inputhost.dll

Description: InputHost

Version: 10.0.26100.8972

Architecture: 64-bit

Operating System: Windows NT

SHA256: 61bb8de9282a011249ca11881b6c196a

File Size: 1.9 MB

Uploaded At: Sept. 4, 2026, 7:56 p.m.

Views: 2

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 2601, Address: 0x38cb0)
(Ordinal: 2602, Address: 0x697c0)
(Ordinal: 2603, Address: 0x69830)
(Ordinal: 2604, Address: 0x39750)
(Ordinal: 2605, Address: 0x38ec0)
(Ordinal: 2606, Address: 0x69b00)
(Ordinal: 2607, Address: 0x698a0)
(Ordinal: 2608, Address: 0x69650)
(Ordinal: 2609, Address: 0x69990)
(Ordinal: 2610, Address: 0x69500)
CreateDragOperationPrivate (Ordinal: 2611, Address: 0x66ce0)
CreatePointerInputHost (Ordinal: 2612, Address: 0x66ce0)
CreateTouchInputHost (Ordinal: 2613, Address: 0x66ce0)
SetInputDeviceIndicatorState (Ordinal: 2614, Address: 0x66ce0)
SetInputFocus (Ordinal: 2615, Address: 0x53f90)
TouchInputHostCreate (Ordinal: 2616, Address: 0x66ce0)
CreateComboButtonProxy (Ordinal: 2617, Address: 0x68350)
CreateCursorClient (Ordinal: 2618, Address: 0x69b70)
CreateCursorManager (Ordinal: 2619, Address: 0x69b80)
CreateGenericInputHost (Ordinal: 2620, Address: 0x62aa0)
CreateHeatGripServiceClient (Ordinal: 2621, Address: 0x14b9f0)
CreateInputDeviceWatcher (Ordinal: 2622, Address: 0x4f850)
CreateInputHost (Ordinal: 2623, Address: 0x68a80)
CreateInputHostForProcess (Ordinal: 2624, Address: 0x5b2f0)
CreateInputSystemClientConnection (Ordinal: 2625, Address: 0x7ac70)
CreateMPCManagerClient (Ordinal: 2626, Address: 0x68a90)
CreateViewHitTestRequestClient (Ordinal: 2627, Address: 0x68c50)
DllCanUnloadNow (Ordinal: 2628, Address: 0x3ee60)
DllGetActivationFactory (Ordinal: 2629, Address: 0x320e0)
DllGetClassObject (Ordinal: 2630, Address: 0x7a790)
SetInputButtonEnabledOnIdle (Ordinal: 2631, Address: 0x68c60)
SetInputDeviceRepeatParameters (Ordinal: 2632, Address: 0x68ce0)
ViewHitTestClientCreate (Ordinal: 2633, Address: 0x68d70)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x7ffa11f28c48)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x7ffa11f28c68)
IsDebuggerPresent (Address: 0x7ffa11f28c60)
OutputDebugStringW (Address: 0x7ffa11f28c58)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x7ffa11f28c78)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x7ffa11f28c88)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x7ffa11f28cb8)
RaiseException (Address: 0x7ffa11f28ca0)
SetLastError (Address: 0x7ffa11f28ca8)
SetUnhandledExceptionFilter (Address: 0x7ffa11f28c98)
UnhandledExceptionFilter (Address: 0x7ffa11f28cb0)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x7ffa11f28cc8)

api-ms-win-core-errorhandling-l1-1-3.dll

TerminateProcessOnMemoryExhaustion (Address: 0x7ffa11f28cd8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x7ffa11f28ce8)
DuplicateHandle (Address: 0x7ffa11f28cf0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x7ffa11f28d08)
HeapAlloc (Address: 0x7ffa11f28d00)
HeapFree (Address: 0x7ffa11f28d10)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x7ffa11f28d28)
LocalFree (Address: 0x7ffa11f28d20)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x7ffa11f28d48)
InterlockedFlushSList (Address: 0x7ffa11f28d38)
InterlockedPushEntrySList (Address: 0x7ffa11f28d40)

