InputHost.dll

Description: InputHost

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 30af82d9263b8277a51c22348fabd52d

File Size: 1.3 MB

Uploaded At: Dec. 1, 2025, 7:29 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • (Ordinal: 2601, Address: 0xe900)
  • (Ordinal: 2602, Address: 0x2dac0)
  • (Ordinal: 2603, Address: 0x2db30)
  • (Ordinal: 2604, Address: 0xeb60)
  • (Ordinal: 2605, Address: 0x2da80)
  • (Ordinal: 2606, Address: 0x2dc90)
  • (Ordinal: 2607, Address: 0x2dba0)
  • CreatePointerInputHost (Ordinal: 2608, Address: 0x17760)
  • CreateTouchInputHost (Ordinal: 2609, Address: 0x17760)
  • SetInputDeviceIndicatorState (Ordinal: 2610, Address: 0x17760)
  • SetInputFocus (Ordinal: 2611, Address: 0xe3a0)
  • TouchInputHostCreate (Ordinal: 2612, Address: 0x17760)
  • CreateComboButtonProxy (Ordinal: 2613, Address: 0x2c4e0)
  • CreateCursorClient (Ordinal: 2614, Address: 0x2dd00)
  • CreateCursorManager (Ordinal: 2615, Address: 0x2dd10)
  • CreateDragOperationPrivate (Ordinal: 2616, Address: 0x2c5c0)
  • CreateGenericInputHost (Ordinal: 2617, Address: 0x2cdc0)
  • CreateHeatGripServiceClient (Ordinal: 2618, Address: 0xea8c0)
  • CreateInputDeviceWatcher (Ordinal: 2619, Address: 0xd160)
  • CreateInputHost (Ordinal: 2620, Address: 0x2cdd0)
  • CreateInputHostForProcess (Ordinal: 2621, Address: 0xd430)
  • CreateInputSystemClientConnection (Ordinal: 2622, Address: 0x384a0)
  • CreateMPCManagerClient (Ordinal: 2623, Address: 0x2cde0)
  • CreateViewHitTestRequestClient (Ordinal: 2624, Address: 0x2cf60)
  • DllCanUnloadNow (Ordinal: 2625, Address: 0x38410)
  • DllGetActivationFactory (Ordinal: 2626, Address: 0x12720)
  • DllGetClassObject (Ordinal: 2627, Address: 0x38450)
  • SetInputButtonEnabledOnIdle (Ordinal: 2628, Address: 0x2cf70)
  • SetInputDeviceRepeatParameters (Ordinal: 2629, Address: 0x2cff0)
  • ViewHitTestClientCreate (Ordinal: 2630, Address: 0x2d070)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x180109618)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180109680)
  • CoCreateInstance (Address: 0x180109648)
  • CoDecrementMTAUsage (Address: 0x180109658)
  • CoGetApartmentType (Address: 0x180109660)
  • CoGetCallContext (Address: 0x180109630)
  • CoGetInterfaceAndReleaseStream (Address: 0x180109678)
  • CoImpersonateClient (Address: 0x180109668)
  • CoIncrementMTAUsage (Address: 0x180109650)
  • CoMarshalInterface (Address: 0x180109690)
  • CoReleaseMarshalData (Address: 0x180109640)
  • CoRevertToSelf (Address: 0x180109670)
  • CoSetProxyBlanket (Address: 0x180109638)
  • CoTaskMemAlloc (Address: 0x180109628)
  • CreateStreamOnHGlobal (Address: 0x180109688)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1801096a0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1801096c0)
  • IsDebuggerPresent (Address: 0x1801096b8)
  • OutputDebugStringW (Address: 0x1801096b0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1801096d0)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1801096e0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180109710)
  • RaiseException (Address: 0x180109700)
  • SetLastError (Address: 0x1801096f0)
  • SetUnhandledExceptionFilter (Address: 0x180109708)
  • UnhandledExceptionFilter (Address: 0x1801096f8)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x180109720)
api-ms-win-core-errorhandling-l1-1-3.dll
  • TerminateProcessOnMemoryExhaustion (Address: 0x180109730)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180109748)
  • DuplicateHandle (Address: 0x180109740)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180109760)
  • HeapAlloc (Address: 0x180109768)
  • HeapFree (Address: 0x180109758)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180109780)
  • LocalFree (Address: 0x180109778)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180109790)
  • InterlockedPushEntrySList (Address: 0x180109798)
api-ms-win-core-largeinteger-l1-1-0.dll
