cldapi.dll

Description: Cloud API user mode API

Version: 10.0.19041.5678

Architecture: 32-bit

Operating System: Windows NT

SHA256: 4154fa8af2e5fed3cef2303e1853ad11

File Size: 97.0 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CfAbortOperation (Ordinal: 1, Address: 0x4050)
CfCloseAppPolicy (Ordinal: 2, Address: 0x46c0)
CfCloseHandle (Ordinal: 3, Address: 0x5180)
CfConnectSyncRoot (Ordinal: 4, Address: 0x8d70)
CfConvertToPlaceholder (Ordinal: 5, Address: 0xd010)
CfCreatePlaceholders (Ordinal: 6, Address: 0xcdd0)
CfDehydratePlaceholder (Ordinal: 7, Address: 0xd800)
CfDehydratePlaceholderEx (Ordinal: 8, Address: 0xd6b0)
CfDisconnectSyncRoot (Ordinal: 9, Address: 0x9760)
CfEnumAppPolicy (Ordinal: 10, Address: 0x46e0)
CfExecute (Ordinal: 11, Address: 0xc000)
CfGetCorrelationVector (Ordinal: 12, Address: 0xdba0)
CfGetLastSyncStatus (Ordinal: 13, Address: 0x45e0)
CfGetPlaceholderInfo (Ordinal: 14, Address: 0xdc80)
CfGetPlaceholderRangeInfo (Ordinal: 15, Address: 0xdf30)
CfGetPlaceholderStateFromAttributeTag (Ordinal: 16, Address: 0x13100)
CfGetPlaceholderStateFromFileInfo (Ordinal: 17, Address: 0x13120)
CfGetPlaceholderStateFromFindData (Ordinal: 18, Address: 0x13170)
CfGetPlatformInfo (Ordinal: 19, Address: 0xdc30)
CfGetSyncRootInfoByHandle (Ordinal: 20, Address: 0xdda0)
CfGetSyncRootInfoByPath (Ordinal: 21, Address: 0xdea0)
CfGetTransferKey (Ordinal: 22, Address: 0xda50)
CfGetWin32HandleFromProtectedHandle (Ordinal: 23, Address: 0x5140)
CfHydratePlaceholder (Ordinal: 24, Address: 0xd5e0)
CfLockProperties (Ordinal: 25, Address: 0xe0c0)
CfOpenAppPolicy (Ordinal: 26, Address: 0x4640)
CfOpenFileWithOplock (Ordinal: 27, Address: 0x4c30)
CfOpenProgressEvent (Ordinal: 28, Address: 0x3650)
CfQueryProgress (Ordinal: 29, Address: 0x36f0)
CfQuerySyncProviderStatus (Ordinal: 30, Address: 0xc830)
CfReferenceProtectedHandle (Ordinal: 31, Address: 0x5110)
CfRegisterSyncRoot (Ordinal: 32, Address: 0x7b50)
CfReleaseProtectedHandle (Ordinal: 33, Address: 0x5160)
CfReleaseTransferKey (Ordinal: 34, Address: 0xdac0)
CfReportProviderProgress2 (Ordinal: 35, Address: 0x3b10)
CfReportProviderProgress (Ordinal: 36, Address: 0x3ad0)
CfReportSyncStatus (Ordinal: 37, Address: 0xc8d0)
CfRetrieveProperties (Ordinal: 38, Address: 0xe230)
CfRevertPlaceholder (Ordinal: 39, Address: 0xd530)
CfSetAppPolicy (Ordinal: 40, Address: 0x48c0)
CfSetCorrelationVector (Ordinal: 41, Address: 0xdae0)
CfSetInSyncState (Ordinal: 42, Address: 0xd940)
CfSetPinState (Ordinal: 43, Address: 0xd830)
CfStoreProperties (Ordinal: 44, Address: 0xe1c0)
CfUnlockProperties (Ordinal: 45, Address: 0xe150)
CfUnregisterSyncRoot (Ordinal: 46, Address: 0x8b00)
CfUpdatePlaceholder (Ordinal: 47, Address: 0xd1b0)
CfUpdateSyncProviderStatus (Ordinal: 48, Address: 0xc220)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x10017010)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x10017018)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10017020)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1001702c)
SetLastError (Address: 0x10017030)
SetUnhandledExceptionFilter (Address: 0x10017028)
UnhandledExceptionFilter (Address: 0x10017034)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x10017040)
GetFileSizeEx (Address: 0x10017048)
GetVolumeInformationW (Address: 0x1001703c)
GetVolumePathNameW (Address: 0x10017044)

api-ms-win-core-file-l1-2-0.dll

GetVolumeNameForVolumeMountPointW (Address: 0x10017050)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x10017058)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10017060)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10017070)
HeapAlloc (Address: 0x1001706c)
HeapFree (Address: 0x10017068)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x10017078)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x10017080)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x10017090)
DeviceIoControl (Address: 0x1001708c)
GetOverlappedResult (Address: 0x10017094)
GetQueuedCompletionStatus (Address: 0x10017088)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100170a0)
GetModuleFileNameA (Address: 0x1001709c)
GetModuleHandleExW (Address: 0x100170a4)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x100170c0)
GetCurrentProcess (Address: 0x100170ac)
GetCurrentProcessId (Address: 0x100170c8)
GetCurrentThread (Address: 0x100170b4)
GetCurrentThreadId (Address: 0x100170d0)
GetExitCodeThread (Address: 0x100170d4)
OpenThread (Address: 0x100170b8)
ResumeThread (Address: 0x100170cc)
SetThreadPriority (Address: 0x100170c4)
TerminateProcess (Address: 0x100170b0)
TerminateThread (Address: 0x100170bc)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x100170dc)
OpenProcess (Address: 0x100170e0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100170e8)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x100170f0)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x100170f8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x10017108)
RegEnumKeyExW (Address: 0x10017104)
RegOpenKeyExW (Address: 0x1001710c)
RegQueryValueExW (Address: 0x10017110)
RegSetValueExW (Address: 0x10017100)

