CloudExperienceHostUser.dll
v10.0.19041.4355
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0xe110
DllGetActivationFactory
#2 · 0xe0a0
DllGetClassObject
#3 · 0xe0c0
No function matches your filter.
Imported DLLs & functions 195
ApiSetQueryApiSetPresence
0x1002c048
CoCreateFreeThreadedMarshaler
0x1002c058
CoCreateInstance
0x1002c06c
CoGetCallContext
0x1002c054
CoGetCallerTID
0x1002c084
CoGetMalloc
0x1002c080
CoImpersonateClient
0x1002c064
CoMarshalInterface
0x1002c07c
CoReleaseMarshalData
0x1002c068
CoRevertToSelf
0x1002c060
CoTaskMemAlloc
0x1002c078
CoTaskMemFree
0x1002c074
CoWaitForMultipleHandles
0x1002c05c
CreateStreamOnHGlobal
0x1002c088
PropVariantClear
0x1002c050
StringFromCLSID
0x1002c070
RoGetAgileReference
0x1002c090
CStdStubBuffer2_Connect
0x1002c0d0
CStdStubBuffer2_CountRefs
0x1002c0c4
CStdStubBuffer2_Disconnect
0x1002c0bc
CStdStubBuffer2_QueryInterface
0x1002c0dc
NdrProxyForwardingFunction3
0x1002c09c
NdrProxyForwardingFunction4
0x1002c0cc
NdrProxyForwardingFunction5
0x1002c0c0
ObjectStublessClient10
0x1002c0a4
ObjectStublessClient11
0x1002c0c8
ObjectStublessClient12
0x1002c0d4
ObjectStublessClient13
0x1002c0b0
ObjectStublessClient14
0x1002c0d8
ObjectStublessClient15
0x1002c0a0
ObjectStublessClient16
0x1002c0b4
ObjectStublessClient6
0x1002c0b8
ObjectStublessClient7
0x1002c098
ObjectStublessClient8
0x1002c0ac
ObjectStublessClient9
0x1002c0a8
DebugBreak
0x1002c0e8
IsDebuggerPresent
0x1002c0ec
OutputDebugStringW
0x1002c0e4
DelayLoadFailureHook
0x1002c0f4
ResolveDelayLoadedAPI
0x1002c0fc
GetLastError
0x1002c114
RaiseException
0x1002c10c
SetLastError
0x1002c104
SetUnhandledExceptionFilter
0x1002c110
UnhandledExceptionFilter
0x1002c108
GetProcessHeap
0x1002c130
HeapAlloc
0x1002c128
HeapFree
0x1002c12c
InitializeSListHead
0x1002c144
DisableThreadLibraryCalls
0x1002c14c
GetModuleFileNameA
0x1002c154
GetModuleHandleExW
0x1002c15c
GetModuleHandleW
0x1002c158
GetProcAddress
0x1002c150
FormatMessageW
0x1002c164
GetCurrentProcess
0x1002c174
GetCurrentProcessId
0x1002c184
GetCurrentThread
0x1002c188
GetCurrentThreadId
0x1002c16c
GetProcessId
0x1002c17c
OpenProcessToken
0x1002c170
OpenThreadToken
0x1002c180
TerminateProcess
0x1002c178
IsProcessorFeaturePresent
0x1002c194
OpenProcess
0x1002c190
QueryPerformanceCounter
0x1002c19c
RegCloseKey
0x1002c1a8
RegGetValueW
0x1002c1a4
RegOpenKeyExW
0x1002c1b0
RegSetValueExW
0x1002c1ac
MultiByteToWideChar
0x1002c1b8
AcquireSRWLockExclusive
0x1002c1d8
AcquireSRWLockShared
0x1002c1d0
CreateEventExW
0x1002c1c0
CreateMutexExW
0x1002c1d4
CreateSemaphoreExW
0x1002c1c4
OpenSemaphoreW
0x1002c1e0
ReleaseMutex
0x1002c1e4
ReleaseSemaphore
0x1002c1cc
ReleaseSRWLockExclusive
0x1002c1f0
ReleaseSRWLockShared
0x1002c1e8
SetEvent
0x1002c1c8
WaitForSingleObject
0x1002c1dc
WaitForSingleObjectEx
0x1002c1ec
InitOnceBeginInitialize
0x1002c204
InitOnceComplete
0x1002c1fc
InitOnceExecuteOnce
0x1002c1f8
Sleep
0x1002c200
GetSystemTimeAsFileTime
0x1002c210
GetTickCount
0x1002c20c
GetTickCount64
