CloudExperienceHostCommon.dll
Description: CloudExperienceHostCommon
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.6456
Architecture: 64-bit
Operating System: Windows NT
SHA256: c2b2a6434f95dde515f93087756b57cd
File Size: 1.2 MB
Uploaded At: Dec. 1, 2025, 7:24 a.m.
Views: 16
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x5dc0)
- DllGetActivationFactory (Ordinal: 2, Address: 0x5af0)
- DllGetClassObject (Ordinal: 3, Address: 0x5cd0)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-1.dll
- ParseApplicationUserModelId (Address: 0x1800f1938)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x1800f1948)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800f1958)
- IsDebuggerPresent (Address: 0x1800f1960)
- OutputDebugStringW (Address: 0x1800f1968)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x1800f1978)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x1800f1988)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800f19b0)
- RaiseException (Address: 0x1800f19a0)
- SetLastError (Address: 0x1800f1998)
- SetUnhandledExceptionFilter (Address: 0x1800f19a8)
- UnhandledExceptionFilter (Address: 0x1800f19b8)
api-ms-win-core-file-l1-1-0.dll
- DeleteFileW (Address: 0x1800f19c8)
- FindClose (Address: 0x1800f19d8)
- FindFirstFileW (Address: 0x1800f19e0)
- FindNextFileW (Address: 0x1800f19d0)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x1800f19f0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800f1a00)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800f1a20)
- HeapAlloc (Address: 0x1800f1a10)
- HeapFree (Address: 0x1800f1a18)
api-ms-win-core-heap-l2-1-0.dll
- LocalAlloc (Address: 0x1800f1a30)
- LocalFree (Address: 0x1800f1a38)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800f1a48)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1800f1a58)
- FindResourceExW (Address: 0x1800f1a70)
- FindStringOrdinal (Address: 0x1800f1aa8)
- FreeLibrary (Address: 0x1800f1a60)
- FreeResource (Address: 0x1800f1a80)
- GetModuleFileNameA (Address: 0x1800f1ab0)
- GetModuleFileNameW (Address: 0x1800f1a68)
- GetModuleHandleExW (Address: 0x1800f1a88)
- GetModuleHandleW (Address: 0x1800f1a78)
- GetProcAddress (Address: 0x1800f1aa0)
- LoadResource (Address: 0x1800f1a98)
- LockResource (Address: 0x1800f1a90)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x1800f1ac0)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800f1af8)
- GetFileMUIPath (Address: 0x1800f1b00)
- GetGeoInfoW (Address: 0x1800f1ad8)
- GetUILanguageInfo (Address: 0x1800f1af0)
- GetUserGeoID (Address: 0x1800f1ae0)
- LocaleNameToLCID (Address: 0x1800f1ad0)
- ResolveLocaleName (Address: 0x1800f1ae8)
api-ms-win-core-localization-l1-2-3.dll
- EnumSystemGeoNames (Address: 0x1800f1b10)
- GetGeoInfoEx (Address: 0x1800f1b18)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCombine (Address: 0x1800f1b28)
- PathCchAppend (Address: 0x1800f1b30)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x1800f1b40)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x1800f1b58)
- GetCurrentProcessId (Address: 0x1800f1b60)
- GetCurrentThread (Address: 0x1800f1b80)
- GetCurrentThreadId (Address: 0x1800f1b50)
- GetProcessId (Address: 0x1800f1b78)
- OpenProcessToken (Address: 0x1800f1b70)
- OpenThreadToken (Address: 0x1800f1b88)
- TerminateProcess (Address: 0x1800f1b68)
api-ms-win-core-processthreads-l1-1-1.dll
- GetProcessMitigationPolicy (Address: 0x1800f1b98)
- IsProcessorFeaturePresent (Address: 0x1800f1ba8)
- OpenProcess (Address: 0x1800f1ba0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800f1bb8)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x1800f1bc8)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800f1bf8)
- RegDeleteValueW (Address: 0x1800f1be8)
- RegEnumValueW (Address: 0x1800f1bf0)
- RegGetValueW (Address: 0x1800f1bd8)
- RegOpenKeyExW (Address: 0x1800f1c00)
- RegSetValueExW (Address: 0x1800f1be0)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800f1c10)
- RtlLookupFunctionEntry (Address: 0x1800f1c18)
- RtlVirtualUnwind (Address: 0x1800f1c20)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x1800f1c30)
- CompareStringW (Address: 0x1800f1c40)
- MultiByteToWideChar (Address: 0x1800f1c38)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800f1cc8)
- AcquireSRWLockShared (Address: 0x1800f1cd8)
- CreateEventExW (Address: 0x1800f1d00)
