Windows.Internal.ShellCommon.Broker.dll

Description: Windows Shell Common Broker

Version: 10.0.19041.4957

Architecture: 64-bit

Operating System: Windows NT

SHA256: f96b8c09773d33f10b948fa3089e1b27

File Size: 142.8 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1f50)
DllGetActivationFactory (Ordinal: 2, Address: 0x1d80)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCancelCall (Address: 0x180019950)
CoCreateFreeThreadedMarshaler (Address: 0x180019958)
CoCreateInstance (Address: 0x180019970)
CoDisableCallCancellation (Address: 0x180019968)
CoEnableCallCancellation (Address: 0x180019980)
CoGetCallContext (Address: 0x180019978)
CoTaskMemAlloc (Address: 0x180019948)
CoTaskMemFree (Address: 0x180019960)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180019990)
IsDebuggerPresent (Address: 0x1800199a0)
OutputDebugStringW (Address: 0x180019998)

api-ms-win-core-debug-l1-1-1.dll

CheckRemoteDebuggerPresent (Address: 0x1800199b0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800199c0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800199d0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800199f0)
RaiseException (Address: 0x1800199e0)
SetLastError (Address: 0x1800199f8)
SetUnhandledExceptionFilter (Address: 0x180019a00)
UnhandledExceptionFilter (Address: 0x1800199e8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180019a10)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180019a20)
HeapAlloc (Address: 0x180019a28)
HeapFree (Address: 0x180019a30)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180019a40)
LocalFree (Address: 0x180019a48)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180019a58)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180019a98)
FindStringOrdinal (Address: 0x180019a80)
FreeLibrary (Address: 0x180019aa0)
GetModuleFileNameA (Address: 0x180019a68)
GetModuleFileNameW (Address: 0x180019a90)
GetModuleHandleExW (Address: 0x180019a78)
GetModuleHandleW (Address: 0x180019a70)
GetProcAddress (Address: 0x180019a88)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180019ab0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180019ac0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180019af8)
GetCurrentProcessId (Address: 0x180019ad8)
GetCurrentThreadId (Address: 0x180019ae0)
GetProcessId (Address: 0x180019af0)
OpenProcessToken (Address: 0x180019ae8)
TerminateProcess (Address: 0x180019ad0)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x180019b18)
IsProcessorFeaturePresent (Address: 0x180019b10)
OpenProcess (Address: 0x180019b08)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180019b28)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x180019b38)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180019b48)
RtlLookupFunctionEntry (Address: 0x180019b50)
RtlVirtualUnwind (Address: 0x180019b58)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x180019b68)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180019bb0)
AcquireSRWLockShared (Address: 0x180019be8)
CreateMutexExW (Address: 0x180019b78)
CreateSemaphoreExW (Address: 0x180019ba0)
DeleteCriticalSection (Address: 0x180019ba8)
EnterCriticalSection (Address: 0x180019bb8)
InitializeCriticalSectionEx (Address: 0x180019bd0)
LeaveCriticalSection (Address: 0x180019be0)
OpenSemaphoreW (Address: 0x180019b88)
ReleaseMutex (Address: 0x180019b80)
ReleaseSemaphore (Address: 0x180019bc8)
ReleaseSRWLockExclusive (Address: 0x180019bd8)
ReleaseSRWLockShared (Address: 0x180019b98)
WaitForSingleObject (Address: 0x180019bc0)
WaitForSingleObjectEx (Address: 0x180019b90)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180019c00)
InitOnceComplete (Address: 0x180019c08)
InitOnceExecuteOnce (Address: 0x180019bf8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180019c18)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180019c28)
CreateThreadpoolTimer (Address: 0x180019c38)
SetThreadpoolTimer (Address: 0x180019c40)
WaitForThreadpoolTimerCallbacks (Address: 0x180019c30)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x180019c58)
DeleteTimerQueueTimer (Address: 0x180019c50)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180019c70)
EncodePointer (Address: 0x180019c68)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x180019c90)
RoOriginateErrorW (Address: 0x180019c80)
SetRestrictedErrorInfo (Address: 0x180019c88)

api-ms-win-core-winrt-error-l1-1-1.dll

RoGetMatchingRestrictedErrorInfo (Address: 0x180019ca0)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x180019cb0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x180019cc0)
WindowsCreateStringReference (Address: 0x180019ce0)
WindowsGetStringRawBuffer (Address: 0x180019cc8)
WindowsIsStringEmpty (Address: 0x180019cd8)
WindowsStringHasEmbeddedNull (Address: 0x180019cd0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180019d50)
__CxxFrameHandler3 (Address: 0x180019da0)
__CxxFrameHandler4 (Address: 0x180019db8)
__std_terminate (Address: 0x180019db0)
_CxxThrowException (Address: 0x180019d98)
_o___std_exception_copy (Address: 0x180019d80)
_o___std_exception_destroy (Address: 0x180019d78)
_o___std_type_info_destroy_list (Address: 0x180019d70)
_o___stdio_common_vsnprintf_s (Address: 0x180019d58)
_o___stdio_common_vswprintf (Address: 0x180019dc0)
_o__callnewh (Address: 0x180019d90)
_o__cexit (Address: 0x180019d88)
_o__configure_narrow_argv (Address: 0x180019d68)
_o__crt_atexit (Address: 0x180019d60)
_o__errno (Address: 0x180019cf0)
_o__execute_onexit_table (Address: 0x180019cf8)
_o__initialize_narrow_environment (Address: 0x180019d00)
_o__initialize_onexit_table (Address: 0x180019d08)
_o__invalid_parameter_noinfo (Address: 0x180019d10)
_o__purecall (Address: 0x180019d18)
_o__register_onexit_function (Address: 0x180019d20)
_o__seh_filter_dll (Address: 0x180019d28)
_o_free (Address: 0x180019d38)
_o_malloc (Address: 0x180019d40)
_o_wcsncpy_s (Address: 0x180019d48)
memcmp (Address: 0x180019dc8)
memcpy (Address: 0x180019dd0)
memmove (Address: 0x180019d30)
wcschr (Address: 0x180019da8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180019de8)
_initterm_e (Address: 0x180019de0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180019e08)
wcscmp (Address: 0x180019df8)
wcscspn (Address: 0x180019e00)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x180019e18)
EventSetInformation (Address: 0x180019e20)
EventUnregister (Address: 0x180019e28)
EventWriteTransfer (Address: 0x180019e30)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

GetWindowThreadProcessId (Address: 0x180019e40)

api-ms-win-security-base-l1-1-0.dll

DuplicateTokenEx (Address: 0x180019e50)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180019e60)

ntdll.dll

NtQueryInformationToken (Address: 0x180019e80)
RtlAllocateHeap (Address: 0x180019e88)
RtlCompareUnicodeString (Address: 0x180019e70)
RtlFreeHeap (Address: 0x180019e90)
RtlInitUnicodeString (Address: 0x180019e78)
RtlNtStatusToDosErrorNoTeb (Address: 0x180019e98)

SspiCli.dll

GetUserNameExW (Address: 0x180019938)