api-ms-win-core-largeinteger-l1-1-0.dll

MulDiv (Address: 0x7ffa11f28d58)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x7ffa11f28d70)
FreeLibrary (Address: 0x7ffa11f28d90)
GetModuleFileNameA (Address: 0x7ffa11f28dc0)
GetModuleFileNameW (Address: 0x7ffa11f28d78)
GetModuleHandleExA (Address: 0x7ffa11f28db0)
GetModuleHandleExW (Address: 0x7ffa11f28d80)
GetModuleHandleW (Address: 0x7ffa11f28da8)
GetProcAddress (Address: 0x7ffa11f28db8)
LoadLibraryExW (Address: 0x7ffa11f28d68)
LoadResource (Address: 0x7ffa11f28d88)
LockResource (Address: 0x7ffa11f28d98)
SizeofResource (Address: 0x7ffa11f28da0)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x7ffa11f28dd0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x7ffa11f28de0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x7ffa11f28df8)
GetCurrentProcess (Address: 0x7ffa11f28e18)
GetCurrentProcessId (Address: 0x7ffa11f28df0)
GetCurrentThread (Address: 0x7ffa11f28e20)
GetCurrentThreadId (Address: 0x7ffa11f28e00)
OpenProcessToken (Address: 0x7ffa11f28e08)
TerminateProcess (Address: 0x7ffa11f28e10)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x7ffa11f28e30)
IsProcessorFeaturePresent (Address: 0x7ffa11f28e38)
OpenProcess (Address: 0x7ffa11f28e40)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x7ffa11f28e58)
QueryPerformanceFrequency (Address: 0x7ffa11f28e50)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x7ffa11f28e68)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x7ffa11f28e88)
RegCreateKeyExW (Address: 0x7ffa11f28e80)
RegGetValueW (Address: 0x7ffa11f28e98)
RegNotifyChangeKeyValue (Address: 0x7ffa11f28ea8)
RegOpenKeyExW (Address: 0x7ffa11f28e90)
RegQueryValueExW (Address: 0x7ffa11f28ea0)
RegSetValueExW (Address: 0x7ffa11f28e78)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureStackBackTrace (Address: 0x7ffa11f28eb8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x7ffa11f28ed0)
WideCharToMultiByte (Address: 0x7ffa11f28ec8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x7ffa11f28ef0)
AcquireSRWLockShared (Address: 0x7ffa11f28f38)
CreateEventExW (Address: 0x7ffa11f28f30)
CreateEventW (Address: 0x7ffa11f28f08)
CreateMutexExW (Address: 0x7ffa11f28ef8)
CreateSemaphoreExW (Address: 0x7ffa11f28f78)
DeleteCriticalSection (Address: 0x7ffa11f28f48)
EnterCriticalSection (Address: 0x7ffa11f28f88)
InitializeCriticalSection (Address: 0x7ffa11f28f70)
InitializeCriticalSectionAndSpinCount (Address: 0x7ffa11f28f28)
InitializeCriticalSectionEx (Address: 0x7ffa11f28ee0)
InitializeSRWLock (Address: 0x7ffa11f28f00)
LeaveCriticalSection (Address: 0x7ffa11f28f18)
OpenSemaphoreW (Address: 0x7ffa11f28f80)
ReleaseMutex (Address: 0x7ffa11f28f40)
ReleaseSemaphore (Address: 0x7ffa11f28f60)
ReleaseSRWLockExclusive (Address: 0x7ffa11f28ee8)
ReleaseSRWLockShared (Address: 0x7ffa11f28f58)
ResetEvent (Address: 0x7ffa11f28f10)
SetEvent (Address: 0x7ffa11f28f68)
WaitForSingleObject (Address: 0x7ffa11f28f50)
WaitForSingleObjectEx (Address: 0x7ffa11f28f20)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x7ffa11f28fc0)
InitOnceComplete (Address: 0x7ffa11f28fa0)
InitOnceExecuteOnce (Address: 0x7ffa11f28f98)
