Windows 10 DLL File Information - TokenBroker.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Token Broker
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	571 KB
Total Number of Exported Functions:	3
Total Number of Exported Functions With Names:	3

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	536,064 Bytes	91.6%	Read, Execute	Code
.data	0x00084000	512 Bytes	0.1%	Write, Read	Initialized Data
.idata	0x00085000	9,216 Bytes	1.6%	Read	Initialized Data
.didat	0x00088000	512 Bytes	0.1%	Write, Read	Initialized Data
.rsrc	0x00089000	1,536 Bytes	0.3%	Read	Initialized Data
.reloc	0x0008a000	36,352 Bytes	6.2%	Read, Discardable	Initialized Data

Static Linking

TokenBroker.dll is statically linked to the following files:

msvcrt.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-winrt-error-l1-1-1.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-errorhandling-l1-1-1.dll
bcrypt.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
OLEAUT32.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-synch-l1-2-1.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-core-registry-l1-1-0.dll
combase.dll
ntdll.dll
api-ms-win-appmodel-runtime-l1-1-1.dll
api-ms-win-shcore-thread-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-processenvironment-l1-2-0.dll
RPCRT4.dll
api-ms-win-core-delayload-l1-1-1.dll
USERENV.dll
api-ms-win-core-string-l2-1-0.dll
api-ms-win-core-file-l1-2-1.dll
CRYPT32.dll
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
api-ms-win-core-shlwapi-legacy-l1-1-0.dll

This means that when TokenBroker.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, TokenBroker.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	0	0 Bytes	0.0%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	2	1,112 Bytes	0.2%
Total	2	1,112 Bytes	0.2%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

No string resources in this file.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

DllCanUnloadNow

DllGetActivationFactory

DllGetClassObject

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  __dllonexit

  _amsg_exit

  _callnewh

  _except_handler4_common

  _ftol2

  _initterm

  _lock

  _onexit

  _purecall

  _unlock

  free

  malloc

  memcmp

  memcpy

  memmove

  memset

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(char const * const &,int)

  public: __thiscall exception::exception(class exception const &)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  realloc

  void __cdecl operator delete(void *)

  void __cdecl operator delete[](void *)

  void __cdecl terminate(void)

  wcscspn

• api-ms-win-core-util-l1-1-0.dll:
  

  ntdll!RtlDecodePointer

  ntdll!RtlEncodePointer

• api-ms-win-core-winrt-string-l1-1-0.dll:
  

  combase!WindowsCompareStringOrdinal	combase!WindowsConcatString
  combase!WindowsCreateString	combase!WindowsCreateStringReference
  combase!WindowsDeleteString	combase!WindowsDuplicateString
  combase!WindowsGetStringLen	combase!WindowsGetStringRawBuffer
  combase!WindowsIsStringEmpty	combase!WindowsStringHasEmbeddedNull
  combase!WindowsSubstringWithSpecifiedLength

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!FreeLibrary	KernelBase!FreeLibraryAndExitThread	KernelBase!GetModuleFileNameA
  KernelBase!GetModuleHandleExW	KernelBase!GetModuleHandleW	KernelBase!GetProcAddress
  KernelBase!LoadLibraryExW

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventExW	KernelBase!CreateEventW	KernelBase!InitOnceExecuteOnce
  KernelBase!InitializeCriticalSectionEx	KernelBase!OpenSemaphoreW	KernelBase!ReleaseSemaphore
  KernelBase!SetEvent	KernelBase!Sleep	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	ntdll!RtlAcquireSRWLockExclusive	ntdll!RtlAcquireSRWLockShared
  ntdll!RtlDeleteCriticalSection	ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeConditionVariable
  ntdll!RtlLeaveCriticalSection	ntdll!RtlReleaseSRWLockExclusive	ntdll!RtlReleaseSRWLockShared

• api-ms-win-core-winrt-error-l1-1-1.dll:
  

  combase!GetRestrictedErrorInfo	combase!IsErrorPropagationEnabled
  combase!RoGetMatchingRestrictedErrorInfo	combase!RoOriginateError
  combase!RoOriginateErrorW	combase!RoReportFailedDelegate
  combase!RoTransformError	combase!SetRestrictedErrorInfo

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventActivityIdControl	ntdll!EtwEventRegister	ntdll!EtwEventSetInformation
  ntdll!EtwEventUnregister	ntdll!EtwEventWriteTransfer

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!DeleteProcThreadAttributeList	KernelBase!InitializeProcThreadAttributeList
  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken
  KernelBase!SetThreadToken	KernelBase!UpdateProcThreadAttribute
  kernel32!CreateProcessAsUserW	kernel32!CreateThread
  kernel32!GetCurrentProcess	kernel32!GetCurrentProcessId
  kernel32!GetCurrentThread	kernel32!GetCurrentThreadId
  kernel32!GetProcessId	kernel32!OpenProcess
  kernel32!ProcessIdToSessionId	kernel32!TerminateProcess
  kernel32!TlsAlloc	kernel32!TlsFree
  kernel32!TlsGetValue	kernel32!TlsSetValue

