ExecModelClient.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
CreateForegroundTaskManager
#1 · 0xd620
TestHook_CancelShutdown
#2 · 0x1f930
CreateModernVoipPolicy
#3 · 0x38450
DllCanUnloadNow
#4 · 0xb630
DllGetActivationFactory
#5 · 0xb4e0
DllGetClassObject
#6 · 0xa7b0
No function matches your filter.
Imported DLLs & functions 215
ApiSetQueryApiSetPresence
0x1800445b0
CLSIDFromString
0x180044640
CoCreateFreeThreadedMarshaler
0x1800445c0
CoCreateGuid
0x180044648
CoCreateInstance
0x1800445f0
CoGetApartmentType
0x1800445d0
CoGetCallContext
0x180044608
CoGetCallerTID
0x180044618
CoGetClassObject
0x180044610
CoInitializeEx
0x180044638
CoMarshalInterface
0x180044620
CoReleaseMarshalData
0x180044630
CoTaskMemAlloc
0x1800445d8
CoTaskMemFree
0x180044600
CoTaskMemRealloc
0x1800445e0
CoUninitialize
0x1800445f8
CoWaitForMultipleHandles
0x1800445c8
CreateStreamOnHGlobal
0x180044628
StringFromGUID2
0x1800445e8
RoGetAgileReference
0x180044658
DebugBreak
0x180044668
IsDebuggerPresent
0x180044678
OutputDebugStringW
0x180044670
DelayLoadFailureHook
0x180044688
ResolveDelayLoadedAPI
0x180044698
GetLastError
0x1800446a8
RaiseException
0x1800446b0
SetLastError
0x1800446c0
SetUnhandledExceptionFilter
0x1800446c8
UnhandledExceptionFilter
0x1800446b8
CloseHandle
0x1800446d8
GetProcessHeap
0x1800446f8
HeapAlloc
0x1800446f0
HeapFree
0x1800446e8
LocalAlloc
0x180044718
LocalFree
0x180044708
LocalReAlloc
0x180044710
InitializeSListHead
0x180044728
DisableThreadLibraryCalls
0x180044750
FindResourceExW
0x180044740
GetModuleFileNameA
0x180044748
GetModuleHandleExW
0x180044770
GetModuleHandleW
0x180044760
GetProcAddress
0x180044758
LoadLibraryExW
0x180044768
LoadResource
0x180044738
LockResource
0x180044778
FormatMessageW
0x180044788
CreateThread
0x1800447a0
GetCurrentProcess
0x1800447c8
GetCurrentProcessId
0x1800447a8
GetCurrentThreadId
0x1800447c0
GetProcessId
0x1800447b8
GetThreadId
0x180044798
OpenProcessToken
0x1800447b0
TerminateProcess
0x1800447d0
IsProcessorFeaturePresent
0x1800447e0
OpenProcess
0x1800447e8
QueryPerformanceCounter
0x1800447f8
K32GetProcessImageFileNameW
0x180044808
PsmGetKeyFromProcess
0x180044818
QuirkIsEnabledForPackage
0x180044828
RegGetValueW
0x180044838
RtlCaptureContext
0x180044858
RtlLookupFunctionEntry
0x180044848
RtlVirtualUnwind
0x180044850
CompareStringOrdinal
0x180044868
AcquireSRWLockExclusive
0x1800448d8
AcquireSRWLockShared
0x1800448c8
CreateEventExW
0x1800448b8
CreateEventW
0x1800448c0
CreateMutexExW
0x1800448e8
CreateSemaphoreExW
0x180044918
DeleteCriticalSection
0x1800448a0
EnterCriticalSection
0x180044888
InitializeCriticalSection
0x180044898
InitializeCriticalSectionAndSpinCount
0x180044920
InitializeCriticalSectionEx
0x1800448a8
InitializeSRWLock
0x180044890
LeaveCriticalSection
0x180044880
OpenSemaphoreW
0x1800448f0
ReleaseMutex
0x180044900
ReleaseSemaphore
0x180044910
ReleaseSRWLockExclusive
0x1800448e0
ReleaseSRWLockShared
0x1800448d0
ResetEvent
0x180044928
SetEvent
0x180044878
WaitForMultipleObjectsEx
0x1800448b0
WaitForSingleObject
0x180044908
WaitForSingleObjectEx
0x1800448f8
InitializeConditionVariable
0x180044940
InitOnceBeginInitialize
0x180044968
InitOnceComplete
0x180044950
InitOnceExecuteOnce
0x180044958
InitOnceInitialize
0x180044960
Sleep
0x180044948
WakeConditionVariable
0x180044938
CloseThreadpoolTimer
0x180044990
CreateThreadpoolTimer
0x1800449a8
SetThreadpoolTimer
0x1800449a0
WaitForThreadpoolTimerCallbacks
0x180044998
GetRestrictedErrorInfo
0x1800449d8
RoOriginateError
0x1800449f0
RoOriginateErrorW
0x1800449d0
