Windows.System.SystemManagement.dll
Description: Windows Runtime SystemManagement DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5848
Architecture: 32-bit
Operating System: Windows NT
SHA256: 4a676c762a5fa8777b2a02ffe5c71665
File Size: 236.5 KB
Uploaded At: Dec. 1, 2025, 8:07 a.m.
Views: 12
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x10260)
- DllGetActivationFactory (Ordinal: 2, Address: 0x102c0)
- DllGetClassObject (Ordinal: 3, Address: 0x102e0)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- GetPackageFamilyName (Address: 0x10036074)
- GetPackageId (Address: 0x10036070)
- GetPackagePath (Address: 0x10036078)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x10036080)
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x10036094)
- CoCreateInstance (Address: 0x100360b8)
- CoDecrementMTAUsage (Address: 0x100360b0)
- CoGetApartmentType (Address: 0x1003609c)
- CoGetCallContext (Address: 0x100360b4)
- CoGetMalloc (Address: 0x1003608c)
- CoImpersonateClient (Address: 0x100360c0)
- CoIncrementMTAUsage (Address: 0x100360ac)
- CoInitializeEx (Address: 0x10036088)
- CoMarshalInterface (Address: 0x100360a4)
- CoReleaseMarshalData (Address: 0x100360c4)
- CoRevertToSelf (Address: 0x100360a0)
- CoTaskMemAlloc (Address: 0x10036098)
- CoTaskMemFree (Address: 0x100360a8)
- CoUninitialize (Address: 0x10036090)
- CreateStreamOnHGlobal (Address: 0x100360bc)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x100360cc)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x10036104)
- CStdStubBuffer2_CountRefs (Address: 0x10036148)
- CStdStubBuffer2_Disconnect (Address: 0x100360fc)
- CStdStubBuffer2_QueryInterface (Address: 0x100360ec)
- NdrProxyForwardingFunction3 (Address: 0x100360e4)
- NdrProxyForwardingFunction4 (Address: 0x10036150)
- NdrProxyForwardingFunction5 (Address: 0x100360d8)
- ObjectStublessClient10 (Address: 0x100360d4)
- ObjectStublessClient11 (Address: 0x1003612c)
- ObjectStublessClient12 (Address: 0x10036124)
- ObjectStublessClient13 (Address: 0x10036110)
- ObjectStublessClient14 (Address: 0x10036128)
- ObjectStublessClient15 (Address: 0x10036140)
- ObjectStublessClient16 (Address: 0x100360f0)
- ObjectStublessClient17 (Address: 0x100360e0)
- ObjectStublessClient18 (Address: 0x10036138)
- ObjectStublessClient19 (Address: 0x10036108)
- ObjectStublessClient20 (Address: 0x1003614c)
- ObjectStublessClient21 (Address: 0x100360f8)
- ObjectStublessClient22 (Address: 0x10036130)
- ObjectStublessClient23 (Address: 0x10036114)
- ObjectStublessClient24 (Address: 0x1003610c)
- ObjectStublessClient25 (Address: 0x10036118)
- ObjectStublessClient26 (Address: 0x100360f4)
- ObjectStublessClient27 (Address: 0x10036134)
- ObjectStublessClient28 (Address: 0x1003613c)
- ObjectStublessClient29 (Address: 0x100360e8)
- ObjectStublessClient3 (Address: 0x10036144)
- ObjectStublessClient6 (Address: 0x100360dc)
- ObjectStublessClient7 (Address: 0x1003611c)
- ObjectStublessClient8 (Address: 0x10036120)
- ObjectStublessClient9 (Address: 0x10036100)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x10036158)
- IsDebuggerPresent (Address: 0x1003615c)
- OutputDebugStringW (Address: 0x10036160)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x10036168)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x10036170)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x10036188)
- RaiseException (Address: 0x10036180)
- SetLastError (Address: 0x10036184)
- SetUnhandledExceptionFilter (Address: 0x1003617c)
- UnhandledExceptionFilter (Address: 0x10036178)
api-ms-win-core-file-l1-1-0.dll
- ReadFile (Address: 0x10036194)
- WriteFile (Address: 0x10036190)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1003619c)
- SetHandleInformation (Address: 0x100361a0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x100361b0)
- HeapAlloc (Address: 0x100361a8)
- HeapFree (Address: 0x100361ac)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x100361b8)