- CreateEventW (Address: 0x1800f1cc0)
- CreateMutexExW (Address: 0x1800f1ce0)
- CreateSemaphoreExW (Address: 0x1800f1c60)
- DeleteCriticalSection (Address: 0x1800f1c88)
- EnterCriticalSection (Address: 0x1800f1c90)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800f1c78)
- InitializeCriticalSectionEx (Address: 0x1800f1c80)
- InitializeSRWLock (Address: 0x1800f1c68)
- LeaveCriticalSection (Address: 0x1800f1c98)
- OpenEventW (Address: 0x1800f1cb8)
- OpenSemaphoreW (Address: 0x1800f1cf0)
- ReleaseMutex (Address: 0x1800f1ca8)
- ReleaseSemaphore (Address: 0x1800f1c70)
- ReleaseSRWLockExclusive (Address: 0x1800f1cb0)
- ReleaseSRWLockShared (Address: 0x1800f1ce8)
- ResetEvent (Address: 0x1800f1cd0)
- SetEvent (Address: 0x1800f1c50)
- WaitForMultipleObjectsEx (Address: 0x1800f1c58)
- WaitForSingleObject (Address: 0x1800f1ca0)
- WaitForSingleObjectEx (Address: 0x1800f1cf8)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x1800f1d10)
- InitOnceComplete (Address: 0x1800f1d20)
- InitOnceExecuteOnce (Address: 0x1800f1d18)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTime (Address: 0x1800f1d38)
- GetSystemTimeAsFileTime (Address: 0x1800f1d50)
- GetTickCount (Address: 0x1800f1d30)
- GetTickCount64 (Address: 0x1800f1d48)
- GetVersionExW (Address: 0x1800f1d40)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1800f1d60)
- CreateThreadpoolTimer (Address: 0x1800f1d70)
- SetThreadpoolTimer (Address: 0x1800f1d68)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800f1d78)
api-ms-win-core-timezone-l1-1-0.dll
- GetTimeZoneInformation (Address: 0x1800f1d88)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1800f1da0)
- EncodePointer (Address: 0x1800f1d98)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x1800f1dc0)
- RoOriginateError (Address: 0x1800f1db8)
- RoOriginateErrorW (Address: 0x1800f1db0)
- RoTransformError (Address: 0x1800f1dc8)
- SetRestrictedErrorInfo (Address: 0x1800f1dd0)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x1800f1de0)
- RoGetMatchingRestrictedErrorInfo (Address: 0x1800f1de8)
- RoReportFailedDelegate (Address: 0x1800f1df0)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x1800f1e08)
- RoGetActivationFactory (Address: 0x1800f1e00)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x1800f1e30)
- WindowsCreateString (Address: 0x1800f1e18)
- WindowsCreateStringReference (Address: 0x1800f1e40)
- WindowsDeleteString (Address: 0x1800f1e48)
- WindowsDuplicateString (Address: 0x1800f1e28)
- WindowsGetStringRawBuffer (Address: 0x1800f1e20)
- WindowsIsStringEmpty (Address: 0x1800f1e50)
- WindowsStringHasEmbeddedNull (Address: 0x1800f1e38)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x1800f1e60)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1800f1f30)
- __CxxFrameHandler3 (Address: 0x1800f1f38)
- __CxxFrameHandler4 (Address: 0x1800f1fb0)
- __std_terminate (Address: 0x1800f1fa8)
- _CxxThrowException (Address: 0x1800f1f40)
- _o___std_exception_copy (Address: 0x1800f1fa0)
- _o___std_exception_destroy (Address: 0x1800f1f98)
- _o___std_type_info_destroy_list (Address: 0x1800f1f90)
- _o___stdio_common_vsnprintf_s (Address: 0x1800f1f88)
- _o___stdio_common_vswprintf (Address: 0x1800f1f80)
- _o__callnewh (Address: 0x1800f1f60)
- _o__cexit (Address: 0x1800f1f58)
- _o__configure_narrow_argv (Address: 0x1800f1f50)
- _o__crt_atexit (Address: 0x1800f1f48)
- _o__dtest (Address: 0x1800f1f78)
- _o__errno (Address: 0x1800f1f70)
- _o__execute_onexit_table (Address: 0x1800f1f68)
- _o__get_errno (Address: 0x1800f1e70)
- _o__initialize_narrow_environment (Address: 0x1800f1e78)
- _o__initialize_onexit_table (Address: 0x1800f1e80)
- _o__invalid_parameter_noinfo (Address: 0x1800f1e88)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x1800f1e90)
- _o__purecall (Address: 0x1800f1e98)
- _o__register_onexit_function (Address: 0x1800f1ea0)
- _o__seh_filter_dll (Address: 0x1800f1ea8)
- _o__set_errno (Address: 0x1800f1eb0)
- _o__wcsicmp (Address: 0x1800f1eb8)
- _o_free (Address: 0x1800f1ec8)
- _o_localeconv (Address: 0x1800f1ed0)
- _o_malloc (Address: 0x1800f1ed8)
- _o_realloc (Address: 0x1800f1ee0)
- _o_strtod (Address: 0x1800f1ee8)
- _o_strtoll (Address: 0x1800f1ef0)
- _o_strtoull (Address: 0x1800f1ef8)
- _o_terminate (Address: 0x1800f1f00)
- _o_tolower (Address: 0x1800f1f08)
- _o_towlower (Address: 0x1800f1f10)