RoTransformError
0x1800449e8
SetRestrictedErrorInfo
0x1800449e0
IsErrorPropagationEnabled
0x180044a08
RoGetMatchingRestrictedErrorInfo
0x180044a10
RoReportFailedDelegate
0x180044a00
RoActivateInstance
0x180044a28
RoGetActivationFactory
0x180044a20
WindowsConcatString
0x180044a78
WindowsCreateString
0x180044a40
WindowsCreateStringReference
0x180044a60
WindowsDeleteString
0x180044a68
WindowsDuplicateString
0x180044a58
WindowsGetStringLen
0x180044a70
WindowsGetStringRawBuffer
0x180044a38
WindowsIsStringEmpty
0x180044a50
WindowsStringHasEmbeddedNull
0x180044a48
__C_specific_handler
0x180044b10
__CxxFrameHandler3
0x180044b18
__CxxFrameHandler4
0x180044b80
__std_terminate
0x180044b78
_CxxThrowException
0x180044b20
_o___std_exception_copy
0x180044b70
_o___std_exception_destroy
0x180044b68
_o___std_type_info_destroy_list
0x180044b60
_o___stdio_common_vsnprintf_s
0x180044b58
_o___stdio_common_vswprintf
0x180044b48
_o__callnewh
0x180044b28
_o__cexit
0x180044ac0
_o__configure_narrow_argv
0x180044b40
_o__crt_atexit
0x180044b30
_o__errno
0x180044b50
_o__execute_onexit_table
0x180044b38
_o__initialize_narrow_environment
0x180044a88
_o__initialize_onexit_table
0x180044a90
_o__invalid_parameter_noinfo
0x180044a98
_o__invalid_parameter_noinfo_noreturn
0x180044aa0
_o__purecall
0x180044aa8
_o__register_onexit_function
0x180044ab0
_o__seh_filter_dll
0x180044ab8
_o__ui64tow_s
0x180044ac8
_o_free
0x180044ad8
_o_malloc
0x180044ae0
_o_realloc
0x180044ae8
_o_terminate
0x180044af0
_o_toupper
0x180044af8
_o_wcscpy_s
0x180044b00
_o_wcstok_s
0x180044b08
memcmp
0x180044b88
memcpy
0x180044b90
memmove
0x180044ad0
memset
0x180044bb8
EventActivityIdControl
0x180044be8
EventProviderEnabled
0x180044bf0
EventRegister
0x180044bd0
EventSetInformation
0x180044bd8
EventUnregister
0x180044bc8
EventWriteTransfer
0x180044be0
BuildSecurityDescriptorForSharingAccess
0x180044c00
FreeTransientObjectSecurityDescriptor
0x180044c08
QueryTransientObjectSecurityDescriptor
0x180044c10
CopySid
0x180044c20
EqualSid
0x180044c30
GetLengthSid
0x180044c28
GetTokenInformation
0x180044c38
ConvertSidToStringSidW
0x180044c58
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180044c50
ConvertStringSidToSidW
0x180044c48
CloseServiceHandle
0x180044c70
OpenSCManagerW
0x180044c68
OpenServiceW
0x180044c78
SubscribeServiceChangeNotifications
0x180044c88
UnsubscribeServiceChangeNotifications
0x180044c90
QueryServiceStatus
0x180044ca0
SHTaskPoolAllowThreadReuse
0x180044cb0
SHTaskPoolQueueTask
0x180044cb8
CoreUICreate
0x180044540
?_Xlength_error@std@@YAXPEBD@Z
0x180044cc8
?_Xout_of_range@std@@YAXPEBD@Z
0x180044cd0
ntdll.dll
17
NtQueryInformationToken
0x180044d28
NtQuerySystemInformation
0x180044ce8
RtlAcquireSRWLockExclusive
0x180044d58
RtlAcquireSRWLockShared
0x180044d00
RtlAllocateHeap
0x180044cf8
RtlCopySid
0x180044d30
RtlDeriveCapabilitySidsFromName
0x180044d20
RtlFreeHeap
0x180044d38
RtlGetDeviceFamilyInfoEnum
0x180044ce0
RtlInitializeSRWLock
0x180044cf0
RtlQueryUnbiasedInterruptTime
0x180044d40
RtlReleaseSRWLockExclusive
0x180044d18
RtlReleaseSRWLockShared
0x180044d48
RtlRunOnceBeginInitialize
0x180044d08
RtlRunOnceExecuteOnce
0x180044d10
RtlSleepConditionVariableSRW
0x180044d60
RtlValidSid
0x180044d50
0x180044550
I_RpcExceptionFilter
0x1800445a0
I_RpcMapWin32Status
0x180044568
NdrClientCall3
0x180044590
RpcBindingBind
0x180044578
RpcBindingCreateW
0x180044580
RpcBindingFree
0x180044588
RpcBindingFromStringBindingW
0x180044570
RpcStringBindingComposeW
0x180044598
RpcStringFreeW
0x180044560
No function matches your filter.