daxexec.dll
v10.0.19041.6392
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 51
AddLookaside
#1 · 0x15940
AddProcessToHeliumContainer
#2 · 0x1a540
CheckAppXPackageBreakaway
#3 · 0x1a210
CheckApplicationInCurrentPackage
#4 · 0x1a440
CloseAppExecutionAlias
#5 · 0x1bf30
CloseJitvSilo
#6 · 0x45720
CompleteAppExecutionAliasProcessCreation
#7 · 0x1a310
CreateAppExecutionAlias
#8 · 0x1bf20
CreateDesktopAppXActivationInfo
#9 · 0x1c520
CreateDesktopAppXLocalCacheStructure
#10 · 0x21c90
CreateDesktopAppXTombstoneFile
#11 · 0x21ca0
CreateJitvSilo
#12 · 0x45660
CurrentThreadIsInVirtualizationContext
#13 · 0x45b30
DetokenizeDesktopAppXOfflineRegistry
#14 · 0x27830
DisableDesktopAppXDebuggingForPackage
#15 · 0x472f0
DllCanUnloadNow
#16 · 0x137e0
DllGetActivationFactory
#17 · 0x137c0
DllGetClassObject
#18 · 0x13770
DoesPackageHaveElevationCapability
#19 · 0x2afd0
DoesPackageHaveUIAccessCapability
#20 · 0x2aff0
DoesPluginSupportCentennial
#21 · 0x46840
EnableDesktopAppXDebuggingForPackage
#22 · 0x471f0
EnsureDesktopAppXPackageShutdown
#23 · 0x1a320
EnterPackageVirtualizationContext
#24 · 0x459e0
FreeAppExecutionAliasInfo
#25 · 0x1bf30
FreeAppExecutionAliasInfoWithLicenseRundown
#26 · 0x1bf40
FreeDesktopAppXActivationInfo
#27 · 0x1c5d0
FreeDesktopAppXLaunchContext
#28 · 0x1a1f0
GetAppExecutionAliasApplicationUserModelId
#29 · 0x1bf10
GetAppExecutionAliasExecutable
#30 · 0x1bf10
GetAppExecutionAliasPackageFamilyName
#31 · 0x1bf10
GetAppExecutionAliasPackageFullName
#32 · 0x1bf10
GetApplicationExecutableRelativePath
#33 · 0x2abd0
GetDesktopAppXComRootHandle
#34 · 0x2bfb0
LeavePackageVirtualizationContext
#35 · 0x45aa0
LoadAppExecutionAliasInfo
#36 · 0x1bf10
MigrateWritablePackageRootData
#37 · 0x21fe0
OpenAppExecutionAlias
#38 · 0x1bf00
OpenAppExecutionAliasForUser
#39 · 0x1bf10
PerformAppxLicenseRundown
#40 · 0x1a3e0
PersistAppExecutionAliasToFile
#41 · 0x1bf00
PostCreateProcessDesktopAppXActivation
#42 · 0x19f10
PrepareDesktopAppXActivation
#43 · 0x197b0
RegisterDesktopAppXPackageFamily
#44 · 0x2a0c0
RegisterDesktopAppXPackageFamilyIfNecessary
#45 · 0x2a300
RemoveDesktopAppXMetadataForFolder
#46 · 0x21c20
RemoveLookaside
#47 · 0x159a0
SetDesktopAppXMetadataForFolder
#48 · 0x21ad0
SetDesktopAppXMetadataForPackage
#49 · 0x21a80
TryActivateDesktopAppXApplication
#50 · 0x46290
VerifyFileIsTrustedAndInPackage
#51 · 0x1a550
No function matches your filter.
