InputHost.dll

Description: InputHost

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: ab44f6fcd0ea9ca78faf0646f4988f3e

File Size: 946.3 KB

Uploaded At: Dec. 1, 2025, 7:57 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 2601, Address: 0x25fa0)
(Ordinal: 2602, Address: 0x260f0)
(Ordinal: 2603, Address: 0x26150)
(Ordinal: 2604, Address: 0x26040)
(Ordinal: 2605, Address: 0x260b0)
(Ordinal: 2606, Address: 0x261b0)
(Ordinal: 2607, Address: 0x26210)
CreatePointerInputHost (Ordinal: 2608, Address: 0x252c0)
CreateTouchInputHost (Ordinal: 2609, Address: 0x252c0)
SetInputDeviceIndicatorState (Ordinal: 2610, Address: 0x252d0)
SetInputFocus (Ordinal: 2611, Address: 0x25490)
TouchInputHostCreate (Ordinal: 2612, Address: 0x252d0)
CreateComboButtonProxy (Ordinal: 2613, Address: 0x24860)
CreateCursorClient (Ordinal: 2614, Address: 0x26880)
CreateCursorManager (Ordinal: 2615, Address: 0x26860)
CreateDragOperationPrivate (Ordinal: 2616, Address: 0x247b0)
CreateGenericInputHost (Ordinal: 2617, Address: 0x252a0)
CreateHeatGripServiceClient (Ordinal: 2618, Address: 0xc13e0)
CreateInputDeviceWatcher (Ordinal: 2619, Address: 0x252e0)
CreateInputHost (Ordinal: 2620, Address: 0x251e0)
CreateInputHostForProcess (Ordinal: 2621, Address: 0x25200)
CreateInputSystemClientConnection (Ordinal: 2622, Address: 0x30820)
CreateMPCManagerClient (Ordinal: 2623, Address: 0x255f0)
CreateViewHitTestRequestClient (Ordinal: 2624, Address: 0x25370)
DllCanUnloadNow (Ordinal: 2625, Address: 0x276d0)
DllGetActivationFactory (Ordinal: 2626, Address: 0x27680)
DllGetClassObject (Ordinal: 2627, Address: 0x276a0)
SetInputButtonEnabledOnIdle (Ordinal: 2628, Address: 0x25410)
SetInputDeviceRepeatParameters (Ordinal: 2629, Address: 0x25390)
ViewHitTestClientCreate (Ordinal: 2630, Address: 0x25350)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x100d8050)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x100d807c)
CoCreateInstance (Address: 0x100d8088)
CoDecrementMTAUsage (Address: 0x100d805c)
CoGetApartmentType (Address: 0x100d8060)
CoGetCallContext (Address: 0x100d8068)
CoGetInterfaceAndReleaseStream (Address: 0x100d8084)
CoImpersonateClient (Address: 0x100d8078)
CoIncrementMTAUsage (Address: 0x100d8058)
CoMarshalInterface (Address: 0x100d8070)
CoReleaseMarshalData (Address: 0x100d8074)
CoRevertToSelf (Address: 0x100d8080)
CoSetProxyBlanket (Address: 0x100d8064)
CoTaskMemAlloc (Address: 0x100d806c)
CreateStreamOnHGlobal (Address: 0x100d808c)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x100d8094)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100d80a0)
IsDebuggerPresent (Address: 0x100d80a4)
OutputDebugStringW (Address: 0x100d809c)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100d80ac)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100d80b4)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100d80bc)
RaiseException (Address: 0x100d80c0)
SetLastError (Address: 0x100d80c4)
SetUnhandledExceptionFilter (Address: 0x100d80c8)
UnhandledExceptionFilter (Address: 0x100d80cc)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x100d80d4)

api-ms-win-core-errorhandling-l1-1-3.dll

TerminateProcessOnMemoryExhaustion (Address: 0x100d80dc)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100d80e4)
DuplicateHandle (Address: 0x100d80e8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100d80f0)
HeapAlloc (Address: 0x100d80f8)
HeapFree (Address: 0x100d80f4)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100d8100)
LocalFree (Address: 0x100d8104)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x100d8110)
InterlockedPushEntrySList (Address: 0x100d810c)

