ACPBackgroundManagerPolicy.dll

Description: <d> ACP Background Manager Policy DLL

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: e63a7ca4c3a4af580acf510b89457f62

File Size: 209.0 KB

Uploaded At: Dec. 1, 2025, 7:21 a.m.

Views: 22

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x19c40)
  • DllGetClassObject (Ordinal: 2, Address: 0xc190)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll
  • PackageFamilyNameFromFullName (Address: 0x180027520)
api-ms-win-appmodel-runtime-l1-1-1.dll
  • GetPackageFamilyNameFromToken (Address: 0x180027530)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x180027550)
  • CoCreateInstance (Address: 0x180027558)
  • CoTaskMemAlloc (Address: 0x180027548)
  • CoTaskMemFree (Address: 0x180027540)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180027570)
  • IsDebuggerPresent (Address: 0x180027578)
  • OutputDebugStringW (Address: 0x180027568)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180027588)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180027598)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800275c8)
  • RaiseException (Address: 0x1800275c0)
  • SetLastError (Address: 0x1800275a8)
  • SetUnhandledExceptionFilter (Address: 0x1800275b0)
  • UnhandledExceptionFilter (Address: 0x1800275b8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800275e0)
  • DuplicateHandle (Address: 0x1800275d8)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180027600)
  • HeapAlloc (Address: 0x1800275f0)
  • HeapFree (Address: 0x1800275f8)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x180027610)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180027630)
  • GetModuleFileNameA (Address: 0x180027640)
  • GetModuleHandleExW (Address: 0x180027620)
  • GetModuleHandleW (Address: 0x180027628)
  • GetProcAddress (Address: 0x180027638)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180027650)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x180027660)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180027690)
  • GetCurrentProcessId (Address: 0x180027678)
  • GetCurrentThreadId (Address: 0x180027670)
  • GetProcessId (Address: 0x180027680)
  • OpenProcessToken (Address: 0x180027698)
  • TerminateProcess (Address: 0x180027688)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1800276a8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800276b8)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1800276c8)
api-ms-win-core-psm-key-l1-1-0.dll
  • PsmGetApplicationNameFromKey (Address: 0x1800276e8)
  • PsmGetKeyFromProcess (Address: 0x1800276e0)
  • PsmGetKeyFromToken (Address: 0x1800276d8)
  • PsmGetPackageFullNameFromKey (Address: 0x1800276f0)
api-ms-win-core-quirks-l1-1-1.dll
  • QuirkIsEnabledForPackage3 (Address: 0x180027700)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180027728)
  • RegCreateKeyExW (Address: 0x180027738)
  • RegDeleteKeyExW (Address: 0x180027718)
  • RegEnumKeyExW (Address: 0x180027710)
  • RegGetValueW (Address: 0x180027720)
  • RegOpenKeyExW (Address: 0x180027748)
  • RegQueryValueExW (Address: 0x180027730)
  • RegSetValueExW (Address: 0x180027740)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180027758)
  • RtlLookupFunctionEntry (Address: 0x180027768)
  • RtlVirtualUnwind (Address: 0x180027760)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFindFileNameW (Address: 0x180027778)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x180027788)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180027828)
  • AcquireSRWLockShared (Address: 0x180027810)
  • CreateEventW (Address: 0x1800277c8)
  • CreateMutexExW (Address: 0x1800277f0)
  • CreateSemaphoreExW (Address: 0x1800277a0)
  • DeleteCriticalSection (Address: 0x180027800)
  • EnterCriticalSection (Address: 0x1800277b8)
  • InitializeCriticalSection (Address: 0x180027808)
  • InitializeCriticalSectionEx (Address: 0x180027798)
  • InitializeSRWLock (Address: 0x180027820)
  • LeaveCriticalSection (Address: 0x1800277c0)
  • OpenSemaphoreW (Address: 0x1800277e8)
  • ReleaseMutex (Address: 0x1800277d8)
  • ReleaseSemaphore (Address: 0x1800277a8)
  • ReleaseSRWLockExclusive (Address: 0x1800277f8)
  • ReleaseSRWLockShared (Address: 0x180027818)
  • ResetEvent (Address: 0x1800277d0)
  • WaitForSingleObject (Address: 0x1800277b0)
  • WaitForSingleObjectEx (Address: 0x1800277e0)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x180027838)
  • InitOnceComplete (Address: 0x180027848)
  • InitOnceExecuteOnce (Address: 0x180027840)
  • Sleep (Address: 0x180027850)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180027868)
  • GetTickCount (Address: 0x180027860)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x180027878)
  • CloseThreadpoolWait (Address: 0x180027898)
  • CreateThreadpoolTimer (Address: 0x1800278b0)