Sleep (Address: 0x7ffa11f28fa8)
WaitOnAddress (Address: 0x7ffa11f28fb0)
WakeByAddressAll (Address: 0x7ffa11f28fc8)
WakeByAddressSingle (Address: 0x7ffa11f28fb8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x7ffa11f28fd8)
GetTickCount (Address: 0x7ffa11f28fe0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x7ffa11f29040)
CloseThreadpoolWait (Address: 0x7ffa11f29038)
CloseThreadpoolWork (Address: 0x7ffa11f29030)
CreateThreadpoolTimer (Address: 0x7ffa11f29048)
CreateThreadpoolWait (Address: 0x7ffa11f28ff8)
CreateThreadpoolWork (Address: 0x7ffa11f29010)
FreeLibraryWhenCallbackReturns (Address: 0x7ffa11f29018)
SetThreadpoolTimer (Address: 0x7ffa11f29050)
SetThreadpoolWait (Address: 0x7ffa11f28ff0)
SubmitThreadpoolWork (Address: 0x7ffa11f29020)
WaitForThreadpoolTimerCallbacks (Address: 0x7ffa11f29008)
WaitForThreadpoolWaitCallbacks (Address: 0x7ffa11f29000)
WaitForThreadpoolWorkCallbacks (Address: 0x7ffa11f29028)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x7ffa11f29068)
EncodePointer (Address: 0x7ffa11f29060)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x7ffa11f29120)
__current_exception (Address: 0x7ffa11f29128)
__current_exception_context (Address: 0x7ffa11f29130)
__CxxFrameHandler3 (Address: 0x7ffa11f29138)
__CxxFrameHandler4 (Address: 0x7ffa11f29190)
__std_terminate (Address: 0x7ffa11f29188)
_CxxThrowException (Address: 0x7ffa11f29148)
_o___std_exception_copy (Address: 0x7ffa11f29180)
_o___std_exception_destroy (Address: 0x7ffa11f29178)
_o___std_type_info_destroy_list (Address: 0x7ffa11f29170)
_o___stdio_common_vswprintf (Address: 0x7ffa11f29168)
_o__callnewh (Address: 0x7ffa11f29160)
_o__cexit (Address: 0x7ffa11f29158)
_o__configure_narrow_argv (Address: 0x7ffa11f29150)
_o__crt_atexit (Address: 0x7ffa11f29140)
_o__errno (Address: 0x7ffa11f29078)
_o__execute_onexit_table (Address: 0x7ffa11f29080)
_o__free_base (Address: 0x7ffa11f29088)
_o__initialize_narrow_environment (Address: 0x7ffa11f29090)
_o__initialize_onexit_table (Address: 0x7ffa11f29098)
_o__invalid_parameter_noinfo (Address: 0x7ffa11f290a0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x7ffa11f290a8)
_o__malloc_base (Address: 0x7ffa11f290b0)
_o__purecall (Address: 0x7ffa11f290b8)
_o__register_onexit_function (Address: 0x7ffa11f290c0)
_o__seh_filter_dll (Address: 0x7ffa11f290c8)
_o__wcsicmp (Address: 0x7ffa11f290d8)
_o_abort (Address: 0x7ffa11f290e0)
_o_ceilf (Address: 0x7ffa11f290e8)
_o_free (Address: 0x7ffa11f290f0)
_o_iswspace (Address: 0x7ffa11f290f8)
_o_malloc (Address: 0x7ffa11f29100)
_o_realloc (Address: 0x7ffa11f29108)
_o_terminate (Address: 0x7ffa11f29110)
_o_towupper (Address: 0x7ffa11f29118)
memcmp (Address: 0x7ffa11f29198)
memcpy (Address: 0x7ffa11f291a0)
memmove (Address: 0x7ffa11f290d0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x7ffa11f291b8)
_initterm_e (Address: 0x7ffa11f291b0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x7ffa11f291c8)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x7ffa11f291e8)
EventSetInformation (Address: 0x7ffa11f291e0)
EventUnregister (Address: 0x7ffa11f291d8)
EventWriteTransfer (Address: 0x7ffa11f291f0)

