Windows.Networking.BackgroundTransfer.dll

Description: Windows.Networking.BackgroundTransfer DLL

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: d25a738f5e6fe71e8fc931cb59f2a4ef

File Size: 1.2 MB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xc66f0)
DllGetActivationFactory (Ordinal: 2, Address: 0x2ece0)
DllGetClassObject (Ordinal: 3, Address: 0x2a500)
DllMain (Ordinal: 4, Address: 0x37d30)
DllRegisterServer (Ordinal: 5, Address: 0xc6740)
DllUnregisterServer (Ordinal: 6, Address: 0xc6770)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800f1790)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1800f1830)
CStdStubBuffer2_CountRefs (Address: 0x1800f17c8)
CStdStubBuffer2_Disconnect (Address: 0x1800f17b0)
CStdStubBuffer2_QueryInterface (Address: 0x1800f17a0)
NdrProxyForwardingFunction3 (Address: 0x1800f1800)
NdrProxyForwardingFunction4 (Address: 0x1800f17b8)
NdrProxyForwardingFunction5 (Address: 0x1800f17e8)
NdrProxyForwardingFunction7 (Address: 0x1800f1810)
ObjectStublessClient10 (Address: 0x1800f17d8)
ObjectStublessClient11 (Address: 0x1800f17f8)
ObjectStublessClient12 (Address: 0x1800f1838)
ObjectStublessClient13 (Address: 0x1800f17a8)
ObjectStublessClient14 (Address: 0x1800f1818)
ObjectStublessClient15 (Address: 0x1800f1820)
ObjectStublessClient16 (Address: 0x1800f17e0)
ObjectStublessClient17 (Address: 0x1800f1808)
ObjectStublessClient3 (Address: 0x1800f17f0)
ObjectStublessClient6 (Address: 0x1800f1840)
ObjectStublessClient7 (Address: 0x1800f17d0)
ObjectStublessClient8 (Address: 0x1800f1828)
ObjectStublessClient9 (Address: 0x1800f17c0)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800f1860)
IsDebuggerPresent (Address: 0x1800f1858)
OutputDebugStringW (Address: 0x1800f1850)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800f1870)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800f1880)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800f1890)
RaiseException (Address: 0x1800f1898)
SetLastError (Address: 0x1800f18a0)
SetUnhandledExceptionFilter (Address: 0x1800f18a8)
UnhandledExceptionFilter (Address: 0x1800f18b0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x1800f18d8)
CreateDirectoryW (Address: 0x1800f1920)
CreateFileW (Address: 0x1800f1918)
DeleteFileW (Address: 0x1800f1928)
FindClose (Address: 0x1800f1900)
FindFirstFileW (Address: 0x1800f18d0)
FindNextFileW (Address: 0x1800f18e8)
GetFileSizeEx (Address: 0x1800f18c8)
GetVolumeInformationByHandleW (Address: 0x1800f18c0)
GetVolumePathNameW (Address: 0x1800f18e0)
ReadFile (Address: 0x1800f18f8)
SetFilePointer (Address: 0x1800f1908)
SetFilePointerEx (Address: 0x1800f18f0)
WriteFile (Address: 0x1800f1910)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1800f1938)

api-ms-win-core-file-l2-1-0.dll

CreateHardLinkW (Address: 0x1800f1948)
MoveFileExW (Address: 0x1800f1950)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x1800f1960)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800f1970)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800f1990)
HeapAlloc (Address: 0x1800f1988)
HeapFree (Address: 0x1800f1980)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800f19a8)
LocalFree (Address: 0x1800f19a0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800f19e8)
FreeLibrary (Address: 0x1800f19d0)
GetModuleFileNameA (Address: 0x1800f19d8)
GetModuleHandleExW (Address: 0x1800f19e0)
GetModuleHandleW (Address: 0x1800f19c8)
GetProcAddress (Address: 0x1800f19c0)
LoadStringW (Address: 0x1800f19b8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800f19f8)

