AppResolver.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
#1 · 0x1ed90
DllCanUnloadNow
#2 · 0x2fe0
DllGetActivationFactory
#3 · 0x2d10
DllGetClassObject
#4 · 0x2ef0
No function matches your filter.
Imported DLLs & functions 340
ClosePackageInfo
0x18006ea50
GetPackageInfo
0x18006ea48
OpenPackageInfoByFullName
0x18006ea40
PackageFamilyNameFromFullName
0x18006ea38
GetStagedPackagePathByFullName2
0x18006ea60
DebugBreak
0x18006ea70
IsDebuggerPresent
0x18006ea78
OutputDebugStringW
0x18006ea80
DelayLoadFailureHook
0x18006ea90
ResolveDelayLoadedAPI
0x18006eaa0
GetLastError
0x18006eab8
RaiseException
0x18006ead0
SetLastError
0x18006eab0
SetUnhandledExceptionFilter
0x18006eac8
UnhandledExceptionFilter
0x18006eac0
CompareFileTime
0x18006eaf0
CreateDirectoryW
0x18006eae0
CreateFileW
0x18006eb08
DeleteFileW
0x18006eaf8
GetFileSizeEx
0x18006eb00
GetLongPathNameW
0x18006eae8
GetTempPathW
0x18006eb18
CopyFileW
0x18006eb28
CloseHandle
0x18006eb38
GetProcessHeap
0x18006eb50
HeapAlloc
0x18006eb60
HeapFree
0x18006eb48
HeapReAlloc
0x18006eb58
LocalAlloc
0x18006eb80
LocalFree
0x18006eb78
LocalReAlloc
0x18006eb70
InitializeSListHead
0x18006eba8
MulDiv
0x18006ebb8
DisableThreadLibraryCalls
0x18006ebe8
GetModuleFileNameA
0x18006ebf0
GetModuleFileNameW
0x18006ebd8
GetModuleHandleExW
0x18006ebe0
GetModuleHandleW
0x18006ebc8
GetProcAddress
0x18006ebd0
FormatMessageW
0x18006ec10
GetThreadPreferredUILanguages
0x18006ec00
GetUserDefaultLCID
0x18006ec08
GetUserGeoID
0x18006ec18
GetUserDefaultUILanguage
0x18006ec28
CreateFileMappingW
0x18006ec40
MapViewOfFile
0x18006ec38
ReadProcessMemory
0x18006ec48
UnmapViewOfFile
0x18006ec50
PrefetchVirtualMemory
0x18006ec60
PathAllocCombine
0x18006ec98
PathCchAppend
0x18006ec88
PathCchCombine
0x18006ec80
PathCchFindExtension
0x18006ec78
PathCchRemoveBackslash
0x18006ec70
PathCchRemoveExtension
0x18006ec90
PathCchRemoveFileSpec
0x18006eca0
ExpandEnvironmentStringsW
0x18006ecb0
GetCurrentProcess
0x18006ecf0
GetCurrentProcessId
0x18006ecc8
GetCurrentThread
0x18006ece8
GetCurrentThreadId
0x18006ecd0
GetProcessTimes
0x18006ecc0
OpenProcessToken
0x18006ece0
OpenThreadToken
0x18006ed00
ProcessIdToSessionId
0x18006ecd8
TerminateProcess
0x18006ecf8
IsProcessorFeaturePresent
0x18006ed10
OpenProcess
0x18006ed18
QueryPerformanceCounter
0x18006ed28
QueryFullProcessImageNameW
0x18006ed38
RegCloseKey
0x18006ed58
RegCreateKeyExW
0x18006ed78
RegDeleteValueW
0x18006ed70
RegEnumValueW
0x18006ed80
RegGetValueW
0x18006ed50
RegOpenKeyExW
0x18006ed48
RegQueryInfoKeyW
0x18006ed88
RegQueryValueExW
0x18006ed68
RegSetValueExW
0x18006ed60
RegSetKeyValueW
0x18006ed98
RtlCaptureContext
0x18006edb8
RtlLookupFunctionEntry
0x18006eda8
RtlVirtualUnwind
0x18006edb0
CompareStringOrdinal
0x18006edc8
lstrlenW
0x18006edd8
AcquireSRWLockExclusive
0x18006ee88
AcquireSRWLockShared
0x18006ee78
CreateEventExW
0x18006ee40
CreateEventW
0x18006ee70
CreateMutexExW
0x18006ee08
CreateSemaphoreExW
0x18006ee00
DeleteCriticalSection
0x18006ee20
EnterCriticalSection
0x18006ee18
InitializeCriticalSection
0x18006ee58
InitializeCriticalSectionAndSpinCount
0x18006ee28
InitializeCriticalSectionEx
0x18006ee38
InitializeSRWLock
0x18006ede8
LeaveCriticalSection
0x18006ee10
OpenEventW
0x18006ee98
OpenSemaphoreW
0x18006edf0
ReleaseMutex
0x18006ee68
