AuthBroker.dll

Description: Web Authentication WinRT API

Version: 10.0.19041.6033

Architecture: 64-bit

Operating System: Windows NT

SHA256: 9e6840c968775cf63b634a5ea8de458e

File Size: 218.0 KB

Uploaded At: Dec. 1, 2025, 7:23 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

FindCallingThreadImmersiveWindow (Ordinal: 1, Address: 0x10970)
AuthBrokerClearThreadClientContext (Ordinal: 2, Address: 0x14ff0)
AuthBrokerCreateClientContext (Ordinal: 3, Address: 0x2db0)
AuthBrokerFreeClientContext (Ordinal: 4, Address: 0x2f70)
AuthBrokerSetThreadClientContext (Ordinal: 5, Address: 0x150f0)
DllCanUnloadNow (Ordinal: 6, Address: 0x107b0)
DllGetActivationFactory (Ordinal: 7, Address: 0x10800)
DllGetClassObject (Ordinal: 8, Address: 0x10840)
DllInstall (Ordinal: 9, Address: 0x15240)
DllRegisterServer (Ordinal: 10, Address: 0x3450)
PurgeAuthHostSsoCache (Ordinal: 11, Address: 0x152b0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180028e08)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x180028e58)
CStdStubBuffer2_CountRefs (Address: 0x180028e78)
CStdStubBuffer2_Disconnect (Address: 0x180028e20)
CStdStubBuffer2_QueryInterface (Address: 0x180028e18)
NdrProxyForwardingFunction3 (Address: 0x180028e40)
NdrProxyForwardingFunction4 (Address: 0x180028e28)
NdrProxyForwardingFunction5 (Address: 0x180028e30)
ObjectStublessClient10 (Address: 0x180028e80)
ObjectStublessClient11 (Address: 0x180028e50)
ObjectStublessClient12 (Address: 0x180028eb8)
ObjectStublessClient13 (Address: 0x180028ed0)
ObjectStublessClient14 (Address: 0x180028eb0)
ObjectStublessClient15 (Address: 0x180028ee0)
ObjectStublessClient16 (Address: 0x180028e60)
ObjectStublessClient17 (Address: 0x180028e90)
ObjectStublessClient18 (Address: 0x180028e68)
ObjectStublessClient19 (Address: 0x180028ec0)
ObjectStublessClient20 (Address: 0x180028e70)
ObjectStublessClient21 (Address: 0x180028e48)
ObjectStublessClient3 (Address: 0x180028e88)
ObjectStublessClient4 (Address: 0x180028e38)
ObjectStublessClient5 (Address: 0x180028ec8)
ObjectStublessClient6 (Address: 0x180028ea8)
ObjectStublessClient7 (Address: 0x180028ed8)
ObjectStublessClient8 (Address: 0x180028ea0)
ObjectStublessClient9 (Address: 0x180028e98)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180028ef0)
IsDebuggerPresent (Address: 0x180028ef8)
OutputDebugStringW (Address: 0x180028f00)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180028f10)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180028f20)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180028f48)
RaiseException (Address: 0x180028f38)
SetLastError (Address: 0x180028f40)
SetUnhandledExceptionFilter (Address: 0x180028f50)
UnhandledExceptionFilter (Address: 0x180028f30)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180028f60)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180028f78)
DuplicateHandle (Address: 0x180028f70)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180028f90)
HeapAlloc (Address: 0x180028f88)
HeapFree (Address: 0x180028f98)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180028fb0)
LocalFree (Address: 0x180028fa8)
LocalReAlloc (Address: 0x180028fb8)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x180028fc8)
GetModuleHandleExW (Address: 0x180028fd0)
GetModuleHandleW (Address: 0x180028fe8)
GetProcAddress (Address: 0x180028fd8)
LoadStringW (Address: 0x180028fe0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180028ff8)

