AppResolver.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
#1 · 0x26d60
DllCanUnloadNow
#2 · 0x11810
DllGetActivationFactory
#3 · 0x117d0
DllGetClassObject
#4 · 0x117f0
No function matches your filter.
Imported DLLs & functions 334
ClosePackageInfo
0x100641b4
GetPackageInfo
0x100641b0
OpenPackageInfoByFullName
0x100641ac
PackageFamilyNameFromFullName
0x100641a8
GetStagedPackagePathByFullName2
0x100641bc
DebugBreak
0x100641cc
IsDebuggerPresent
0x100641c4
OutputDebugStringW
0x100641c8
DelayLoadFailureHook
0x100641d4
ResolveDelayLoadedAPI
0x100641dc
GetLastError
0x100641f4
RaiseException
0x100641f0
SetLastError
0x100641e8
SetUnhandledExceptionFilter
0x100641ec
UnhandledExceptionFilter
0x100641e4
CompareFileTime
0x10064208
CreateDirectoryW
0x10064204
CreateFileW
0x1006420c
DeleteFileW
0x100641fc
GetFileSizeEx
0x10064210
GetLongPathNameW
0x10064200
GetTempPathW
0x10064218
CopyFileW
0x10064220
CloseHandle
0x10064228
GetProcessHeap
0x10064234
HeapAlloc
0x1006423c
HeapFree
0x10064238
HeapReAlloc
0x10064230
LocalAlloc
0x10064244
LocalFree
0x10064248
LocalReAlloc
0x1006424c
InitializeSListHead
0x10064260
MulDiv
0x10064268
DisableThreadLibraryCalls
0x1006427c
GetModuleFileNameA
0x10064278
GetModuleFileNameW
0x10064274
GetModuleHandleExW
0x10064270
GetModuleHandleW
0x10064284
GetProcAddress
0x10064280
FormatMessageW
0x10064298
GetThreadPreferredUILanguages
0x10064294
GetUserDefaultLCID
0x1006428c
GetUserGeoID
0x10064290
GetUserDefaultUILanguage
0x100642a0
CreateFileMappingW
0x100642ac
MapViewOfFile
0x100642a8
ReadProcessMemory
0x100642b4
UnmapViewOfFile
0x100642b0
PrefetchVirtualMemory
0x100642bc
PathAllocCombine
0x100642cc
PathCchAppend
0x100642dc
PathCchCombine
0x100642d4
PathCchFindExtension
0x100642d8
PathCchRemoveBackslash
0x100642c4
PathCchRemoveExtension
0x100642d0
PathCchRemoveFileSpec
0x100642c8
ExpandEnvironmentStringsW
0x100642e4
GetCurrentProcess
0x1006430c
GetCurrentProcessId
0x100642f4
GetCurrentThread
0x100642fc
GetCurrentThreadId
0x100642f8
GetProcessTimes
0x100642ec
OpenProcessToken
0x10064304
OpenThreadToken
0x10064308
ProcessIdToSessionId
0x100642f0
TerminateProcess
0x10064300
IsProcessorFeaturePresent
0x10064318
OpenProcess
0x10064314
QueryPerformanceCounter
0x10064320
QueryFullProcessImageNameW
0x10064328
RegCloseKey
0x1006434c
RegCreateKeyExW
0x10064330
RegDeleteValueW
0x10064344
RegEnumValueW
0x10064348
RegGetValueW
0x10064340
RegOpenKeyExW
0x10064350
RegQueryInfoKeyW
0x1006433c
RegQueryValueExW
0x10064338
RegSetValueExW
0x10064334
RegSetKeyValueW
0x10064358
CompareStringOrdinal
0x10064360
lstrlenW
0x10064368
AcquireSRWLockExclusive
0x100643ac
AcquireSRWLockShared
0x100643a0
CreateEventExW
0x100643b0
CreateEventW
0x100643c8
CreateMutexExW
0x1006438c
CreateSemaphoreExW
0x10064384
DeleteCriticalSection
0x10064390
EnterCriticalSection
0x10064388
InitializeCriticalSection
0x1006439c
InitializeCriticalSectionAndSpinCount
0x10064398
InitializeCriticalSectionEx
0x10064394
InitializeSRWLock
0x100643c0
LeaveCriticalSection
0x1006437c
OpenEventW
0x100643bc
OpenSemaphoreW
0x100643c4
ReleaseMutex
0x10064370
ReleaseSemaphore
