cldapi.dll
v10.0.19041.5678
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 48
CfAbortOperation
#1 · 0x4050
CfCloseAppPolicy
#2 · 0x46c0
CfCloseHandle
#3 · 0x5180
CfConnectSyncRoot
#4 · 0x8d70
CfConvertToPlaceholder
#5 · 0xd010
CfCreatePlaceholders
#6 · 0xcdd0
CfDehydratePlaceholder
#7 · 0xd800
CfDehydratePlaceholderEx
#8 · 0xd6b0
CfDisconnectSyncRoot
#9 · 0x9760
CfEnumAppPolicy
#10 · 0x46e0
CfExecute
#11 · 0xc000
CfGetCorrelationVector
#12 · 0xdba0
CfGetLastSyncStatus
#13 · 0x45e0
CfGetPlaceholderInfo
#14 · 0xdc80
CfGetPlaceholderRangeInfo
#15 · 0xdf30
CfGetPlaceholderStateFromAttributeTag
#16 · 0x13100
CfGetPlaceholderStateFromFileInfo
#17 · 0x13120
CfGetPlaceholderStateFromFindData
#18 · 0x13170
CfGetPlatformInfo
#19 · 0xdc30
CfGetSyncRootInfoByHandle
#20 · 0xdda0
CfGetSyncRootInfoByPath
#21 · 0xdea0
CfGetTransferKey
#22 · 0xda50
CfGetWin32HandleFromProtectedHandle
#23 · 0x5140
CfHydratePlaceholder
#24 · 0xd5e0
CfLockProperties
#25 · 0xe0c0
CfOpenAppPolicy
#26 · 0x4640
CfOpenFileWithOplock
#27 · 0x4c30
CfOpenProgressEvent
#28 · 0x3650
CfQueryProgress
#29 · 0x36f0
CfQuerySyncProviderStatus
#30 · 0xc830
CfReferenceProtectedHandle
#31 · 0x5110
CfRegisterSyncRoot
#32 · 0x7b50
CfReleaseProtectedHandle
#33 · 0x5160
CfReleaseTransferKey
#34 · 0xdac0
CfReportProviderProgress2
#35 · 0x3b10
CfReportProviderProgress
#36 · 0x3ad0
CfReportSyncStatus
#37 · 0xc8d0
CfRetrieveProperties
#38 · 0xe230
CfRevertPlaceholder
#39 · 0xd530
CfSetAppPolicy
#40 · 0x48c0
CfSetCorrelationVector
#41 · 0xdae0
CfSetInSyncState
#42 · 0xd940
CfSetPinState
#43 · 0xd830
CfStoreProperties
#44 · 0xe1c0
CfUnlockProperties
#45 · 0xe150
CfUnregisterSyncRoot
#46 · 0x8b00
CfUpdatePlaceholder
#47 · 0xd1b0
CfUpdateSyncProviderStatus
#48 · 0xc220
No function matches your filter.
Imported DLLs & functions 141
IsDebuggerPresent
0x10017010
DelayLoadFailureHook
0x10017018
ResolveDelayLoadedAPI
0x10017020
GetLastError
0x1001702c
SetLastError
0x10017030
SetUnhandledExceptionFilter
0x10017028
UnhandledExceptionFilter
0x10017034
CreateFileW
0x10017040
GetFileSizeEx
0x10017048
GetVolumeInformationW
0x1001703c
GetVolumePathNameW
0x10017044
GetVolumeNameForVolumeMountPointW
0x10017050
GetFileInformationByHandleEx
0x10017058
CloseHandle
0x10017060
GetProcessHeap
0x10017070
HeapAlloc
0x1001706c
HeapFree
0x10017068
LocalAlloc
0x10017078
InitializeSListHead
0x10017080
CreateIoCompletionPort
0x10017090
DeviceIoControl
0x1001708c
GetOverlappedResult
0x10017094
GetQueuedCompletionStatus
0x10017088
DisableThreadLibraryCalls
0x100170a0
GetModuleFileNameA
0x1001709c
GetModuleHandleExW
0x100170a4
CreateThread
0x100170c0
GetCurrentProcess
0x100170ac
GetCurrentProcessId
0x100170c8
GetCurrentThread
0x100170b4
GetCurrentThreadId
0x100170d0
GetExitCodeThread
0x100170d4
OpenThread
0x100170b8
ResumeThread
0x100170cc
SetThreadPriority
0x100170c4
TerminateProcess
0x100170b0
TerminateThread
0x100170bc
IsProcessorFeaturePresent
0x100170dc
OpenProcess
0x100170e0
QueryPerformanceCounter
0x100170e8
QueryFullProcessImageNameW
0x100170f0
QueryUnbiasedInterruptTime
