Windows.ApplicationModel.Background.SystemEventsBroker.dll

Description: Windows Background System Events Broker API Server

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 743f805893ead7a1ea033c828545f326

File Size: 89.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x5830)
DllGetActivationFactory (Ordinal: 2, Address: 0x57f0)
DllGetClassObject (Ordinal: 3, Address: 0x5810)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x10015030)
CoCreateInstance (Address: 0x1001502c)
CoMarshalInterface (Address: 0x10015038)
CoReleaseMarshalData (Address: 0x10015024)
CoTaskMemAlloc (Address: 0x10015028)
CoTaskMemFree (Address: 0x1001503c)
CreateStreamOnHGlobal (Address: 0x10015034)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x10015044)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x10015054)
IsDebuggerPresent (Address: 0x1001504c)
OutputDebugStringW (Address: 0x10015050)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1001505c)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x10015064)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1001507c)
RaiseException (Address: 0x10015070)
SetLastError (Address: 0x10015078)
SetUnhandledExceptionFilter (Address: 0x10015074)
UnhandledExceptionFilter (Address: 0x1001506c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10015084)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10015090)
HeapAlloc (Address: 0x1001508c)
HeapFree (Address: 0x10015094)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x100150a0)
GetModuleHandleExW (Address: 0x100150a8)
GetModuleHandleW (Address: 0x100150a4)
GetProcAddress (Address: 0x1001509c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100150b0)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100150bc)
GetCurrentProcessId (Address: 0x100150c8)
GetCurrentThreadId (Address: 0x100150c0)
OpenProcessToken (Address: 0x100150b8)
TerminateProcess (Address: 0x100150c4)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100150d0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100150d8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100150f4)
AcquireSRWLockShared (Address: 0x100150e4)
CreateMutexExW (Address: 0x100150e0)
CreateSemaphoreExW (Address: 0x100150e8)
InitializeSRWLock (Address: 0x10015100)
OpenSemaphoreW (Address: 0x100150fc)
ReleaseMutex (Address: 0x100150f0)
ReleaseSemaphore (Address: 0x1001510c)
ReleaseSRWLockExclusive (Address: 0x100150ec)
ReleaseSRWLockShared (Address: 0x10015108)
WaitForSingleObject (Address: 0x10015104)
WaitForSingleObjectEx (Address: 0x100150f8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x10015114)
Sleep (Address: 0x10015118)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x10015120)
GetTickCount (Address: 0x10015124)

api-ms-win-core-threadpool-l1-2-0.dll

TrySubmitThreadpoolCallback (Address: 0x1001512c)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x10015138)
EncodePointer (Address: 0x10015134)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x10015148)
RoOriginateErrorW (Address: 0x10015140)
RoTransformError (Address: 0x10015144)
SetRestrictedErrorInfo (Address: 0x1001514c)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10015154)
RoGetMatchingRestrictedErrorInfo (Address: 0x10015158)
RoReportFailedDelegate (Address: 0x1001515c)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x10015168)
RoGetActivationFactory (Address: 0x10015164)

api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x10015170)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1001517c)
WindowsCreateStringReference (Address: 0x10015194)
WindowsDeleteString (Address: 0x10015180)
WindowsDuplicateString (Address: 0x1001518c)
WindowsGetStringLen (Address: 0x10015190)
WindowsGetStringRawBuffer (Address: 0x10015178)
WindowsIsStringEmpty (Address: 0x10015188)
WindowsStringHasEmbeddedNull (Address: 0x10015184)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x1001519c)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x100151a8)
GetTokenInformation (Address: 0x100151a4)

BiWinrt.dll

BiRtCreateEventForApp (Address: 0x10015000)
BiRtDeleteEventForApp (Address: 0x10015004)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x1001520c)
__dllonexit (Address: 0x100151f8)
_amsg_exit (Address: 0x100151bc)
_callnewh (Address: 0x100151d4)
_CxxThrowException (Address: 0x100151d0)
_except_handler4_common (Address: 0x100151b8)
_initterm (Address: 0x100151b0)
_lock (Address: 0x100151c4)
_onexit (Address: 0x10015204)
_purecall (Address: 0x100151f4)
_unlock (Address: 0x100151c8)
_vsnprintf_s (Address: 0x100151e0)
_vsnwprintf (Address: 0x10015208)
_XcptFilter (Address: 0x100151cc)
??0exception@@QAE@ABV0@@Z (Address: 0x100151e4)
??0exception@@QAE@XZ (Address: 0x100151e8)
??1exception@@UAE@XZ (Address: 0x100151ec)
??1type_info@@UAE@XZ (Address: 0x100151f0)
??3@YAXPAX@Z (Address: 0x100151fc)
?what@exception@@UBEPBDXZ (Address: 0x100151d8)
free (Address: 0x100151b4)
malloc (Address: 0x100151dc)
memcpy (Address: 0x100151c0)
memcpy_s (Address: 0x10015200)
memset (Address: 0x10015210)

ntdll.dll

RtlGUIDFromString (Address: 0x10015218)
RtlInitUnicodeString (Address: 0x1001521c)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x10015014)
NdrClientCall2 (Address: 0x1001501c)
RpcBindingBind (Address: 0x10015018)
RpcBindingCreateW (Address: 0x1001500c)
RpcBindingFree (Address: 0x10015010)