0x1002c214
GetRestrictedErrorInfo
0x1002c230
RoOriginateError
0x1002c234
RoOriginateErrorW
0x1002c228
RoTransformError
0x1002c238
SetRestrictedErrorInfo
0x1002c22c
IsErrorPropagationEnabled
0x1002c244
RoGetMatchingRestrictedErrorInfo
0x1002c240
RoReportFailedDelegate
0x1002c248
HSTRING_UserFree
0x1002c268
HSTRING_UserMarshal
0x1002c26c
HSTRING_UserSize
0x1002c270
HSTRING_UserUnmarshal
0x1002c264
WindowsCreateString
0x1002c25c
WindowsCreateStringReference
0x1002c274
WindowsDeleteString
0x1002c278
WindowsDuplicateString
0x1002c260
WindowsGetStringRawBuffer
0x1002c27c
WindowsIsStringEmpty
0x1002c280
WindowsStringHasEmbeddedNull
0x1002c284
__CxxFrameHandler3
0x1002c2f8
__std_terminate
0x1002c2f4
_CxxThrowException
0x1002c2d0
_except_handler4_common
0x1002c2c8
_o___std_exception_copy
0x1002c2f0
_o___std_exception_destroy
0x1002c2ec
_o___std_type_info_destroy_list
0x1002c2e8
_o___stdio_common_vsnprintf_s
0x1002c2e4
_o___stdio_common_vswprintf
0x1002c2e0
_o__callnewh
0x1002c2dc
_o__cexit
0x1002c2d8
_o__configure_narrow_argv
0x1002c2d4
_o__crt_atexit
0x1002c2cc
_o__errno
0x1002c28c
_o__execute_onexit_table
0x1002c290
_o__initialize_narrow_environment
0x1002c294
_o__initialize_onexit_table
0x1002c298
_o__invalid_parameter_noinfo
0x1002c29c
_o__invalid_parameter_noinfo_noreturn
0x1002c2a0
_o__purecall
0x1002c2a4
_o__register_onexit_function
0x1002c2a8
_o__seh_filter_dll
0x1002c2ac
_o__wtol
0x1002c2b4
_o_free
0x1002c2b8
_o_malloc
0x1002c2bc
_o_terminate
0x1002c2c0
_o_toupper
0x1002c2c4
memcmp
0x1002c2fc
memcpy
0x1002c300
memmove
0x1002c2b0
memset
0x1002c314
EventActivityIdControl
0x1002c320
EventProviderEnabled
0x1002c31c
EventRegister
0x1002c328
EventSetInformation
0x1002c32c
EventUnregister
0x1002c324
EventWriteTransfer
0x1002c330
DuplicateTokenEx
0x1002c344
EqualSid
0x1002c340
GetAce
0x1002c33c
GetTokenInformation
0x1002c348
RevertToSelf
0x1002c338
GetPersistedRegistryLocationW
0x1002c350
0x1002c358
?_Xlength_error@std@@YAXPBD@Z
0x1002c360
ntdll.dll
12
NtQuerySecurityObject
0x1002c378
NtSetSecurityObject
0x1002c370
RtlAddAccessAllowedAce
0x1002c37c
RtlAddAce
0x1002c390
RtlCreateAcl
0x1002c36c
RtlCreateSecurityDescriptor
0x1002c374
RtlGetAce
0x1002c384
RtlGetDaclSecurityDescriptor
0x1002c394
RtlLengthSid
0x1002c388
RtlNtStatusToDosError
0x1002c368
RtlQueryInformationAcl
0x1002c38c
RtlSetDaclSecurityDescriptor
0x1002c380
PropVariantToStringAlloc
0x1002c000
RPCRT4.dll
15
CStdStubBuffer_AddRef
0x1002c034
CStdStubBuffer_DebugServerQueryInterface
0x1002c028
CStdStubBuffer_DebugServerRelease
0x1002c040
CStdStubBuffer_Invoke
0x1002c018
CStdStubBuffer_IsIIDSupported
0x1002c024
IUnknown_AddRef_Proxy
0x1002c008
IUnknown_QueryInterface_Proxy
0x1002c02c
IUnknown_Release_Proxy
0x1002c038
NdrCStdStubBuffer2_Release
0x1002c00c
NdrDllCanUnloadNow
0x1002c014
NdrDllGetClassObject
0x1002c010
NdrOleAllocate
0x1002c03c
NdrOleFree
0x1002c030
NdrStubCall2
0x1002c020
NdrStubForwardingFunction
0x1002c01c
No function matches your filter.