  • MulDiv (Address: 0x1801097a8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1801097e8)
  • FreeLibrary (Address: 0x1801097d0)
  • GetModuleFileNameA (Address: 0x1801097c8)
  • GetModuleHandleExW (Address: 0x1801097f0)
  • GetModuleHandleW (Address: 0x1801097d8)
  • GetProcAddress (Address: 0x1801097b8)
  • LoadLibraryExW (Address: 0x180109800)
  • LoadResource (Address: 0x1801097c0)
  • LockResource (Address: 0x1801097f8)
  • SizeofResource (Address: 0x1801097e0)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x180109810)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180109820)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x180109858)
  • GetCurrentProcess (Address: 0x180109840)
  • GetCurrentProcessId (Address: 0x180109838)
  • GetCurrentThreadId (Address: 0x180109830)
  • OpenProcessToken (Address: 0x180109850)
  • TerminateProcess (Address: 0x180109848)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x180109878)
  • IsProcessorFeaturePresent (Address: 0x180109870)
  • OpenProcess (Address: 0x180109868)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180109888)
  • QueryPerformanceFrequency (Address: 0x180109890)
api-ms-win-core-quirks-l1-1-0.dll
  • QuirkIsEnabled (Address: 0x1801098a0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1801098c0)
  • RegOpenKeyExW (Address: 0x1801098b0)
  • RegQueryValueExW (Address: 0x1801098b8)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x1801098d0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180109950)
  • AcquireSRWLockShared (Address: 0x180109960)
  • CreateEventExW (Address: 0x180109928)
  • CreateEventW (Address: 0x180109938)
  • CreateMutexExW (Address: 0x180109920)
  • CreateSemaphoreExW (Address: 0x1801098e8)
  • DeleteCriticalSection (Address: 0x180109970)
  • EnterCriticalSection (Address: 0x180109978)
  • InitializeCriticalSection (Address: 0x180109968)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1801098e0)
  • InitializeCriticalSectionEx (Address: 0x180109918)
  • InitializeSRWLock (Address: 0x180109930)
  • LeaveCriticalSection (Address: 0x180109980)
  • OpenSemaphoreW (Address: 0x180109910)
  • ReleaseMutex (Address: 0x180109900)
  • ReleaseSemaphore (Address: 0x1801098f0)
  • ReleaseSRWLockExclusive (Address: 0x180109948)
  • ReleaseSRWLockShared (Address: 0x180109958)
  • ResetEvent (Address: 0x180109988)
  • SetEvent (Address: 0x180109940)
  • WaitForSingleObject (Address: 0x1801098f8)
  • WaitForSingleObjectEx (Address: 0x180109908)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1801099b0)
  • InitOnceComplete (Address: 0x1801099c0)
  • InitOnceExecuteOnce (Address: 0x1801099b8)
  • Sleep (Address: 0x1801099c8)
  • WaitOnAddress (Address: 0x1801099a8)
  • WakeByAddressAll (Address: 0x1801099a0)
  • WakeByAddressSingle (Address: 0x180109998)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1801099d8)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180109a20)
  • CloseThreadpoolWork (Address: 0x180109a00)
  • CreateThreadpoolTimer (Address: 0x180109a08)
  • CreateThreadpoolWork (Address: 0x1801099e8)
  • FreeLibraryWhenCallbackReturns (Address: 0x1801099f0)
  • SetThreadpoolTimer (Address: 0x1801099f8)
  • SubmitThreadpoolWork (Address: 0x180109a10)
  • WaitForThreadpoolTimerCallbacks (Address: 0x180109a18)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180109a38)
  • EncodePointer (Address: 0x180109a30)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180109a48)
  • RoOriginateError (Address: 0x180109a68)
  • RoOriginateErrorW (Address: 0x180109a50)
  • RoTransformError (Address: 0x180109a60)
  • SetRestrictedErrorInfo (Address: 0x180109a58)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x180109a90)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x180109a80)
  • RoOriginateLanguageException (Address: 0x180109a78)
