wcsstr (Address: 0x18002b8c8)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x18002b8f8)
GetFileVersionInfoW (Address: 0x18002b8e8)
VerQueryValueW (Address: 0x18002b8f0)

WININET.dll

InternetCrackUrlW (Address: 0x18002b910)
InternetCreateUrlW (Address: 0x18002b908)
InternetErrorDlg (Address: 0x18002b918)
InternetGetCookieExW (Address: 0x18002b920)
InternetSetCookieExW (Address: 0x18002b928)