CXHProvisioningServer.dll

Description: CXHProvisioningServer

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 74af6be30a9dc3f52983650527422b02

File Size: 293.0 KB

Uploaded At: Dec. 1, 2025, 7:25 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x4bc0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x48b0)
  • DllGetClassObject (Ordinal: 3, Address: 0x4a90)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18003a458)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x18003a490)
  • CoCreateFreeThreadedMarshaler (Address: 0x18003a468)
  • CoCreateInstance (Address: 0x18003a478)
  • CoGetCallContext (Address: 0x18003a470)
  • CoGetInterfaceAndReleaseStream (Address: 0x18003a4b8)
  • CoMarshalInterface (Address: 0x18003a488)
  • CoReleaseMarshalData (Address: 0x18003a4b0)
  • CoTaskMemAlloc (Address: 0x18003a4a8)
  • CoTaskMemFree (Address: 0x18003a4a0)
  • CoWaitForMultipleHandles (Address: 0x18003a480)
  • CreateStreamOnHGlobal (Address: 0x18003a498)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18003a4c8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x18003a520)
  • CStdStubBuffer2_CountRefs (Address: 0x18003a590)
  • CStdStubBuffer2_Disconnect (Address: 0x18003a558)
  • CStdStubBuffer2_QueryInterface (Address: 0x18003a538)
  • NdrProxyForwardingFunction3 (Address: 0x18003a4e0)
  • NdrProxyForwardingFunction4 (Address: 0x18003a518)
  • NdrProxyForwardingFunction5 (Address: 0x18003a510)
  • ObjectStublessClient10 (Address: 0x18003a4d8)
  • ObjectStublessClient11 (Address: 0x18003a598)
  • ObjectStublessClient12 (Address: 0x18003a580)
  • ObjectStublessClient13 (Address: 0x18003a548)
  • ObjectStublessClient14 (Address: 0x18003a5a0)
  • ObjectStublessClient15 (Address: 0x18003a560)
  • ObjectStublessClient16 (Address: 0x18003a4f0)
  • ObjectStublessClient17 (Address: 0x18003a588)
  • ObjectStublessClient18 (Address: 0x18003a570)
  • ObjectStublessClient19 (Address: 0x18003a530)
  • ObjectStublessClient20 (Address: 0x18003a568)
  • ObjectStublessClient21 (Address: 0x18003a4e8)
  • ObjectStublessClient3 (Address: 0x18003a578)
  • ObjectStublessClient4 (Address: 0x18003a540)
  • ObjectStublessClient5 (Address: 0x18003a528)
  • ObjectStublessClient6 (Address: 0x18003a508)
  • ObjectStublessClient7 (Address: 0x18003a550)
  • ObjectStublessClient8 (Address: 0x18003a500)
  • ObjectStublessClient9 (Address: 0x18003a4f8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18003a5b8)
  • IsDebuggerPresent (Address: 0x18003a5c0)
  • OutputDebugStringW (Address: 0x18003a5b0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18003a5d0)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18003a5e0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18003a5f0)
  • RaiseException (Address: 0x18003a608)
  • SetLastError (Address: 0x18003a5f8)
  • SetUnhandledExceptionFilter (Address: 0x18003a610)
  • UnhandledExceptionFilter (Address: 0x18003a600)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18003a620)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18003a640)
  • HeapAlloc (Address: 0x18003a630)
  • HeapFree (Address: 0x18003a638)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18003a650)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18003a678)
  • GetModuleFileNameA (Address: 0x18003a668)
  • GetModuleHandleExW (Address: 0x18003a660)
  • GetModuleHandleW (Address: 0x18003a680)
  • GetProcAddress (Address: 0x18003a670)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18003a690)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x18003a6a0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18003a6b8)
  • GetCurrentProcessId (Address: 0x18003a6d0)
  • GetCurrentThreadId (Address: 0x18003a6c0)
  • OpenProcessToken (Address: 0x18003a6c8)
  • TerminateProcess (Address: 0x18003a6b0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18003a6e8)
  • OpenProcess (Address: 0x18003a6e0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18003a6f8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18003a710)
  • RegCreateKeyExW (Address: 0x18003a720)
  • RegEnumValueW (Address: 0x18003a718)
  • RegGetValueW (Address: 0x18003a708)
  • RegOpenKeyExW (Address: 0x18003a730)
  • RegQueryValueExW (Address: 0x18003a728)
  • RegSetValueExW (Address: 0x18003a738)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18003a748)
  • RtlLookupFunctionEntry (Address: 0x18003a750)
  • RtlVirtualUnwind (Address: 0x18003a758)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18003a7e0)
  • AcquireSRWLockShared (Address: 0x18003a7e8)
  • CreateEventExW (Address: 0x18003a7b0)
  • CreateMutexExW (Address: 0x18003a7c8)
  • CreateSemaphoreExW (Address: 0x18003a768)
  • DeleteCriticalSection (Address: 0x18003a778)
  • EnterCriticalSection (Address: 0x18003a7c0)
  • InitializeCriticalSectionEx (Address: 0x18003a780)
  • InitializeSRWLock (Address: 0x18003a798)
  • LeaveCriticalSection (Address: 0x18003a7f0)
  • OpenSemaphoreW (Address: 0x18003a7a8)
  • ReleaseMutex (Address: 0x18003a790)
  • ReleaseSemaphore (Address: 0x18003a770)
  • ReleaseSRWLockExclusive (Address: 0x18003a7d8)