ReleaseSemaphore
0x18006edf8
ReleaseSRWLockExclusive
0x18006ee90
ReleaseSRWLockShared
0x18006ee80
ResetEvent
0x18006ee60
SetEvent
0x18006ee48
WaitForSingleObject
0x18006ee50
WaitForSingleObjectEx
0x18006ee30
InitOnceBeginInitialize
0x18006eeb0
InitOnceComplete
0x18006eea8
InitOnceExecuteOnce
0x18006eeb8
GetSystemTimeAsFileTime
0x18006eec8
CloseThreadpoolTimer
0x18006eed8
CreateThreadpoolTimer
0x18006eee8
SetThreadpoolTimer
0x18006eef0
WaitForThreadpoolTimerCallbacks
0x18006eee0
RoOriginateError
0x18006ef20
RoOriginateErrorW
0x18006ef18
SetRestrictedErrorInfo
0x18006ef28
RoGetMatchingRestrictedErrorInfo
0x18006ef38
RoActivateInstance
0x18006ef50
RoGetActivationFactory
0x18006ef48
WindowsCreateString
0x18006ef90
WindowsCreateStringReference
0x18006ef70
WindowsDeleteString
0x18006ef60
WindowsDuplicateString
0x18006ef68
WindowsGetStringRawBuffer
0x18006ef80
WindowsIsStringEmpty
0x18006ef88
WindowsStringHasEmbeddedNull
0x18006ef78
ceilf
0x18006efa0
__C_specific_handler
0x18006f010
__CxxFrameHandler3
0x18006f060
__CxxFrameHandler4
0x18006f0c8
__std_terminate
0x18006f0c0
_CxxThrowException
0x18006f068
_o___std_exception_copy
0x18006f0b8
_o___std_exception_destroy
0x18006f0b0
_o___std_type_info_destroy_list
0x18006f0a8
_o___stdio_common_vsnprintf_s
0x18006f080
_o___stdio_common_vswprintf
0x18006f078
_o___stdio_common_vswscanf
0x18006f070
_o__callnewh
0x18006f048
_o__cexit
0x18006f040
_o__configure_narrow_argv
0x18006f038
_o__crt_atexit
0x18006f030
_o__errno
0x18006f028
_o__execute_onexit_table
0x18006f020
_o__get_errno
0x18006f018
_o__initialize_narrow_environment
0x18006f0a0
_o__initialize_onexit_table
0x18006f098
_o__invalid_parameter_noinfo
0x18006f090
_o__invalid_parameter_noinfo_noreturn
0x18006f088
_o__itow_s
0x18006efb0
_o__purecall
0x18006efb8
_o__register_onexit_function
0x18006efc0
_o__seh_filter_dll
0x18006efc8
_o__set_errno
0x18006efd0
_o__ui64tow_s
0x18006efd8
_o__wcstoui64
0x18006efe0
_o__wtoi
0x18006eff0
_o_free
0x18006eff8
_o_malloc
0x18006f000
_o_towupper
0x18006f008
memcmp
0x18006f0d0
memcpy
0x18006f0d8
memmove
0x18006efe8
wcschr
0x18006f050
wcsrchr
0x18006f058
EventActivityIdControl
0x18006f140
EventRegister
0x18006f120
EventSetInformation
0x18006f128
EventUnregister
0x18006f130
EventWriteTransfer
0x18006f138
DuplicateTokenEx
0x18006f178
GetAce
0x18006f160
GetFileSecurityW
0x18006f150
GetSecurityDescriptorSacl
0x18006f158
GetSidSubAuthority
0x18006f168
GetTokenInformation
0x18006f170
CapabilityCheck
0x18006f188
SHCreateStreamOnFileW
0x18006f198
ILClone
0x18006f1a8
ILCloneFirst
0x18006f1b8
ILCombine
0x18006f208
ILFindLastID
0x18006f1c8
ILFree
0x18006f1d8
ILGetSize
0x18006f210
ILIsEqual
0x18006f1f8
ILIsParent
0x18006f1f0
SHBindToFolderIDListParentEx
0x18006f1e8
SHBindToObject
0x18006f220
SHBindToParent
0x18006f1c0
SHCreateItemFromIDList
0x18006f1d0
SHCreateItemFromParsingName
0x18006f1e0
SHCreateItemWithParent
0x18006f1b0
SHGetIDListFromObject
0x18006f218
SHParseDisplayName
0x18006f200
GetUserLanguages
0x18006e6e0
CreateCompatibleDC
0x18006e700
CreateDIBSection
0x18006e6f8
DeleteDC
0x18006e718
DeleteObject
0x18006e720
GdiAlphaBlend
0x18006e710
GetObjectW
0x18006e6f0
SelectObject
0x18006e728
StretchDIBits
0x18006e708
?_Xlength_error@std@@YAXPEBD@Z
0x18006f230
ntdll.dll
14
NtQueryInformationProcess
