Windows.Networking.BackgroundTransfer.dll

Description: Windows.Networking.BackgroundTransfer DLL

Version: 10.0.19041.5848

Architecture: 32-bit

Operating System: Windows NT

SHA256: 95a125281feae84ab86f599b0e984845

File Size: 937.0 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xd3090)
DllGetActivationFactory (Ordinal: 2, Address: 0x5f810)
DllGetClassObject (Ordinal: 3, Address: 0x48cc0)
DllMain (Ordinal: 4, Address: 0x62a40)
DllRegisterServer (Ordinal: 5, Address: 0xd30d0)
DllUnregisterServer (Ordinal: 6, Address: 0xd30f0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x100d80a0)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x100d80b8)
CStdStubBuffer2_CountRefs (Address: 0x100d80e0)
CStdStubBuffer2_Disconnect (Address: 0x100d80ec)
CStdStubBuffer2_QueryInterface (Address: 0x100d80d0)
NdrProxyForwardingFunction3 (Address: 0x100d80dc)
NdrProxyForwardingFunction4 (Address: 0x100d80f0)
NdrProxyForwardingFunction5 (Address: 0x100d80e8)
NdrProxyForwardingFunction7 (Address: 0x100d80d4)
ObjectStublessClient10 (Address: 0x100d80c0)
ObjectStublessClient11 (Address: 0x100d80cc)
ObjectStublessClient12 (Address: 0x100d80c8)
ObjectStublessClient13 (Address: 0x100d80b0)
ObjectStublessClient14 (Address: 0x100d80f8)
ObjectStublessClient15 (Address: 0x100d80a8)
ObjectStublessClient16 (Address: 0x100d80c4)
ObjectStublessClient17 (Address: 0x100d80d8)
ObjectStublessClient3 (Address: 0x100d80bc)
ObjectStublessClient6 (Address: 0x100d80e4)
ObjectStublessClient7 (Address: 0x100d80ac)
ObjectStublessClient8 (Address: 0x100d80b4)
ObjectStublessClient9 (Address: 0x100d80f4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100d8108)
IsDebuggerPresent (Address: 0x100d8100)
OutputDebugStringW (Address: 0x100d8104)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100d8110)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100d8118)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100d8120)
RaiseException (Address: 0x100d8124)
SetLastError (Address: 0x100d8128)
SetUnhandledExceptionFilter (Address: 0x100d8130)
UnhandledExceptionFilter (Address: 0x100d812c)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x100d816c)
CreateDirectoryW (Address: 0x100d8158)
CreateFileW (Address: 0x100d8160)
DeleteFileW (Address: 0x100d8168)
FindClose (Address: 0x100d814c)
FindFirstFileW (Address: 0x100d813c)
FindNextFileW (Address: 0x100d8140)
GetFileSizeEx (Address: 0x100d815c)
GetVolumeInformationByHandleW (Address: 0x100d8138)
GetVolumePathNameW (Address: 0x100d8164)
ReadFile (Address: 0x100d8148)
SetFilePointer (Address: 0x100d8150)
SetFilePointerEx (Address: 0x100d8144)
WriteFile (Address: 0x100d8154)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x100d8174)

api-ms-win-core-file-l2-1-0.dll

CreateHardLinkW (Address: 0x100d817c)
MoveFileExW (Address: 0x100d8180)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x100d8188)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100d8190)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100d819c)
HeapAlloc (Address: 0x100d81a0)
HeapFree (Address: 0x100d8198)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x100d81a8)
LocalFree (Address: 0x100d81ac)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x100d81b4)
FreeLibrary (Address: 0x100d81c8)
GetModuleFileNameA (Address: 0x100d81bc)
GetModuleHandleExW (Address: 0x100d81c0)
GetModuleHandleW (Address: 0x100d81cc)
GetProcAddress (Address: 0x100d81b8)
LoadStringW (Address: 0x100d81c4)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100d81d4)

