DevicesFlowBroker.dll

Description: DevicesFlow Broker

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: ef72a8c9f52d2a0a8a2a950bc14a8d64

File Size: 584.0 KB

Uploaded At: Dec. 1, 2025, 7:26 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x5930)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x5660)
  • DllGetClassObject (Ordinal: 3, Address: 0x5840)
  • ServiceMain (Ordinal: 4, Address: 0x5a30)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll
  • GetPackagesByPackageFamily (Address: 0x180070278)
api-ms-win-core-com-l1-1-0.dll
  • CoAddRefServerProcess (Address: 0x180070350)
  • CoCreateFreeThreadedMarshaler (Address: 0x1800702d8)
  • CoCreateGuid (Address: 0x1800702d0)
  • CoCreateInstance (Address: 0x180070330)
  • CoDecrementMTAUsage (Address: 0x180070310)
  • CoDisconnectContext (Address: 0x180070320)
  • CoGetInterfaceAndReleaseStream (Address: 0x1800702f0)
  • CoGetMalloc (Address: 0x1800702b8)
  • CoGetObjectContext (Address: 0x180070338)
  • CoImpersonateClient (Address: 0x1800702a0)
  • CoIncrementMTAUsage (Address: 0x1800702f8)
  • CoInitializeSecurity (Address: 0x180070308)
  • CoMarshalInterface (Address: 0x180070300)
  • CoRegisterClassObject (Address: 0x180070328)
  • CoReleaseMarshalData (Address: 0x1800702e0)
  • CoReleaseServerProcess (Address: 0x180070340)
  • CoResumeClassObjects (Address: 0x180070318)
  • CoRevertToSelf (Address: 0x180070298)
  • CoRevokeClassObject (Address: 0x1800702e8)
  • CoTaskMemAlloc (Address: 0x1800702c8)
  • CoTaskMemFree (Address: 0x1800702c0)
  • CoTaskMemRealloc (Address: 0x1800702b0)
  • CoWaitForMultipleHandles (Address: 0x180070290)
  • CreateStreamOnHGlobal (Address: 0x180070348)
  • PropVariantClear (Address: 0x1800702a8)
  • StringFromGUID2 (Address: 0x180070288)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x180070360)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180070378)
  • IsDebuggerPresent (Address: 0x180070370)
  • OutputDebugStringW (Address: 0x180070380)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180070390)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800703a0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800703b0)
  • RaiseException (Address: 0x1800703b8)
  • SetLastError (Address: 0x1800703d0)
  • SetUnhandledExceptionFilter (Address: 0x1800703c8)
  • UnhandledExceptionFilter (Address: 0x1800703c0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800703e0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800703f0)
  • HeapAlloc (Address: 0x180070400)
  • HeapFree (Address: 0x180070408)
  • HeapReAlloc (Address: 0x1800703f8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180070418)
  • LocalFree (Address: 0x180070420)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180070430)
  • InterlockedPushEntrySList (Address: 0x180070438)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180070490)
  • FindStringOrdinal (Address: 0x180070488)
  • FreeLibrary (Address: 0x180070480)
  • GetModuleFileNameA (Address: 0x180070460)
  • GetModuleFileNameW (Address: 0x180070448)
  • GetModuleHandleExW (Address: 0x180070458)
  • GetModuleHandleW (Address: 0x180070450)
  • GetProcAddress (Address: 0x180070468)
  • LoadLibraryExW (Address: 0x180070478)
  • LoadStringW (Address: 0x180070470)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1800704a0)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800704b0)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1800704c0)
  • GetCurrentProcess (Address: 0x1800704e0)
  • GetCurrentProcessId (Address: 0x1800704d8)
  • GetCurrentThread (Address: 0x1800704d0)
  • GetCurrentThreadId (Address: 0x1800704e8)
  • OpenProcessToken (Address: 0x1800704f0)
  • OpenThreadToken (Address: 0x1800704c8)
  • TerminateProcess (Address: 0x1800704f8)
api-ms-win-core-processthreads-l1-1-1.dll
  • GetProcessMitigationPolicy (Address: 0x180070508)
  • IsProcessorFeaturePresent (Address: 0x180070510)
  • OpenProcess (Address: 0x180070518)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180070528)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x180070538)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180070570)
  • RegCreateKeyExW (Address: 0x180070578)
  • RegEnumKeyExW (Address: 0x180070550)
  • RegGetValueW (Address: 0x180070558)
  • RegOpenKeyExW (Address: 0x180070568)
  • RegQueryInfoKeyW (Address: 0x180070560)
  • RegSetValueExW (Address: 0x180070548)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • StrStrIW (Address: 0x180070588)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800705a0)
