CloudExperienceHostCommon.dll

Description: CloudExperienceHostCommon

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6456

Architecture: 32-bit

Operating System: Windows NT

SHA256: 523ddc85e5ae440bfe8b94b9172ddeca

File Size: 1.0 MB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1a010)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x19fd0)
  • DllGetClassObject (Ordinal: 3, Address: 0x19ff0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-1.dll
  • ParseApplicationUserModelId (Address: 0x100de03c)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x100de044)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100de04c)
  • IsDebuggerPresent (Address: 0x100de050)
  • OutputDebugStringW (Address: 0x100de054)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x100de05c)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x100de064)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100de078)
  • RaiseException (Address: 0x100de074)
  • SetLastError (Address: 0x100de06c)
  • SetUnhandledExceptionFilter (Address: 0x100de07c)
  • UnhandledExceptionFilter (Address: 0x100de070)
api-ms-win-core-file-l1-1-0.dll
  • DeleteFileW (Address: 0x100de084)
  • FindClose (Address: 0x100de088)
  • FindFirstFileW (Address: 0x100de090)
  • FindNextFileW (Address: 0x100de08c)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x100de098)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x100de0a0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x100de0ac)
  • HeapAlloc (Address: 0x100de0b0)
  • HeapFree (Address: 0x100de0a8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x100de0b8)
  • LocalFree (Address: 0x100de0bc)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x100de0c4)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x100de0ec)
  • FindResourceExW (Address: 0x100de0d8)
  • FindStringOrdinal (Address: 0x100de0f8)
  • FreeLibrary (Address: 0x100de0d4)
  • FreeResource (Address: 0x100de0dc)
  • GetModuleFileNameA (Address: 0x100de0f4)
  • GetModuleFileNameW (Address: 0x100de0d0)
  • GetModuleHandleExW (Address: 0x100de0cc)
  • GetModuleHandleW (Address: 0x100de0e0)
  • GetProcAddress (Address: 0x100de0f0)
  • LoadResource (Address: 0x100de0e8)
  • LockResource (Address: 0x100de0e4)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x100de100)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x100de110)
  • GetFileMUIPath (Address: 0x100de10c)
  • GetGeoInfoW (Address: 0x100de118)
  • GetUILanguageInfo (Address: 0x100de120)
  • GetUserGeoID (Address: 0x100de114)
  • LocaleNameToLCID (Address: 0x100de108)
  • ResolveLocaleName (Address: 0x100de11c)
api-ms-win-core-localization-l1-2-3.dll
  • EnumSystemGeoNames (Address: 0x100de12c)
  • GetGeoInfoEx (Address: 0x100de128)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCombine (Address: 0x100de138)
  • PathCchAppend (Address: 0x100de134)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100de140)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100de154)
  • GetCurrentProcessId (Address: 0x100de160)
  • GetCurrentThread (Address: 0x100de14c)
  • GetCurrentThreadId (Address: 0x100de148)
  • GetProcessId (Address: 0x100de15c)
  • OpenProcessToken (Address: 0x100de150)
  • OpenThreadToken (Address: 0x100de158)
  • TerminateProcess (Address: 0x100de164)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x100de16c)
  • IsProcessorFeaturePresent (Address: 0x100de174)
  • OpenProcess (Address: 0x100de170)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100de17c)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x100de184)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100de19c)
  • RegDeleteValueW (Address: 0x100de190)
  • RegEnumValueW (Address: 0x100de194)
  • RegGetValueW (Address: 0x100de198)
  • RegOpenKeyExW (Address: 0x100de1a0)
  • RegSetValueExW (Address: 0x100de18c)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x100de1a8)
  • CompareStringW (Address: 0x100de1ac)
  • MultiByteToWideChar (Address: 0x100de1b0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100de210)
  • AcquireSRWLockShared (Address: 0x100de1f8)
  • CreateEventExW (Address: 0x100de1f4)
  • CreateEventW (Address: 0x100de200)
  • CreateMutexExW (Address: 0x100de1fc)
