HoloShellRuntime.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
DllCanUnloadNow
#1 · 0x212f0
DllGetActivationFactory
#2 · 0x21020
DllGetClassObject
#3 · 0x21200
No function matches your filter.
Imported DLLs & functions 177
AppXFreeMemory
0x18002ede0
AppXGetPackageCapabilities
0x18002ede8
GetPackageFamilyName
0x18002edf8
GetPackageFullName
0x18002ee00
CoCreateFreeThreadedMarshaler
0x18002ee20
CoCreateInstance
0x18002ee30
CoGetCallContext
0x18002ee48
CoGetCallerTID
0x18002ee40
CoGetInterfaceAndReleaseStream
0x18002ee38
CoMarshalInterface
0x18002ee58
CoReleaseMarshalData
0x18002ee18
CoTaskMemAlloc
0x18002ee28
CoTaskMemFree
0x18002ee50
CoWaitForMultipleHandles
0x18002ee60
CreateStreamOnHGlobal
0x18002ee10
RoGetAgileReference
0x18002ee70
DebugBreak
0x18002ee88
IsDebuggerPresent
0x18002ee90
OutputDebugStringW
0x18002ee80
DelayLoadFailureHook
0x18002eea0
ResolveDelayLoadedAPI
0x18002eeb0
GetLastError
0x18002eec8
RaiseException
0x18002eed0
SetLastError
0x18002eed8
SetUnhandledExceptionFilter
0x18002eec0
UnhandledExceptionFilter
0x18002eee0
RaiseFailFastException
0x18002eef0
CreateDirectoryW
0x18002ef00
CloseHandle
0x18002ef10
GetProcessHeap
0x18002ef20
HeapAlloc
0x18002ef30
HeapFree
0x18002ef28
LocalFree
0x18002ef40
InitializeSListHead
0x18002ef50
DisableThreadLibraryCalls
0x18002ef70
FreeLibrary
0x18002ef90
GetModuleFileNameA
0x18002ef78
GetModuleHandleExW
0x18002ef60
GetModuleHandleW
0x18002ef80
GetProcAddress
0x18002ef68
LoadStringW
0x18002ef88
LoadLibraryW
0x18002efa0
FormatMessageW
0x18002efb0
CreateThread
0x18002efe0
GetCurrentProcess
0x18002efd8
GetCurrentProcessId
0x18002efc0
GetCurrentThreadId
0x18002efd0
GetProcessId
0x18002eff0
OpenProcessToken
0x18002efc8
TerminateProcess
0x18002efe8
IsProcessorFeaturePresent
0x18002f000
OpenProcess
0x18002f008
QueryPerformanceCounter
0x18002f018
RegGetValueW
0x18002f028
RtlCaptureContext
0x18002f048
RtlLookupFunctionEntry
0x18002f040
RtlVirtualUnwind
0x18002f038
AcquireSRWLockExclusive
0x18002f0a8
AcquireSRWLockShared
0x18002f080
CreateEventExW
0x18002f060
CreateMutexExW
0x18002f088
CreateSemaphoreExW
0x18002f070
DeleteCriticalSection
0x18002f078
EnterCriticalSection
0x18002f0b0
InitializeCriticalSectionEx
0x18002f0d0
InitializeSRWLock
0x18002f068
LeaveCriticalSection
0x18002f0d8
OpenSemaphoreW
0x18002f098
ReleaseMutex
0x18002f0c0
ReleaseSemaphore
0x18002f0e0
ReleaseSRWLockExclusive
0x18002f0b8
ReleaseSRWLockShared
0x18002f090
SetEvent
0x18002f058
WaitForSingleObject
0x18002f0c8
WaitForSingleObjectEx
0x18002f0a0
InitOnceBeginInitialize
0x18002f0f0
InitOnceComplete
0x18002f100
InitOnceExecuteOnce
0x18002f0f8
GetSystemTimeAsFileTime
0x18002f110
CloseThreadpoolTimer
0x18002f128
CreateThreadpoolTimer
0x18002f138
SetThreadpoolTimer
0x18002f130
WaitForThreadpoolTimerCallbacks
0x18002f120