api-ms-win-rtcore-ntuser-wmpointer-l1-2-0.dll

GetPointerFrameTimes (Address: 0x7ffa11f29200)

api-ms-win-security-base-l1-1-0.dll

DestroyPrivateObjectSecurity (Address: 0x7ffa11f29230)
EqualSid (Address: 0x7ffa11f29218)
GetAce (Address: 0x7ffa11f29228)
GetTokenInformation (Address: 0x7ffa11f29220)
RevertToSelf (Address: 0x7ffa11f29210)

combase.dll

(Address: 0x7ffa11f29240)
(Address: 0x7ffa11f29250)
(Address: 0x7ffa11f29248)

CoreMessaging.dll

CoreUICallCreateConversationHost (Address: 0x7ffa11f28c38)
CoreUICallCreateEndpointHost (Address: 0x7ffa11f28c18)
CoreUICallReceive (Address: 0x7ffa11f28c28)
CoreUICallSend (Address: 0x7ffa11f28c30)
CoreUICreate (Address: 0x7ffa11f28c20)
CoreUIOpenExisting (Address: 0x7ffa11f28c10)

msvcp_win.dll

_Cnd_broadcast (Address: 0x7ffa11f29298)
_Cnd_destroy_in_situ (Address: 0x7ffa11f29310)
_Cnd_init_in_situ (Address: 0x7ffa11f292e8)
_Cnd_register_at_thread_exit (Address: 0x7ffa11f292d8)
_Cnd_unregister_at_thread_exit (Address: 0x7ffa11f29270)
_Cnd_wait (Address: 0x7ffa11f29268)
_Mtx_destroy_in_situ (Address: 0x7ffa11f292c0)
_Mtx_init_in_situ (Address: 0x7ffa11f292a0)
_Mtx_lock (Address: 0x7ffa11f292b0)
_Mtx_unlock (Address: 0x7ffa11f29260)
_Query_perf_counter (Address: 0x7ffa11f29280)
_Query_perf_frequency (Address: 0x7ffa11f29278)
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x7ffa11f292d0)
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x7ffa11f29300)
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x7ffa11f292f8)
?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x7ffa11f292e0)
?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x7ffa11f29290)
?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x7ffa11f292b8)
?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x7ffa11f292a8)
?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x7ffa11f292c8)
?_Syserror_map@std@@YAPEBDH@Z (Address: 0x7ffa11f29308)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x7ffa11f29318)
?_Xbad_function_call@std@@YAXXZ (Address: 0x7ffa11f292f0)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x7ffa11f29320)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x7ffa11f29288)

ntdll.dll

NtQuerySecurityObject (Address: 0x7ffa11f29330)
NtQueryWnfStateData (Address: 0x7ffa11f29360)
NtSetSecurityObject (Address: 0x7ffa11f29388)
RtlAddAccessAllowedAce (Address: 0x7ffa11f29398)
RtlAddAce (Address: 0x7ffa11f293a0)
RtlCaptureContext (Address: 0x7ffa11f29338)
RtlCreateAcl (Address: 0x7ffa11f293b0)
RtlCreateSecurityDescriptor (Address: 0x7ffa11f293d0)
RtlGetAce (Address: 0x7ffa11f293a8)
RtlGetDaclSecurityDescriptor (Address: 0x7ffa11f293c8)
RtlGetDeviceFamilyInfoEnum (Address: 0x7ffa11f29370)
RtlIsMultiSessionSku (Address: 0x7ffa11f29378)
RtlIsThreadWithinLoaderCallout (Address: 0x7ffa11f29350)
RtlLengthSid (Address: 0x7ffa11f293b8)
RtlLookupFunctionEntry (Address: 0x7ffa11f29340)
RtlPublishWnfStateData (Address: 0x7ffa11f29380)
RtlQueryInformationAcl (Address: 0x7ffa11f293c0)
RtlSetDaclSecurityDescriptor (Address: 0x7ffa11f29390)
RtlSubscribeWnfStateChangeNotification (Address: 0x7ffa11f29368)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x7ffa11f29358)
RtlVirtualUnwind (Address: 0x7ffa11f29348)

win32u.dll

NtCloseCompositionInputSink (Address: 0x7ffa11f293f0)
NtCreateCompositionInputSink (Address: 0x7ffa11f293e0)
NtMinQSuspendInputProcessing (Address: 0x7ffa11f293e8)
NtQueryCompositionInputSinkLuid (Address: 0x7ffa11f293f8)
NtUserUpdatePerUserSystemParameters (Address: 0x7ffa11f29400)