api-ms-win-core-string-l2-1-0.dll

CharLowerW (Address: 0x10017118)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10017120)
AcquireSRWLockShared (Address: 0x1001715c)
CreateEventW (Address: 0x10017134)
DeleteCriticalSection (Address: 0x1001713c)
EnterCriticalSection (Address: 0x1001714c)
InitializeCriticalSection (Address: 0x10017128)
InitializeSRWLock (Address: 0x10017144)
LeaveCriticalSection (Address: 0x10017124)
OpenEventW (Address: 0x10017154)
ReleaseSRWLockExclusive (Address: 0x10017158)
ReleaseSRWLockShared (Address: 0x10017150)
ResetEvent (Address: 0x1001712c)
SetEvent (Address: 0x10017130)
SetWaitableTimer (Address: 0x10017140)
TryAcquireSRWLockExclusive (Address: 0x10017148)
WaitForSingleObject (Address: 0x10017138)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x10017164)

api-ms-win-core-synch-l1-2-1.dll

CreateWaitableTimerW (Address: 0x1001716c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x10017184)
GetSystemTimeAsFileTime (Address: 0x10017180)
GetTickCount (Address: 0x1001717c)
GetWindowsDirectoryW (Address: 0x10017174)
GlobalMemoryStatusEx (Address: 0x10017178)

api-ms-win-core-sysinfo-l2-1-0.dll

GetUserNameW (Address: 0x1001718c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x10017198)
CloseThreadpoolWork (Address: 0x100171a4)
CreateThreadpoolTimer (Address: 0x100171a0)
CreateThreadpoolWork (Address: 0x100171a8)
SetThreadpoolTimer (Address: 0x1001719c)
SubmitThreadpoolWork (Address: 0x100171ac)
WaitForThreadpoolTimerCallbacks (Address: 0x10017194)

api-ms-win-crt-private-l1-1-0.dll

_except_handler4_common (Address: 0x100171d8)
_o___std_type_info_destroy_list (Address: 0x100171dc)
_o__cexit (Address: 0x100171e0)
_o__configure_narrow_argv (Address: 0x100171b4)
_o__execute_onexit_table (Address: 0x100171b8)
_o__initialize_narrow_environment (Address: 0x100171bc)
_o__initialize_onexit_table (Address: 0x100171c0)
_o__seh_filter_dll (Address: 0x100171c4)
_o__wcsnicmp (Address: 0x100171cc)
_o_toupper (Address: 0x100171d0)
_o_wcscpy_s (Address: 0x100171d4)
memcmp (Address: 0x100171e4)
memcpy (Address: 0x100171e8)
memmove (Address: 0x100171c8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100171f4)
_initterm_e (Address: 0x100171f0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100171fc)
wcsncmp (Address: 0x10017200)
wcsnlen (Address: 0x10017204)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x10017210)
EventRegister (Address: 0x1001720c)
EventSetInformation (Address: 0x10017218)
EventUnregister (Address: 0x10017214)
EventWriteTransfer (Address: 0x1001721c)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x10017228)
BCryptCreateHash (Address: 0x10017230)
BCryptDestroyHash (Address: 0x1001723c)
BCryptFinishHash (Address: 0x1001722c)
BCryptGetProperty (Address: 0x10017238)
BCryptHashData (Address: 0x10017224)
BCryptOpenAlgorithmProvider (Address: 0x10017234)

FLTLIB.DLL

FilterConnectCommunicationPort (Address: 0x10017000)
FilterGetMessage (Address: 0x10017008)
FilterSendMessage (Address: 0x10017004)

ntdll.dll

NtClose (Address: 0x10017284)
NtCreateFile (Address: 0x10017264)
NtQueryDirectoryFile (Address: 0x10017288)
NtQuerySystemTime (Address: 0x1001729c)
NtSetInformationFile (Address: 0x10017258)
RtlAcquireSRWLockExclusive (Address: 0x10017270)
RtlAcquireSRWLockShared (Address: 0x10017248)
RtlComputeCrc32 (Address: 0x10017244)
RtlDeleteElementGenericTableAvl (Address: 0x10017280)
RtlDosLongPathNameToNtPathName_U_WithStatus (Address: 0x10017294)
RtlEnumerateGenericTableAvl (Address: 0x100172ac)
RtlEqualUnicodeString (Address: 0x10017278)
RtlExtendCorrelationVector (Address: 0x10017250)
RtlFreeUnicodeString (Address: 0x1001727c)
RtlIncrementCorrelationVector (Address: 0x10017254)
RtlInitializeGenericTableAvl (Address: 0x10017290)
RtlInitializeSRWLock (Address: 0x1001728c)
RtlInitUnicodeString (Address: 0x1001725c)
RtlInsertElementGenericTableAvl (Address: 0x1001726c)
RtlIsPartialPlaceholder (Address: 0x1001724c)
RtlLookupElementGenericTableAvl (Address: 0x100172b0)
RtlNtStatusToDosError (Address: 0x10017298)
RtlNumberGenericTableElementsAvl (Address: 0x100172a4)
RtlPrefixUnicodeString (Address: 0x100172a0)
RtlReleaseSRWLockExclusive (Address: 0x10017274)
RtlReleaseSRWLockShared (Address: 0x100172a8)
RtlSetThreadPlaceholderCompatibilityMode (Address: 0x10017260)
RtlValidateCorrelationVector (Address: 0x10017268)