api-ms-win-core-path-l1-1-0.dll

PathIsUNCEx (Address: 0x100d81dc)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100d81e8)
GetCurrentProcessId (Address: 0x100d81ec)
GetCurrentThread (Address: 0x100d81f4)
GetCurrentThreadId (Address: 0x100d81f8)
OpenProcessToken (Address: 0x100d81fc)
OpenThreadToken (Address: 0x100d81e4)
TerminateProcess (Address: 0x100d81f0)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x100d8204)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100d820c)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100d8214)
RegCreateKeyExW (Address: 0x100d8220)
RegGetValueW (Address: 0x100d8218)
RegOpenKeyExW (Address: 0x100d821c)
RegQueryValueExW (Address: 0x100d8228)
RegSetValueExW (Address: 0x100d8224)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100d8238)
MultiByteToWideChar (Address: 0x100d8230)
WideCharToMultiByte (Address: 0x100d8234)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100d825c)
AcquireSRWLockShared (Address: 0x100d8278)
CreateEventExW (Address: 0x100d8258)
CreateEventW (Address: 0x100d8294)
CreateMutexExW (Address: 0x100d826c)
CreateMutexW (Address: 0x100d8284)
CreateSemaphoreExW (Address: 0x100d8240)
DeleteCriticalSection (Address: 0x100d8264)
EnterCriticalSection (Address: 0x100d8274)
InitializeCriticalSection (Address: 0x100d8250)
InitializeSRWLock (Address: 0x100d8254)
LeaveCriticalSection (Address: 0x100d8290)
OpenSemaphoreW (Address: 0x100d827c)
ReleaseMutex (Address: 0x100d828c)
ReleaseSemaphore (Address: 0x100d8270)
ReleaseSRWLockExclusive (Address: 0x100d8268)
ReleaseSRWLockShared (Address: 0x100d8244)
ResetEvent (Address: 0x100d824c)
SetEvent (Address: 0x100d8248)
WaitForMultipleObjectsEx (Address: 0x100d8260)
WaitForSingleObject (Address: 0x100d8280)
WaitForSingleObjectEx (Address: 0x100d8288)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100d82a4)
InitOnceComplete (Address: 0x100d82a8)
InitOnceExecuteOnce (Address: 0x100d829c)
Sleep (Address: 0x100d82a0)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x100d82b0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100d82b8)
GetTickCount (Address: 0x100d82c0)
GetTickCount64 (Address: 0x100d82bc)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimePreciseAsFileTime (Address: 0x100d82c8)

api-ms-win-core-threadpool-l1-2-0.dll

CallbackMayRunLong (Address: 0x100d82d0)
FreeLibraryWhenCallbackReturns (Address: 0x100d82d8)
TrySubmitThreadpoolCallback (Address: 0x100d82d4)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100d82e0)
EncodePointer (Address: 0x100d82e4)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x100d82fc)
EventRegister (Address: 0x100d82ec)
EventSetInformation (Address: 0x100d82f0)
EventUnregister (Address: 0x100d82f4)
EventWriteTransfer (Address: 0x100d82f8)

api-ms-win-rtcore-ntuser-synch-l1-1-0.dll

MsgWaitForMultipleObjects (Address: 0x100d8304)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DispatchMessageW (Address: 0x100d830c)
PeekMessageW (Address: 0x100d8310)

api-ms-win-security-base-l1-1-0.dll

DuplicateToken (Address: 0x100d831c)
GetTokenInformation (Address: 0x100d8320)
ImpersonateSelf (Address: 0x100d8318)
RevertToSelf (Address: 0x100d8324)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x100d8330)
SHTaskPoolQueueTask (Address: 0x100d832c)

combase.dll

(Address: 0x100d8338)
(Address: 0x100d833c)