api-ms-win-core-largeinteger-l1-1-0.dll

MulDiv (Address: 0x100d8118)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100d8130)
FreeLibrary (Address: 0x100d8144)
GetModuleFileNameA (Address: 0x100d8134)
GetModuleHandleExW (Address: 0x100d8140)
GetModuleHandleW (Address: 0x100d8120)
GetProcAddress (Address: 0x100d8128)
LoadLibraryExW (Address: 0x100d813c)
LoadResource (Address: 0x100d8138)
LockResource (Address: 0x100d8124)
SizeofResource (Address: 0x100d812c)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x100d814c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100d8154)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x100d8170)
GetCurrentProcess (Address: 0x100d8164)
GetCurrentProcessId (Address: 0x100d8160)
GetCurrentThreadId (Address: 0x100d815c)
OpenProcessToken (Address: 0x100d816c)
TerminateProcess (Address: 0x100d8168)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x100d8180)
IsProcessorFeaturePresent (Address: 0x100d817c)
OpenProcess (Address: 0x100d8178)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100d8188)
QueryPerformanceFrequency (Address: 0x100d818c)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x100d8194)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100d81a4)
RegOpenKeyExW (Address: 0x100d819c)
RegQueryValueExW (Address: 0x100d81a0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x100d81ac)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100d81e8)
AcquireSRWLockShared (Address: 0x100d8204)
CreateEventExW (Address: 0x100d81c4)
CreateEventW (Address: 0x100d81d8)
CreateMutexExW (Address: 0x100d81f4)
CreateSemaphoreExW (Address: 0x100d81b4)
DeleteCriticalSection (Address: 0x100d81f8)
EnterCriticalSection (Address: 0x100d81ec)
InitializeCriticalSection (Address: 0x100d81fc)
InitializeCriticalSectionAndSpinCount (Address: 0x100d81e0)
InitializeCriticalSectionEx (Address: 0x100d81d0)
InitializeSRWLock (Address: 0x100d8200)
LeaveCriticalSection (Address: 0x100d81d4)
OpenSemaphoreW (Address: 0x100d8208)
ReleaseMutex (Address: 0x100d81c8)
ReleaseSemaphore (Address: 0x100d81bc)
ReleaseSRWLockExclusive (Address: 0x100d81e4)
ReleaseSRWLockShared (Address: 0x100d81f0)
ResetEvent (Address: 0x100d81dc)
SetEvent (Address: 0x100d81b8)
WaitForSingleObject (Address: 0x100d81c0)
WaitForSingleObjectEx (Address: 0x100d81cc)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100d8224)
InitOnceComplete (Address: 0x100d8214)
InitOnceExecuteOnce (Address: 0x100d8228)
Sleep (Address: 0x100d821c)
WaitOnAddress (Address: 0x100d8210)
WakeByAddressAll (Address: 0x100d8218)
WakeByAddressSingle (Address: 0x100d8220)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100d8230)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100d8248)
CloseThreadpoolWork (Address: 0x100d824c)
CreateThreadpoolTimer (Address: 0x100d823c)
CreateThreadpoolWork (Address: 0x100d8250)
FreeLibraryWhenCallbackReturns (Address: 0x100d8254)
SetThreadpoolTimer (Address: 0x100d8240)
SubmitThreadpoolWork (Address: 0x100d8244)
WaitForThreadpoolTimerCallbacks (Address: 0x100d8238)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100d8260)
EncodePointer (Address: 0x100d825c)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x100d8274)
RoOriginateError (Address: 0x100d8268)
RoOriginateErrorW (Address: 0x100d826c)
RoTransformError (Address: 0x100d8270)
SetRestrictedErrorInfo (Address: 0x100d8278)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x100d8284)
RoGetMatchingRestrictedErrorInfo (Address: 0x100d8280)
RoOriginateLanguageException (Address: 0x100d828c)
RoReportFailedDelegate (Address: 0x100d8288)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x100d8294)
RoGetActivationFactory (Address: 0x100d8298)

