CloudExperienceHostCommon.dll

Description: CloudExperienceHostCommon

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.1265

Architecture: 64-bit

Operating System: Windows NT

SHA256: c35b3b2fcab7cec1f8b602c8459806b6

File Size: 1.2 MB

Uploaded At: Dec. 1, 2025, 8:11 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x5cb0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x59e0)
  • DllGetClassObject (Ordinal: 3, Address: 0x5bc0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-1.dll
  • ParseApplicationUserModelId (Address: 0x1800f23b8)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x1800f23c8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1800f23e8)
  • IsDebuggerPresent (Address: 0x1800f23d8)
  • OutputDebugStringW (Address: 0x1800f23e0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800f23f8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800f2408)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800f2420)
  • RaiseException (Address: 0x1800f2430)
  • SetLastError (Address: 0x1800f2438)
  • SetUnhandledExceptionFilter (Address: 0x1800f2418)
  • UnhandledExceptionFilter (Address: 0x1800f2428)
api-ms-win-core-file-l1-1-0.dll
  • DeleteFileW (Address: 0x1800f2448)
  • FindClose (Address: 0x1800f2458)
  • FindFirstFileW (Address: 0x1800f2460)
  • FindNextFileW (Address: 0x1800f2450)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x1800f2470)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800f2480)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800f2498)
  • HeapAlloc (Address: 0x1800f2490)
  • HeapFree (Address: 0x1800f24a0)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1800f24b8)
  • LocalFree (Address: 0x1800f24b0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1800f24c8)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • VerifyVersionInfoW (Address: 0x1800f24d8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1800f24f0)
  • FindResourceExW (Address: 0x1800f24e8)
  • FindStringOrdinal (Address: 0x1800f2530)
  • FreeLibrary (Address: 0x1800f2528)
  • FreeResource (Address: 0x1800f2500)
  • GetModuleFileNameA (Address: 0x1800f2540)
  • GetModuleFileNameW (Address: 0x1800f2538)
  • GetModuleHandleExW (Address: 0x1800f24f8)
  • GetModuleHandleW (Address: 0x1800f2520)
  • GetProcAddress (Address: 0x1800f2508)
  • LoadResource (Address: 0x1800f2518)
  • LockResource (Address: 0x1800f2510)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x1800f2550)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800f2588)
  • GetFileMUIPath (Address: 0x1800f2590)
  • GetGeoInfoW (Address: 0x1800f2568)
  • GetUILanguageInfo (Address: 0x1800f2580)
  • GetUserGeoID (Address: 0x1800f2570)
  • LocaleNameToLCID (Address: 0x1800f2560)
  • ResolveLocaleName (Address: 0x1800f2578)
api-ms-win-core-localization-l1-2-3.dll
  • EnumSystemGeoNames (Address: 0x1800f25a0)
  • GetGeoInfoEx (Address: 0x1800f25a8)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x1800f25b8)
  • PathCchAppend (Address: 0x1800f25c0)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x1800f25d0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800f25e8)
  • GetCurrentProcessId (Address: 0x1800f25f0)
  • GetCurrentThread (Address: 0x1800f2610)
  • GetCurrentThreadId (Address: 0x1800f25e0)
  • GetProcessId (Address: 0x1800f2608)
  • OpenProcessToken (Address: 0x1800f2600)
  • OpenThreadToken (Address: 0x1800f2618)
  • TerminateProcess (Address: 0x1800f25f8)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x1800f2628)
  • IsProcessorFeaturePresent (Address: 0x1800f2638)
  • OpenProcess (Address: 0x1800f2630)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800f2648)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1800f2658)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1800f2688)
  • RegDeleteValueW (Address: 0x1800f2678)
  • RegEnumValueW (Address: 0x1800f2680)
  • RegGetValueW (Address: 0x1800f2668)
  • RegOpenKeyExW (Address: 0x1800f2690)
  • RegSetValueExW (Address: 0x1800f2670)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1800f26a0)
  • RtlLookupFunctionEntry (Address: 0x1800f26a8)
  • RtlVirtualUnwind (Address: 0x1800f26b0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800f26c0)
  • CompareStringW (Address: 0x1800f26d0)
  • MultiByteToWideChar (Address: 0x1800f26c8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1800f2758)
  • AcquireSRWLockShared (Address: 0x1800f2768)
  • CreateEventExW (Address: 0x1800f2790)