0x10064380
ReleaseSRWLockExclusive
0x100643b4
ReleaseSRWLockShared
0x100643a8
ResetEvent
0x100643b8
SetEvent
0x100643a4
WaitForSingleObject
0x10064374
WaitForSingleObjectEx
0x10064378
InitOnceBeginInitialize
0x100643d4
InitOnceComplete
0x100643d0
InitOnceExecuteOnce
0x100643d8
GetSystemTimeAsFileTime
0x100643e0
CloseThreadpoolTimer
0x100643e8
CreateThreadpoolTimer
0x100643f0
SetThreadpoolTimer
0x100643f4
WaitForThreadpoolTimerCallbacks
0x100643ec
RoOriginateError
0x1006440c
RoOriginateErrorW
0x10064408
SetRestrictedErrorInfo
0x10064410
RoGetMatchingRestrictedErrorInfo
0x10064418
WindowsCreateString
0x10064430
WindowsCreateStringReference
0x10064434
WindowsDeleteString
0x1006442c
WindowsDuplicateString
0x10064444
WindowsGetStringRawBuffer
0x10064438
WindowsIsStringEmpty
0x1006443c
WindowsStringHasEmbeddedNull
0x10064440
__CxxFrameHandler3
0x100644d8
__std_terminate
0x100644d4
_CxxThrowException
0x100644b8
_except_handler4_common
0x10064480
_o___std_exception_copy
0x100644d0
_o___std_exception_destroy
0x100644cc
_o___std_type_info_destroy_list
0x100644c8
_o___stdio_common_vsnprintf_s
0x100644c4
_o___stdio_common_vswprintf
0x100644c0
_o___stdio_common_vswscanf
0x100644bc
_o__callnewh
0x100644ac
_o__cexit
0x100644a8
_o__configure_narrow_argv
0x100644a4
_o__crt_atexit
0x100644a0
_o__errno
0x1006449c
_o__execute_onexit_table
0x10064498
_o__get_errno
0x10064494
_o__initialize_narrow_environment
0x10064490
_o__initialize_onexit_table
0x1006448c
_o__invalid_parameter_noinfo
0x10064488
_o__invalid_parameter_noinfo_noreturn
0x10064484
_o__itow_s
0x1006444c
_o__purecall
0x10064450
_o__register_onexit_function
0x10064454
_o__seh_filter_dll
0x10064458
_o__set_errno
0x1006445c
_o__ui64tow_s
0x10064460
_o__wcstoui64
0x10064464
_o__wtoi
0x1006446c
_o_ceil
0x10064470
_o_free
0x10064474
_o_malloc
0x10064478
_o_towupper
0x1006447c
memcmp
0x100644dc
memcpy
0x100644e0
memmove
0x10064468
wcschr
0x100644b0
wcsrchr
0x100644b4
EventActivityIdControl
0x10064504
EventRegister
0x10064500
EventSetInformation
0x10064508
EventUnregister
0x1006450c
EventWriteTransfer
0x10064510
DuplicateTokenEx
0x10064518
GetAce
0x10064524
GetFileSecurityW
0x1006451c
GetSecurityDescriptorSacl
0x10064520
GetSidSubAuthority
0x10064528
GetTokenInformation
0x1006452c
CapabilityCheck
0x10064534
SHCreateStreamOnFileW
0x1006453c
ILClone
0x10064564
ILCloneFirst
0x10064548
ILCombine
0x1006456c
ILFindLastID
0x10064568
ILFree
0x1006454c
ILGetSize
0x1006457c
ILIsEqual
0x1006455c
ILIsParent
0x10064544
SHBindToFolderIDListParentEx
0x10064574
SHBindToObject
0x10064580
SHBindToParent
0x10064570
SHCreateItemFromIDList
0x10064554
SHCreateItemFromParsingName
0x10064550
SHCreateItemWithParent
0x10064560
SHGetIDListFromObject
0x10064578
SHParseDisplayName
0x10064558
GetUserLanguages
0x10064000
CreateCompatibleDC
0x10064010
CreateDIBSection
0x1006400c
DeleteDC
0x1006401c
DeleteObject
0x10064020
GdiAlphaBlend
0x10064018
GetObjectW
0x10064008
SelectObject
0x10064024
StretchDIBits
0x10064014
?_Xlength_error@std@@YAXPBD@Z
0x10064588
ntdll.dll
14
NtQueryInformationProcess
0x10064594
NtQueryInformationToken
