Windows 10 DLL File Information - ncbservice.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Network Connection Broker
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - There is no any other DLL in system32 directory that is statically linked to this file.
File Size:	277 KB
Total Number of Exported Functions:	2
Total Number of Exported Functions With Names:	2

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	242,176 Bytes	85.4%	Read, Execute	Code
.data	0x0003d000	1,536 Bytes	0.5%	Write, Read	Initialized Data
.idata	0x0003e000	9,216 Bytes	3.2%	Read	Initialized Data
.didat	0x00041000	512 Bytes	0.2%	Write, Read	Initialized Data
.rsrc	0x00042000	15,872 Bytes	5.6%	Read	Initialized Data
.reloc	0x00046000	13,312 Bytes	4.7%	Read, Discardable	Initialized Data

Static Linking

ncbservice.dll is statically linked to the following files:

msvcrt.dll
ntdll.dll
api-ms-win-eventing-classicprovider-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
RPCRT4.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-security-base-l1-2-0.dll
WS2_32.dll
api-ms-win-core-com-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-1.dll
IPHLPAPI.DLL
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-string-l1-1-0.dll
OLEAUT32.dll
api-ms-win-core-string-l2-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-io-l1-1-1.dll
SspiCli.dll
api-ms-win-core-processenvironment-l1-2-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-kernel32-legacy-l1-1-1.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
NSI.dll
BrokerLib.dll
api-ms-win-power-setting-l1-1-0.dll
api-ms-win-core-localization-l1-2-1.dll
api-ms-win-devices-swdevice-l1-1-1.dll
api-ms-win-core-delayload-l1-1-1.dll

This means that when ncbservice.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, ncbservice.dll won't be loaded.

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	2	268 Bytes	0.1%
Type Libraries	0	0 Bytes	0.0%
Manifest	0	0 Bytes	0.0%
All Others	4	20,242 Bytes	7.1%
Total	6	20,510 Bytes	7.2%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
500	Network Connection Broker
501	Brokers connections that allow Windows Store Apps to receive notifications from the internet.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

ServiceMain

SvchostPushServiceGlobals

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException	_XcptFilter
  __dllonexit	_amsg_exit
  _callnewh	_errno
  _except_handler4_common	_initterm
  _lock	_onexit
  _purecall	_unlock
  _vsnwprintf	free
  malloc	memcmp
  memcpy	memcpy_s
  memmove	memset
  public: virtual __thiscall type_info::~type_info(void)	realloc
  strchr	swscanf_s
  wcscpy_s	wcsncpy_s

• ntdll.dll:
  

  EtwTraceMessage	NtPowerInformation
  NtQueryWnfStateData	NtSetInformationFile
  RtlAllocateWnfSerializationGroup	RtlCompareMemory
  RtlCopySid	RtlCreateHashTable
  RtlDeleteHashTable	RtlEndEnumerationHashTable
  RtlEnumerateEntryHashTable	RtlEqualSid
  RtlFreeSid	RtlGetDeviceFamilyInfoEnum
  RtlGetNextEntryHashTable	RtlGetVersion
  RtlHashUnicodeString	RtlInitEnumerationHashTable
  RtlInitUnicodeString	RtlInsertEntryHashTable
  RtlLengthSid	RtlLookupEntryHashTable
  RtlNtStatusToDosError	RtlPublishWnfStateData
  RtlQueryPackageIdentity	RtlRemoveEntryHashTable
  RtlSubscribeWnfStateChangeNotification	RtlUnsubscribeWnfNotificationWaitForCompletion
  WinSqmAddToStreamEx

• api-ms-win-eventing-classicprovider-l1-1-0.dll:
  

  ntdll!EtwGetTraceEnableFlags	ntdll!EtwGetTraceEnableLevel	ntdll!EtwGetTraceLoggerHandle	ntdll!EtwRegisterTraceGuidsW
  ntdll!EtwTraceMessage	ntdll!EtwUnregisterTraceGuids

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap

  ntdll!RtlAllocateHeap

  ntdll!RtlFreeHeap

• api-ms-win-core-processthreads-l1-1-2.dll:
  

  KernelBase!OpenProcessToken	KernelBase!OpenThreadToken	KernelBase!SetThreadToken	kernel32!GetCurrentProcess
  kernel32!GetCurrentProcessId	kernel32!GetCurrentThread	kernel32!GetCurrentThreadId	kernel32!GetProcessId
  kernel32!OpenProcess	kernel32!ProcessIdToSessionId	kernel32!TerminateProcess

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventRegister	ntdll!EtwEventSetInformation	ntdll!EtwEventUnregister	ntdll!EtwEventWrite
  ntdll!EtwEventWriteTransfer

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventExW	KernelBase!CreateEventW	KernelBase!InitializeCriticalSectionEx
  KernelBase!ResetEvent	KernelBase!SetEvent	KernelBase!Sleep
  KernelBase!WaitForSingleObject	KernelBase!WaitForSingleObjectEx	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeCriticalSection	ntdll!RtlLeaveCriticalSection

