useractivitybroker.dll

Description: useractivitybroker

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: c0b7a7f73007dc77f933b17aaddb4ceb

File Size: 148.5 KB

Uploaded At: Dec. 1, 2025, 8:05 a.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0xa4b0)
  • DllGetActivationFactory (Ordinal: 2, Address: 0xa470)
  • DllGetClassObject (Ordinal: 3, Address: 0xa490)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x10023004)
  • IsDebuggerPresent (Address: 0x10023000)
  • OutputDebugStringW (Address: 0x10023008)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10023010)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10023018)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10023024)
  • RaiseException (Address: 0x10023030)
  • SetLastError (Address: 0x10023020)
  • SetUnhandledExceptionFilter (Address: 0x1002302c)
  • UnhandledExceptionFilter (Address: 0x10023028)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10023038)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10023040)
  • HeapAlloc (Address: 0x10023044)
  • HeapFree (Address: 0x10023048)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x10023050)
api-ms-win-core-libraryloader-l1-2-0.dll
  • GetModuleFileNameA (Address: 0x10023058)
  • GetModuleHandleExW (Address: 0x10023060)
  • GetModuleHandleW (Address: 0x1002305c)
  • GetProcAddress (Address: 0x10023064)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1002306c)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x10023088)
  • GetCurrentProcessId (Address: 0x10023074)
  • GetCurrentThread (Address: 0x10023084)
  • GetCurrentThreadId (Address: 0x10023080)
  • OpenProcessToken (Address: 0x1002307c)
  • OpenThreadToken (Address: 0x1002308c)
  • TerminateProcess (Address: 0x10023078)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x10023094)
  • OpenProcess (Address: 0x10023098)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100230a0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100230b0)
  • RegEnumKeyExW (Address: 0x100230b4)
  • RegGetValueW (Address: 0x100230ac)
  • RegOpenKeyExW (Address: 0x100230a8)
  • RegQueryInfoKeyW (Address: 0x100230b8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x100230c4)
  • AcquireSRWLockShared (Address: 0x10023104)
  • CreateEventExW (Address: 0x100230cc)
  • CreateMutexExW (Address: 0x10023100)
  • CreateSemaphoreExW (Address: 0x100230dc)
  • DeleteCriticalSection (Address: 0x100230d4)
  • EnterCriticalSection (Address: 0x100230f0)
  • InitializeCriticalSectionEx (Address: 0x100230f8)
  • InitializeSRWLock (Address: 0x100230f4)
  • LeaveCriticalSection (Address: 0x100230ec)
  • OpenSemaphoreW (Address: 0x100230c8)
  • ReleaseMutex (Address: 0x100230fc)
  • ReleaseSemaphore (Address: 0x100230e0)
  • ReleaseSRWLockExclusive (Address: 0x100230e8)
  • ReleaseSRWLockShared (Address: 0x100230d8)
  • SetEvent (Address: 0x100230d0)
  • WaitForSingleObject (Address: 0x100230e4)
  • WaitForSingleObjectEx (Address: 0x100230c0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x10023114)
  • InitOnceComplete (Address: 0x1002310c)
  • InitOnceExecuteOnce (Address: 0x10023110)
api-ms-win-core-synch-l1-2-1.dll
  • WaitForMultipleObjects (Address: 0x1002311c)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x10023124)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x10023134)
  • CreateThreadpoolTimer (Address: 0x10023130)
  • SetThreadpoolTimer (Address: 0x10023138)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1002312c)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x10023144)
  • EncodePointer (Address: 0x10023140)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x100231b0)
  • __std_terminate (Address: 0x100231ac)
  • _CxxThrowException (Address: 0x10023194)
  • _except_handler4_common (Address: 0x10023190)
  • _o___std_exception_copy (Address: 0x100231a8)
  • _o___std_exception_destroy (Address: 0x100231a4)
  • _o___std_type_info_destroy_list (Address: 0x100231a0)
  • _o___stdio_common_vsnprintf_s (Address: 0x1002319c)
  • _o___stdio_common_vswprintf (Address: 0x10023198)
  • _o__callnewh (Address: 0x1002314c)
  • _o__cexit (Address: 0x10023150)
  • _o__configure_narrow_argv (Address: 0x10023154)
  • _o__crt_atexit (Address: 0x10023158)
  • _o__errno (Address: 0x1002315c)
  • _o__execute_onexit_table (Address: 0x10023160)
  • _o__initialize_narrow_environment (Address: 0x10023164)
  • _o__initialize_onexit_table (Address: 0x10023168)
  • _o__invalid_parameter_noinfo (Address: 0x1002316c)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x10023170)
  • _o__purecall (Address: 0x10023174)
  • _o__register_onexit_function (Address: 0x10023178)
  • _o__seh_filter_dll (Address: 0x1002317c)
  • _o_free (Address: 0x10023184)
  • _o_malloc (Address: 0x10023188)
  • _o_terminate (Address: 0x1002318c)
  • memcmp (Address: 0x100231b4)
  • memcpy (Address: 0x100231b8)
  • memmove (Address: 0x10023180)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x100231c4)
  • _initterm_e (Address: 0x100231c0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x100231cc)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x100231d4)
  • EventRegister (Address: 0x100231e4)
  • EventSetInformation (Address: 0x100231dc)
  • EventUnregister (Address: 0x100231e0)
  • EventWriteTransfer (Address: 0x100231d8)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x100231ec)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x100231f4)
  • SHTaskPoolQueueTask (Address: 0x100231f8)
msvcp_win.dll
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10023200)