0x100645c4
NtQueryWnfStateData
0x100645a4
RtlAcquireSRWLockExclusive
0x100645a0
RtlAllocateHeap
0x100645b8
RtlCompareUnicodeString
0x100645a8
RtlFreeHeap
0x100645c0
RtlInitUnicodeString
0x100645b0
RtlNtStatusToDosError
0x10064598
RtlNtStatusToDosErrorNoTeb
0x100645ac
RtlPublishWnfStateData
0x10064590
RtlReleaseSRWLockExclusive
0x100645bc
RtlSubscribeWnfStateChangeNotification
0x100645b4
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1006459c
ole32.dll
20
CoAllowSetForegroundWindow
0x1006460c
CoCreateFreeThreadedMarshaler
0x10064604
CoCreateGuid
0x100645ec
CoCreateInstance
0x100645d4
CoGetCallContext
0x10064614
CoGetInterfaceAndReleaseStream
0x100645fc
CoGetMalloc
0x100645e4
CoInitializeEx
0x100645f0
CoMarshalInterThreadInterfaceInStream
0x100645f4
CoReleaseMarshalData
0x100645f8
CoTaskMemAlloc
0x100645dc
CoTaskMemFree
0x100645d8
CoTaskMemRealloc
0x100645e0
CoUninitialize
0x100645cc
CoWaitForMultipleHandles
0x10064610
CreateBindCtx
0x10064600
PropVariantClear
0x100645d0
ReleaseStgMedium
0x10064608
RoGetAgileReference
0x10064618
StringFromGUID2
0x100645e8
SHCORE.dll
23
0x1006403c
0x1006404c
0x10064050
0x10064058
0x1006405c
0x10064060
0x10064064
0x10064078
0x10064080
0x10064084
GetScaleFactorForDevice
0x10064038
IStream_Read
0x1006402c
IStream_Size
0x10064040
IUnknown_GetSite
0x10064070
IUnknown_QueryService
0x10064030
IUnknown_Set
0x10064074
SHAnsiToUnicode
0x10064054
SHGetValueW
0x10064048
SHQueryValueExW
0x10064068
SHSetValueW
0x10064044
SHStrDupW
0x1006407c
SHTaskPoolGetUniqueContext
0x1006406c
SHTaskPoolQueueTask
0x10064034
SHLWAPI.dll
34
0x1006408c
0x10064090
0x10064094
0x100640a8
0x100640ac
0x100640c0
0x100640d4
0x100640d8
0x100640dc
0x100640e8
0x10064108
0x10064110
AssocCreate
0x100640fc
PathCommonPrefixW
0x100640b0
PathFileExistsW
0x100640ec
PathFindExtensionW
0x100640b4
PathFindFileNameW
0x100640e0
PathGetArgsW
0x100640c8
PathGetDriveNumberW
0x10064098
PathIsFileSpecW
0x100640e4
PathIsPrefixW
0x100640b8
PathIsRelativeW
0x100640a0
PathIsUNCW
0x1006409c
PathIsURLW
0x100640a4
PathParseIconLocationW
0x100640d0
PathRemoveBlanksW
0x100640c4
PathRemoveExtensionW
0x100640f4
PathRemoveFileSpecW
0x100640cc
PathUnquoteSpacesW
0x100640bc
SHStrDupA
0x1006410c
StrChrW
0x100640f0
StrCmpW
0x10064104
StrDupW
0x10064100
StrStrIW
0x100640f8
SLC.dll
1
SLGetWindowsInformationDWORD
0x10064118
USER32.dll
27
CharUpperBuffW
0x1006413c
CopyImage
0x10064134
CreateIconIndirect
0x10064128
CreatePopupMenu
0x10064150
DefWindowProcW
0x10064184
DestroyIcon
0x10064124
DestroyMenu
0x10064154
DestroyWindow
0x10064168
FindWindowW
0x1006417c
GetDC
0x1006414c
GetMenuDefaultItem
0x10064158
GetSysColor
0x10064130
GetWindowLongW
0x10064188
GetWindowThreadProcessId
0x1006415c
InsertMenuW
0x10064148
KillTimer
0x10064164
LoadStringA
0x10064140
LoadStringW
0x10064138
MonitorFromPoint
0x10064174
PostMessageW
0x10064178
RegisterClipboardFormatW
0x10064144
ReleaseDC
0x10064120
SendNotifyMessageW
0x10064170
SetTimer
0x1006416c
SetWindowLongW
0x10064180
SetWindowTextW
0x10064160
SystemParametersInfoW
0x1006412c
GetProfileType
0x10064190
No function matches your filter.