- InterlockedFlushSList (Address: 0x100361bc)
api-ms-win-core-io-l1-1-1.dll
- CancelSynchronousIo (Address: 0x100361c4)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x100361e0)
- FreeLibrary (Address: 0x100361d8)
- GetModuleFileNameA (Address: 0x100361d4)
- GetModuleHandleExW (Address: 0x100361d0)
- GetModuleHandleW (Address: 0x100361dc)
- GetProcAddress (Address: 0x100361cc)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x100361e8)
api-ms-win-core-namedpipe-l1-1-0.dll
- CreatePipe (Address: 0x100361f0)
- PeekNamedPipe (Address: 0x100361f4)
api-ms-win-core-path-l1-1-0.dll
- PathCchCanonicalize (Address: 0x100361fc)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x10036214)
- CreateThread (Address: 0x1003622c)
- GetCurrentProcess (Address: 0x10036228)
- GetCurrentProcessId (Address: 0x1003621c)
- GetCurrentThread (Address: 0x10036210)
- GetCurrentThreadId (Address: 0x10036220)
- GetExitCodeProcess (Address: 0x1003620c)
- OpenProcessToken (Address: 0x10036204)
- OpenThreadToken (Address: 0x10036224)
- TerminateProcess (Address: 0x10036218)
- TerminateThread (Address: 0x10036208)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x10036238)
- OpenProcess (Address: 0x10036234)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x10036240)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x10036258)
- RegDeleteValueW (Address: 0x10036260)
- RegEnumKeyExW (Address: 0x1003624c)
- RegGetValueW (Address: 0x10036250)
- RegLoadMUIStringW (Address: 0x10036254)
- RegOpenKeyExW (Address: 0x10036264)
- RegQueryInfoKeyW (Address: 0x1003625c)
- RegQueryValueExW (Address: 0x10036248)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x1003626c)
api-ms-win-core-registry-l2-1-0.dll
- RegCreateKeyW (Address: 0x10036278)
- RegDeleteKeyW (Address: 0x1003627c)
- RegOpenKeyW (Address: 0x10036274)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathIsRelativeW (Address: 0x10036284)
api-ms-win-core-shutdown-l1-1-0.dll
- AbortSystemShutdownW (Address: 0x10036290)
- InitiateSystemShutdownExW (Address: 0x1003628c)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x10036298)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x100362ac)
- AcquireSRWLockShared (Address: 0x100362d8)
- CancelWaitableTimer (Address: 0x100362ec)
- CreateEventExW (Address: 0x100362e8)
- CreateEventW (Address: 0x100362c8)
- CreateMutexExW (Address: 0x100362d4)
- CreateSemaphoreExW (Address: 0x100362cc)
- DeleteCriticalSection (Address: 0x100362c4)
- EnterCriticalSection (Address: 0x100362b4)
- InitializeCriticalSectionAndSpinCount (Address: 0x100362bc)
- InitializeCriticalSectionEx (Address: 0x100362e0)
- InitializeSRWLock (Address: 0x100362dc)
- LeaveCriticalSection (Address: 0x100362b8)
- OpenSemaphoreW (Address: 0x100362c0)
- ReleaseMutex (Address: 0x100362a4)
- ReleaseSemaphore (Address: 0x100362f4)
- ReleaseSRWLockExclusive (Address: 0x100362a8)
- ReleaseSRWLockShared (Address: 0x100362d0)
- ResetEvent (Address: 0x100362f8)
- SetEvent (Address: 0x100362f0)
- SetWaitableTimer (Address: 0x100362e4)
- WaitForSingleObject (Address: 0x100362a0)
- WaitForSingleObjectEx (Address: 0x100362b0)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x10036308)
- InitOnceComplete (Address: 0x10036304)
- InitOnceExecuteOnce (Address: 0x10036300)
api-ms-win-core-synch-l1-2-1.dll
- CreateWaitableTimerW (Address: 0x10036310)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x1003631c)
- GetSystemTimeAsFileTime (Address: 0x10036320)
- GetVersionExW (Address: 0x10036318)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetProductInfo (Address: 0x1003632c)
- SetSystemTime (Address: 0x10036328)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x1003634c)
- CloseThreadpoolWait (Address: 0x10036338)
- CloseThreadpoolWork (Address: 0x10036358)
- CreateThreadpoolTimer (Address: 0x10036340)
- CreateThreadpoolWait (Address: 0x1003635c)