  • CreateSemaphoreExW (Address: 0x100de1b8)
  • DeleteCriticalSection (Address: 0x100de1d4)
  • EnterCriticalSection (Address: 0x100de1d8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100de1e8)
  • InitializeCriticalSectionEx (Address: 0x100de1d0)
  • InitializeSRWLock (Address: 0x100de1c8)
  • LeaveCriticalSection (Address: 0x100de1dc)
  • OpenEventW (Address: 0x100de1ec)
  • OpenSemaphoreW (Address: 0x100de208)
  • ReleaseMutex (Address: 0x100de1e0)
  • ReleaseSemaphore (Address: 0x100de1c4)
  • ReleaseSRWLockExclusive (Address: 0x100de1f0)
  • ReleaseSRWLockShared (Address: 0x100de204)
  • ResetEvent (Address: 0x100de1cc)
  • SetEvent (Address: 0x100de1bc)
  • WaitForMultipleObjectsEx (Address: 0x100de1c0)
  • WaitForSingleObject (Address: 0x100de1e4)
  • WaitForSingleObjectEx (Address: 0x100de20c)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x100de21c)
  • InitOnceComplete (Address: 0x100de220)
  • InitOnceExecuteOnce (Address: 0x100de218)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x100de228)
  • GetSystemTimeAsFileTime (Address: 0x100de230)
  • GetTickCount (Address: 0x100de234)
  • GetTickCount64 (Address: 0x100de22c)
  • GetVersionExW (Address: 0x100de238)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100de24c)
  • CreateThreadpoolTimer (Address: 0x100de248)
  • SetThreadpoolTimer (Address: 0x100de240)
  • WaitForThreadpoolTimerCallbacks (Address: 0x100de244)
api-ms-win-core-timezone-l1-1-0.dll
  • GetTimeZoneInformation (Address: 0x100de254)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100de25c)
  • EncodePointer (Address: 0x100de260)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x100de270)
  • RoOriginateError (Address: 0x100de274)
  • RoOriginateErrorW (Address: 0x100de26c)
  • RoTransformError (Address: 0x100de268)
  • SetRestrictedErrorInfo (Address: 0x100de278)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x100de288)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x100de284)
  • RoReportFailedDelegate (Address: 0x100de280)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x100de294)
  • RoGetActivationFactory (Address: 0x100de290)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x100de2b8)
  • WindowsCreateString (Address: 0x100de2a8)
  • WindowsCreateStringReference (Address: 0x100de2a0)
  • WindowsDeleteString (Address: 0x100de2a4)
  • WindowsDuplicateString (Address: 0x100de29c)
  • WindowsGetStringRawBuffer (Address: 0x100de2ac)
  • WindowsIsStringEmpty (Address: 0x100de2b0)
  • WindowsStringHasEmbeddedNull (Address: 0x100de2b4)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x100de35c)
  • __std_terminate (Address: 0x100de358)
  • _CxxThrowException (Address: 0x100de328)
  • _except_handler4_common (Address: 0x100de324)
  • _o___std_exception_copy (Address: 0x100de354)
  • _o___std_exception_destroy (Address: 0x100de350)
  • _o___std_type_info_destroy_list (Address: 0x100de34c)
  • _o___stdio_common_vsnprintf_s (Address: 0x100de344)
  • _o___stdio_common_vswprintf (Address: 0x100de340)
  • _o__callnewh (Address: 0x100de32c)
  • _o__cexit (Address: 0x100de360)
  • _o__configure_narrow_argv (Address: 0x100de338)
  • _o__crt_atexit (Address: 0x100de330)
  • _o__dtest (Address: 0x100de348)
  • _o__errno (Address: 0x100de33c)
  • _o__execute_onexit_table (Address: 0x100de334)
  • _o__get_errno (Address: 0x100de2c0)
  • _o__initialize_narrow_environment (Address: 0x100de2c4)
  • _o__initialize_onexit_table (Address: 0x100de2c8)
  • _o__invalid_parameter_noinfo (Address: 0x100de2cc)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x100de2d0)
  • _o__purecall (Address: 0x100de2d4)
  • _o__register_onexit_function (Address: 0x100de2d8)
  • _o__seh_filter_dll (Address: 0x100de2dc)
  • _o__set_errno (Address: 0x100de2e0)
  • _o__wcsicmp (Address: 0x100de2e8)
  • _o_ceil (Address: 0x100de2ec)
  • _o_free (Address: 0x100de2f0)
  • _o_localeconv (Address: 0x100de2f4)
  • _o_malloc (Address: 0x100de2f8)
  • _o_realloc (Address: 0x100de2fc)
  • _o_strtod (Address: 0x100de300)
  • _o_strtoll (Address: 0x100de304)
  • _o_strtoull (Address: 0x100de308)
  • _o_terminate (Address: 0x100de30c)
  • _o_tolower (Address: 0x100de310)
  • _o_towlower (Address: 0x100de314)
  • _o_wcsncpy_s (Address: 0x100de318)
