SystemSettings.DataModel.dll

Description: SystemSettings.Datamodel private API

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6396

Architecture: 32-bit

Operating System: Windows NT

SHA256: 36903089abc4c714335cdd8cd59ed56d

File Size: 354.9 KB

Uploaded At: Dec. 1, 2025, 8:04 a.m.

Views: 18

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x10780)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x2fc60)
  • DllGetClassObject (Ordinal: 3, Address: 0x2fcd0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x10051070)
  • CoCreateInstance (Address: 0x10051080)
  • CoGetApartmentType (Address: 0x1005109c)
  • CoGetCallContext (Address: 0x1005106c)
  • CoGetInterfaceAndReleaseStream (Address: 0x10051088)
  • CoGetMalloc (Address: 0x1005108c)
  • CoImpersonateClient (Address: 0x10051074)
  • CoIncrementMTAUsage (Address: 0x10051068)
  • CoMarshalInterface (Address: 0x10051094)
  • CoReleaseMarshalData (Address: 0x10051084)
  • CoRevertToSelf (Address: 0x10051078)
  • CoTaskMemAlloc (Address: 0x10051064)
  • CoTaskMemFree (Address: 0x10051098)
  • CoTaskMemRealloc (Address: 0x1005107c)
  • CoWaitForMultipleHandles (Address: 0x10051060)
  • CreateStreamOnHGlobal (Address: 0x10051090)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x100510a4)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x100510fc)
  • CStdStubBuffer2_CountRefs (Address: 0x100510d4)
  • CStdStubBuffer2_Disconnect (Address: 0x100510ec)
  • CStdStubBuffer2_QueryInterface (Address: 0x100510dc)
  • NdrProxyForwardingFunction3 (Address: 0x100510e4)
  • NdrProxyForwardingFunction4 (Address: 0x100510b8)
  • NdrProxyForwardingFunction5 (Address: 0x100510ac)
  • ObjectStublessClient10 (Address: 0x100510b4)
  • ObjectStublessClient11 (Address: 0x100510f8)
  • ObjectStublessClient12 (Address: 0x100510c4)
  • ObjectStublessClient13 (Address: 0x100510e0)
  • ObjectStublessClient14 (Address: 0x100510c0)
  • ObjectStublessClient15 (Address: 0x100510f0)
  • ObjectStublessClient16 (Address: 0x100510cc)
  • ObjectStublessClient17 (Address: 0x100510b0)
  • ObjectStublessClient18 (Address: 0x100510f4)
  • ObjectStublessClient19 (Address: 0x100510d0)
  • ObjectStublessClient3 (Address: 0x10051100)
  • ObjectStublessClient6 (Address: 0x100510d8)
  • ObjectStublessClient7 (Address: 0x100510e8)
  • ObjectStublessClient8 (Address: 0x100510c8)
  • ObjectStublessClient9 (Address: 0x100510bc)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x10051110)
  • IsDebuggerPresent (Address: 0x10051108)
  • OutputDebugStringW (Address: 0x1005110c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x10051118)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x10051120)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10051134)
  • RaiseException (Address: 0x10051130)
  • SetLastError (Address: 0x1005112c)
  • SetUnhandledExceptionFilter (Address: 0x10051138)
  • UnhandledExceptionFilter (Address: 0x10051128)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x10051140)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10051148)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10051158)
  • HeapAlloc (Address: 0x10051150)
  • HeapFree (Address: 0x10051154)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x10051160)
  • InterlockedFlushSList (Address: 0x10051168)
  • InterlockedPushEntrySList (Address: 0x10051164)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10051184)
  • FreeLibrary (Address: 0x10051170)
  • GetModuleFileNameA (Address: 0x10051180)
  • GetModuleHandleExW (Address: 0x10051188)
  • GetModuleHandleW (Address: 0x10051178)
  • GetProcAddress (Address: 0x1005117c)
  • LoadLibraryExW (Address: 0x10051174)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x10051194)
  • GetGeoInfoW (Address: 0x10051198)
  • GetUserGeoID (Address: 0x10051190)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsW (Address: 0x100511a0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x100511c4)
  • GetCurrentProcessId (Address: 0x100511b0)
  • GetCurrentThread (Address: 0x100511c0)
  • GetCurrentThreadId (Address: 0x100511b8)
  • OpenProcessToken (Address: 0x100511bc)
  • OpenThreadToken (Address: 0x100511a8)
  • ProcessIdToSessionId (Address: 0x100511ac)
  • TerminateProcess (Address: 0x100511b4)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x100511d0)
