CloudExperienceHost.dll
v10.0.19041.1265
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x5360
DllGetActivationFactory
#2 · 0x5050
DllGetClassObject
#3 · 0x5230
No function matches your filter.
Imported DLLs & functions 197
FindPackagesByPackageFamily
0x18004b058
ParseApplicationUserModelId
0x18004b050
ApiSetQueryApiSetPresence
0x18004b068
CStdStubBuffer2_Connect
0x18004b090
CStdStubBuffer2_CountRefs
0x18004b098
CStdStubBuffer2_Disconnect
0x18004b0a8
CStdStubBuffer2_QueryInterface
0x18004b0f8
NdrProxyForwardingFunction3
0x18004b088
NdrProxyForwardingFunction4
0x18004b0e0
NdrProxyForwardingFunction5
0x18004b0d8
ObjectStublessClient10
0x18004b108
ObjectStublessClient11
0x18004b0e8
ObjectStublessClient12
0x18004b078
ObjectStublessClient13
0x18004b0b0
ObjectStublessClient14
0x18004b0a0
ObjectStublessClient15
0x18004b0f0
ObjectStublessClient16
0x18004b100
ObjectStublessClient17
0x18004b0b8
ObjectStublessClient6
0x18004b0d0
ObjectStublessClient7
0x18004b080
ObjectStublessClient8
0x18004b0c8
ObjectStublessClient9
0x18004b0c0
DebugBreak
0x18004b118
IsDebuggerPresent
0x18004b128
OutputDebugStringW
0x18004b120
DelayLoadFailureHook
0x18004b138
ResolveDelayLoadedAPI
0x18004b148
GetLastError
0x18004b158
RaiseException
0x18004b170
SetLastError
0x18004b168
SetUnhandledExceptionFilter
0x18004b178
UnhandledExceptionFilter
0x18004b160
CloseHandle
0x18004b188
GetProcessHeap
0x18004b1a0
HeapAlloc
0x18004b198
HeapFree
0x18004b1a8
InitializeSListHead
0x18004b1d0
DisableThreadLibraryCalls
0x18004b208
FreeLibrary
0x18004b200
GetModuleFileNameA
0x18004b210
GetModuleFileNameW
0x18004b1e0
GetModuleHandleExW
0x18004b1e8
GetModuleHandleW
0x18004b1f0
GetProcAddress
0x18004b218
LoadLibraryExW
0x18004b1f8
LoadLibraryW
0x18004b228
FormatMessageW
0x18004b238
ExpandEnvironmentStringsW
0x18004b248
GetCurrentProcess
0x18004b270
GetCurrentProcessId
0x18004b278
GetCurrentThreadId
0x18004b258
GetProcessId
0x18004b268
OpenProcessToken
0x18004b280
TerminateProcess
0x18004b260
GetProcessMitigationPolicy
0x18004b290
IsProcessorFeaturePresent
0x18004b2a0
OpenProcess
0x18004b298
QueryPerformanceCounter
0x18004b2b0
QuirkIsEnabled
0x18004b2c0
RegCloseKey
0x18004b300
RegCreateKeyExW
0x18004b310
RegDeleteTreeW
0x18004b2d0
RegEnumKeyExW
0x18004b2e0
RegGetValueW
0x18004b2f8
RegOpenKeyExW
0x18004b2e8
RegQueryInfoKeyW
0x18004b308
RegQueryValueExW
0x18004b2d8
RegSetValueExW
0x18004b2f0
RtlCaptureContext
0x18004b320
RtlLookupFunctionEntry
0x18004b328
RtlVirtualUnwind
0x18004b330
PathCommonPrefixW
0x18004b348
PathFindExtensionW
0x18004b340
SHExpandEnvironmentStringsW
0x18004b350
CompareStringOrdinal
0x18004b360
MultiByteToWideChar
0x18004b368
AcquireSRWLockExclusive
0x18004b3d0
AcquireSRWLockShared
0x18004b3c8
CreateEventExW
0x18004b378
CreateEventW
0x18004b388
CreateMutexExW
0x18004b3a8
CreateSemaphoreExW
0x18004b3e0
OpenEventW
0x18004b3a0
OpenSemaphoreW
0x18004b3b0
ReleaseMutex
0x18004b3c0
ReleaseSemaphore
0x18004b3d8
ReleaseSRWLockExclusive
0x18004b380
ReleaseSRWLockShared