  • _o_wcstok (Address: 0x100de31c)
  • _o_wcstoul (Address: 0x100de320)
  • memcmp (Address: 0x100de364)
  • memcpy (Address: 0x100de368)
  • memmove (Address: 0x100de2e4)
  • wcsrchr (Address: 0x100de36c)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x100de378)
  • _initterm_e (Address: 0x100de374)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x100de380)
  • wcscspn (Address: 0x100de384)
  • wcsnlen (Address: 0x100de388)
api-ms-win-eventing-controller-l1-1-0.dll
  • ControlTraceW (Address: 0x100de390)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x100de3a8)
  • EventRegister (Address: 0x100de3a0)
  • EventSetInformation (Address: 0x100de39c)
  • EventUnregister (Address: 0x100de398)
  • EventWriteTransfer (Address: 0x100de3a4)
api-ms-win-oobe-notification-l1-1-0.dll
  • OOBEComplete (Address: 0x100de3b8)
  • RegisterWaitUntilOOBECompleted (Address: 0x100de3b0)
  • UnregisterWaitUntilOOBECompleted (Address: 0x100de3b4)
api-ms-win-security-base-l1-1-0.dll
  • AdjustTokenPrivileges (Address: 0x100de3c8)
  • DuplicateTokenEx (Address: 0x100de3c0)
  • GetTokenInformation (Address: 0x100de3c4)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x100de3d0)
api-ms-win-security-lsalookup-l1-1-2.dll
  • LsaLookupUserAccountType (Address: 0x100de3d8)
api-ms-win-shcore-registry-l1-1-0.dll
  • SHCopyKeyW (Address: 0x100de3e0)
  • SHDeleteValueW (Address: 0x100de3e4)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x100de3ec)
  • SHTaskPoolQueueTask (Address: 0x100de3f0)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x100de3f8)
msvcp_win.dll
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100de410)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x100de424)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100de46c)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100de404)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x100de464)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100de460)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100de458)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100de44c)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x100de448)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100de468)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100de420)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100de440)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100de428)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x100de41c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x100de418)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x100de40c)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100de42c)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x100de430)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100de454)
  • ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x100de414)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x100de43c)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x100de408)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z (Address: 0x100de45c)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100de450)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100de438)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x100de400)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x100de434)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x100de444)
ntdll.dll
  • NtQueryWnfStateData (Address: 0x100de47c)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x100de474)
  • RtlPublishWnfStateData (Address: 0x100de480)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x100de484)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100de478)
OLEAUT32.dll
  • SysAllocString (Address: 0x100de004)
  • SysFreeString (Address: 0x100de000)
SspiCli.dll
  • GetUserNameExW (Address: 0x100de00c)
WINHTTP.dll
  • WinHttpCloseHandle (Address: 0x100de024)
  • WinHttpConnect (Address: 0x100de01c)
  • WinHttpCrackUrl (Address: 0x100de018)
  • WinHttpOpen (Address: 0x100de014)
  • WinHttpOpenRequest (Address: 0x100de020)
  • WinHttpQueryDataAvailable (Address: 0x100de028)
  • WinHttpReadData (Address: 0x100de02c)
  • WinHttpReceiveResponse (Address: 0x100de034)
  • WinHttpSendRequest (Address: 0x100de030)