Imported DLLs & functions 416
AppContainerDeriveSidFromMoniker
0x100740a0
CloseState
0x100740a8
GetPublisherRootFolder
0x100740b8
GetSecureSystemAppDataFolder
0x100740b0
GetStateFolder
0x100740bc
GetSystemAppDataFolder
0x100740b4
OpenStateExplicit
0x100740ac
ApiSetQueryApiSetPresence
0x100740c4
CStdStubBuffer2_Connect
0x100740d0
CStdStubBuffer2_CountRefs
0x100740e0
CStdStubBuffer2_Disconnect
0x100740e8
CStdStubBuffer2_QueryInterface
0x100740cc
NdrProxyForwardingFunction3
0x100740e4
NdrProxyForwardingFunction4
0x100740d4
NdrProxyForwardingFunction5
0x100740dc
ObjectStublessClient3
0x100740ec
ObjectStublessClient6
0x100740d8
SetConsoleCtrlHandler
0x100740f4
GenerateConsoleCtrlEvent
0x10074108
DebugBreak
0x10074110
IsDebuggerPresent
0x10074114
OutputDebugStringW
0x10074118
DelayLoadFailureHook
0x10074120
ResolveDelayLoadedAPI
0x10074128
GetLastError
0x10074130
RaiseException
0x1007413c
SetLastError
0x10074134
SetUnhandledExceptionFilter
0x10074140
UnhandledExceptionFilter
0x10074138
CreateDirectoryW
0x10074194
CreateFileW
0x10074170
DeleteFileW
0x10074184
FindClose
0x1007416c
FindFirstFileExW
0x10074160
FindFirstFileW
0x10074154
FindNextFileW
0x1007415c
FlushFileBuffers
0x1007418c
GetFileAttributesW
0x10074148
GetFileInformationByHandle
0x10074188
GetFileSizeEx
0x10074158
GetFinalPathNameByHandleW
0x10074174
GetLongPathNameW
0x10074164
GetVolumeInformationW
0x10074190
GetVolumePathNameW
0x10074150
ReadFile
0x10074178
RemoveDirectoryW
0x1007417c
SetFileAttributesW
0x10074180
SetFileInformationByHandle
0x1007414c
WriteFile
0x10074168
GetFileInformationByHandleEx
0x1007419c
GetProcessHeap
0x100741c0
HeapAlloc
0x100741c4
HeapDestroy
0x100741b0
HeapFree
0x100741b4
HeapReAlloc
0x100741b8
HeapSize
0x100741bc
InitializeSListHead
0x100741d8
DeviceIoControl
0x100741e0
AssignProcessToJobObject
0x100741e8
DisableThreadLibraryCalls
0x100741fc
FreeLibrary
0x10074200
GetModuleFileNameA
0x100741f0
GetModuleFileNameW
0x10074208
GetModuleHandleExW
0x100741f8
GetModuleHandleW
0x100741f4
GetProcAddress
0x10074204
LoadLibraryW
0x10074210
FormatMessageW
0x10074218
CreateFileMappingW
0x10074224
MapViewOfFile
0x10074228
UnmapViewOfFile
0x10074220
PathAllocCanonicalize
0x10074240
PathAllocCombine
0x10074234
PathCchRemoveBackslash
0x10074230
PathCchSkipRoot
0x10074238
PathIsUNCEx
0x1007423c
ExpandEnvironmentStringsW
0x10074250
GetCurrentDirectoryA
0x10074248
GetCurrentDirectoryW
0x1007424c
CreateProcessAsUserW
0x10074270
GetCurrentProcess
0x10074290
GetCurrentProcessId
0x1007428c
GetCurrentThread
0x10074298
GetCurrentThreadId
0x10074274
GetProcessId
0x1007426c
OpenProcessToken
0x10074278
OpenThread
0x10074260
OpenThreadToken
0x10074268
ProcessIdToSessionId
0x10074258
SetThreadToken
0x10074264
SuspendThread
0x1007425c
TerminateProcess
0x10074288
TlsAlloc
0x10074280
TlsFree
0x10074294
TlsGetValue
0x10074284
TlsSetValue
0x1007427c
IsProcessorFeaturePresent
0x100742a0
OpenProcess
0x100742a4
QueryPerformanceCounter
0x100742ac
QueryFullProcessImageNameW
0x100742b4
PsmGetApplicationNameFromKey
0x100742bc
PsmGetPackageFullNameFromKey
0x100742c0
RegCloseKey
0x100742cc
RegCreateKeyExW
0x100742dc
RegDeleteTreeW
0x100742d8
RegGetValueW
0x100742c8
RegOpenCurrentUser
0x100742d4
RegOpenKeyExW
0x100742e4
RegQueryInfoKeyW
0x100742d0
RegSetValueExW
0x100742e0
RegOpenKeyW
0x100742ec
PathIsRelativeW
0x100742f8
PathUnExpandEnvStringsW