0x18004b398
SetEvent
0x18004b390
WaitForSingleObject
0x18004b3b8
WaitForSingleObjectEx
0x18004b3e8
InitOnceBeginInitialize
0x18004b3f8
InitOnceComplete
0x18004b410
InitOnceExecuteOnce
0x18004b408
Sleep
0x18004b400
GetSystemDirectoryW
0x18004b430
GetSystemTimeAsFileTime
0x18004b448
GetTickCount
0x18004b440
GetTickCount64
0x18004b428
GetVersionExA
0x18004b438
GetVersionExW
0x18004b420
FileTimeToSystemTime
0x18004b458
SystemTimeToFileTime
0x18004b460
RoActivateInstance
0x18004b490
RoGetActivationFactory
0x18004b488
__C_specific_handler
0x18004b530
__CxxFrameHandler3
0x18004b578
__CxxFrameHandler4
0x18004b5a0
__std_terminate
0x18004b598
_CxxThrowException
0x18004b568
_o___std_exception_copy
0x18004b560
_o___std_exception_destroy
0x18004b558
_o___std_type_info_destroy_list
0x18004b550
_o___stdio_common_vsnprintf_s
0x18004b548
_o___stdio_common_vswprintf
0x18004b540
_o__callnewh
0x18004b590
_o__cexit
0x18004b570
_o__configure_narrow_argv
0x18004b538
_o__crt_atexit
0x18004b5b8
_o__errno
0x18004b588
_o__execute_onexit_table
0x18004b580
_o__get_errno
0x18004b4a0
_o__initialize_narrow_environment
0x18004b4a8
_o__initialize_onexit_table
0x18004b4b0
_o__invalid_parameter_noinfo
0x18004b4b8
_o__invalid_parameter_noinfo_noreturn
0x18004b4c0
_o__purecall
0x18004b4c8
_o__register_onexit_function
0x18004b4d0
_o__seh_filter_dll
0x18004b4d8
_o__set_errno
0x18004b4e0
_o__wcsicmp
0x18004b4f0
_o__wcsnicmp
0x18004b4f8
_o_free
0x18004b500
_o_iswspace
0x18004b508
_o_malloc
0x18004b510
_o_memcpy_s
0x18004b518
_o_terminate
0x18004b520
_o_toupper
0x18004b528
memcmp
0x18004b5a8
memcpy
0x18004b5b0
memmove
0x18004b4e8
TraceMessage
0x18004b600
EventProviderEnabled
0x18004b620
EventRegister
0x18004b610
EventSetInformation
0x18004b628
EventUnregister
0x18004b630
EventWriteTransfer
0x18004b618
OOBEComplete
0x18004b640
GetDesktopWindow
0x18004b660
GetForegroundWindow
0x18004b658
IsWindow
0x18004b650
CheckTokenMembership
0x18004b688
CreateWellKnownSid
0x18004b690
DuplicateToken
0x18004b680
DuplicateTokenEx
0x18004b678
GetTokenInformation
0x18004b670
CapabilityCheck
0x18004b6a0
SHTaskPoolAllowThreadReuse
0x18004b6b0
SHTaskPoolQueueTask
0x18004b6b8
GetPersistedRegistryLocationW
0x18004b6c8
?_Xlength_error@std@@YAXPEBD@Z
0x18004b6d8
NtQueryInformationToken
0x18004b700
NtQueryWnfStateData
0x18004b6f8
RtlIsStateSeparationEnabled
0x18004b6e8
RtlPublishWnfStateData
0x18004b6f0
RPCRT4.dll
16
CStdStubBuffer_AddRef
0x18004afb0
CStdStubBuffer_DebugServerQueryInterface
0x18004afb8
CStdStubBuffer_DebugServerRelease
0x18004afd8
CStdStubBuffer_Invoke
0x18004b000
CStdStubBuffer_IsIIDSupported
0x18004b020
IUnknown_AddRef_Proxy
0x18004b018
IUnknown_QueryInterface_Proxy
0x18004afe0
IUnknown_Release_Proxy
0x18004afc8
NdrCStdStubBuffer2_Release
0x18004afe8
NdrDllCanUnloadNow
0x18004aff8
NdrDllGetClassObject
0x18004aff0
NdrOleAllocate
0x18004afd0
NdrOleFree
0x18004b028
NdrStubCall3
0x18004b010
NdrStubForwardingFunction
0x18004b008
UuidFromStringW
0x18004afc0
No function matches your filter.