CloudExperienceHostBroker.dll

Description: CloudExperienceHostBroker

Version: 10.0.19041.1265

Architecture: 64-bit

Operating System: Windows NT

SHA256: f96365d97b7bb2b8034ad0369317fc15

File Size: 324.8 KB

Uploaded At: Dec. 1, 2025, 8:11 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x5770)
DllGetActivationFactory (Ordinal: 2, Address: 0x5460)
DllGetClassObject (Ordinal: 3, Address: 0x5640)
GetProxyDllInfo (Ordinal: 4, Address: 0x23e0)

Imported DLLs & Functions

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18003b680)
CStdStubBuffer2_CountRefs (Address: 0x18003b688)
CStdStubBuffer2_Disconnect (Address: 0x18003b678)
CStdStubBuffer2_QueryInterface (Address: 0x18003b660)
NdrProxyForwardingFunction3 (Address: 0x18003b658)
NdrProxyForwardingFunction4 (Address: 0x18003b698)
NdrProxyForwardingFunction5 (Address: 0x18003b6a0)
ObjectStublessClient10 (Address: 0x18003b6b8)
ObjectStublessClient11 (Address: 0x18003b690)
ObjectStublessClient12 (Address: 0x18003b6a8)
ObjectStublessClient13 (Address: 0x18003b668)
ObjectStublessClient6 (Address: 0x18003b6b0)
ObjectStublessClient7 (Address: 0x18003b670)
ObjectStublessClient8 (Address: 0x18003b6c8)
ObjectStublessClient9 (Address: 0x18003b6c0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18003b6e8)
IsDebuggerPresent (Address: 0x18003b6d8)
OutputDebugStringW (Address: 0x18003b6e0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18003b6f8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18003b708)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18003b728)
RaiseException (Address: 0x18003b730)
SetLastError (Address: 0x18003b738)
SetUnhandledExceptionFilter (Address: 0x18003b720)
UnhandledExceptionFilter (Address: 0x18003b718)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18003b748)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18003b758)
HeapAlloc (Address: 0x18003b768)
HeapFree (Address: 0x18003b760)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18003b780)
LocalFree (Address: 0x18003b778)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18003b7b0)
GetModuleFileNameA (Address: 0x18003b7a0)
GetModuleHandleExW (Address: 0x18003b790)
GetModuleHandleW (Address: 0x18003b7a8)
GetProcAddress (Address: 0x18003b798)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18003b7c0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18003b7f8)
GetCurrentProcessId (Address: 0x18003b7f0)
GetCurrentThread (Address: 0x18003b7d8)
GetCurrentThreadId (Address: 0x18003b808)
GetProcessId (Address: 0x18003b7e0)
OpenProcessToken (Address: 0x18003b7e8)
OpenThreadToken (Address: 0x18003b7d0)
TerminateProcess (Address: 0x18003b800)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18003b818)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18003b828)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18003b838)
RegGetValueW (Address: 0x18003b850)
RegOpenKeyExW (Address: 0x18003b840)
RegQueryValueExW (Address: 0x18003b848)
RegSetValueExW (Address: 0x18003b858)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18003b868)
RtlLookupFunctionEntry (Address: 0x18003b870)
RtlVirtualUnwind (Address: 0x18003b878)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrChrW (Address: 0x18003b888)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18003b898)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18003b908)
AcquireSRWLockShared (Address: 0x18003b910)
CreateEventExW (Address: 0x18003b8f0)
CreateMutexExW (Address: 0x18003b928)
CreateSemaphoreExW (Address: 0x18003b8d0)
DeleteCriticalSection (Address: 0x18003b8b0)
EnterCriticalSection (Address: 0x18003b8c8)
InitializeCriticalSectionEx (Address: 0x18003b8a8)
InitializeSRWLock (Address: 0x18003b918)
LeaveCriticalSection (Address: 0x18003b8c0)
OpenSemaphoreW (Address: 0x18003b930)
ReleaseMutex (Address: 0x18003b8e8)
ReleaseSemaphore (Address: 0x18003b8d8)
ReleaseSRWLockExclusive (Address: 0x18003b900)
ReleaseSRWLockShared (Address: 0x18003b938)
SetEvent (Address: 0x18003b8f8)
WaitForMultipleObjectsEx (Address: 0x18003b8b8)
WaitForSingleObject (Address: 0x18003b8e0)
WaitForSingleObjectEx (Address: 0x18003b920)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18003b948)
InitOnceComplete (Address: 0x18003b960)
InitOnceExecuteOnce (Address: 0x18003b950)
Sleep (Address: 0x18003b958)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18003b970)
GetSystemTimeAsFileTime (Address: 0x18003b980)
GetTickCount (Address: 0x18003b978)
GetTickCount64 (Address: 0x18003b988)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18003b998)
CreateThreadpoolTimer (Address: 0x18003b9a8)
SetThreadpoolTimer (Address: 0x18003b9b0)
WaitForThreadpoolTimerCallbacks (Address: 0x18003b9a0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18003b9c8)
EncodePointer (Address: 0x18003b9c0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18003b9e0)
EventRegister (Address: 0x18003b9d8)
EventSetInformation (Address: 0x18003b9f0)
EventUnregister (Address: 0x18003b9f8)
EventWriteTransfer (Address: 0x18003b9e8)