  • OpenProcess (Address: 0x100511cc)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100511d8)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100511f4)
  • RegCreateKeyExW (Address: 0x100511e0)
  • RegDeleteValueW (Address: 0x100511ec)
  • RegEnumKeyExW (Address: 0x100511e4)
  • RegGetValueW (Address: 0x100511f0)
  • RegOpenKeyExW (Address: 0x100511f8)
  • RegSetValueExW (Address: 0x100511e8)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x10051200)
  • MultiByteToWideChar (Address: 0x10051204)
api-ms-win-core-string-l2-1-0.dll
  • CharLowerBuffW (Address: 0x1005120c)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x10051214)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1005125c)
  • AcquireSRWLockShared (Address: 0x10051258)
  • CreateEventExW (Address: 0x10051268)
  • CreateEventW (Address: 0x10051264)
  • CreateMutexExW (Address: 0x10051238)
  • CreateSemaphoreExW (Address: 0x10051220)
  • DeleteCriticalSection (Address: 0x1005124c)
  • EnterCriticalSection (Address: 0x10051254)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10051248)
  • InitializeCriticalSectionEx (Address: 0x10051250)
  • InitializeSRWLock (Address: 0x1005122c)
  • LeaveCriticalSection (Address: 0x1005121c)
  • OpenSemaphoreW (Address: 0x10051240)
  • ReleaseMutex (Address: 0x10051270)
  • ReleaseSemaphore (Address: 0x1005126c)
  • ReleaseSRWLockExclusive (Address: 0x10051228)
  • ReleaseSRWLockShared (Address: 0x10051224)
  • ResetEvent (Address: 0x1005123c)
  • SetEvent (Address: 0x10051234)
  • WaitForMultipleObjectsEx (Address: 0x10051230)
  • WaitForSingleObject (Address: 0x10051244)
  • WaitForSingleObjectEx (Address: 0x10051260)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1005127c)
  • InitOnceComplete (Address: 0x10051280)
  • InitOnceExecuteOnce (Address: 0x10051278)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1005128c)
  • GetSystemTimeAsFileTime (Address: 0x10051290)
  • GetTickCount (Address: 0x10051288)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x100512a0)
  • CreateThreadpoolTimer (Address: 0x100512a4)
  • SetThreadpoolTimer (Address: 0x10051298)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1005129c)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100512b0)
  • EncodePointer (Address: 0x100512ac)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x100512b8)
  • RoGetActivationFactory (Address: 0x100512bc)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x10051334)
  • __std_terminate (Address: 0x10051330)
  • _CxxThrowException (Address: 0x10051300)
  • _except_handler4_common (Address: 0x100512fc)
  • _o___std_exception_copy (Address: 0x1005132c)
  • _o___std_exception_destroy (Address: 0x10051328)
  • _o___std_type_info_destroy_list (Address: 0x10051324)
  • _o___stdio_common_vsnprintf_s (Address: 0x10051320)
  • _o___stdio_common_vswprintf (Address: 0x1005131c)
  • _o__callnewh (Address: 0x10051318)
  • _o__cexit (Address: 0x10051314)
  • _o__configure_narrow_argv (Address: 0x10051310)
  • _o__crt_atexit (Address: 0x1005130c)
  • _o__errno (Address: 0x10051308)
  • _o__execute_onexit_table (Address: 0x10051304)
  • _o__initialize_narrow_environment (Address: 0x100512c4)
  • _o__initialize_onexit_table (Address: 0x100512c8)
  • _o__invalid_parameter_noinfo (Address: 0x100512cc)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x100512d0)
  • _o__purecall (Address: 0x100512d4)
  • _o__register_onexit_function (Address: 0x100512d8)
  • _o__seh_filter_dll (Address: 0x100512dc)
  • _o_ceil (Address: 0x100512e4)
  • _o_free (Address: 0x100512e8)
  • _o_iswspace (Address: 0x100512ec)
  • _o_malloc (Address: 0x100512f0)
  • _o_realloc (Address: 0x100512f4)
  • _o_terminate (Address: 0x100512f8)
  • memcmp (Address: 0x10051338)
  • memcpy (Address: 0x1005133c)
  • memmove (Address: 0x100512e0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x10051344)
  • _initterm_e (Address: 0x10051348)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x10051350)
  • wcsncmp (Address: 0x10051354)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1005135c)
  • EventSetInformation (Address: 0x10051360)
  • EventUnregister (Address: 0x10051368)
  • EventWriteTransfer (Address: 0x10051364)
api-ms-win-oobe-notification-l1-1-0.dll
  • OOBEComplete (Address: 0x10051370)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
