ExecModelClient.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
CreateForegroundTaskManager
#1 · 0x14030
TestHook_CancelShutdown
#2 · 0x260c0
CreateModernVoipPolicy
#3 · 0x39700
DllCanUnloadNow
#4 · 0xce10
DllGetActivationFactory
#5 · 0x15500
DllGetClassObject
#6 · 0xc590
No function matches your filter.
Imported DLLs & functions 211
ApiSetQueryApiSetPresence
0x1003f038
CLSIDFromString
0x1003f080
CoCreateFreeThreadedMarshaler
0x1003f040
CoCreateGuid
0x1003f084
CoCreateInstance
0x1003f058
CoGetApartmentType
0x1003f048
CoGetCallContext
0x1003f064
CoGetCallerTID
0x1003f06c
CoGetClassObject
0x1003f068
CoInitializeEx
0x1003f07c
CoMarshalInterface
0x1003f070
CoReleaseMarshalData
0x1003f078
CoTaskMemAlloc
0x1003f04c
CoTaskMemFree
0x1003f060
CoTaskMemRealloc
0x1003f050
CoUninitialize
0x1003f05c
CoWaitForMultipleHandles
0x1003f044
CreateStreamOnHGlobal
0x1003f074
StringFromGUID2
0x1003f054
RoGetAgileReference
0x1003f08c
DebugBreak
0x1003f094
IsDebuggerPresent
0x1003f09c
OutputDebugStringW
0x1003f098
DelayLoadFailureHook
0x1003f0a4
ResolveDelayLoadedAPI
0x1003f0ac
GetLastError
0x1003f0b4
RaiseException
0x1003f0b8
SetLastError
0x1003f0c0
SetUnhandledExceptionFilter
0x1003f0c4
UnhandledExceptionFilter
0x1003f0bc
CloseHandle
0x1003f0cc
GetProcessHeap
0x1003f0dc
HeapAlloc
0x1003f0d8
HeapFree
0x1003f0d4
LocalAlloc
0x1003f0ec
LocalFree
0x1003f0e4
LocalReAlloc
0x1003f0e8
InitializeSListHead
0x1003f0f4
DisableThreadLibraryCalls
0x1003f108
FindResourceExW
0x1003f100
GetModuleFileNameA
0x1003f104
GetModuleHandleExW
0x1003f118
GetModuleHandleW
0x1003f110
GetProcAddress
0x1003f10c
LoadLibraryExW
0x1003f114
LoadResource
0x1003f0fc
LockResource
0x1003f11c
FormatMessageW
0x1003f124
CreateThread
0x1003f130
GetCurrentProcess
0x1003f144
GetCurrentProcessId
0x1003f134
GetCurrentThreadId
0x1003f140
GetProcessId
0x1003f13c
GetThreadId
0x1003f12c
OpenProcessToken
0x1003f138
TerminateProcess
0x1003f148
IsProcessorFeaturePresent
0x1003f150
OpenProcess
0x1003f154
QueryPerformanceCounter
0x1003f15c
K32GetProcessImageFileNameW
0x1003f164
PsmGetKeyFromProcess
0x1003f16c
QuirkIsEnabledForPackage
0x1003f174
RegGetValueW
0x1003f17c
CompareStringOrdinal
0x1003f184
AcquireSRWLockExclusive
0x1003f1bc
AcquireSRWLockShared
0x1003f1b4
CreateEventExW
0x1003f1ac
CreateEventW
0x1003f18c
CreateMutexExW
0x1003f1c4
CreateSemaphoreExW
0x1003f1dc
DeleteCriticalSection
0x1003f19c
EnterCriticalSection
0x1003f1a8
InitializeCriticalSection
0x1003f1a0
InitializeCriticalSectionAndSpinCount
0x1003f1e0
InitializeCriticalSectionEx
0x1003f1b0
InitializeSRWLock
0x1003f198
LeaveCriticalSection
0x1003f1a4
OpenSemaphoreW
0x1003f1c8
ReleaseMutex
0x1003f1d0
ReleaseSemaphore
0x1003f1d8
ReleaseSRWLockExclusive
0x1003f1c0
ReleaseSRWLockShared
0x1003f1b8
ResetEvent
0x1003f1e4
SetEvent
0x1003f190
WaitForMultipleObjectsEx
0x1003f194
WaitForSingleObject
0x1003f1d4
WaitForSingleObjectEx
0x1003f1cc
InitializeConditionVariable
0x1003f1f0
InitOnceBeginInitialize
0x1003f204
InitOnceComplete
0x1003f1f8
InitOnceExecuteOnce
0x1003f1fc
InitOnceInitialize
0x1003f200
Sleep
0x1003f1f4
WakeConditionVariable
0x1003f1ec
CloseThreadpoolTimer
0x1003f218
CreateThreadpoolTimer
0x1003f224
SetThreadpoolTimer
0x1003f220
WaitForThreadpoolTimerCallbacks
0x1003f21c
GetRestrictedErrorInfo
0x1003f23c
RoOriginateError
