eapp3hst.dll

Description: Microsoft ThirdPartyEapDispatcher

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 68f8865ddc662ab0aaa57043d0932ef8

File Size: 259.0 KB

Uploaded At: Dec. 1, 2025, 7:55 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xa260)
DllGetClassObject (Ordinal: 2, Address: 0xa2a0)
DllRegisterServer (Ordinal: 3, Address: 0xa1b0)
DllUnregisterServer (Ordinal: 4, Address: 0xa1f0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1003d070)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

ObjectStublessClient10 (Address: 0x1003d09c)
ObjectStublessClient11 (Address: 0x1003d094)
ObjectStublessClient12 (Address: 0x1003d08c)
ObjectStublessClient13 (Address: 0x1003d098)
ObjectStublessClient14 (Address: 0x1003d090)
ObjectStublessClient15 (Address: 0x1003d0a8)
ObjectStublessClient3 (Address: 0x1003d0a0)
ObjectStublessClient4 (Address: 0x1003d078)
ObjectStublessClient5 (Address: 0x1003d088)
ObjectStublessClient6 (Address: 0x1003d07c)
ObjectStublessClient7 (Address: 0x1003d0a4)
ObjectStublessClient8 (Address: 0x1003d080)
ObjectStublessClient9 (Address: 0x1003d084)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1003d0b4)
IsDebuggerPresent (Address: 0x1003d0bc)
OutputDebugStringA (Address: 0x1003d0b0)
OutputDebugStringW (Address: 0x1003d0b8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1003d0c4)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1003d0cc)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1003d0dc)
RaiseException (Address: 0x1003d0d4)
SetLastError (Address: 0x1003d0d8)
SetUnhandledExceptionFilter (Address: 0x1003d0e4)
UnhandledExceptionFilter (Address: 0x1003d0e0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1003d0ec)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1003d0fc)
DuplicateHandle (Address: 0x1003d0f4)
GetHandleInformation (Address: 0x1003d0f8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1003d108)
HeapAlloc (Address: 0x1003d10c)
HeapFree (Address: 0x1003d110)
HeapSize (Address: 0x1003d104)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1003d11c)
LocalFree (Address: 0x1003d118)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1003d124)
FindResourceExW (Address: 0x1003d138)
FreeLibrary (Address: 0x1003d12c)
GetModuleFileNameA (Address: 0x1003d148)
GetModuleFileNameW (Address: 0x1003d140)
GetModuleHandleExW (Address: 0x1003d144)
GetModuleHandleW (Address: 0x1003d134)
GetProcAddress (Address: 0x1003d130)
LoadLibraryExW (Address: 0x1003d13c)
LoadResource (Address: 0x1003d128)
SizeofResource (Address: 0x1003d14c)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x1003d154)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1003d164)
GetThreadLocale (Address: 0x1003d160)
SetThreadLocale (Address: 0x1003d15c)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1003d174)
MapViewOfFile (Address: 0x1003d16c)
UnmapViewOfFile (Address: 0x1003d170)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1003d17c)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1003d18c)
GetCurrentProcessId (Address: 0x1003d184)
GetCurrentThreadId (Address: 0x1003d190)
GetProcessId (Address: 0x1003d194)
TerminateProcess (Address: 0x1003d188)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1003d19c)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1003d1a4)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1003d1cc)
RegCreateKeyExW (Address: 0x1003d1bc)
RegDeleteValueW (Address: 0x1003d1b4)
RegEnumKeyExW (Address: 0x1003d1b0)
RegLoadMUIStringW (Address: 0x1003d1b8)
RegOpenKeyExW (Address: 0x1003d1ac)
RegQueryInfoKeyW (Address: 0x1003d1c4)
RegQueryValueExW (Address: 0x1003d1c0)
RegSetValueExW (Address: 0x1003d1c8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1003d1d8)
WideCharToMultiByte (Address: 0x1003d1d4)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1003d1e0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x1003d1e8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1003d1f4)
AcquireSRWLockShared (Address: 0x1003d204)
CreateMutexExW (Address: 0x1003d21c)
CreateSemaphoreExW (Address: 0x1003d1fc)
DeleteCriticalSection (Address: 0x1003d220)
EnterCriticalSection (Address: 0x1003d22c)
InitializeCriticalSection (Address: 0x1003d228)
InitializeCriticalSectionAndSpinCount (Address: 0x1003d218)
InitializeCriticalSectionEx (Address: 0x1003d1f0)
LeaveCriticalSection (Address: 0x1003d230)
OpenSemaphoreW (Address: 0x1003d20c)
ReleaseMutex (Address: 0x1003d214)
ReleaseSemaphore (Address: 0x1003d200)
ReleaseSRWLockExclusive (Address: 0x1003d208)
ReleaseSRWLockShared (Address: 0x1003d1f8)
WaitForMultipleObjectsEx (Address: 0x1003d234)
WaitForSingleObject (Address: 0x1003d210)
WaitForSingleObjectEx (Address: 0x1003d224)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x1003d23c)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x1003d244)
GetSystemInfo (Address: 0x1003d250)
GetSystemTimeAsFileTime (Address: 0x1003d248)
GetTickCount (Address: 0x1003d254)
GetVersionExW (Address: 0x1003d24c)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1003d268)
CreateThreadpoolTimer (Address: 0x1003d264)
SetThreadpoolTimer (Address: 0x1003d25c)
WaitForThreadpoolTimerCallbacks (Address: 0x1003d260)