  • CreateEventW (Address: 0x1800f2750)
  • CreateMutexExW (Address: 0x1800f2770)
  • CreateSemaphoreExW (Address: 0x1800f26f0)
  • DeleteCriticalSection (Address: 0x1800f2718)
  • EnterCriticalSection (Address: 0x1800f2720)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800f2708)
  • InitializeCriticalSectionEx (Address: 0x1800f2710)
  • InitializeSRWLock (Address: 0x1800f26f8)
  • LeaveCriticalSection (Address: 0x1800f2728)
  • OpenEventW (Address: 0x1800f2748)
  • OpenSemaphoreW (Address: 0x1800f2780)
  • ReleaseMutex (Address: 0x1800f2738)
  • ReleaseSemaphore (Address: 0x1800f2700)
  • ReleaseSRWLockExclusive (Address: 0x1800f2740)
  • ReleaseSRWLockShared (Address: 0x1800f2778)
  • ResetEvent (Address: 0x1800f2760)
  • SetEvent (Address: 0x1800f26e0)
  • WaitForMultipleObjectsEx (Address: 0x1800f26e8)
  • WaitForSingleObject (Address: 0x1800f2730)
  • WaitForSingleObjectEx (Address: 0x1800f2788)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1800f27a0)
  • InitOnceComplete (Address: 0x1800f27b0)
  • InitOnceExecuteOnce (Address: 0x1800f27a8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x1800f27c8)
  • GetSystemTimeAsFileTime (Address: 0x1800f27e0)
  • GetTickCount (Address: 0x1800f27c0)
  • GetTickCount64 (Address: 0x1800f27d8)
  • GetVersionExW (Address: 0x1800f27d0)
api-ms-win-core-sysinfo-l1-2-0.dll
  • VerSetConditionMask (Address: 0x1800f27f0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800f2800)
  • CreateThreadpoolTimer (Address: 0x1800f2808)
  • SetThreadpoolTimer (Address: 0x1800f2818)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800f2810)
api-ms-win-core-timezone-l1-1-0.dll
  • GetTimeZoneInformation (Address: 0x1800f2828)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800f2838)
  • EncodePointer (Address: 0x1800f2840)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x1800f2868)
  • RoOriginateError (Address: 0x1800f2850)
  • RoOriginateErrorW (Address: 0x1800f2858)
  • RoTransformError (Address: 0x1800f2860)
  • SetRestrictedErrorInfo (Address: 0x1800f2870)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x1800f2890)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1800f2880)
  • RoReportFailedDelegate (Address: 0x1800f2888)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800f28a8)
  • RoGetActivationFactory (Address: 0x1800f28a0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x1800f28d0)
  • WindowsCreateString (Address: 0x1800f28b8)
  • WindowsCreateStringReference (Address: 0x1800f28e0)
  • WindowsDeleteString (Address: 0x1800f28e8)
  • WindowsDuplicateString (Address: 0x1800f28c8)
  • WindowsGetStringRawBuffer (Address: 0x1800f28c0)
  • WindowsIsStringEmpty (Address: 0x1800f28f0)
  • WindowsStringHasEmbeddedNull (Address: 0x1800f28d8)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x1800f2900)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800f29d0)
  • __CxxFrameHandler3 (Address: 0x1800f29d8)
  • __CxxFrameHandler4 (Address: 0x1800f2a50)
  • __std_terminate (Address: 0x1800f2a48)
  • _CxxThrowException (Address: 0x1800f29e0)
  • _o___std_exception_copy (Address: 0x1800f2a40)
  • _o___std_exception_destroy (Address: 0x1800f2a38)
  • _o___std_type_info_destroy_list (Address: 0x1800f2a30)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800f2a28)
  • _o___stdio_common_vswprintf (Address: 0x1800f2a20)
  • _o__callnewh (Address: 0x1800f2a00)
  • _o__cexit (Address: 0x1800f29f8)
  • _o__configure_narrow_argv (Address: 0x1800f29f0)
  • _o__crt_atexit (Address: 0x1800f29e8)
  • _o__dtest (Address: 0x1800f2a18)
  • _o__errno (Address: 0x1800f2a10)
  • _o__execute_onexit_table (Address: 0x1800f2a08)
  • _o__get_errno (Address: 0x1800f2910)
  • _o__initialize_narrow_environment (Address: 0x1800f2918)
  • _o__initialize_onexit_table (Address: 0x1800f2920)
  • _o__invalid_parameter_noinfo (Address: 0x1800f2928)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1800f2930)
  • _o__purecall (Address: 0x1800f2938)
  • _o__register_onexit_function (Address: 0x1800f2940)
  • _o__seh_filter_dll (Address: 0x1800f2948)
  • _o__set_errno (Address: 0x1800f2950)
  • _o__wcsicmp (Address: 0x1800f2958)
  • _o_free (Address: 0x1800f2968)
  • _o_localeconv (Address: 0x1800f2970)
  • _o_malloc (Address: 0x1800f2978)
  • _o_realloc (Address: 0x1800f2980)
  • _o_strtod (Address: 0x1800f2988)
  • _o_strtoll (Address: 0x1800f2990)
  • _o_strtoull (Address: 0x1800f2998)