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetSystemDirectoryW

  KernelBase!GetSystemTimeAsFileTime

  KernelBase!GetTickCount

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!RaiseException	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• bcrypt.dll:
  

  BCryptCloseAlgorithmProvider	BCryptCreateHash	BCryptDestroyHash	BCryptFinishHash
  BCryptGenRandom	BCryptGetProperty	BCryptHashData	BCryptOpenAlgorithmProvider

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AllocateAndInitializeSid	KernelBase!CheckTokenMembershipEx	KernelBase!CopySid
  KernelBase!CreateWellKnownSid	KernelBase!DuplicateTokenEx	KernelBase!FreeSid
  KernelBase!GetLengthSid	KernelBase!GetSidLengthRequired	KernelBase!GetSidSubAuthority
  KernelBase!GetSidSubAuthorityCount	KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser
  KernelBase!InitializeSid	KernelBase!RevertToSelf	KernelBase!SetTokenInformation

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc

  KernelBase!LocalFree

• api-ms-win-core-winrt-l1-1-0.dll:
  

  combase!RoActivateInstance	combase!RoGetActivationFactory	combase!RoInitialize
  combase!RoUninitialize

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSidToSidW

• OLEAUT32.dll:
  

  SysAllocString

  SysFreeString

  SysStringLen

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CallbackMayRunLong	KernelBase!CreateThreadpool	KernelBase!CreateThreadpoolTimer
  KernelBase!CreateThreadpoolWork	KernelBase!TrySubmitThreadpoolCallback	ntdll!TpCallbackUnloadDllOnCompletion
  ntdll!TpPostWork	ntdll!TpReleasePool	ntdll!TpReleaseTimer
  ntdll!TpReleaseWork	ntdll!TpSetTimer	ntdll!TpWaitForTimer

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!CompareStringOrdinal

• api-ms-win-core-synch-l1-2-1.dll:
  

  KernelBase!CreateSemaphoreW

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringW

• api-ms-win-core-localization-l1-2-1.dll:
  

  KernelBase!FormatMessageW

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegDeleteValueW	KernelBase!RegGetValueW	KernelBase!RegOpenKeyExW
  KernelBase!RegSetValueExW

• combase.dll:
  

• ntdll.dll:
  

  NtClose	NtCreateFile
  NtQueryInformationProcess	NtQueryInformationToken
  NtQueryWnfStateData	RtlAllocateHeap
  RtlCompareUnicodeString	RtlDosPathNameToRelativeNtPathName_U
  RtlEqualSid	RtlFreeHeap
  RtlFreeSid	RtlInitUnicodeString
  RtlLoadString	RtlNtStatusToDosError
  RtlNtStatusToDosErrorNoTeb	RtlPublishWnfStateData
  RtlReleaseRelativeName	RtlRunOnceExecuteOnce
  RtlSubscribeWnfStateChangeNotification	RtlUnsubscribeWnfStateChangeNotification
  _itow_s	_vsnwprintf
  _wcsicmp	memcpy_s
  memmove_s	wcscat_s
  wcschr	wcscpy_s

• api-ms-win-appmodel-runtime-l1-1-1.dll:
  

  kernel!GetPackageApplicationIds

  kernel!ParseApplicationUserModelId

• api-ms-win-shcore-thread-l1-1-0.dll:
  

  SHCore!SHCreateThreadRef

  SHCore!SHGetThreadRef

  SHCore!SHSetThreadRef

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-rtcore-ntuser-window-l1-1-0.dll:
  

  user32!DispatchMessageW

  user32!PeekMessageW

  user32!PostThreadMessageW

  user32!TranslateMessage

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!QueryFullProcessImageNameW

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

• RPCRT4.dll:
  

  I_RpcExceptionFilter	I_RpcMapWin32Status	NdrClientCall4	RpcBindingBind
  RpcBindingCreateW	RpcBindingFree

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• USERENV.dll:
  

  CreateAppContainerProfile

  ExpandEnvironmentStringsForUserW

  GetAppContainerFolderPath

• api-ms-win-core-string-l2-1-0.dll:
  

  KernelBase!CharLowerW

• api-ms-win-core-file-l1-2-1.dll:
  

  KernelBase!CompareFileTime	KernelBase!CreateDirectoryW	KernelBase!CreateFileW	KernelBase!DeleteFileW
  KernelBase!FindClose	KernelBase!FindFirstFileW	KernelBase!FindNextFileW	KernelBase!GetFileSizeEx
  KernelBase!ReadFile	KernelBase!SetEndOfFile	KernelBase!SetFilePointer	KernelBase!WriteFile

• CRYPT32.dll:
  

  CryptBinaryToStringW

  CryptProtectData

  CryptStringToBinaryW

  CryptUnprotectData

• api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll:
  

  WinTypes!RoCreatePropertySetSerializer

• api-ms-win-core-shlwapi-legacy-l1-1-0.dll:
  

  KernelBase!PathFileExistsW