api-ms-win-core-marshal-l1-1-0.dll

HWND_UserFree (Address: 0x180029030)
HWND_UserFree64 (Address: 0x180029040)
HWND_UserMarshal (Address: 0x180029018)
HWND_UserMarshal64 (Address: 0x180029008)
HWND_UserSize (Address: 0x180029020)
HWND_UserSize64 (Address: 0x180029038)
HWND_UserUnmarshal (Address: 0x180029028)
HWND_UserUnmarshal64 (Address: 0x180029010)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180029098)
CreateThread (Address: 0x1800290a0)
DeleteProcThreadAttributeList (Address: 0x180029068)
GetCurrentProcess (Address: 0x1800290f0)
GetCurrentProcessId (Address: 0x1800290e0)
GetCurrentThread (Address: 0x1800290b0)
GetCurrentThreadId (Address: 0x1800290a8)
GetExitCodeProcess (Address: 0x1800290c0)
GetProcessId (Address: 0x1800290c8)
GetProcessIdOfThread (Address: 0x1800290d0)
InitializeProcThreadAttributeList (Address: 0x180029080)
OpenProcessToken (Address: 0x180029060)
OpenThread (Address: 0x1800290d8)
OpenThreadToken (Address: 0x1800290b8)
ResumeThread (Address: 0x1800290e8)
SetThreadToken (Address: 0x180029058)
TerminateProcess (Address: 0x1800290f8)
TlsAlloc (Address: 0x180029070)
TlsFree (Address: 0x180029088)
TlsGetValue (Address: 0x180029050)
TlsSetValue (Address: 0x180029090)
UpdateProcThreadAttribute (Address: 0x180029078)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180029108)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180029118)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180029168)
RegCreateKeyExW (Address: 0x180029130)
RegDeleteValueW (Address: 0x180029158)
RegEnumKeyExW (Address: 0x180029128)
RegGetValueW (Address: 0x180029148)
RegOpenKeyExW (Address: 0x180029140)
RegQueryInfoKeyW (Address: 0x180029160)
RegQueryValueExW (Address: 0x180029138)
RegSetValueExW (Address: 0x180029150)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180029188)
RtlLookupFunctionEntry (Address: 0x180029180)
RtlVirtualUnwind (Address: 0x180029178)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180029230)
AcquireSRWLockShared (Address: 0x1800291f8)
CreateEventExW (Address: 0x180029228)
CreateEventW (Address: 0x180029200)
CreateMutexExW (Address: 0x1800291f0)
CreateMutexW (Address: 0x1800291d0)
CreateSemaphoreExW (Address: 0x1800291b0)
DeleteCriticalSection (Address: 0x180029218)
EnterCriticalSection (Address: 0x1800291a0)
InitializeCriticalSectionEx (Address: 0x180029210)
LeaveCriticalSection (Address: 0x1800291d8)
OpenSemaphoreW (Address: 0x180029220)
ReleaseMutex (Address: 0x1800291c0)
ReleaseSemaphore (Address: 0x180029198)
ReleaseSRWLockExclusive (Address: 0x1800291a8)
ReleaseSRWLockShared (Address: 0x1800291c8)
SetEvent (Address: 0x180029208)
WaitForMultipleObjectsEx (Address: 0x1800291e0)
WaitForSingleObject (Address: 0x1800291e8)
WaitForSingleObjectEx (Address: 0x1800291b8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180029240)
InitOnceComplete (Address: 0x180029248)
InitOnceExecuteOnce (Address: 0x180029258)
Sleep (Address: 0x180029250)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x180029268)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x180029280)
GetSystemTimeAsFileTime (Address: 0x180029278)
GetTickCount (Address: 0x180029288)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800292a0)
CloseThreadpoolWork (Address: 0x1800292d0)
CreateThreadpoolTimer (Address: 0x1800292b8)
CreateThreadpoolWork (Address: 0x180029298)
FreeLibraryWhenCallbackReturns (Address: 0x1800292c8)
SetThreadpoolTimer (Address: 0x1800292b0)
SubmitThreadpoolWork (Address: 0x1800292a8)
WaitForThreadpoolTimerCallbacks (Address: 0x1800292c0)

api-ms-win-core-url-l1-1-0.dll

ParseURLW (Address: 0x1800292e0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800292f0)
EncodePointer (Address: 0x1800292f8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x180029308)
RoOriginateError (Address: 0x180029310)
RoOriginateErrorW (Address: 0x180029318)
RoTransformError (Address: 0x180029320)
SetRestrictedErrorInfo (Address: 0x180029328)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180029338)
RoGetMatchingRestrictedErrorInfo (Address: 0x180029340)
RoReportFailedDelegate (Address: 0x180029348)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180029370)
RoGetActivationFactory (Address: 0x180029360)
RoInitialize (Address: 0x180029368)
RoUninitialize (Address: 0x180029358)

api-ms-win-core-winrt-string-l1-1-0.dll

HSTRING_UserFree (Address: 0x180029390)
HSTRING_UserFree64 (Address: 0x180029400)
HSTRING_UserMarshal (Address: 0x1800293c8)
HSTRING_UserMarshal64 (Address: 0x180029380)
HSTRING_UserSize (Address: 0x1800293c0)
HSTRING_UserSize64 (Address: 0x1800293d8)
HSTRING_UserUnmarshal (Address: 0x1800293b0)
HSTRING_UserUnmarshal64 (Address: 0x1800293f8)
WindowsCompareStringOrdinal (Address: 0x180029388)
WindowsCreateString (Address: 0x1800293f0)
WindowsCreateStringReference (Address: 0x180029398)
WindowsDeleteString (Address: 0x1800293a0)
WindowsDuplicateString (Address: 0x1800293e8)
WindowsGetStringLen (Address: 0x1800293e0)
WindowsGetStringRawBuffer (Address: 0x1800293a8)
WindowsIsStringEmpty (Address: 0x1800293d0)
WindowsStringHasEmbeddedNull (Address: 0x1800293b8)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x180029420)
Wow64DisableWow64FsRedirection (Address: 0x180029410)
Wow64RevertWow64FsRedirection (Address: 0x180029418)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180029450)
GetTraceEnableLevel (Address: 0x180029458)
GetTraceLoggerHandle (Address: 0x180029440)
RegisterTraceGuidsW (Address: 0x180029430)
TraceMessage (Address: 0x180029448)
UnregisterTraceGuids (Address: 0x180029438)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180029478)
EventRegister (Address: 0x180029488)
EventSetInformation (Address: 0x180029470)
EventUnregister (Address: 0x180029468)
EventWriteTransfer (Address: 0x180029480)