  • ReleaseSRWLockShared (Address: 0x18003a7d0)
  • SetEvent (Address: 0x18003a7b8)
  • WaitForSingleObject (Address: 0x18003a788)
  • WaitForSingleObjectEx (Address: 0x18003a7a0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x18003a800)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18003a810)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18003a838)
  • CreateThreadpoolTimer (Address: 0x18003a828)
  • SetThreadpoolTimer (Address: 0x18003a820)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18003a830)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18003a850)
  • EncodePointer (Address: 0x18003a848)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x18003a878)
  • RoOriginateError (Address: 0x18003a880)
  • RoOriginateErrorW (Address: 0x18003a868)
  • RoTransformError (Address: 0x18003a860)
  • SetRestrictedErrorInfo (Address: 0x18003a870)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18003a8a0)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18003a890)
  • RoReportFailedDelegate (Address: 0x18003a898)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18003a8c0)
  • RoGetActivationFactory (Address: 0x18003a8b8)
  • RoInitialize (Address: 0x18003a8c8)
  • RoUninitialize (Address: 0x18003a8b0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x18003a8f0)
  • HSTRING_UserFree64 (Address: 0x18003a900)
  • HSTRING_UserMarshal (Address: 0x18003a908)
  • HSTRING_UserMarshal64 (Address: 0x18003a8e8)
  • HSTRING_UserSize (Address: 0x18003a910)
  • HSTRING_UserSize64 (Address: 0x18003a8f8)
  • HSTRING_UserUnmarshal (Address: 0x18003a8e0)
  • HSTRING_UserUnmarshal64 (Address: 0x18003a8d8)
  • WindowsCreateString (Address: 0x18003a920)
  • WindowsCreateStringReference (Address: 0x18003a918)
  • WindowsDeleteString (Address: 0x18003a928)
  • WindowsDuplicateString (Address: 0x18003a930)
  • WindowsGetStringRawBuffer (Address: 0x18003a948)
  • WindowsIsStringEmpty (Address: 0x18003a940)
  • WindowsStringHasEmbeddedNull (Address: 0x18003a938)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18003a9b8)
  • __CxxFrameHandler3 (Address: 0x18003aa28)
  • __CxxFrameHandler4 (Address: 0x18003aa30)
  • __std_terminate (Address: 0x18003aa18)
  • _CxxThrowException (Address: 0x18003aa20)
  • _o___std_exception_copy (Address: 0x18003aa00)
  • _o___std_exception_destroy (Address: 0x18003a9f8)
  • _o___std_type_info_destroy_list (Address: 0x18003a9f0)
  • _o___stdio_common_vsnprintf_s (Address: 0x18003a9e8)
  • _o___stdio_common_vswprintf (Address: 0x18003a9e0)
  • _o__callnewh (Address: 0x18003a9d8)
  • _o__cexit (Address: 0x18003a9d0)
  • _o__configure_narrow_argv (Address: 0x18003a9c8)
  • _o__crt_atexit (Address: 0x18003a9c0)
  • _o__errno (Address: 0x18003aa10)
  • _o__execute_onexit_table (Address: 0x18003aa08)
  • _o__initialize_narrow_environment (Address: 0x18003a958)
  • _o__initialize_onexit_table (Address: 0x18003a960)
  • _o__invalid_parameter_noinfo (Address: 0x18003a968)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x18003a970)
  • _o__purecall (Address: 0x18003a978)
  • _o__register_onexit_function (Address: 0x18003a980)
  • _o__seh_filter_dll (Address: 0x18003a988)
  • _o_free (Address: 0x18003a998)
  • _o_malloc (Address: 0x18003a9a0)
  • _o_realloc (Address: 0x18003a9a8)
  • _o_terminate (Address: 0x18003a9b0)
  • memcmp (Address: 0x18003aa38)
  • memcpy (Address: 0x18003aa40)
  • memmove (Address: 0x18003a990)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18003aa58)
  • _initterm_e (Address: 0x18003aa50)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18003aa68)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventWriteTransfer (Address: 0x18003aa78)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x18003aa88)
  • GetTokenInformation (Address: 0x18003aa90)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x18003aaa0)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18003aab8)
  • SHTaskPoolQueueTask (Address: 0x18003aab0)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18003aad0)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18003aac8)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x18003a3c8)
  • CStdStubBuffer_Connect (Address: 0x18003a418)
  • CStdStubBuffer_CountRefs (Address: 0x18003a3d8)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x18003a3b8)
  • CStdStubBuffer_DebugServerRelease (Address: 0x18003a3f0)
  • CStdStubBuffer_Disconnect (Address: 0x18003a3f8)
  • CStdStubBuffer_Invoke (Address: 0x18003a428)
  • CStdStubBuffer_IsIIDSupported (Address: 0x18003a3b0)
  • CStdStubBuffer_QueryInterface (Address: 0x18003a3e0)
  • IUnknown_AddRef_Proxy (Address: 0x18003a410)
  • IUnknown_QueryInterface_Proxy (Address: 0x18003a400)
  • IUnknown_Release_Proxy (Address: 0x18003a3d0)
  • NdrCStdStubBuffer_Release (Address: 0x18003a438)
  • NdrCStdStubBuffer2_Release (Address: 0x18003a430)
  • NdrDllCanUnloadNow (Address: 0x18003a448)
  • NdrDllGetClassObject (Address: 0x18003a440)
  • NdrOleAllocate (Address: 0x18003a3e8)
  • NdrOleFree (Address: 0x18003a3c0)
  • NdrStubCall3 (Address: 0x18003a408)
  • NdrStubForwardingFunction (Address: 0x18003a420)