CloudExperienceHostBroker.dll

Description: CloudExperienceHostBroker

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: a3b77460e9cecf684394cdb071e371ff

File Size: 337.4 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x57a0)
DllGetActivationFactory (Ordinal: 2, Address: 0x5490)
DllGetClassObject (Ordinal: 3, Address: 0x5670)
GetProxyDllInfo (Ordinal: 4, Address: 0x23f0)

Imported DLLs & Functions

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x18003d8b0)
CStdStubBuffer2_CountRefs (Address: 0x18003d8b8)
CStdStubBuffer2_Disconnect (Address: 0x18003d8a8)
CStdStubBuffer2_QueryInterface (Address: 0x18003d890)
NdrProxyForwardingFunction3 (Address: 0x18003d888)
NdrProxyForwardingFunction4 (Address: 0x18003d8c8)
NdrProxyForwardingFunction5 (Address: 0x18003d8d0)
ObjectStublessClient10 (Address: 0x18003d8e8)
ObjectStublessClient11 (Address: 0x18003d8c0)
ObjectStublessClient12 (Address: 0x18003d8d8)
ObjectStublessClient13 (Address: 0x18003d898)
ObjectStublessClient6 (Address: 0x18003d8e0)
ObjectStublessClient7 (Address: 0x18003d8a0)
ObjectStublessClient8 (Address: 0x18003d8f8)
ObjectStublessClient9 (Address: 0x18003d8f0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18003d918)
IsDebuggerPresent (Address: 0x18003d908)
OutputDebugStringW (Address: 0x18003d910)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18003d928)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18003d938)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18003d958)
RaiseException (Address: 0x18003d960)
SetLastError (Address: 0x18003d968)
SetUnhandledExceptionFilter (Address: 0x18003d950)
UnhandledExceptionFilter (Address: 0x18003d948)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18003d978)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18003d988)
HeapAlloc (Address: 0x18003d998)
HeapFree (Address: 0x18003d990)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18003d9b0)
LocalFree (Address: 0x18003d9a8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18003d9e0)
GetModuleFileNameA (Address: 0x18003d9d0)
GetModuleHandleExW (Address: 0x18003d9c0)
GetModuleHandleW (Address: 0x18003d9d8)
GetProcAddress (Address: 0x18003d9c8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18003d9f0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18003da28)
GetCurrentProcessId (Address: 0x18003da20)
GetCurrentThread (Address: 0x18003da08)
GetCurrentThreadId (Address: 0x18003da38)
GetProcessId (Address: 0x18003da10)
OpenProcessToken (Address: 0x18003da18)
OpenThreadToken (Address: 0x18003da00)
TerminateProcess (Address: 0x18003da30)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18003da48)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18003da58)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18003da68)
RegGetValueW (Address: 0x18003da80)
RegOpenKeyExW (Address: 0x18003da70)
RegQueryValueExW (Address: 0x18003da78)
RegSetValueExW (Address: 0x18003da88)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18003da98)
RtlLookupFunctionEntry (Address: 0x18003daa0)
RtlVirtualUnwind (Address: 0x18003daa8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrChrW (Address: 0x18003dab8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18003dac8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18003db38)
AcquireSRWLockShared (Address: 0x18003db40)
CreateEventExW (Address: 0x18003db20)
CreateMutexExW (Address: 0x18003db58)
CreateSemaphoreExW (Address: 0x18003db00)
DeleteCriticalSection (Address: 0x18003dae0)
EnterCriticalSection (Address: 0x18003daf8)
InitializeCriticalSectionEx (Address: 0x18003dad8)
InitializeSRWLock (Address: 0x18003db48)
LeaveCriticalSection (Address: 0x18003daf0)
OpenSemaphoreW (Address: 0x18003db60)
ReleaseMutex (Address: 0x18003db18)
ReleaseSemaphore (Address: 0x18003db08)
ReleaseSRWLockExclusive (Address: 0x18003db30)
ReleaseSRWLockShared (Address: 0x18003db68)
SetEvent (Address: 0x18003db28)
WaitForMultipleObjectsEx (Address: 0x18003dae8)
WaitForSingleObject (Address: 0x18003db10)
WaitForSingleObjectEx (Address: 0x18003db50)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18003db78)
InitOnceComplete (Address: 0x18003db90)
InitOnceExecuteOnce (Address: 0x18003db80)
Sleep (Address: 0x18003db88)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18003dba0)
GetSystemTimeAsFileTime (Address: 0x18003dbb0)
GetTickCount (Address: 0x18003dba8)
GetTickCount64 (Address: 0x18003dbb8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18003dbc8)
CreateThreadpoolTimer (Address: 0x18003dbd8)
SetThreadpoolTimer (Address: 0x18003dbe0)
WaitForThreadpoolTimerCallbacks (Address: 0x18003dbd0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18003dbf8)
EncodePointer (Address: 0x18003dbf0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18003dc10)
EventRegister (Address: 0x18003dc08)
EventSetInformation (Address: 0x18003dc20)
EventUnregister (Address: 0x18003dc28)
EventWriteTransfer (Address: 0x18003dc18)