0x100742f4
StrIsIntlEqualW
0x10074300
CompareStringOrdinal
0x10074308
AcquireSRWLockExclusive
0x1007435c
AcquireSRWLockShared
0x10074354
CreateEventExW
0x10074310
CreateEventW
0x10074318
CreateMutexExW
0x10074350
CreateSemaphoreExW
0x10074320
DeleteCriticalSection
0x10074334
EnterCriticalSection
0x10074338
InitializeCriticalSectionAndSpinCount
0x1007434c
InitializeCriticalSectionEx
0x10074330
InitializeSRWLock
0x10074314
LeaveCriticalSection
0x1007433c
OpenSemaphoreW
0x10074344
ReleaseMutex
0x1007432c
ReleaseSemaphore
0x10074324
ReleaseSRWLockExclusive
0x10074360
ReleaseSRWLockShared
0x10074348
ResetEvent
0x1007431c
SetEvent
0x10074358
WaitForSingleObject
0x10074328
WaitForSingleObjectEx
0x10074340
InitOnceBeginInitialize
0x10074368
InitOnceComplete
0x10074374
InitOnceExecuteOnce
0x10074370
Sleep
0x1007436c
GetSystemDirectoryW
0x10074388
GetSystemInfo
0x10074380
GetSystemTimeAsFileTime
0x1007437c
GetTickCount
0x10074384
CloseThreadpoolTimer
0x10074390
CreateThreadpoolTimer
0x10074394
SetThreadpoolTimer
0x10074398
WaitForThreadpoolTimerCallbacks
0x1007439c
GetApplicationRestartSettings
0x100743b0
Wow64DisableWow64FsRedirection
0x100743c8
Wow64RevertWow64FsRedirection
0x100743c4
__CxxFrameHandler3
0x1007446c
__std_terminate
0x10074468
__std_type_info_compare
0x10074464
_CxxThrowException
0x10074418
_except_handler4_common
0x10074414
_o___std_exception_copy
0x1007445c
_o___std_exception_destroy
0x10074458
_o___std_type_info_destroy_list
0x10074454
_o___stdio_common_vsnprintf_s
0x10074450
_o___stdio_common_vswprintf
0x1007444c
_o__aligned_free
0x10074448
_o__aligned_malloc
0x10074444
_o__callnewh
0x10074440
_o__cexit
0x1007443c
_o__configure_narrow_argv
0x10074438
_o__crt_atexit
0x10074434
_o__errno
0x10074430
_o__execute_onexit_table
0x1007442c
_o__initialize_narrow_environment
0x10074428
_o__initialize_onexit_table
0x10074424
_o__invalid_parameter_noinfo
0x10074420
_o__invalid_parameter_noinfo_noreturn
0x1007441c
_o__purecall
0x100743d0
_o__register_onexit_function
0x100743d4
_o__seh_filter_dll
0x100743d8
_o__ui64tow_s
0x100743dc
_o__wcsicmp
0x100743e0
_o__wcsnicmp
0x100743e4
_o__wtoi
0x100743e8
_o_calloc
0x100743f0
_o_ceil
0x100743f4
_o_free
0x100743f8
_o_malloc
0x100743fc
_o_terminate
0x10074400
_o_toupper
0x10074404
_o_wcscat_s
0x10074408
_o_wcsncat_s
0x1007440c
_o_wcsncpy_s
0x10074410
memcmp
0x10074470
memcpy
0x10074474
memmove
0x100743ec
wcschr
0x10074460
EventActivityIdControl
0x10074498
EventProviderEnabled
0x100744a0
EventRegister
0x100744a8
EventSetInformation
0x100744ac
EventUnregister
0x1007449c
EventWriteTransfer
0x100744a4
CreateAppContainerToken
0x100744b4
CapabilityCheck
0x100744bc
LookupPrivilegeValueW
0x100744c4
ConvertSecurityDescriptorToStringSecurityDescriptorW
0x100744cc
ConvertSidToStringSidW
0x100744d0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x100744d4
SHTaskPoolGetUniqueContext
0x100744e0
SHTaskPoolQueueTask
0x100744dc
SHGetKnownFolderPath
0x100744e8
0x10074000
_WcCleanupContainer@8
0x100744fc
_WcGetComRegistryRoot@8
0x100744f8
_WcGetContainerIdentifier@8
0x10074500
_WcIsContainerQuiescent@8
0x100744f0
_WcRegisterForContainerTerminationNotification@16
0x10074508
_WcReleaseContainerTerminationNotification@4
0x1007450c
?CreateContainer@container@@YGXPAXABUContainer@DefinitionFile@1@_N0@Z
0x10074504
?GetContainerIdentifierString@container@@YG?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAX@Z