api-ms-win-security-base-l1-1-0.dll

ImpersonateLoggedOnUser (Address: 0x1003d274)
RevertToSelf (Address: 0x1003d270)

combase.dll

GetErrorInfo (Address: 0x1003d27c)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1003d30c)
__dllonexit (Address: 0x1003d284)
_amsg_exit (Address: 0x1003d2ac)
_beginthreadex (Address: 0x1003d2c8)
_CxxThrowException (Address: 0x1003d2c4)
_endthreadex (Address: 0x1003d2d8)
_errno (Address: 0x1003d2bc)
_except_handler4_common (Address: 0x1003d29c)
_initterm (Address: 0x1003d2a0)
_lock (Address: 0x1003d294)
_onexit (Address: 0x1003d2a8)
_purecall (Address: 0x1003d304)
_unlock (Address: 0x1003d288)
_vsnprintf (Address: 0x1003d290)
_vsnprintf_s (Address: 0x1003d2e4)
_vsnwprintf (Address: 0x1003d28c)
_wtol (Address: 0x1003d2ec)
_XcptFilter (Address: 0x1003d318)
??0exception@@QAE@ABQBD@Z (Address: 0x1003d2fc)
??0exception@@QAE@ABQBDH@Z (Address: 0x1003d2f8)
??0exception@@QAE@ABV0@@Z (Address: 0x1003d2f4)
??0exception@@QAE@XZ (Address: 0x1003d300)
??1exception@@UAE@XZ (Address: 0x1003d2f0)
??1type_info@@UAE@XZ (Address: 0x1003d2d4)
?terminate@@YAXXZ (Address: 0x1003d298)
?what@exception@@UBEPBDXZ (Address: 0x1003d2d0)
free (Address: 0x1003d2dc)
malloc (Address: 0x1003d2a4)
memcmp (Address: 0x1003d2cc)
memcpy (Address: 0x1003d2b8)
memcpy_s (Address: 0x1003d308)
memmove (Address: 0x1003d2b4)
memmove_s (Address: 0x1003d2e0)
memset (Address: 0x1003d320)
realloc (Address: 0x1003d2c0)
swprintf_s (Address: 0x1003d2e8)
wcscat_s (Address: 0x1003d2b0)
wcscpy_s (Address: 0x1003d31c)
wcsncpy_s (Address: 0x1003d310)
wcsrchr (Address: 0x1003d314)

ntdll.dll

DbgPrint (Address: 0x1003d32c)
EtwEventEnabled (Address: 0x1003d350)
EtwEventRegister (Address: 0x1003d338)
EtwEventUnregister (Address: 0x1003d334)
EtwEventWriteTransfer (Address: 0x1003d328)
EtwGetTraceEnableFlags (Address: 0x1003d344)
EtwGetTraceEnableLevel (Address: 0x1003d348)
EtwGetTraceLoggerHandle (Address: 0x1003d34c)
EtwRegisterTraceGuidsW (Address: 0x1003d340)
EtwTraceMessage (Address: 0x1003d330)
EtwUnregisterTraceGuids (Address: 0x1003d33c)

OLEAUT32.dll

HWND_UserFree (Address: 0x1003d014)
HWND_UserMarshal (Address: 0x1003d008)
HWND_UserSize (Address: 0x1003d010)
HWND_UserUnmarshal (Address: 0x1003d018)
SysAllocString (Address: 0x1003d000)
SysFreeString (Address: 0x1003d004)
VarUI4FromStr (Address: 0x1003d00c)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1003d028)
CStdStubBuffer_Connect (Address: 0x1003d044)
CStdStubBuffer_CountRefs (Address: 0x1003d068)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1003d030)
CStdStubBuffer_DebugServerRelease (Address: 0x1003d058)
CStdStubBuffer_Disconnect (Address: 0x1003d054)
CStdStubBuffer_Invoke (Address: 0x1003d020)
CStdStubBuffer_IsIIDSupported (Address: 0x1003d048)
CStdStubBuffer_QueryInterface (Address: 0x1003d064)
IUnknown_AddRef_Proxy (Address: 0x1003d034)
IUnknown_QueryInterface_Proxy (Address: 0x1003d05c)
IUnknown_Release_Proxy (Address: 0x1003d050)
NdrCStdStubBuffer_Release (Address: 0x1003d024)
NdrDllCanUnloadNow (Address: 0x1003d038)
NdrDllGetClassObject (Address: 0x1003d03c)
NdrDllRegisterProxy (Address: 0x1003d040)
NdrDllUnregisterProxy (Address: 0x1003d04c)
NdrOleAllocate (Address: 0x1003d060)
NdrOleFree (Address: 0x1003d02c)