  • MsgWaitForMultipleObjectsEx (Address: 0x10051378)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • AllowSetForegroundWindow (Address: 0x10051388)
  • DispatchMessageW (Address: 0x10051390)
  • PeekMessageW (Address: 0x10051380)
  • PostQuitMessage (Address: 0x10051384)
  • TranslateMessage (Address: 0x1005138c)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x100513a4)
  • EqualSid (Address: 0x100513a0)
  • GetTokenInformation (Address: 0x1005139c)
  • IsValidSid (Address: 0x10051398)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x100513ac)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSidToSidW (Address: 0x100513b4)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x100513c0)
  • SHTaskPoolGetUniqueContext (Address: 0x100513c4)
  • SHTaskPoolQueueTask (Address: 0x100513bc)
combase.dll
  • (Address: 0x100513cc)
  • (Address: 0x100513d0)
msvcp_win.dll
  • _Cnd_broadcast (Address: 0x10051438)
  • _Cnd_destroy_in_situ (Address: 0x10051440)
  • _Cnd_init_in_situ (Address: 0x10051448)
  • _Cnd_wait (Address: 0x1005143c)
  • _Mtx_destroy_in_situ (Address: 0x10051450)
  • _Mtx_init_in_situ (Address: 0x100513ec)
  • _Mtx_lock (Address: 0x10051434)
  • _Mtx_unlock (Address: 0x10051408)
  • ?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x100513d8)
  • ?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x100513f8)
  • ?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x100513f4)
  • ?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x100513dc)
  • ?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x100513e4)
  • ?__ExceptionPtrToBool@@YA_NPBX@Z (Address: 0x1005144c)
  • ?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z (Address: 0x10051458)
  • ?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ (Address: 0x1005140c)
  • ?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z (Address: 0x10051404)
  • ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x10051400)
  • ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z (Address: 0x100513fc)
  • ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x10051414)
  • ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x10051410)
  • ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x100513f0)
  • ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ (Address: 0x10051454)
  • ?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z (Address: 0x10051430)
  • ?_ReportUnobservedException@details@Concurrency@@YAXXZ (Address: 0x100513e0)
  • ?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ (Address: 0x1005142c)
  • ?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z (Address: 0x10051420)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x10051418)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x10051424)
  • ?_XGetLastError@std@@YAXXZ (Address: 0x10051444)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x1005145c)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x10051428)
  • ??0task_continuation_context@Concurrency@@AAE@XZ (Address: 0x100513e8)
  • ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ (Address: 0x1005141c)
ntdll.dll
  • RtlPublishWnfStateData (Address: 0x10051464)
OLEAUT32.dll
  • SysFreeString (Address: 0x10051004)
  • SysStringLen (Address: 0x10051000)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x10051054)
  • CStdStubBuffer_Connect (Address: 0x10051058)
  • CStdStubBuffer_CountRefs (Address: 0x10051044)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x10051050)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1005101c)
  • CStdStubBuffer_Disconnect (Address: 0x10051018)
  • CStdStubBuffer_Invoke (Address: 0x10051030)
  • CStdStubBuffer_IsIIDSupported (Address: 0x10051010)
  • CStdStubBuffer_QueryInterface (Address: 0x10051040)
  • IUnknown_AddRef_Proxy (Address: 0x1005104c)
  • IUnknown_QueryInterface_Proxy (Address: 0x1005100c)
  • IUnknown_Release_Proxy (Address: 0x10051048)
  • NdrCStdStubBuffer_Release (Address: 0x1005102c)
  • NdrCStdStubBuffer2_Release (Address: 0x10051020)
  • NdrDllCanUnloadNow (Address: 0x10051028)
  • NdrDllGetClassObject (Address: 0x10051024)
  • NdrOleAllocate (Address: 0x1005103c)
  • NdrOleFree (Address: 0x10051014)
  • NdrStubCall2 (Address: 0x10051038)
  • NdrStubForwardingFunction (Address: 0x10051034)