  • RoReportFailedDelegate (Address: 0x180109a88)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x180109aa8)
  • RoGetActivationFactory (Address: 0x180109aa0)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
  • RoGetBufferMarshaler (Address: 0x180109ab8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x180109ae8)
  • WindowsCreateStringReference (Address: 0x180109ae0)
  • WindowsDeleteString (Address: 0x180109ad8)
  • WindowsDeleteStringBuffer (Address: 0x180109b08)
  • WindowsDuplicateString (Address: 0x180109b18)
  • WindowsGetStringRawBuffer (Address: 0x180109ad0)
  • WindowsIsStringEmpty (Address: 0x180109ac8)
  • WindowsPreallocateStringBuffer (Address: 0x180109b00)
  • WindowsPromoteStringBuffer (Address: 0x180109b10)
  • WindowsStringHasEmbeddedNull (Address: 0x180109b20)
  • WindowsTrimStringEnd (Address: 0x180109af8)
  • WindowsTrimStringStart (Address: 0x180109af0)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x180109b30)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180109bb8)
  • __CxxFrameHandler3 (Address: 0x180109bc0)
  • __CxxFrameHandler4 (Address: 0x180109c28)
  • __std_terminate (Address: 0x180109c20)
  • _CxxThrowException (Address: 0x180109bc8)
  • _o___std_exception_copy (Address: 0x180109c10)
  • _o___std_exception_destroy (Address: 0x180109bf8)
  • _o___std_type_info_destroy_list (Address: 0x180109bf0)
  • _o___stdio_common_vsnprintf_s (Address: 0x180109be0)
  • _o___stdio_common_vswprintf (Address: 0x180109bd0)
  • _o__callnewh (Address: 0x180109be8)
  • _o__cexit (Address: 0x180109bd8)
  • _o__configure_narrow_argv (Address: 0x180109c30)
  • _o__crt_atexit (Address: 0x180109c18)
  • _o__errno (Address: 0x180109c08)
  • _o__execute_onexit_table (Address: 0x180109c00)
  • _o__free_base (Address: 0x180109b40)
  • _o__initialize_narrow_environment (Address: 0x180109b48)
  • _o__initialize_onexit_table (Address: 0x180109b50)
  • _o__invalid_parameter_noinfo (Address: 0x180109b58)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180109b60)
  • _o__malloc_base (Address: 0x180109b68)
  • _o__purecall (Address: 0x180109b70)
  • _o__register_onexit_function (Address: 0x180109b78)
  • _o__seh_filter_dll (Address: 0x180109b80)
  • _o_free (Address: 0x180109b90)
  • _o_malloc (Address: 0x180109b98)
  • _o_realloc (Address: 0x180109ba0)
  • _o_terminate (Address: 0x180109ba8)
  • _o_towupper (Address: 0x180109bb0)
  • memcmp (Address: 0x180109c38)
  • memcpy (Address: 0x180109c40)
  • memmove (Address: 0x180109b88)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180109c50)
  • _initterm_e (Address: 0x180109c58)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180109c68)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180109c88)
  • EventSetInformation (Address: 0x180109c80)
  • EventUnregister (Address: 0x180109c78)
  • EventWriteTransfer (Address: 0x180109c90)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • CallWindowProcW (Address: 0x180109d18)
  • DefWindowProcW (Address: 0x180109cf0)
  • DestroyWindow (Address: 0x180109ce0)
  • GetAncestor (Address: 0x180109ca8)
  • GetCursorPos (Address: 0x180109cc8)
  • GetFocus (Address: 0x180109cb8)
  • GetForegroundWindow (Address: 0x180109cb0)
  • GetPropW (Address: 0x180109cf8)
  • GetWindowLongPtrW (Address: 0x180109d00)
  • GetWindowThreadProcessId (Address: 0x180109ca0)
  • RegisterClassExW (Address: 0x180109ce8)
  • RemovePropW (Address: 0x180109d08)
  • SetFocus (Address: 0x180109cc0)
  • SetPropW (Address: 0x180109cd8)
  • SetWindowLongPtrW (Address: 0x180109d10)
  • WindowFromPoint (Address: 0x180109cd0)
api-ms-win-security-base-l1-1-0.dll
  • EqualSid (Address: 0x180109d38)
  • GetAce (Address: 0x180109d40)
  • GetTokenInformation (Address: 0x180109d30)
  • RevertToSelf (Address: 0x180109d28)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x180109d50)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180109d60)