api-ms-win-core-path-l1-1-0.dll

PathIsUNCEx (Address: 0x1800f1a08)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x1800f1a38)
GetCurrentProcessId (Address: 0x1800f1a20)
GetCurrentThread (Address: 0x1800f1a48)
GetCurrentThreadId (Address: 0x1800f1a30)
OpenProcessToken (Address: 0x1800f1a28)
OpenThreadToken (Address: 0x1800f1a40)
TerminateProcess (Address: 0x1800f1a18)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x1800f1a58)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800f1a68)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800f1a80)
RegCreateKeyExW (Address: 0x1800f1a78)
RegGetValueW (Address: 0x1800f1a90)
RegOpenKeyExW (Address: 0x1800f1a88)
RegQueryValueExW (Address: 0x1800f1a98)
RegSetValueExW (Address: 0x1800f1aa0)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800f1ac0)
MultiByteToWideChar (Address: 0x1800f1ab0)
WideCharToMultiByte (Address: 0x1800f1ab8)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800f1af8)
AcquireSRWLockShared (Address: 0x1800f1b78)
CreateEventExW (Address: 0x1800f1ad8)
CreateEventW (Address: 0x1800f1ad0)
CreateMutexExW (Address: 0x1800f1b60)
CreateMutexW (Address: 0x1800f1ae0)
CreateSemaphoreExW (Address: 0x1800f1b68)
DeleteCriticalSection (Address: 0x1800f1b38)
EnterCriticalSection (Address: 0x1800f1b28)
InitializeCriticalSection (Address: 0x1800f1b08)
InitializeSRWLock (Address: 0x1800f1b70)
LeaveCriticalSection (Address: 0x1800f1b20)
OpenSemaphoreW (Address: 0x1800f1b58)
ReleaseMutex (Address: 0x1800f1b40)
ReleaseSemaphore (Address: 0x1800f1b00)
ReleaseSRWLockExclusive (Address: 0x1800f1b10)
ReleaseSRWLockShared (Address: 0x1800f1ae8)
ResetEvent (Address: 0x1800f1b30)
SetEvent (Address: 0x1800f1af0)
WaitForMultipleObjectsEx (Address: 0x1800f1b18)
WaitForSingleObject (Address: 0x1800f1b50)
WaitForSingleObjectEx (Address: 0x1800f1b48)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800f1b88)
InitOnceComplete (Address: 0x1800f1b98)
InitOnceExecuteOnce (Address: 0x1800f1ba0)
Sleep (Address: 0x1800f1b90)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1800f1bb0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x1800f1bc0)
GetTickCount (Address: 0x1800f1bc8)
GetTickCount64 (Address: 0x1800f1bd0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimePreciseAsFileTime (Address: 0x1800f1be0)

api-ms-win-core-threadpool-l1-2-0.dll

CallbackMayRunLong (Address: 0x1800f1bf8)
FreeLibraryWhenCallbackReturns (Address: 0x1800f1bf0)
TrySubmitThreadpoolCallback (Address: 0x1800f1c00)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800f1c18)
EncodePointer (Address: 0x1800f1c10)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800f1c30)
EventRegister (Address: 0x1800f1c48)
EventSetInformation (Address: 0x1800f1c40)
EventUnregister (Address: 0x1800f1c38)
EventWriteTransfer (Address: 0x1800f1c28)

api-ms-win-rtcore-ntuser-synch-l1-1-0.dll

MsgWaitForMultipleObjects (Address: 0x1800f1c58)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DispatchMessageW (Address: 0x1800f1c68)
PeekMessageW (Address: 0x1800f1c70)

api-ms-win-security-base-l1-1-0.dll

DuplicateToken (Address: 0x1800f1c80)
GetTokenInformation (Address: 0x1800f1c88)
ImpersonateSelf (Address: 0x1800f1c90)
RevertToSelf (Address: 0x1800f1c98)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x1800f1cb0)
SHTaskPoolQueueTask (Address: 0x1800f1ca8)

combase.dll

(Address: 0x1800f1cc0)
(Address: 0x1800f1cc8)

CRYPT32.dll

CryptProtectData (Address: 0x1800f1650)
CryptUnprotectData (Address: 0x1800f1658)