  • MultiByteToWideChar (Address: 0x180070598)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180070610)
  • AcquireSRWLockShared (Address: 0x180070640)
  • CreateEventExW (Address: 0x1800705f0)
  • CreateEventW (Address: 0x180070630)
  • CreateMutexExW (Address: 0x1800705d0)
  • CreateSemaphoreExW (Address: 0x1800705b0)
  • DeleteCriticalSection (Address: 0x1800705c0)
  • EnterCriticalSection (Address: 0x1800705b8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1800705c8)
  • InitializeCriticalSectionEx (Address: 0x1800705d8)
  • InitializeSRWLock (Address: 0x1800705e8)
  • LeaveCriticalSection (Address: 0x1800705f8)
  • OpenSemaphoreW (Address: 0x180070600)
  • ReleaseMutex (Address: 0x180070648)
  • ReleaseSemaphore (Address: 0x1800705e0)
  • ReleaseSRWLockExclusive (Address: 0x180070620)
  • ReleaseSRWLockShared (Address: 0x180070628)
  • ResetEvent (Address: 0x180070638)
  • SetEvent (Address: 0x180070618)
  • WaitForSingleObject (Address: 0x180070650)
  • WaitForSingleObjectEx (Address: 0x180070608)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x180070670)
  • InitOnceComplete (Address: 0x180070678)
  • InitOnceExecuteOnce (Address: 0x180070680)
  • WaitOnAddress (Address: 0x180070668)
  • WakeByAddressAll (Address: 0x180070660)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x180070690)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800706a0)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1800706b8)
  • CloseThreadpoolWait (Address: 0x1800706c8)
  • CloseThreadpoolWork (Address: 0x1800706d8)
  • CreateThreadpoolTimer (Address: 0x1800706f8)
  • CreateThreadpoolWait (Address: 0x1800706e8)
  • CreateThreadpoolWork (Address: 0x1800706f0)
  • FreeLibraryWhenCallbackReturns (Address: 0x180070708)
  • SetThreadpoolTimer (Address: 0x180070700)
  • SetThreadpoolWait (Address: 0x1800706e0)
  • SubmitThreadpoolWork (Address: 0x1800706d0)
  • TrySubmitThreadpoolCallback (Address: 0x1800706c0)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800706b0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180070720)
  • EncodePointer (Address: 0x180070718)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x180070758)
  • RoFailFastWithErrorContext (Address: 0x180070750)
  • RoOriginateError (Address: 0x180070740)
  • RoOriginateErrorW (Address: 0x180070730)
  • RoTransformError (Address: 0x180070748)
  • SetRestrictedErrorInfo (Address: 0x180070738)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x180070780)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x180070768)
  • RoOriginateLanguageException (Address: 0x180070770)
  • RoReportFailedDelegate (Address: 0x180070778)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800707a0)
  • RoGetActivationFactory (Address: 0x1800707b8)
  • RoInitialize (Address: 0x180070798)
  • RoRegisterActivationFactories (Address: 0x1800707a8)
  • RoRevokeActivationFactories (Address: 0x180070790)
  • RoUninitialize (Address: 0x1800707b0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCompareStringOrdinal (Address: 0x1800707e8)
  • WindowsCreateString (Address: 0x180070810)
  • WindowsCreateStringReference (Address: 0x180070808)
  • WindowsDeleteString (Address: 0x1800707d8)
  • WindowsDeleteStringBuffer (Address: 0x180070818)
  • WindowsDuplicateString (Address: 0x1800707f8)
  • WindowsGetStringRawBuffer (Address: 0x1800707e0)
  • WindowsIsStringEmpty (Address: 0x1800707d0)
  • WindowsPreallocateStringBuffer (Address: 0x180070800)
  • WindowsPromoteStringBuffer (Address: 0x1800707f0)
  • WindowsStringHasEmbeddedNull (Address: 0x1800707c8)
api-ms-win-crt-math-l1-1-0.dll
  • ceilf (Address: 0x180070828)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1800708a0)
  • __CxxFrameHandler3 (Address: 0x1800708a8)
  • __CxxFrameHandler4 (Address: 0x180070938)
  • __std_terminate (Address: 0x180070930)
  • _CxxThrowException (Address: 0x1800708b0)
  • _o___std_exception_copy (Address: 0x1800708e8)
  • _o___std_exception_destroy (Address: 0x1800708e0)
  • _o___std_type_info_destroy_list (Address: 0x1800708d8)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800708d0)
  • _o___stdio_common_vswprintf (Address: 0x1800708c0)
  • _o___stdio_common_vswscanf (Address: 0x1800708b8)
  • _o__callnewh (Address: 0x180070918)
  • _o__cexit (Address: 0x180070910)
  • _o__configure_narrow_argv (Address: 0x180070908)
  • _o__crt_atexit (Address: 0x180070900)
  • _o__errno (Address: 0x1800708f8)
  • _o__execute_onexit_table (Address: 0x1800708f0)
  • _o__get_errno (Address: 0x1800708c8)
  • _o__initialize_narrow_environment (Address: 0x180070838)
