Windows.ApplicationModel.Background.SystemEventsBroker.dll

Description: Windows Background System Events Broker API Server

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: ba4889bb1665188774d5971a1e353158

File Size: 120.0 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x1bb0)
DllGetActivationFactory (Ordinal: 2, Address: 0x18e0)
DllGetClassObject (Ordinal: 3, Address: 0x1ac0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x180017690)
CoCreateInstance (Address: 0x180017688)
CoMarshalInterface (Address: 0x1800176a8)
CoReleaseMarshalData (Address: 0x180017698)
CoTaskMemAlloc (Address: 0x180017680)
CoTaskMemFree (Address: 0x1800176a0)
CreateStreamOnHGlobal (Address: 0x1800176b0)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1800176c0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800176d8)
IsDebuggerPresent (Address: 0x1800176d0)
OutputDebugStringW (Address: 0x1800176e0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800176f0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180017700)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180017728)
RaiseException (Address: 0x180017718)
SetLastError (Address: 0x180017730)
SetUnhandledExceptionFilter (Address: 0x180017720)
UnhandledExceptionFilter (Address: 0x180017710)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180017740)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180017758)
HeapAlloc (Address: 0x180017750)
HeapFree (Address: 0x180017760)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x180017778)
GetModuleHandleExW (Address: 0x180017780)
GetModuleHandleW (Address: 0x180017770)
GetProcAddress (Address: 0x180017788)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180017798)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800177b8)
GetCurrentProcessId (Address: 0x1800177c8)
GetCurrentThreadId (Address: 0x1800177c0)
OpenProcessToken (Address: 0x1800177b0)
TerminateProcess (Address: 0x1800177a8)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800177d8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800177e8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800177f8)
RtlLookupFunctionEntry (Address: 0x180017800)
RtlVirtualUnwind (Address: 0x180017808)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180017828)
AcquireSRWLockShared (Address: 0x180017860)
CreateMutexExW (Address: 0x180017870)
CreateSemaphoreExW (Address: 0x180017840)
InitializeSRWLock (Address: 0x180017820)
OpenSemaphoreW (Address: 0x180017838)
ReleaseMutex (Address: 0x180017858)
ReleaseSemaphore (Address: 0x180017868)
ReleaseSRWLockExclusive (Address: 0x180017818)
ReleaseSRWLockShared (Address: 0x180017850)
WaitForSingleObject (Address: 0x180017848)
WaitForSingleObjectEx (Address: 0x180017830)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180017888)
Sleep (Address: 0x180017880)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800178a0)
GetTickCount (Address: 0x180017898)

api-ms-win-core-threadpool-l1-2-0.dll

TrySubmitThreadpoolCallback (Address: 0x1800178b0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800178c0)
EncodePointer (Address: 0x1800178c8)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x1800178f0)
RoOriginateErrorW (Address: 0x1800178d8)
RoTransformError (Address: 0x1800178e0)
SetRestrictedErrorInfo (Address: 0x1800178e8)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x180017910)
RoGetMatchingRestrictedErrorInfo (Address: 0x180017900)
RoReportFailedDelegate (Address: 0x180017908)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x180017920)
RoGetActivationFactory (Address: 0x180017928)

api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x180017938)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x180017968)
WindowsCreateStringReference (Address: 0x180017970)
WindowsDeleteString (Address: 0x180017958)
WindowsDuplicateString (Address: 0x180017948)
WindowsGetStringLen (Address: 0x180017980)
WindowsGetStringRawBuffer (Address: 0x180017950)
WindowsIsStringEmpty (Address: 0x180017978)
WindowsStringHasEmbeddedNull (Address: 0x180017960)

api-ms-win-eventing-provider-l1-1-0.dll

EventWriteTransfer (Address: 0x180017990)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x1800179a0)
GetTokenInformation (Address: 0x1800179a8)

BiWinrt.dll

BiRtCreateEventForApp (Address: 0x180017638)
BiRtDeleteEventForApp (Address: 0x180017640)

msvcrt.dll

__C_specific_handler (Address: 0x180017a60)
__CxxFrameHandler3 (Address: 0x1800179d0)
__dllonexit (Address: 0x1800179d8)
_amsg_exit (Address: 0x1800179c0)
_callnewh (Address: 0x180017a70)
_CxxThrowException (Address: 0x1800179f8)
_initterm (Address: 0x1800179f0)
_lock (Address: 0x180017a20)
_onexit (Address: 0x180017a48)
_purecall (Address: 0x180017a38)
_unlock (Address: 0x1800179e8)
_vsnprintf_s (Address: 0x180017a08)
_vsnwprintf (Address: 0x180017a68)
_XcptFilter (Address: 0x180017a58)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800179c8)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180017a10)
??0exception@@QEAA@XZ (Address: 0x180017a28)
??1exception@@UEAA@XZ (Address: 0x180017a30)
??1type_info@@UEAA@XZ (Address: 0x180017a80)
??3@YAXPEAX@Z (Address: 0x180017a40)
?terminate@@YAXXZ (Address: 0x180017a18)
?what@exception@@UEBAPEBDXZ (Address: 0x1800179b8)
free (Address: 0x1800179e0)
malloc (Address: 0x180017a00)
memcpy (Address: 0x180017a78)
memcpy_s (Address: 0x180017a50)
memset (Address: 0x180017a88)

ntdll.dll

RtlGUIDFromString (Address: 0x180017a98)
RtlInitUnicodeString (Address: 0x180017aa0)

RPCRT4.dll

I_RpcExceptionFilter (Address: 0x180017668)
NdrClientCall3 (Address: 0x180017658)
RpcBindingBind (Address: 0x180017650)
RpcBindingCreateW (Address: 0x180017660)
RpcBindingFree (Address: 0x180017670)