CRYPT32.dll

CryptProtectData (Address: 0x100d8000)
CryptUnprotectData (Address: 0x100d8004)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100d8354)
__dllonexit (Address: 0x100d83a4)
_amsg_exit (Address: 0x100d8374)
_callnewh (Address: 0x100d8394)
_except_handler4_common (Address: 0x100d8350)
_ftol2 (Address: 0x100d839c)
_initterm (Address: 0x100d836c)
_itow_s (Address: 0x100d83a0)
_lock (Address: 0x100d8364)
_onexit (Address: 0x100d8358)
_purecall (Address: 0x100d8398)
_ui64tow_s (Address: 0x100d83a8)
_ultow_s (Address: 0x100d8368)
_unlock (Address: 0x100d8360)
_vsnwprintf (Address: 0x100d837c)
_wcsicmp (Address: 0x100d835c)
_wcsnicmp (Address: 0x100d8388)
_wcstoui64 (Address: 0x100d83b4)
_XcptFilter (Address: 0x100d8390)
free (Address: 0x100d8380)
malloc (Address: 0x100d8384)
memcmp (Address: 0x100d838c)
memcpy (Address: 0x100d8348)
memcpy_s (Address: 0x100d83b0)
memmove_s (Address: 0x100d8344)
memset (Address: 0x100d83b8)
realloc (Address: 0x100d834c)
wcsstr (Address: 0x100d83ac)
wcstok_s (Address: 0x100d8370)
wcstoul (Address: 0x100d8378)

ntdll.dll

NtOpenThreadToken (Address: 0x100d83c0)
NtQuerySecurityAttributesToken (Address: 0x100d83dc)
NtQueryWnfStateData (Address: 0x100d83e8)
NtSetInformationThread (Address: 0x100d83ec)
RtlAllocateHeap (Address: 0x100d83d0)
RtlCompareMemory (Address: 0x100d83e0)
RtlCopyUnicodeString (Address: 0x100d83d4)
RtlFreeHeap (Address: 0x100d83d8)
RtlInitUnicodeString (Address: 0x100d83c8)
RtlNtStatusToDosError (Address: 0x100d83c4)
RtlSubscribeWnfStateChangeNotification (Address: 0x100d83cc)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x100d83e4)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x100d8028)
CStdStubBuffer_Connect (Address: 0x100d8014)
CStdStubBuffer_CountRefs (Address: 0x100d802c)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x100d8030)
CStdStubBuffer_DebugServerRelease (Address: 0x100d8020)
CStdStubBuffer_Disconnect (Address: 0x100d800c)
CStdStubBuffer_Invoke (Address: 0x100d8040)
CStdStubBuffer_IsIIDSupported (Address: 0x100d8018)
CStdStubBuffer_QueryInterface (Address: 0x100d8010)
IUnknown_AddRef_Proxy (Address: 0x100d8034)
IUnknown_QueryInterface_Proxy (Address: 0x100d801c)
IUnknown_Release_Proxy (Address: 0x100d8024)
NdrCStdStubBuffer_Release (Address: 0x100d8044)
NdrCStdStubBuffer2_Release (Address: 0x100d8058)
NdrDllCanUnloadNow (Address: 0x100d8048)
NdrDllGetClassObject (Address: 0x100d804c)
NdrDllRegisterProxy (Address: 0x100d8050)
NdrDllUnregisterProxy (Address: 0x100d8054)
NdrOleAllocate (Address: 0x100d8068)
NdrOleFree (Address: 0x100d8064)
NdrStubCall2 (Address: 0x100d8038)
NdrStubForwardingFunction (Address: 0x100d803c)
RpcStringFreeW (Address: 0x100d8070)
UuidCreate (Address: 0x100d8074)
UuidFromStringA (Address: 0x100d8060)
UuidFromStringW (Address: 0x100d805c)
UuidToStringW (Address: 0x100d806c)

SystemEventsBrokerClient.dll

SebCreateBackgroundDownloadEventEx (Address: 0x100d807c)
SebCreateBackgroundTransferCompletionEvent (Address: 0x100d8098)
SebDeleteEvent (Address: 0x100d8094)
SebEnumerateEventsByType (Address: 0x100d8080)
SebQueryEventData (Address: 0x100d8088)
SebRegisterWellKnownEvent (Address: 0x100d8090)
SebSignalBackgroundTransferCompletionEvent (Address: 0x100d808c)
SebSignalEvent (Address: 0x100d8084)