0x100744f4
FilterAttach
0x1007401c
FilterConnectCommunicationPort
0x10074010
FilterInstanceClose
0x10074008
FilterInstanceCreate
0x1007400c
FilterLoad
0x10074018
FilterSendMessage
0x10074014
_Close_dir
0x100745a4
_File_size
0x10074580
_Lstat
0x10074590
_Make_dir
0x1007457c
_Mtx_destroy_in_situ
0x10074598
_Mtx_init_in_situ
0x10074594
_Open_dir
0x1007459c
_Query_perf_counter
0x100745d0
_Query_perf_frequency
0x100745cc
_Read_dir
0x100745a0
_Remove_dir
0x10074584
_Stat
0x1007458c
_Thrd_sleep
0x100745c0
_Thrd_yield
0x100745c4
_Unlink
0x10074588
_Xtime_get_ticks
0x100745c8
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
0x10074570
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x10074538
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
0x1007452c
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
0x10074518
?_Syserror_map@std@@YAPBDH@Z
0x1007456c
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
0x10074534
?_Winerror_map@std@@YAHH@Z
0x10074574
?_Winerror_message@std@@YAKKPADK@Z
0x10074578
?_Xbad_function_call@std@@YAXXZ
0x100745a8
?_Xlength_error@std@@YAXPBD@Z
0x100745d4
?_Xout_of_range@std@@YAXPBD@Z
0x100745b4
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
0x10074560
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
0x10074564
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
0x1007455c
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
0x100745bc
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
0x100745b8
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
0x1007451c
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
0x100745b0
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
0x10074568
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
0x100745ac
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
0x10074520
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
0x10074514
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
0x10074554
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
0x10074550
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
0x10074524
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
0x10074544
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
0x1007453c
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
0x10074558
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
0x10074528
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
0x10074548
?uncaught_exception@std@@YA_NXZ
0x10074530
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
0x1007454c
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
0x10074540
ntdll.dll
97
EtwEventRegister
0x1007468c
EtwEventUnregister
0x1007467c
EtwEventWrite
0x10074680
EtwEventWriteNoRegistration
0x100746e8
NtAlpcConnectPort
0x100746d0
NtAlpcSendWaitReceivePort
0x100746cc
NtClose
0x100746dc
NtCreateFile
0x10074704
NtCreateJobObject
0x1007465c
NtCreateKey
0x100745e8
NtCreateKeyTransacted
0x10074620
NtCreateMutant
0x10074660
NtDeleteFile
0x10074618
NtDeleteKey
0x1007463c
NtDeleteValueKey
0x100745fc
NtDuplicateObject
0x100745f4
NtDuplicateToken
0x10074738
NtEnumerateKey
0x10074638
NtEnumerateValueKey
0x10074634
NtFlushKey
0x1007461c
NtMakeTemporaryObject
0x10074658
NtNotifyChangeKey
0x10074614
NtNotifyChangeMultipleKeys
0x10074628
NtOpenEvent
0x100746e4
NtOpenFile
0x10074700
NtOpenJobObject
0x10074690
NtOpenKey
0x10074630