api-ms-win-power-base-l1-1-0.dll

GetPwrCapabilities (Address: 0x18003ba08)

api-ms-win-security-lsalookup-l1-1-2.dll

LsaLookupUserAccountType (Address: 0x18003ba18)

api-ms-win-security-lsapolicy-l1-1-0.dll

LsaClose (Address: 0x18003ba30)
LsaFreeMemory (Address: 0x18003ba38)
LsaLookupNames2 (Address: 0x18003ba48)
LsaLookupSids (Address: 0x18003ba40)
LsaOpenPolicy (Address: 0x18003ba28)

api-ms-win-shcore-sysinfo-l1-1-0.dll

IsOS (Address: 0x18003ba58)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18003ba68)
SHTaskPoolQueueTask (Address: 0x18003ba70)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18003ba80)

msvcrt.dll

__C_specific_handler (Address: 0x18003bab0)
__CxxFrameHandler3 (Address: 0x18003bae8)
__dllonexit (Address: 0x18003ba90)
_amsg_exit (Address: 0x18003bb20)
_callnewh (Address: 0x18003bb58)
_CxxThrowException (Address: 0x18003bb38)
_initterm (Address: 0x18003bab8)
_lock (Address: 0x18003baa8)
_onexit (Address: 0x18003bb18)
_purecall (Address: 0x18003bb08)
_unlock (Address: 0x18003baa0)
_vscwprintf (Address: 0x18003bb28)
_vsnprintf_s (Address: 0x18003bb68)
_vsnwprintf (Address: 0x18003bb90)
_XcptFilter (Address: 0x18003bad8)
??_V@YAXPEAX@Z (Address: 0x18003bae0)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18003bb50)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18003bb48)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18003baf0)
??0exception@@QEAA@XZ (Address: 0x18003baf8)
??1exception@@UEAA@XZ (Address: 0x18003bb00)
??1type_info@@UEAA@XZ (Address: 0x18003bb88)
??3@YAXPEAX@Z (Address: 0x18003bb60)
?terminate@@YAXXZ (Address: 0x18003bad0)
?what@exception@@UEBAPEBDXZ (Address: 0x18003bb40)
free (Address: 0x18003bac8)
malloc (Address: 0x18003bac0)
memcmp (Address: 0x18003bb10)
memcpy (Address: 0x18003bb98)
memcpy_s (Address: 0x18003bb78)
memmove (Address: 0x18003bb80)
memmove_s (Address: 0x18003ba98)
memset (Address: 0x18003bba0)
realloc (Address: 0x18003bb70)
swprintf_s (Address: 0x18003bb30)

ntdll.dll

RtlInitString (Address: 0x18003bbb8)
RtlInitUnicodeString (Address: 0x18003bbb0)

OLEAUT32.dll

SysAllocString (Address: 0x18003b5b0)
SysFreeString (Address: 0x18003b5b8)

POWRPROF.dll

PowerDeterminePlatformRole (Address: 0x18003b5c8)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18003b630)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18003b5e0)
CStdStubBuffer_DebugServerRelease (Address: 0x18003b648)
CStdStubBuffer_Invoke (Address: 0x18003b5e8)
CStdStubBuffer_IsIIDSupported (Address: 0x18003b5f0)
IUnknown_AddRef_Proxy (Address: 0x18003b5d8)
IUnknown_QueryInterface_Proxy (Address: 0x18003b640)
IUnknown_Release_Proxy (Address: 0x18003b5f8)
NdrCStdStubBuffer2_Release (Address: 0x18003b628)
NdrDllCanUnloadNow (Address: 0x18003b600)
NdrDllGetClassObject (Address: 0x18003b618)
NdrOleAllocate (Address: 0x18003b610)
NdrOleFree (Address: 0x18003b608)
NdrStubCall3 (Address: 0x18003b638)
NdrStubForwardingFunction (Address: 0x18003b620)