  • CreateThreadpoolWait (Address: 0x180027880)
  • SetThreadpoolTimer (Address: 0x1800278a8)
  • SetThreadpoolWait (Address: 0x180027888)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1800278a0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x180027890)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800278c8)
  • EncodePointer (Address: 0x1800278c0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • RoOriginateError (Address: 0x1800278d8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1800278e8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x180027910)
  • WindowsCreateStringReference (Address: 0x1800278f8)
  • WindowsDeleteString (Address: 0x180027908)
  • WindowsGetStringLen (Address: 0x180027918)
  • WindowsGetStringRawBuffer (Address: 0x180027900)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x180027938)
  • EventRegister (Address: 0x180027948)
  • EventSetInformation (Address: 0x180027940)
  • EventUnregister (Address: 0x180027930)
  • EventWriteTransfer (Address: 0x180027928)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x180027958)
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180027960)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolQueueTask (Address: 0x180027970)
msvcrt.dll
  • __C_specific_handler (Address: 0x180027988)
  • __CxxFrameHandler3 (Address: 0x180027a18)
  • __dllonexit (Address: 0x1800279d0)
  • _amsg_exit (Address: 0x1800279a0)
  • _callnewh (Address: 0x1800279e0)
  • _CxxThrowException (Address: 0x1800279d8)
  • _initterm (Address: 0x180027990)
  • _lock (Address: 0x180027a70)
  • _onexit (Address: 0x180027a10)
  • _purecall (Address: 0x180027a00)
  • _unlock (Address: 0x180027980)
  • _vsnprintf_s (Address: 0x180027a08)
  • _vsnwprintf (Address: 0x180027a68)
  • _XcptFilter (Address: 0x180027a50)
  • ??_V@YAXPEAX@Z (Address: 0x1800279f8)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800279c0)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800279b8)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180027a28)
  • ??0exception@@QEAA@XZ (Address: 0x180027a38)
  • ??1exception@@UEAA@XZ (Address: 0x180027a40)
  • ??1type_info@@UEAA@XZ (Address: 0x180027a30)
  • ??3@YAXPEAX@Z (Address: 0x180027a58)
  • ?terminate@@YAXXZ (Address: 0x180027a20)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1800279b0)
  • free (Address: 0x1800279e8)
  • malloc (Address: 0x1800279f0)
  • memcmp (Address: 0x1800279a8)
  • memcpy (Address: 0x180027a48)
  • memcpy_s (Address: 0x180027a60)
  • memmove (Address: 0x1800279c8)
  • memmove_s (Address: 0x180027998)
  • memset (Address: 0x180027a78)
ntdll.dll
  • NtClose (Address: 0x180027a88)
  • NtCreateWnfStateName (Address: 0x180027ae8)
  • NtDeleteWnfStateName (Address: 0x180027ae0)
  • NtOpenProcessToken (Address: 0x180027a98)
  • NtQueryInformationToken (Address: 0x180027a90)
  • RtlAllocateHeap (Address: 0x180027ad0)
  • RtlCopySid (Address: 0x180027b10)
  • RtlEqualSid (Address: 0x180027b18)
  • RtlFreeHeap (Address: 0x180027ad8)
  • RtlGetDeviceFamilyInfoEnum (Address: 0x180027aa8)
  • RtlInitUnicodeString (Address: 0x180027af8)
  • RtlIsMultiSessionSku (Address: 0x180027aa0)
  • RtlLengthSid (Address: 0x180027b08)
  • RtlNtStatusToDosError (Address: 0x180027b28)
  • RtlPublishWnfStateData (Address: 0x180027af0)
  • RtlQueryPackageClaims (Address: 0x180027b20)
  • RtlQueryTokenHostIdAsUlong64 (Address: 0x180027ac8)
  • RtlQueryWnfStateData (Address: 0x180027ac0)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x180027ab8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180027ab0)
  • RtlValidSid (Address: 0x180027b00)
ResourcePolicyClient.dll
  • CreateResourcePolicyStoreClient (Address: 0x180027510)
RMCLIENT.dll
  • HamCloseActivity (Address: 0x1800274a8)
  • HamConnectToServer (Address: 0x180027478)
  • HamCreateActivity (Address: 0x1800274a0)
  • HamDisconnectFromServer (Address: 0x180027470)
  • HamPopulateActivityProperties (Address: 0x180027498)
  • HamResetExternalResourcePriority (Address: 0x180027490)
  • HamSetExternalResourcePriority (Address: 0x180027480)
  • HamStartActivityAsync (Address: 0x180027448)
  • HamStopActivity (Address: 0x1800274b0)
  • RmAccessCheck (Address: 0x180027460)
  • RmAcquireResources (Address: 0x180027458)
  • RmGetNotification (Address: 0x180027488)
  • RmRegisterResource (Address: 0x180027450)
  • RmReleaseResources (Address: 0x180027468)
RPCRT4.dll
  • NdrServerCall2 (Address: 0x1800274c8)
  • NdrServerCallAll (Address: 0x180027500)
  • RpcBindingVectorFree (Address: 0x1800274d0)
  • RpcEpRegisterW (Address: 0x1800274f0)
  • RpcEpUnregister (Address: 0x1800274d8)
  • RpcServerInqBindings (Address: 0x1800274e8)
  • RpcServerRegisterIf3 (Address: 0x1800274f8)
  • RpcServerUnregisterIf (Address: 0x1800274c0)
  • RpcServerUseProtseqW (Address: 0x1800274e0)