api-ms-win-core-winrt-robuffer-l1-1-0.dll

RoGetBufferMarshaler (Address: 0x100d82a0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x100d82c4)
WindowsCreateStringReference (Address: 0x100d82d0)
WindowsDeleteString (Address: 0x100d82b8)
WindowsDeleteStringBuffer (Address: 0x100d82cc)
WindowsDuplicateString (Address: 0x100d82b4)
WindowsGetStringRawBuffer (Address: 0x100d82b0)
WindowsIsStringEmpty (Address: 0x100d82ac)
WindowsPreallocateStringBuffer (Address: 0x100d82c8)
WindowsPromoteStringBuffer (Address: 0x100d82d4)
WindowsStringHasEmbeddedNull (Address: 0x100d82a8)
WindowsTrimStringEnd (Address: 0x100d82c0)
WindowsTrimStringStart (Address: 0x100d82bc)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x100d8350)
__std_terminate (Address: 0x100d834c)
_CxxThrowException (Address: 0x100d8328)
_except_handler4_common (Address: 0x100d8324)
_o___std_exception_copy (Address: 0x100d8334)
_o___std_exception_destroy (Address: 0x100d8330)
_o___std_type_info_destroy_list (Address: 0x100d832c)
_o___stdio_common_vsnprintf_s (Address: 0x100d8354)
_o___stdio_common_vswprintf (Address: 0x100d8344)
_o__callnewh (Address: 0x100d8348)
_o__cexit (Address: 0x100d8340)
_o__configure_narrow_argv (Address: 0x100d833c)
_o__crt_atexit (Address: 0x100d8338)
_o__errno (Address: 0x100d82dc)
_o__execute_onexit_table (Address: 0x100d82e0)
_o__free_base (Address: 0x100d82e4)
_o__initialize_narrow_environment (Address: 0x100d82e8)
_o__initialize_onexit_table (Address: 0x100d82ec)
_o__invalid_parameter_noinfo (Address: 0x100d82f0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x100d82f4)
_o__malloc_base (Address: 0x100d82f8)
_o__purecall (Address: 0x100d82fc)
_o__register_onexit_function (Address: 0x100d8300)
_o__seh_filter_dll (Address: 0x100d8304)
_o_ceil (Address: 0x100d830c)
_o_free (Address: 0x100d8310)
_o_malloc (Address: 0x100d8314)
_o_realloc (Address: 0x100d8318)
_o_terminate (Address: 0x100d831c)
_o_towupper (Address: 0x100d8320)
memcmp (Address: 0x100d8358)
memcpy (Address: 0x100d835c)
memmove (Address: 0x100d8308)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x100d8368)
_initterm_e (Address: 0x100d8364)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x100d8370)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100d8378)
EventSetInformation (Address: 0x100d837c)
EventUnregister (Address: 0x100d8384)
EventWriteTransfer (Address: 0x100d8380)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

CallWindowProcW (Address: 0x100d83c0)
DefWindowProcW (Address: 0x100d83c8)
DestroyWindow (Address: 0x100d83a4)
GetAncestor (Address: 0x100d83b0)
GetCursorPos (Address: 0x100d8398)
GetFocus (Address: 0x100d83b4)
GetForegroundWindow (Address: 0x100d838c)
GetPropW (Address: 0x100d83ac)
GetWindowLongW (Address: 0x100d83b8)
GetWindowThreadProcessId (Address: 0x100d8390)
RegisterClassExW (Address: 0x100d83a8)
RemovePropW (Address: 0x100d83bc)
SetFocus (Address: 0x100d8394)
SetPropW (Address: 0x100d83a0)
SetWindowLongW (Address: 0x100d83c4)
WindowFromPoint (Address: 0x100d839c)

api-ms-win-security-base-l1-1-0.dll

EqualSid (Address: 0x100d83d4)
GetAce (Address: 0x100d83d0)
GetTokenInformation (Address: 0x100d83d8)
RevertToSelf (Address: 0x100d83dc)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x100d83e4)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x100d83ec)

api-ms-win-shcore-scaling-l1-1-0.dll

GetScaleFactorForDevice (Address: 0x100d83f4)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x100d83fc)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100d8404)
SHTaskPoolQueueTask (Address: 0x100d8408)

combase.dll

(Address: 0x100d8410)
(Address: 0x100d8414)
(Address: 0x100d8418)