  • _o__initialize_onexit_table (Address: 0x180070840)
  • _o__invalid_parameter_noinfo (Address: 0x180070848)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180070850)
  • _o__purecall (Address: 0x180070858)
  • _o__register_onexit_function (Address: 0x180070860)
  • _o__seh_filter_dll (Address: 0x180070868)
  • _o__set_errno (Address: 0x180070870)
  • _o_free (Address: 0x180070880)
  • _o_iswspace (Address: 0x180070888)
  • _o_malloc (Address: 0x180070890)
  • _o_terminate (Address: 0x180070898)
  • memcmp (Address: 0x180070920)
  • memcpy (Address: 0x180070928)
  • memmove (Address: 0x180070878)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180070950)
  • _initterm_e (Address: 0x180070948)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180070960)
  • wcscmp (Address: 0x180070968)
api-ms-win-devices-query-l1-1-0.dll
  • DevFindProperty (Address: 0x180070980)
  • DevFreeObjectProperties (Address: 0x180070990)
  • DevFreeObjects (Address: 0x1800709a0)
  • DevGetObjectProperties (Address: 0x180070998)
  • DevGetObjects (Address: 0x180070988)
  • DevSetObjectProperties (Address: 0x180070978)
api-ms-win-devices-query-l1-1-1.dll
  • DevGetObjectPropertiesEx (Address: 0x1800709b0)
api-ms-win-dx-d3dkmt-l1-1-1.dll
  • D3DKMTNetDispQueryMiracastDisplayDeviceSupport (Address: 0x1800709c0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x1800709f8)
  • GetTraceEnableLevel (Address: 0x1800709e8)
  • GetTraceLoggerHandle (Address: 0x1800709f0)
  • RegisterTraceGuidsW (Address: 0x1800709d0)
  • TraceMessage (Address: 0x1800709e0)
  • UnregisterTraceGuids (Address: 0x1800709d8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x180070a18)
  • EventRegister (Address: 0x180070a10)
  • EventSetInformation (Address: 0x180070a20)
  • EventUnregister (Address: 0x180070a28)
  • EventWriteTransfer (Address: 0x180070a08)
api-ms-win-security-base-l1-1-0.dll
  • CreateWellKnownSid (Address: 0x180070a48)
  • GetTokenInformation (Address: 0x180070a38)
  • MakeAbsoluteSD (Address: 0x180070a40)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x180070a60)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180070a58)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x180070a70)
  • SetServiceStatus (Address: 0x180070a78)
api-ms-win-shcore-comhelpers-l1-1-0.dll
  • IUnknown_QueryService (Address: 0x180070a88)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x180070aa0)
  • SHTaskPoolGetUniqueContext (Address: 0x180070aa8)
  • SHTaskPoolQueueTask (Address: 0x180070a98)
combase.dll
  • (Address: 0x180070ab8)
  • (Address: 0x180070ac0)
  • (Address: 0x180070ac8)
  • (Address: 0x180070ad0)
msvcp_win.dll
  • _Xtime_get_ticks (Address: 0x180070b78)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180070b18)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180070af0)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180070b80)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180070b00)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180070ae0)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180070af8)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180070b88)
  • ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z (Address: 0x180070b20)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x180070b90)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x180070b10)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x180070b70)
  • ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z (Address: 0x180070b68)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x180070ae8)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180070b60)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180070b30)
  • ??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z (Address: 0x180070b40)
  • ??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ (Address: 0x180070b48)
  • ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z (Address: 0x180070b50)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x180070b08)
  • ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x180070b58)
  • ?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z (Address: 0x180070b28)
  • ?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z (Address: 0x180070b38)
ntdll.dll
  • RtlCaptureContext (Address: 0x180070bb8)
  • RtlLookupFunctionEntry (Address: 0x180070bb0)
  • RtlSidDominates (Address: 0x180070ba0)
  • RtlVirtualUnwind (Address: 0x180070ba8)
OLEAUT32.dll
  • SysFreeString (Address: 0x180070268)
  • SysStringLen (Address: 0x180070260)
twinapi.appcore.dll
  • (Address: 0x180070bc8)