api-ms-win-power-base-l1-1-0.dll

GetPwrCapabilities (Address: 0x18003dc38)

api-ms-win-security-lsalookup-l1-1-2.dll

LsaLookupUserAccountType (Address: 0x18003dc48)

api-ms-win-security-lsapolicy-l1-1-0.dll

LsaClose (Address: 0x18003dc60)
LsaFreeMemory (Address: 0x18003dc68)
LsaLookupNames2 (Address: 0x18003dc78)
LsaLookupSids (Address: 0x18003dc70)
LsaOpenPolicy (Address: 0x18003dc58)

api-ms-win-shcore-sysinfo-l1-1-0.dll

IsOS (Address: 0x18003dc88)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18003dc98)
SHTaskPoolQueueTask (Address: 0x18003dca0)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18003dcb0)

msvcrt.dll

__C_specific_handler (Address: 0x18003dce0)
__CxxFrameHandler3 (Address: 0x18003dd18)
__dllonexit (Address: 0x18003dcc0)
_amsg_exit (Address: 0x18003dd50)
_callnewh (Address: 0x18003dd88)
_CxxThrowException (Address: 0x18003dd68)
_initterm (Address: 0x18003dce8)
_lock (Address: 0x18003dcd8)
_onexit (Address: 0x18003dd48)
_purecall (Address: 0x18003dd38)
_unlock (Address: 0x18003dcd0)
_vscwprintf (Address: 0x18003dd58)
_vsnprintf_s (Address: 0x18003dd98)
_vsnwprintf (Address: 0x18003ddc0)
_XcptFilter (Address: 0x18003dd08)
??_V@YAXPEAX@Z (Address: 0x18003dd10)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x18003dd80)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x18003dd78)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18003dd20)
??0exception@@QEAA@XZ (Address: 0x18003dd28)
??1exception@@UEAA@XZ (Address: 0x18003dd30)
??1type_info@@UEAA@XZ (Address: 0x18003ddb8)
??3@YAXPEAX@Z (Address: 0x18003dd90)
?terminate@@YAXXZ (Address: 0x18003dd00)
?what@exception@@UEBAPEBDXZ (Address: 0x18003dd70)
free (Address: 0x18003dcf8)
malloc (Address: 0x18003dcf0)
memcmp (Address: 0x18003dd40)
memcpy (Address: 0x18003ddc8)
memcpy_s (Address: 0x18003dda8)
memmove (Address: 0x18003ddb0)
memmove_s (Address: 0x18003dcc8)
memset (Address: 0x18003ddd0)
realloc (Address: 0x18003dda0)
swprintf_s (Address: 0x18003dd60)

ntdll.dll

RtlInitString (Address: 0x18003dde8)
RtlInitUnicodeString (Address: 0x18003dde0)

OLEAUT32.dll

SysAllocString (Address: 0x18003d7e0)
SysFreeString (Address: 0x18003d7e8)

POWRPROF.dll

PowerDeterminePlatformRole (Address: 0x18003d7f8)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x18003d860)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x18003d810)
CStdStubBuffer_DebugServerRelease (Address: 0x18003d878)
CStdStubBuffer_Invoke (Address: 0x18003d818)
CStdStubBuffer_IsIIDSupported (Address: 0x18003d820)
IUnknown_AddRef_Proxy (Address: 0x18003d808)
IUnknown_QueryInterface_Proxy (Address: 0x18003d870)
IUnknown_Release_Proxy (Address: 0x18003d828)
NdrCStdStubBuffer2_Release (Address: 0x18003d858)
NdrDllCanUnloadNow (Address: 0x18003d830)
NdrDllGetClassObject (Address: 0x18003d848)
NdrOleAllocate (Address: 0x18003d840)
NdrOleFree (Address: 0x18003d838)
NdrStubCall3 (Address: 0x18003d868)
NdrStubForwardingFunction (Address: 0x18003d850)