GetRestrictedErrorInfo
0x18002f170
RoOriginateError
0x18002f160
RoOriginateErrorW
0x18002f180
RoTransformError
0x18002f178
SetRestrictedErrorInfo
0x18002f168
IsErrorPropagationEnabled
0x18002f1a0
RoGetMatchingRestrictedErrorInfo
0x18002f198
RoReportFailedDelegate
0x18002f190
RoActivateInstance
0x18002f1c0
RoGetActivationFactory
0x18002f1b8
RoInitialize
0x18002f1b0
WindowsCompareStringOrdinal
0x18002f208
WindowsCreateString
0x18002f200
WindowsCreateStringReference
0x18002f1f0
WindowsDeleteString
0x18002f1d8
WindowsDuplicateString
0x18002f1d0
WindowsGetStringRawBuffer
0x18002f1f8
WindowsIsStringEmpty
0x18002f1e0
WindowsStringHasEmbeddedNull
0x18002f1e8
__C_specific_handler
0x18002f290
__CxxFrameHandler3
0x18002f298
__CxxFrameHandler4
0x18002f2b0
__std_terminate
0x18002f2a8
_CxxThrowException
0x18002f2a0
_o___std_exception_copy
0x18002f2f8
_o___std_exception_destroy
0x18002f2f0
_o___std_type_info_destroy_list
0x18002f2e8
_o___stdio_common_vsnprintf_s
0x18002f2d0
_o___stdio_common_vswprintf
0x18002f2c0
_o__callnewh
0x18002f248
_o__cexit
0x18002f300
_o__configure_narrow_argv
0x18002f250
_o__crt_atexit
0x18002f2b8
_o__errno
0x18002f2d8
_o__execute_onexit_table
0x18002f2c8
_o__initialize_narrow_environment
0x18002f218
_o__initialize_onexit_table
0x18002f220
_o__invalid_parameter_noinfo
0x18002f228
_o__purecall
0x18002f230
_o__register_onexit_function
0x18002f238
_o__seh_filter_dll
0x18002f240
_o__wcsicmp
0x18002f260
_o_free
0x18002f268
_o_malloc
0x18002f270
_o_realloc
0x18002f278
_o_terminate
0x18002f280
_o_wcscpy_s
0x18002f288
memcmp
0x18002f308
memcpy
0x18002f310
memmove
0x18002f258
wcschr
0x18002f2e0
memset
0x18002f338
EventActivityIdControl
0x18002f348
EventRegister
0x18002f358
EventSetInformation
0x18002f350
EventUnregister
0x18002f368
EventWriteTransfer
0x18002f360
LookupAccountNameW
0x18002f390
GetNamedSecurityInfoW
0x18002f3b0
SetEntriesInAclW
0x18002f3a0
SetNamedSecurityInfoW
0x18002f3a8
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18002f3c0
SHTaskPoolAllowThreadReuse
0x18002f3d8
SHTaskPoolQueueTask
0x18002f3d0
CoreUICallCreateEndpointHost
0x18002edc0
CoreUICallReceive
0x18002edb8
CoreUICallSend
0x18002edb0
CoreUICreate
0x18002eda8
MsgBufferShare
0x18002ed98
MsgRelease
0x18002ed90
MsgStringCreateShared
0x18002eda0
CoreUIFactoryCreate
0x18002edd0
?_Xbad_function_call@std@@YAXXZ
0x18002f408
?_Xlength_error@std@@YAXPEBD@Z
0x18002f400
ntdll.dll
10
NtQueryInformationProcess
0x18002f448
NtQueryInformationToken
0x18002f460
NtQueryWnfStateData
0x18002f428
RtlAllocateHeap
0x18002f420
RtlCompareUnicodeString
0x18002f450
RtlDeriveCapabilitySidsFromName
0x18002f438
RtlFreeHeap
0x18002f458
RtlGetDeviceFamilyInfoEnum
0x18002f430
RtlInitUnicodeString
0x18002f440
RtlNtStatusToDosErrorNoTeb
0x18002f418
No function matches your filter.