0x18006f240
NtQueryInformationToken
0x18006f288
NtQueryWnfStateData
0x18006f290
RtlAcquireSRWLockExclusive
0x18006f2a0
RtlAllocateHeap
0x18006f2a8
RtlCompareUnicodeString
0x18006f278
RtlFreeHeap
0x18006f258
RtlInitUnicodeString
0x18006f260
RtlNtStatusToDosError
0x18006f248
RtlNtStatusToDosErrorNoTeb
0x18006f280
RtlPublishWnfStateData
0x18006f250
RtlReleaseSRWLockExclusive
0x18006f270
RtlSubscribeWnfStateChangeNotification
0x18006f298
RtlUnsubscribeWnfNotificationWaitForCompletion
0x18006f268
ole32.dll
20
CoAllowSetForegroundWindow
0x18006f2b8
CoCreateFreeThreadedMarshaler
0x18006f318
CoCreateGuid
0x18006f320
CoCreateInstance
0x18006f2d8
CoGetCallContext
0x18006f308
CoGetInterfaceAndReleaseStream
0x18006f340
CoGetMalloc
0x18006f2f8
CoInitializeEx
0x18006f2c0
CoMarshalInterThreadInterfaceInStream
0x18006f330
CoReleaseMarshalData
0x18006f338
CoTaskMemAlloc
0x18006f2e8
CoTaskMemFree
0x18006f2e0
CoTaskMemRealloc
0x18006f2f0
CoUninitialize
0x18006f2c8
CoWaitForMultipleHandles
0x18006f300
CreateBindCtx
0x18006f348
PropVariantClear
0x18006f2d0
ReleaseStgMedium
0x18006f350
RoGetAgileReference
0x18006f328
StringFromGUID2
0x18006f310
SHCORE.dll
24
0x18006e758
0x18006e778
0x18006e780
0x18006e790
0x18006e798
0x18006e7a0
0x18006e7a8
0x18006e7c0
0x18006e7d8
0x18006e7e8
0x18006e7f0
GetScaleFactorForDevice
0x18006e750
IStream_Read
0x18006e738
IStream_Size
0x18006e760
IUnknown_GetSite
0x18006e7c8
IUnknown_QueryService
0x18006e740
IUnknown_Set
0x18006e7d0
SHAnsiToUnicode
0x18006e788
SHGetValueW
0x18006e770
SHQueryValueExW
0x18006e7b0
SHSetValueW
0x18006e768
SHStrDupW
0x18006e7e0
SHTaskPoolGetUniqueContext
0x18006e7b8
SHTaskPoolQueueTask
0x18006e748
SHLWAPI.dll
34
0x18006e840
0x18006e848
0x18006e870
0x18006e898
0x18006e8a0
0x18006e8b8
0x18006e8d8
0x18006e8e0
0x18006e8e8
0x18006e8f0
0x18006e8f8
0x18006e908
AssocCreate
0x18006e818
PathCommonPrefixW
0x18006e850
PathFileExistsW
0x18006e8c0
PathFindExtensionW
0x18006e858
PathFindFileNameW
0x18006e8a8
PathGetArgsW
0x18006e880
PathGetDriveNumberW
0x18006e820
PathIsFileSpecW
0x18006e8b0
PathIsPrefixW
0x18006e860
PathIsRelativeW
0x18006e830
PathIsUNCW
0x18006e828
PathIsURLW
0x18006e838
PathParseIconLocationW
0x18006e890
PathRemoveBlanksW
0x18006e878
PathRemoveExtensionW
0x18006e900
PathRemoveFileSpecW
0x18006e810
PathUnquoteSpacesW
0x18006e868
SHStrDupA
0x18006e8d0
StrChrW
0x18006e8c8
StrCmpW
0x18006e808
StrDupW
0x18006e800
StrStrIW
0x18006e888
SLC.dll
1
SLGetWindowsInformationDWORD
0x18006e918
USER32.dll
27
CharUpperBuffW
0x18006e998
CopyImage
0x18006e9a8
CreateIconIndirect
0x18006e9c0
CreatePopupMenu
0x18006e988
DefWindowProcW
0x18006e948
DestroyIcon
0x18006e9c8
DestroyMenu
0x18006e9e8
DestroyWindow
0x18006e968
FindWindowW
0x18006e938
GetDC
0x18006e9d8
GetMenuDefaultItem
0x18006e9f0
GetSysColor
0x18006e9b0
GetWindowLongPtrW
0x18006e950
GetWindowThreadProcessId
0x18006e9a0
InsertMenuW
0x18006e980
KillTimer
0x18006e970
LoadStringA
0x18006e990
LoadStringW
0x18006e9e0
MonitorFromPoint
0x18006e928
PostMessageW
0x18006e930
RegisterClipboardFormatW
0x18006e9f8
ReleaseDC
0x18006e9d0
SendNotifyMessageW
0x18006e958
SetTimer
0x18006e960
SetWindowLongPtrW
0x18006e940
SetWindowTextW
0x18006e978
SystemParametersInfoW
0x18006e9b8
GetProfileType
0x18006ea08
No function matches your filter.