msvcrt.dll

__C_specific_handler (Address: 0x1800f1d38)
__CxxFrameHandler3 (Address: 0x1800f1d60)
__dllonexit (Address: 0x1800f1d50)
_amsg_exit (Address: 0x1800f1d28)
_callnewh (Address: 0x1800f1d20)
_initterm (Address: 0x1800f1d30)
_itow_s (Address: 0x1800f1cd8)
_lock (Address: 0x1800f1d40)
_onexit (Address: 0x1800f1d58)
_purecall (Address: 0x1800f1d70)
_ui64tow_s (Address: 0x1800f1d18)
_ultow_s (Address: 0x1800f1cf8)
_unlock (Address: 0x1800f1d48)
_vsnwprintf (Address: 0x1800f1da8)
_wcsicmp (Address: 0x1800f1ce0)
_wcsnicmp (Address: 0x1800f1cf0)
_wcstoui64 (Address: 0x1800f1db0)
_XcptFilter (Address: 0x1800f1db8)
free (Address: 0x1800f1d78)
malloc (Address: 0x1800f1d68)
memcmp (Address: 0x1800f1da0)
memcpy (Address: 0x1800f1d88)
memcpy_s (Address: 0x1800f1d90)
memmove_s (Address: 0x1800f1d98)
memset (Address: 0x1800f1d80)
realloc (Address: 0x1800f1ce8)
wcscmp (Address: 0x1800f1dc0)
wcsstr (Address: 0x1800f1d10)
wcstok_s (Address: 0x1800f1d00)
wcstoul (Address: 0x1800f1d08)

ntdll.dll

NtOpenThreadToken (Address: 0x1800f1dd0)
NtQuerySecurityAttributesToken (Address: 0x1800f1e20)
NtQueryWnfStateData (Address: 0x1800f1e38)
NtSetInformationThread (Address: 0x1800f1e40)
RtlAllocateHeap (Address: 0x1800f1e08)
RtlCaptureContext (Address: 0x1800f1de8)
RtlCompareMemory (Address: 0x1800f1e28)
RtlCopyUnicodeString (Address: 0x1800f1e10)
RtlFreeHeap (Address: 0x1800f1e18)
RtlInitUnicodeString (Address: 0x1800f1df8)
RtlLookupFunctionEntry (Address: 0x1800f1de0)
RtlNtStatusToDosError (Address: 0x1800f1df0)
RtlSubscribeWnfStateChangeNotification (Address: 0x1800f1e00)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1800f1e30)
RtlVirtualUnwind (Address: 0x1800f1dd8)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1800f1700)
CStdStubBuffer_Connect (Address: 0x1800f16b0)
CStdStubBuffer_CountRefs (Address: 0x1800f16e0)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800f16f0)
CStdStubBuffer_DebugServerRelease (Address: 0x1800f1718)
CStdStubBuffer_Disconnect (Address: 0x1800f16b8)
CStdStubBuffer_Invoke (Address: 0x1800f16d0)
CStdStubBuffer_IsIIDSupported (Address: 0x1800f1730)
CStdStubBuffer_QueryInterface (Address: 0x1800f16c8)
IUnknown_AddRef_Proxy (Address: 0x1800f16e8)
IUnknown_QueryInterface_Proxy (Address: 0x1800f1720)
IUnknown_Release_Proxy (Address: 0x1800f1708)
NdrCStdStubBuffer_Release (Address: 0x1800f16c0)
NdrCStdStubBuffer2_Release (Address: 0x1800f1678)
NdrDllCanUnloadNow (Address: 0x1800f16a8)
NdrDllGetClassObject (Address: 0x1800f1698)
NdrDllRegisterProxy (Address: 0x1800f1690)
NdrDllUnregisterProxy (Address: 0x1800f1688)
NdrOleAllocate (Address: 0x1800f1710)
NdrOleFree (Address: 0x1800f16f8)
NdrStubCall3 (Address: 0x1800f1728)
NdrStubForwardingFunction (Address: 0x1800f16d8)
RpcStringFreeW (Address: 0x1800f16a0)
UuidCreate (Address: 0x1800f1680)
UuidFromStringA (Address: 0x1800f1668)
UuidFromStringW (Address: 0x1800f1670)
UuidToStringW (Address: 0x1800f1738)

SystemEventsBrokerClient.dll

SebCreateBackgroundDownloadEventEx (Address: 0x1800f1760)
SebCreateBackgroundTransferCompletionEvent (Address: 0x1800f1778)
SebDeleteEvent (Address: 0x1800f1770)
SebEnumerateEventsByType (Address: 0x1800f1758)
SebQueryEventData (Address: 0x1800f1748)
SebRegisterWellKnownEvent (Address: 0x1800f1768)
SebSignalBackgroundTransferCompletionEvent (Address: 0x1800f1780)
SebSignalEvent (Address: 0x1800f1750)