CoreMessaging.dll

CoreUICallCreateConversationHost (Address: 0x100d8004)
CoreUICallCreateEndpointHost (Address: 0x100d8014)
CoreUICallCreateEndpointHostWithSendPriority (Address: 0x100d8018)
CoreUICallReceive (Address: 0x100d8010)
CoreUICallSend (Address: 0x100d800c)
CoreUICreate (Address: 0x100d8000)
CoreUIOpenExisting (Address: 0x100d8008)

CoreUIComponents.dll

CoreUIFactoryCreate (Address: 0x100d8020)

msvcp_win.dll

_Cnd_broadcast (Address: 0x100d8484)
_Cnd_destroy_in_situ (Address: 0x100d8488)
_Cnd_init_in_situ (Address: 0x100d844c)
_Cnd_register_at_thread_exit (Address: 0x100d8430)
_Cnd_unregister_at_thread_exit (Address: 0x100d8450)
_Cnd_wait (Address: 0x100d8478)
_Mtx_destroy_in_situ (Address: 0x100d8448)
_Mtx_init_in_situ (Address: 0x100d8424)
_Mtx_lock (Address: 0x100d842c)
_Mtx_unlock (Address: 0x100d8438)
?__ExceptionPtrAssign@@YAXPAXPBX@Z (Address: 0x100d8428)
?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x100d8474)
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z (Address: 0x100d8440)
?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x100d847c)
?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x100d8460)
?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x100d8464)
?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x100d8454)
?__ExceptionPtrToBool@@YA_NPBX@Z (Address: 0x100d8468)
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z (Address: 0x100d8470)
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z (Address: 0x100d8420)
?_Syserror_map@std@@YAPBDH@Z (Address: 0x100d8444)
?_Throw_C_error@std@@YAXH@Z (Address: 0x100d8434)
?_Throw_future_error@std@@YAXABVerror_code@1@@Z (Address: 0x100d843c)
?_Xbad_function_call@std@@YAXXZ (Address: 0x100d8480)
?_XGetLastError@std@@YAXXZ (Address: 0x100d846c)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x100d845c)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100d8458)

ntdll.dll

NtQuerySecurityObject (Address: 0x100d84a4)
NtQueryWnfStateData (Address: 0x100d84ac)
NtSetSecurityObject (Address: 0x100d84b4)
RtlAddAccessAllowedAce (Address: 0x100d84c0)
RtlAddAce (Address: 0x100d84c4)
RtlCreateAcl (Address: 0x100d84cc)
RtlCreateSecurityDescriptor (Address: 0x100d84a0)
RtlGetAce (Address: 0x100d84c8)
RtlGetDaclSecurityDescriptor (Address: 0x100d849c)
RtlGetDeviceFamilyInfoEnum (Address: 0x100d8490)
RtlIsMultiSessionSku (Address: 0x100d8498)
RtlLengthSid (Address: 0x100d84d0)
RtlPublishWnfStateData (Address: 0x100d84b0)
RtlQueryInformationAcl (Address: 0x100d8494)
RtlSetDaclSecurityDescriptor (Address: 0x100d84bc)
RtlSubscribeWnfStateChangeNotification (Address: 0x100d84b8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100d84a8)

OLEAUT32.dll

SysFreeString (Address: 0x100d8028)

PROPSYS.dll

PropVariantToBoolean (Address: 0x100d8030)
PropVariantToDouble (Address: 0x100d803c)
PropVariantToStringAlloc (Address: 0x100d8038)
PropVariantToUInt64 (Address: 0x100d8034)

SHCORE.dll

(Address: 0x100d8044)
(Address: 0x100d8048)

win32u.dll

NtCloseCompositionInputSink (Address: 0x100d84dc)
NtCreateCompositionInputSink (Address: 0x100d84d8)
NtQueryCompositionInputSinkLuid (Address: 0x100d84e0)
NtUserUpdatePerUserSystemParameters (Address: 0x100d84e4)