- _o_wcsncpy_s (Address: 0x1800f1f18)
- _o_wcstok (Address: 0x1800f1f20)
- _o_wcstoul (Address: 0x1800f1f28)
- memcmp (Address: 0x1800f1fb8)
- memcpy (Address: 0x1800f1fc0)
- memmove (Address: 0x1800f1ec0)
- wcsrchr (Address: 0x1800f1fc8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x1800f1fe0)
- _initterm_e (Address: 0x1800f1fd8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1800f1ff0)
- wcscmp (Address: 0x1800f1ff8)
- wcscspn (Address: 0x1800f2008)
- wcsnlen (Address: 0x1800f2000)
api-ms-win-eventing-controller-l1-1-0.dll
- ControlTraceW (Address: 0x1800f2018)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x1800f2038)
- EventRegister (Address: 0x1800f2028)
- EventSetInformation (Address: 0x1800f2030)
- EventUnregister (Address: 0x1800f2048)
- EventWriteTransfer (Address: 0x1800f2040)
api-ms-win-oobe-notification-l1-1-0.dll
- OOBEComplete (Address: 0x1800f2068)
- RegisterWaitUntilOOBECompleted (Address: 0x1800f2060)
- UnregisterWaitUntilOOBECompleted (Address: 0x1800f2058)
api-ms-win-security-base-l1-1-0.dll
- AdjustTokenPrivileges (Address: 0x1800f2088)
- DuplicateTokenEx (Address: 0x1800f2078)
- GetTokenInformation (Address: 0x1800f2080)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x1800f2098)
api-ms-win-security-lsalookup-l1-1-2.dll
- LsaLookupUserAccountType (Address: 0x1800f20a8)
api-ms-win-shcore-registry-l1-1-0.dll
- SHCopyKeyW (Address: 0x1800f20c0)
- SHDeleteValueW (Address: 0x1800f20b8)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x1800f20d0)
- SHTaskPoolQueueTask (Address: 0x1800f20d8)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x1800f20e8)
msvcp_win.dll
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800f21d8)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x1800f21b0)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x1800f2180)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800f21a0)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800f21c0)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800f21b8)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800f2198)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800f21c8)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1800f2170)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800f2168)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800f2120)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800f2160)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800f2128)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x1800f21d0)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x1800f2110)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x1800f20f8)
- ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z (Address: 0x1800f2150)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1800f2130)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1800f2138)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800f2190)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1800f2108)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800f21a8)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x1800f2188)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x1800f2118)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800f2178)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800f2148)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1800f2158)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800f2140)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1800f2100)
ntdll.dll
- NtQueryWnfStateData (Address: 0x1800f21f8)
- RtlGetDeviceFamilyInfoEnum (Address: 0x1800f21e8)
- RtlPublishWnfStateData (Address: 0x1800f2200)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1800f2208)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800f21f0)
OLEAUT32.dll
- SysAllocString (Address: 0x1800f18c8)
- SysFreeString (Address: 0x1800f18c0)
SspiCli.dll
- GetUserNameExW (Address: 0x1800f18d8)
WINHTTP.dll
- WinHttpCloseHandle (Address: 0x1800f1908)
- WinHttpConnect (Address: 0x1800f18e8)
- WinHttpCrackUrl (Address: 0x1800f1900)
- WinHttpOpen (Address: 0x1800f18f8)
- WinHttpOpenRequest (Address: 0x1800f18f0)
- WinHttpQueryDataAvailable (Address: 0x1800f1910)
- WinHttpReadData (Address: 0x1800f1918)
- WinHttpReceiveResponse (Address: 0x1800f1928)
- WinHttpSendRequest (Address: 0x1800f1920)