0x100170f8
RegCloseKey
0x10017108
RegEnumKeyExW
0x10017104
RegOpenKeyExW
0x1001710c
RegQueryValueExW
0x10017110
RegSetValueExW
0x10017100
CharLowerW
0x10017118
AcquireSRWLockExclusive
0x10017120
AcquireSRWLockShared
0x1001715c
CreateEventW
0x10017134
DeleteCriticalSection
0x1001713c
EnterCriticalSection
0x1001714c
InitializeCriticalSection
0x10017128
InitializeSRWLock
0x10017144
LeaveCriticalSection
0x10017124
OpenEventW
0x10017154
ReleaseSRWLockExclusive
0x10017158
ReleaseSRWLockShared
0x10017150
ResetEvent
0x1001712c
SetEvent
0x10017130
SetWaitableTimer
0x10017140
TryAcquireSRWLockExclusive
0x10017148
WaitForSingleObject
0x10017138
Sleep
0x10017164
CreateWaitableTimerW
0x1001716c
GetSystemInfo
0x10017184
GetSystemTimeAsFileTime
0x10017180
GetTickCount
0x1001717c
GetWindowsDirectoryW
0x10017174
GlobalMemoryStatusEx
0x10017178
GetUserNameW
0x1001718c
CloseThreadpoolTimer
0x10017198
CloseThreadpoolWork
0x100171a4
CreateThreadpoolTimer
0x100171a0
CreateThreadpoolWork
0x100171a8
SetThreadpoolTimer
0x1001719c
SubmitThreadpoolWork
0x100171ac
WaitForThreadpoolTimerCallbacks
0x10017194
_except_handler4_common
0x100171d8
_o___std_type_info_destroy_list
0x100171dc
_o__cexit
0x100171e0
_o__configure_narrow_argv
0x100171b4
_o__execute_onexit_table
0x100171b8
_o__initialize_narrow_environment
0x100171bc
_o__initialize_onexit_table
0x100171c0
_o__seh_filter_dll
0x100171c4
_o__wcsnicmp
0x100171cc
_o_toupper
0x100171d0
_o_wcscpy_s
0x100171d4
memcmp
0x100171e4
memcpy
0x100171e8
memmove
0x100171c8
EventProviderEnabled
0x10017210
EventRegister
0x1001720c
EventSetInformation
0x10017218
EventUnregister
0x10017214
EventWriteTransfer
0x1001721c
BCryptCloseAlgorithmProvider
0x10017228
BCryptCreateHash
0x10017230
BCryptDestroyHash
0x1001723c
BCryptFinishHash
0x1001722c
BCryptGetProperty
0x10017238
BCryptHashData
0x10017224
BCryptOpenAlgorithmProvider
0x10017234
FilterConnectCommunicationPort
0x10017000
FilterGetMessage
0x10017008
FilterSendMessage
0x10017004
ntdll.dll
28
NtClose
0x10017284
NtCreateFile
0x10017264
NtQueryDirectoryFile
0x10017288
NtQuerySystemTime
0x1001729c
NtSetInformationFile
0x10017258
RtlAcquireSRWLockExclusive
0x10017270
RtlAcquireSRWLockShared
0x10017248
RtlComputeCrc32
0x10017244
RtlDeleteElementGenericTableAvl
0x10017280
RtlDosLongPathNameToNtPathName_U_WithStatus
0x10017294
RtlEnumerateGenericTableAvl
0x100172ac
RtlEqualUnicodeString
0x10017278
RtlExtendCorrelationVector
0x10017250
RtlFreeUnicodeString
0x1001727c
RtlIncrementCorrelationVector
0x10017254
RtlInitializeGenericTableAvl
0x10017290
RtlInitializeSRWLock
0x1001728c
RtlInitUnicodeString
0x1001725c
RtlInsertElementGenericTableAvl
0x1001726c
RtlIsPartialPlaceholder
0x1001724c
RtlLookupElementGenericTableAvl
0x100172b0
RtlNtStatusToDosError
0x10017298
RtlNumberGenericTableElementsAvl
0x100172a4
RtlPrefixUnicodeString
0x100172a0
RtlReleaseSRWLockExclusive
0x10017274
RtlReleaseSRWLockShared
0x100172a8
RtlSetThreadPlaceholderCompatibilityMode
0x10017260
RtlValidateCorrelationVector
0x10017268
No function matches your filter.