api-ms-win-shcore-scaling-l1-1-0.dll
  • GetScaleFactorForDevice (Address: 0x180109d70)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x180109d90)
  • SHTaskPoolQueueTask (Address: 0x180109d98)
combase.dll
  • (Address: 0x180109da8)
  • (Address: 0x180109db0)
  • (Address: 0x180109db8)
CoreMessaging.dll
  • CoreUICallCreateConversationHost (Address: 0x180109580)
  • CoreUICallCreateEndpointHost (Address: 0x180109590)
  • CoreUICallCreateEndpointHostWithSendPriority (Address: 0x180109598)
  • CoreUICallReceive (Address: 0x1801095a0)
  • CoreUICallSend (Address: 0x180109588)
  • CoreUICreate (Address: 0x180109578)
  • CoreUIOpenExisting (Address: 0x1801095a8)
CoreUIComponents.dll
  • CoreUIFactoryCreate (Address: 0x1801095b8)
msvcp_win.dll
  • _Cnd_broadcast (Address: 0x180109e38)
  • _Cnd_destroy_in_situ (Address: 0x180109e40)
  • _Cnd_init_in_situ (Address: 0x180109e30)
  • _Cnd_register_at_thread_exit (Address: 0x180109dc8)
  • _Cnd_unregister_at_thread_exit (Address: 0x180109e80)
  • _Cnd_wait (Address: 0x180109dd0)
  • _Mtx_destroy_in_situ (Address: 0x180109dd8)
  • _Mtx_init_in_situ (Address: 0x180109de8)
  • _Mtx_lock (Address: 0x180109e10)
  • _Mtx_unlock (Address: 0x180109e90)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180109e98)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180109e78)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180109e28)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180109e88)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180109e50)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180109e58)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180109df8)
  • ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x180109e60)
  • ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x180109e70)
  • ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z (Address: 0x180109e00)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x180109de0)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x180109e08)
  • ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z (Address: 0x180109e20)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x180109e48)
  • ?_XGetLastError@std@@YAXXZ (Address: 0x180109e68)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180109df0)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180109e18)
ntdll.dll
  • NtQuerySecurityObject (Address: 0x180109ef0)
  • NtQueryWnfStateData (Address: 0x180109f00)
  • NtSetSecurityObject (Address: 0x180109f10)
  • RtlAddAccessAllowedAce (Address: 0x180109f20)
  • RtlAddAce (Address: 0x180109f28)
  • RtlCaptureContext (Address: 0x180109eb0)
  • RtlCreateAcl (Address: 0x180109f40)
  • RtlCreateSecurityDescriptor (Address: 0x180109ee8)
  • RtlGetAce (Address: 0x180109f30)
  • RtlGetDaclSecurityDescriptor (Address: 0x180109ee0)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x180109ea8)
  • RtlIsMultiSessionSku (Address: 0x180109ed0)
  • RtlLengthSid (Address: 0x180109ec8)
  • RtlLookupFunctionEntry (Address: 0x180109eb8)
  • RtlPublishWnfStateData (Address: 0x180109f08)
  • RtlQueryInformationAcl (Address: 0x180109ed8)
  • RtlSetDaclSecurityDescriptor (Address: 0x180109f18)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x180109f38)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180109ef8)
  • RtlVirtualUnwind (Address: 0x180109ec0)
OLEAUT32.dll
  • SysFreeString (Address: 0x1801095c8)
PROPSYS.dll
  • PropVariantToBoolean (Address: 0x1801095e8)
  • PropVariantToDouble (Address: 0x1801095d8)
  • PropVariantToStringAlloc (Address: 0x1801095e0)
  • PropVariantToUInt64 (Address: 0x1801095f0)
SHCORE.dll
  • (Address: 0x180109600)
  • (Address: 0x180109608)
win32u.dll
  • NtCloseCompositionInputSink (Address: 0x180109f58)
  • NtCreateCompositionInputSink (Address: 0x180109f50)
  • NtQueryCompositionInputSinkLuid (Address: 0x180109f60)
  • NtUserUpdatePerUserSystemParameters (Address: 0x180109f68)