  • _o_terminate (Address: 0x1800f29a0)
  • _o_tolower (Address: 0x1800f29a8)
  • _o_towlower (Address: 0x1800f29b0)
  • _o_wcsncpy_s (Address: 0x1800f29b8)
  • _o_wcstok (Address: 0x1800f29c0)
  • _o_wcstoul (Address: 0x1800f29c8)
  • memcmp (Address: 0x1800f2a58)
  • memcpy (Address: 0x1800f2a60)
  • memmove (Address: 0x1800f2960)
  • wcsrchr (Address: 0x1800f2a68)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800f2a80)
  • _initterm_e (Address: 0x1800f2a78)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800f2a90)
  • wcscmp (Address: 0x1800f2a98)
  • wcscspn (Address: 0x1800f2aa8)
  • wcsnlen (Address: 0x1800f2aa0)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x1800f2ab8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1800f2ad8)
  • EventRegister (Address: 0x1800f2ac8)
  • EventSetInformation (Address: 0x1800f2ad0)
  • EventUnregister (Address: 0x1800f2ae8)
  • EventWriteTransfer (Address: 0x1800f2ae0)
api-ms-win-oobe-notification-l1-1-0.dll
  • OOBEComplete (Address: 0x1800f2b08)
  • RegisterWaitUntilOOBECompleted (Address: 0x1800f2b00)
  • UnregisterWaitUntilOOBECompleted (Address: 0x1800f2af8)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x1800f2b28)
  • DuplicateTokenEx (Address: 0x1800f2b18)
  • GetTokenInformation (Address: 0x1800f2b20)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x1800f2b38)
api-ms-win-security-lsalookup-l1-1-2.dll
  • LsaLookupUserAccountType (Address: 0x1800f2b48)
api-ms-win-shcore-registry-l1-1-0.dll
  • SHCopyKeyW (Address: 0x1800f2b60)
  • SHDeleteValueW (Address: 0x1800f2b58)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x1800f2b70)
  • SHTaskPoolQueueTask (Address: 0x1800f2b78)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x1800f2b88)
msvcp_win.dll
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800f2c78)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x1800f2c50)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x1800f2c20)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800f2c40)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800f2c60)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800f2c58)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800f2c38)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800f2c68)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1800f2c10)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800f2c08)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800f2bc0)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800f2c00)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800f2bc8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800f2c70)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800f2bb0)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800f2b98)
  • ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x1800f2bf0)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800f2bd0)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800f2bd8)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800f2c30)
  • ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1800f2ba8)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800f2c48)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800f2c28)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x1800f2bb8)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800f2c18)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800f2be8)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x1800f2bf8)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800f2be0)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1800f2ba0)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x1800f2c98)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x1800f2c88)
  • RtlPublishWnfStateData (Address: 0x1800f2ca0)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1800f2ca8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800f2c90)
OLEAUT32.dll
  • SysAllocString (Address: 0x1800f2348)
  • SysFreeString (Address: 0x1800f2340)
SspiCli.dll
  • GetUserNameExW (Address: 0x1800f2358)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x1800f2388)
  • WinHttpConnect (Address: 0x1800f2368)
  • WinHttpCrackUrl (Address: 0x1800f2380)
  • WinHttpOpen (Address: 0x1800f2378)
  • WinHttpOpenRequest (Address: 0x1800f2370)
  • WinHttpQueryDataAvailable (Address: 0x1800f2390)
  • WinHttpReadData (Address: 0x1800f2398)
  • WinHttpReceiveResponse (Address: 0x1800f23a8)
  • WinHttpSendRequest (Address: 0x1800f23a0)