api-ms-win-security-appcontainer-l1-1-0.dll

GetAppContainerNamedObjectPath (Address: 0x180029498)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x1800294d0)
CopySid (Address: 0x1800294a8)
FreeSid (Address: 0x1800294c8)
GetLengthSid (Address: 0x1800294b8)
GetSidSubAuthorityCount (Address: 0x1800294c0)
GetTokenInformation (Address: 0x1800294d8)
ImpersonateLoggedOnUser (Address: 0x1800294b0)

api-ms-win-security-base-l1-2-0.dll

CheckTokenCapability (Address: 0x1800294e8)

api-ms-win-security-provider-l1-1-0.dll

GetSecurityInfo (Address: 0x1800294f8)

AUTHZ.dll

AuthzAccessCheck (Address: 0x180028d18)
AuthzFreeContext (Address: 0x180028d28)
AuthzFreeResourceManager (Address: 0x180028d20)
AuthzInitializeContextFromSid (Address: 0x180028d30)
AuthzInitializeResourceManager (Address: 0x180028d10)

combase.dll

(Address: 0x180029508)

msvcrt.dll

__C_specific_handler (Address: 0x180029568)
__CxxFrameHandler3 (Address: 0x180029540)
__dllonexit (Address: 0x180029580)
_amsg_exit (Address: 0x180029570)
_callnewh (Address: 0x1800295a0)
_initterm (Address: 0x180029520)
_lock (Address: 0x180029548)
_onexit (Address: 0x180029598)
_purecall (Address: 0x180029588)
_unlock (Address: 0x180029550)
_vsnwprintf (Address: 0x180029528)
_XcptFilter (Address: 0x180029530)
free (Address: 0x180029518)
malloc (Address: 0x180029538)
memcmp (Address: 0x180029560)
memcpy (Address: 0x180029558)
memcpy_s (Address: 0x180029590)
memmove_s (Address: 0x180029578)
memset (Address: 0x1800295a8)

netutils.dll

NetApiBufferFree (Address: 0x1800295b8)

ntdll.dll

_wcsicmp (Address: 0x180029600)
_wcsnicmp (Address: 0x1800295f0)
RtlAllocateAndInitializeSidEx (Address: 0x180029608)
RtlDeleteCriticalSection (Address: 0x1800295c8)
RtlDeriveCapabilitySidsFromName (Address: 0x180029610)
RtlEnterCriticalSection (Address: 0x1800295d0)
RtlEqualSid (Address: 0x1800295e0)
RtlInitializeCriticalSection (Address: 0x180029620)
RtlInitUnicodeString (Address: 0x180029618)
RtlIsStateSeparationEnabled (Address: 0x1800295f8)
RtlLeaveCriticalSection (Address: 0x1800295d8)
wcstoul (Address: 0x180029628)
WinSqmAddToStream (Address: 0x1800295e8)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x180028db0)
CStdStubBuffer_Connect (Address: 0x180028d78)
CStdStubBuffer_CountRefs (Address: 0x180028d70)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x180028dd0)
CStdStubBuffer_DebugServerRelease (Address: 0x180028d40)
CStdStubBuffer_Disconnect (Address: 0x180028d48)
CStdStubBuffer_Invoke (Address: 0x180028db8)
CStdStubBuffer_IsIIDSupported (Address: 0x180028dc0)
CStdStubBuffer_QueryInterface (Address: 0x180028d58)
I_RpcBindingInqLocalClientPID (Address: 0x180028dc8)
IUnknown_AddRef_Proxy (Address: 0x180028d68)
IUnknown_QueryInterface_Proxy (Address: 0x180028d60)
IUnknown_Release_Proxy (Address: 0x180028d88)
NdrCStdStubBuffer_Release (Address: 0x180028da8)
NdrCStdStubBuffer2_Release (Address: 0x180028d90)
NdrDllCanUnloadNow (Address: 0x180028da0)
NdrDllGetClassObject (Address: 0x180028d98)
NdrOleAllocate (Address: 0x180028d50)
NdrOleFree (Address: 0x180028de0)
NdrStubCall3 (Address: 0x180028dd8)
NdrStubForwardingFunction (Address: 0x180028d80)

WINHTTP.dll

WinHttpCrackUrl (Address: 0x180028df0)
WinHttpCreateUrl (Address: 0x180028df8)

wkscli.dll

NetGetJoinInformation (Address: 0x180029638)