NtOpenKeyEx
0x1007462c
NtOpenKeyTransacted
0x100746f4
NtOpenKeyTransactedEx
0x10074744
NtOpenMutant
0x10074668
NtOpenProcess
0x100746c8
NtQueryAttributesFile
0x100745f8
NtQueryDirectoryFile
0x10074740
NtQueryDirectoryFileEx
0x10074600
NtQueryFullAttributesFile
0x1007470c
NtQueryInformationFile
0x100745f0
NtQueryInformationProcess
0x100746a0
NtQueryInformationToken
0x1007473c
NtQueryKey
0x1007464c
NtQueryMultipleValueKey
0x10074648
NtQueryObject
0x10074664
NtQuerySecurityAttributesToken
0x10074694
NtQuerySecurityObject
0x10074688
NtQuerySystemInformation
0x100746d8
NtQueryValueKey
0x100746f8
NtRenameKey
0x100745dc
NtSetInformationFile
0x10074624
NtSetInformationJobObject
0x10074650
NtSetInformationKey
0x100745ec
NtSetSecurityObject
0x10074610
NtSetValueKey
0x100746a4
NtTerminateJobObject
0x10074654
NtTerminateProcess
0x10074728
NtWaitForMultipleObjects
0x100746bc
NtWaitForSingleObject
0x100746e0
PssNtCaptureSnapshot
0x100746c4
PssNtFreeSnapshot
0x100746c0
RtlAcquireSRWLockExclusive
0x10074750
RtlAdjustPrivilege
0x10074724
RtlAllocateAndInitializeSid
0x100746d4
RtlAllocateHeap
0x100746b8
RtlCompareUnicodeString
0x10074640
RtlCopySid
0x10074684
RtlCreateSecurityDescriptor
0x10074670
RtlCreateServiceSid
0x1007472c
RtlDeriveCapabilitySidsFromName
0x100746fc
RtlDosPathNameToNtPathName_U_WithStatus
0x10074678
RtlEqualSid
0x100746ac
RtlExpandEnvironmentStrings
0x10074710
RtlFindAceByType
0x100746a8
RtlFindNextForwardRunClear
0x10074604
RtlFreeHeap
0x100746b4
RtlFreeSid
0x10074720
RtlGetDaclSecurityDescriptor
0x10074674
RtlGetLastNtStatus
0x1007469c
RtlInitializeSRWLock
0x1007460c
RtlInitUnicodeString
0x10074708
RtlLengthSid
0x100746b0
RtlNtStatusToDosError
0x10074718
RtlNtStatusToDosErrorNoTeb
0x10074644
RtlNumberOfSetBits
0x10074608
RtlQueryEnvironmentVariable
0x10074714
RtlQueryResourcePolicy
0x10074758
RtlReleaseSRWLockExclusive
0x10074754
RtlRunOnceBeginInitialize
0x10074734
RtlRunOnceComplete
0x100745e4
RtlRunOnceExecuteOnce
0x10074730
RtlSetDaclSecurityDescriptor
0x1007466c
RtlSleepConditionVariableSRW
0x10074748
RtlUpcaseUnicodeChar
0x100745e0
RtlValidSid
0x10074698
RtlWakeAllConditionVariable
0x1007474c
RtlWow64IsWowGuestMachineSupported
0x1007471c
wcsstr
0x1007475c
ZwQueryWnfStateNameInformation
0x100746f0
ZwUpdateWnfStateData
0x100746ec
RPCRT4.dll
30
CStdStubBuffer_AddRef
0x10074040
CStdStubBuffer_Connect
0x1007403c
CStdStubBuffer_CountRefs
0x10074030
CStdStubBuffer_DebugServerQueryInterface
0x10074064
CStdStubBuffer_DebugServerRelease
0x10074024
CStdStubBuffer_Disconnect
0x1007404c
CStdStubBuffer_Invoke
0x10074078
CStdStubBuffer_IsIIDSupported
0x1007407c
CStdStubBuffer_QueryInterface
0x1007402c
I_RpcExceptionFilter
0x1007405c
IUnknown_AddRef_Proxy
0x10074074
IUnknown_QueryInterface_Proxy
0x1007406c
IUnknown_Release_Proxy
0x10074034
NdrAsyncClientCall
0x10074038
NdrCStdStubBuffer_Release
0x10074090
NdrCStdStubBuffer2_Release
0x10074080
NdrDllCanUnloadNow
0x10074094
NdrDllGetClassObject
0x10074098
NdrOleAllocate
0x10074028
NdrOleFree
0x10074044
NdrStubCall2
0x1007408c
NdrStubForwardingFunction
0x10074084
RpcAsyncCancelCall
0x10074088
RpcAsyncCompleteCall
0x10074058
RpcAsyncInitializeHandle
0x10074070
RpcBindingFree
0x10074048
RpcBindingFromStringBindingW
0x10074068
RpcBindingSetAuthInfoExW
0x10074054
RpcStringBindingComposeW
0x10074060
RpcStringFreeW
0x10074050
No function matches your filter.