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!RaiseException	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteKeyExW	KernelBase!RegDeleteTreeW
  KernelBase!RegDeleteValueW	KernelBase!RegEnumKeyExW	KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW
  KernelBase!RegQueryValueExW	KernelBase!RegSetValueExW

• RPCRT4.dll:
  

  I_RpcOpenClientProcess	NdrAsyncServerCall	NdrServerCall2	RpcAsyncCompleteCall
  RpcBindingVectorFree	RpcEpRegisterW	RpcEpUnregister	RpcImpersonateClient
  RpcRevertToSelf	RpcServerInqBindings	RpcServerRegisterIf3	RpcServerRegisterIfEx
  RpcServerUnregisterIfEx	RpcServerUseProtseqW	RpcSsContextLockExclusive

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

  KernelBase!DuplicateHandle

• api-ms-win-core-heap-l2-1-0.dll:
  

  KernelBase!LocalAlloc

  KernelBase!LocalFree

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AccessCheck	KernelBase!CopySid	KernelBase!DuplicateTokenEx
  KernelBase!GetLengthSid	KernelBase!GetTokenInformation	KernelBase!IsValidSid

• WS2_32.dll:
  

  WSACleanup	WSACloseEvent	WSAEnumNetworkEvents	WSAEventSelect
  WSAGetLastError	WSAIoctl	WSASocketW	WSAStartup
  closesocket	ioctlsocket	setsockopt	socket

• api-ms-win-core-com-l1-1-1.dll:
  

  combase!CoCreateGuid	combase!CoCreateInstance	combase!CoInitializeEx	combase!CoTaskMemAlloc
  combase!CoTaskMemFree	combase!CoTaskMemRealloc	combase!CoUninitialize

• api-ms-win-core-sysinfo-l1-2-1.dll:
  

  KernelBase!GetSystemTimeAsFileTime

  KernelBase!GetTickCount

  KernelBase!GetTickCount64

• IPHLPAPI.DLL:
  

  InternalGetRtcSlotInformation

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!QueryFullProcessImageNameW

• api-ms-win-core-libraryloader-l1-2-0.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FindResourceExW	KernelBase!FreeLibrary
  KernelBase!GetModuleFileNameA	KernelBase!GetModuleFileNameW	KernelBase!GetModuleHandleExW
  KernelBase!GetModuleHandleW	KernelBase!GetProcAddress	KernelBase!LoadLibraryExW
  KernelBase!LoadResource	KernelBase!SizeofResource

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!MultiByteToWideChar

• OLEAUT32.dll:
  

  VarUI4FromStr

  VariantInit

• api-ms-win-core-string-l2-1-0.dll:
  

  KernelBase!CharNextW

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpoolIo	KernelBase!CreateThreadpoolTimer	KernelBase!CreateThreadpoolWait
  KernelBase!TrySubmitThreadpoolCallback	ntdll!TpCancelAsyncIoOperation	ntdll!TpDisassociateCallback
  ntdll!TpReleaseIoCompletion	ntdll!TpReleaseTimer	ntdll!TpReleaseWait
  ntdll!TpSetTimer	ntdll!TpSetWait	ntdll!TpStartAsyncIoOperation
  ntdll!TpWaitForIoCompletion	ntdll!TpWaitForTimer	ntdll!TpWaitForWait

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!CancelIoEx

• SspiCli.dll:
  

  FreeContextBuffer

  InitSecurityInterfaceW

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringA

  KernelBase!OutputDebugStringW

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrcmpiW

• api-ms-win-core-kernel32-legacy-l1-1-1.dll:
  

  kernel32!WTSGetActiveConsoleSessionId

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!UnregisterWaitEx

• NSI.dll:
  

  NsiGetAllParameters

  NsiSetAllParameters

• BrokerLib.dll:
  

  BrBufferFree	BrCheckCallerCapabilities	BrCheckCallerIsAppContainer	BrCreateBrokerInstance
  BrCreateBrokerInstance2	BrCreateBrokeredEvent	BrDeleteBrokerInstance	BrDeleteBrokeredEvent
  BrFindBrokeredEvent	BrGetBrokeredAppState	BrInitializeBrokerInstance	BrInitializeBrokerInstance2
  BrLockBroker	BrQueryBrokeredEvents	BrRegisterBrokeredEvent	BrSignalBrokerEvent
  BrSignalBrokerEvent2	BrUnlockBroker	BrUnregisterBrokeredEvent

• api-ms-win-power-setting-l1-1-0.dll:
  

  powrprof!PowerSettingRegisterNotification

  powrprof!PowerSettingUnregisterNotification

• api-ms-win-core-localization-l1-2-1.dll:
  

  KernelBase!FormatMessageW

• api-ms-win-devices-swdevice-l1-1-1.dll:
  

  cfgmgr32!SwDeviceClose	cfgmgr32!SwDeviceCreate	cfgmgr32!SwDeviceGetLifetime
  cfgmgr32!SwDeviceInterfaceRegister	cfgmgr32!SwDeviceSetLifetime

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI