Family.Client.dll

Description: Family.Client DLL

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 761d3af5f96a40d002e40ef657c0351d

File Size: 149.5 KB

Uploaded At: Dec. 1, 2025, 7:28 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3f00)
DllGetActivationFactory (Ordinal: 2, Address: 0x3bf0)
DllGetClassObject (Ordinal: 3, Address: 0x3dd0)

Imported DLLs & Functions

ADVAPI32.dll

EventActivityIdControl (Address: 0x18001d868)
EventRegister (Address: 0x18001d858)
EventSetInformation (Address: 0x18001d880)
EventUnregister (Address: 0x18001d850)
EventWriteTransfer (Address: 0x18001d860)
GetTokenInformation (Address: 0x18001d878)
OpenProcessToken (Address: 0x18001d870)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18001dad0)
CoCreateInstance (Address: 0x18001dae0)
CoGetApartmentType (Address: 0x18001dae8)
CoGetInterfaceAndReleaseStream (Address: 0x18001dad8)
CoMarshalInterface (Address: 0x18001dac8)
CoReleaseMarshalData (Address: 0x18001daf0)
CoTaskMemAlloc (Address: 0x18001dab0)
CoWaitForMultipleHandles (Address: 0x18001dab8)
CreateStreamOnHGlobal (Address: 0x18001dac0)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18001db00)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18001db70)
CStdStubBuffer2_CountRefs (Address: 0x18001db68)
CStdStubBuffer2_Disconnect (Address: 0x18001dba0)
CStdStubBuffer2_QueryInterface (Address: 0x18001db78)
NdrProxyForwardingFunction3 (Address: 0x18001db40)
NdrProxyForwardingFunction4 (Address: 0x18001db60)
NdrProxyForwardingFunction5 (Address: 0x18001db58)
ObjectStublessClient10 (Address: 0x18001db20)
ObjectStublessClient11 (Address: 0x18001dba8)
ObjectStublessClient12 (Address: 0x18001db10)
ObjectStublessClient13 (Address: 0x18001db88)
ObjectStublessClient14 (Address: 0x18001db18)
ObjectStublessClient15 (Address: 0x18001db90)
ObjectStublessClient16 (Address: 0x18001db30)
ObjectStublessClient17 (Address: 0x18001db28)
ObjectStublessClient3 (Address: 0x18001db80)
ObjectStublessClient6 (Address: 0x18001db50)
ObjectStublessClient7 (Address: 0x18001db98)
ObjectStublessClient8 (Address: 0x18001db48)
ObjectStublessClient9 (Address: 0x18001db38)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001dbc0)
RegGetValueW (Address: 0x18001dbc8)
RegOpenKeyExW (Address: 0x18001dbb8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18001dbf0)
RoOriginateError (Address: 0x18001dbd8)
RoOriginateErrorW (Address: 0x18001dbe8)
RoTransformError (Address: 0x18001dbf8)
SetRestrictedErrorInfo (Address: 0x18001dbe0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18001dc18)
RoGetMatchingRestrictedErrorInfo (Address: 0x18001dc08)
RoReportFailedDelegate (Address: 0x18001dc10)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18001dc30)
RoGetActivationFactory (Address: 0x18001dc28)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x18001dcb0)
HSTRING_UserFree64 (Address: 0x18001dc78)
HSTRING_UserMarshal (Address: 0x18001dc80)
HSTRING_UserMarshal64 (Address: 0x18001dc60)
HSTRING_UserSize (Address: 0x18001dc88)
HSTRING_UserSize64 (Address: 0x18001dc70)
HSTRING_UserUnmarshal (Address: 0x18001dc58)
HSTRING_UserUnmarshal64 (Address: 0x18001dc50)
WindowsConcatString (Address: 0x18001dca0)
WindowsCreateString (Address: 0x18001dc48)
WindowsCreateStringReference (Address: 0x18001dca8)
WindowsDeleteString (Address: 0x18001dc68)
WindowsDuplicateString (Address: 0x18001dc40)
WindowsGetStringRawBuffer (Address: 0x18001dc98)
WindowsIsStringEmpty (Address: 0x18001dc90)
WindowsStringHasEmbeddedNull (Address: 0x18001dcb8)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18001dcc8)
SHTaskPoolQueueTask (Address: 0x18001dcd0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18001d930)
AcquireSRWLockShared (Address: 0x18001d928)
CloseHandle (Address: 0x18001d948)
CreateEventExW (Address: 0x18001d9d8)
CreateMutexExW (Address: 0x18001d8e0)
CreateSemaphoreExW (Address: 0x18001d8d0)
DebugBreak (Address: 0x18001d980)
DecodePointer (Address: 0x18001d910)
DisableThreadLibraryCalls (Address: 0x18001d918)
EncodePointer (Address: 0x18001d8c8)
FormatMessageW (Address: 0x18001d9b8)
GetCurrentProcess (Address: 0x18001d8a8)
GetCurrentProcessId (Address: 0x18001d8e8)
GetCurrentThreadId (Address: 0x18001d9b0)
GetLastError (Address: 0x18001d968)
GetModuleFileNameA (Address: 0x18001d988)
GetModuleHandleExW (Address: 0x18001d990)
GetModuleHandleW (Address: 0x18001d978)
GetProcAddress (Address: 0x18001d970)
GetProcessHeap (Address: 0x18001d9a0)
GetSystemTimeAsFileTime (Address: 0x18001d890)
GetTickCount (Address: 0x18001d9c0)
HeapAlloc (Address: 0x18001d9a8)
HeapFree (Address: 0x18001d998)
InitializeSRWLock (Address: 0x18001d9e8)
InitOnceBeginInitialize (Address: 0x18001d900)
InitOnceComplete (Address: 0x18001d8f0)
InitOnceExecuteOnce (Address: 0x18001d8f8)
IsDebuggerPresent (Address: 0x18001d960)
OpenProcess (Address: 0x18001d9e0)
OpenSemaphoreW (Address: 0x18001d920)
OutputDebugStringW (Address: 0x18001d958)
QueryPerformanceCounter (Address: 0x18001d898)
RaiseException (Address: 0x18001d9d0)
ReleaseMutex (Address: 0x18001d940)
ReleaseSemaphore (Address: 0x18001d9f8)
ReleaseSRWLockExclusive (Address: 0x18001d908)
ReleaseSRWLockShared (Address: 0x18001d8d8)
SetEvent (Address: 0x18001d9c8)
SetLastError (Address: 0x18001d950)
SetUnhandledExceptionFilter (Address: 0x18001d8b0)
Sleep (Address: 0x18001d8c0)
TerminateProcess (Address: 0x18001d8a0)
UnhandledExceptionFilter (Address: 0x18001d8b8)
WaitForSingleObject (Address: 0x18001d9f0)
WaitForSingleObjectEx (Address: 0x18001d938)

msvcrt.dll

__C_specific_handler (Address: 0x18001dd68)
__CxxFrameHandler3 (Address: 0x18001dd50)
__dllonexit (Address: 0x18001dcf0)
_amsg_exit (Address: 0x18001dd20)
_callnewh (Address: 0x18001dd08)
_initterm (Address: 0x18001dd10)
_lock (Address: 0x18001dd00)
_onexit (Address: 0x18001dce8)
_purecall (Address: 0x18001dd38)
_unlock (Address: 0x18001dcf8)
_vsnwprintf (Address: 0x18001dd58)
_XcptFilter (Address: 0x18001dd28)
free (Address: 0x18001dd30)
malloc (Address: 0x18001dd18)
memcmp (Address: 0x18001dd48)
memcpy_s (Address: 0x18001dd40)
memset (Address: 0x18001dce0)
realloc (Address: 0x18001dd60)
wcscmp (Address: 0x18001dd70)

ntdll.dll

memmove_s (Address: 0x18001dd98)
RtlCaptureContext (Address: 0x18001dd88)
RtlLookupFunctionEntry (Address: 0x18001dd80)
RtlVirtualUnwind (Address: 0x18001dd90)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18001da58)
CStdStubBuffer_Connect (Address: 0x18001da90)
CStdStubBuffer_CountRefs (Address: 0x18001da68)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18001da48)
CStdStubBuffer_DebugServerRelease (Address: 0x18001da80)
CStdStubBuffer_Disconnect (Address: 0x18001da88)
CStdStubBuffer_Invoke (Address: 0x18001da08)
CStdStubBuffer_IsIIDSupported (Address: 0x18001daa0)
CStdStubBuffer_QueryInterface (Address: 0x18001da70)
IUnknown_AddRef_Proxy (Address: 0x18001da40)
IUnknown_QueryInterface_Proxy (Address: 0x18001da38)
IUnknown_Release_Proxy (Address: 0x18001da60)
NdrCStdStubBuffer_Release (Address: 0x18001da10)
NdrCStdStubBuffer2_Release (Address: 0x18001da28)
NdrDllCanUnloadNow (Address: 0x18001da18)
NdrDllGetClassObject (Address: 0x18001da20)
NdrOleAllocate (Address: 0x18001da78)
NdrOleFree (Address: 0x18001da50)
NdrStubCall3 (Address: 0x18001da98)
NdrStubForwardingFunction (Address: 0x18001da30)