0x1003f248
RoOriginateErrorW
0x1003f238
RoTransformError
0x1003f244
SetRestrictedErrorInfo
0x1003f240
IsErrorPropagationEnabled
0x1003f254
RoGetMatchingRestrictedErrorInfo
0x1003f258
RoReportFailedDelegate
0x1003f250
WindowsConcatString
0x1003f28c
WindowsCreateString
0x1003f270
WindowsCreateStringReference
0x1003f280
WindowsDeleteString
0x1003f284
WindowsDuplicateString
0x1003f27c
WindowsGetStringLen
0x1003f288
WindowsGetStringRawBuffer
0x1003f26c
WindowsIsStringEmpty
0x1003f278
WindowsStringHasEmbeddedNull
0x1003f274
__CxxFrameHandler3
0x1003f30c
__std_terminate
0x1003f308
_CxxThrowException
0x1003f2d8
_except_handler4_common
0x1003f2d4
_o___std_exception_copy
0x1003f2fc
_o___std_exception_destroy
0x1003f2f8
_o___std_type_info_destroy_list
0x1003f2f4
_o___stdio_common_vsnprintf_s
0x1003f2e8
_o___stdio_common_vswprintf
0x1003f2e4
_o__callnewh
0x1003f2f0
_o__cexit
0x1003f2e0
_o__configure_narrow_argv
0x1003f2ec
_o__crt_atexit
0x1003f2dc
_o__errno
0x1003f304
_o__execute_onexit_table
0x1003f300
_o__initialize_narrow_environment
0x1003f294
_o__initialize_onexit_table
0x1003f298
_o__invalid_parameter_noinfo
0x1003f29c
_o__invalid_parameter_noinfo_noreturn
0x1003f2a0
_o__purecall
0x1003f2a4
_o__register_onexit_function
0x1003f2a8
_o__seh_filter_dll
0x1003f2ac
_o__ui64tow_s
0x1003f2b0
_o_free
0x1003f2b8
_o_malloc
0x1003f2bc
_o_realloc
0x1003f2c0
_o_terminate
0x1003f2c4
_o_toupper
0x1003f2c8
_o_wcscpy_s
0x1003f2cc
_o_wcstok_s
0x1003f2d0
memcmp
0x1003f310
memcpy
0x1003f314
memmove
0x1003f2b4
memset
0x1003f328
EventActivityIdControl
0x1003f340
EventProviderEnabled
0x1003f344
EventRegister
0x1003f334
EventSetInformation
0x1003f338
EventUnregister
0x1003f330
EventWriteTransfer
0x1003f33c
BuildSecurityDescriptorForSharingAccess
0x1003f34c
FreeTransientObjectSecurityDescriptor
0x1003f350
QueryTransientObjectSecurityDescriptor
0x1003f354
CopySid
0x1003f35c
EqualSid
0x1003f364
GetLengthSid
0x1003f360
GetTokenInformation
0x1003f368
ConvertSidToStringSidW
0x1003f378
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1003f374
ConvertStringSidToSidW
0x1003f370
CloseServiceHandle
0x1003f384
OpenSCManagerW
0x1003f380
OpenServiceW
0x1003f388
SubscribeServiceChangeNotifications
0x1003f390
UnsubscribeServiceChangeNotifications
0x1003f394
QueryServiceStatus
0x1003f39c
SHTaskPoolAllowThreadReuse
0x1003f3a4
SHTaskPoolQueueTask
0x1003f3a8
CoreUICreate
0x1003f000
ntdll.dll
17
NtQueryInformationToken
0x1003f3e0
NtQuerySystemInformation
0x1003f3c0
RtlAcquireSRWLockExclusive
0x1003f3f8
RtlAcquireSRWLockShared
0x1003f3cc
RtlAllocateHeap
0x1003f3c8
RtlCopySid
0x1003f3e4
RtlDeriveCapabilitySidsFromName
0x1003f3dc
RtlFreeHeap
0x1003f3e8
RtlGetDeviceFamilyInfoEnum
0x1003f3bc
RtlInitializeSRWLock
0x1003f3c4
RtlQueryUnbiasedInterruptTime
0x1003f3ec
RtlReleaseSRWLockExclusive
0x1003f3d8
RtlReleaseSRWLockShared
0x1003f3f0
RtlRunOnceBeginInitialize
0x1003f3d0
RtlRunOnceExecuteOnce
0x1003f3d4
RtlSleepConditionVariableSRW
0x1003f3fc
RtlValidSid
0x1003f3f4
0x1003f008
I_RpcExceptionFilter
0x1003f030
I_RpcMapWin32Status
0x1003f014
NdrClientCall4
0x1003f028
RpcBindingBind
0x1003f01c
RpcBindingCreateW
0x1003f020
RpcBindingFree
0x1003f024
RpcBindingFromStringBindingW
0x1003f018
RpcStringBindingComposeW
0x1003f02c
RpcStringFreeW
0x1003f010
No function matches your filter.