- CreateThreadpoolWork (Address: 0x10036348)
- FreeLibraryWhenCallbackReturns (Address: 0x10036360)
- SetThreadpoolTimer (Address: 0x1003633c)
- SetThreadpoolWait (Address: 0x10036354)
- SubmitThreadpoolWork (Address: 0x10036350)
- WaitForThreadpoolTimerCallbacks (Address: 0x10036344)
- WaitForThreadpoolWaitCallbacks (Address: 0x10036334)
api-ms-win-core-timezone-l1-1-0.dll
- EnumDynamicTimeZoneInformation (Address: 0x10036374)
- FileTimeToSystemTime (Address: 0x1003636c)
- GetDynamicTimeZoneInformation (Address: 0x10036370)
- SetDynamicTimeZoneInformation (Address: 0x10036368)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x1003637c)
- EncodePointer (Address: 0x10036380)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x10036388)
- RoOriginateError (Address: 0x10036394)
- RoOriginateErrorW (Address: 0x10036390)
- RoTransformError (Address: 0x10036398)
- SetRestrictedErrorInfo (Address: 0x1003638c)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x100363a0)
- RoGetMatchingRestrictedErrorInfo (Address: 0x100363a4)
- RoOriginateLanguageException (Address: 0x100363ac)
- RoReportFailedDelegate (Address: 0x100363a8)
api-ms-win-core-winrt-l1-1-0.dll
- RoGetActivationFactory (Address: 0x100363bc)
- RoInitialize (Address: 0x100363b4)
- RoUninitialize (Address: 0x100363b8)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
- RoGetBufferMarshaler (Address: 0x100363c4)
api-ms-win-core-winrt-string-l1-1-0.dll
- HSTRING_UserFree (Address: 0x100363dc)
- HSTRING_UserMarshal (Address: 0x100363e4)
- HSTRING_UserSize (Address: 0x100363f4)
- HSTRING_UserUnmarshal (Address: 0x100363ec)
- WindowsCreateString (Address: 0x10036400)
- WindowsCreateStringReference (Address: 0x100363d0)
- WindowsDeleteString (Address: 0x100363d4)
- WindowsDeleteStringBuffer (Address: 0x100363f8)
- WindowsDuplicateString (Address: 0x100363e8)
- WindowsGetStringLen (Address: 0x10036404)
- WindowsGetStringRawBuffer (Address: 0x100363d8)
- WindowsIsStringEmpty (Address: 0x100363cc)
- WindowsPreallocateStringBuffer (Address: 0x100363f0)
- WindowsPromoteStringBuffer (Address: 0x100363fc)
- WindowsStringHasEmbeddedNull (Address: 0x100363e0)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x10036480)
- __std_terminate (Address: 0x1003647c)
- _CxxThrowException (Address: 0x10036448)
- _except_handler4_common (Address: 0x10036444)
- _o___std_exception_copy (Address: 0x10036478)
- _o___std_exception_destroy (Address: 0x10036474)
- _o___std_type_info_destroy_list (Address: 0x10036470)
- _o___stdio_common_vsnprintf_s (Address: 0x1003646c)
- _o___stdio_common_vswprintf (Address: 0x10036468)
- _o___stdio_common_vswprintf_s (Address: 0x10036464)
- _o__callnewh (Address: 0x10036460)
- _o__cexit (Address: 0x1003645c)
- _o__configure_narrow_argv (Address: 0x10036458)
- _o__crt_atexit (Address: 0x10036454)
- _o__errno (Address: 0x10036450)
- _o__execute_onexit_table (Address: 0x1003644c)
- _o__initialize_narrow_environment (Address: 0x1003640c)
- _o__initialize_onexit_table (Address: 0x10036410)
- _o__invalid_parameter_noinfo (Address: 0x10036414)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x10036418)
- _o__purecall (Address: 0x1003641c)
- _o__register_onexit_function (Address: 0x10036420)
- _o__seh_filter_dll (Address: 0x10036424)
- _o__wcsicmp (Address: 0x10036428)
- _o_free (Address: 0x10036430)
- _o_iswspace (Address: 0x10036434)
- _o_malloc (Address: 0x10036438)
- _o_realloc (Address: 0x1003643c)
- _o_terminate (Address: 0x10036440)
- memcmp (Address: 0x10036484)
- memcpy (Address: 0x10036488)
- memmove (Address: 0x1003642c)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x10036494)
- _initterm_e (Address: 0x10036490)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x1003649c)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x100364a4)
- EventRegister (Address: 0x100364ac)
- EventSetInformation (Address: 0x100364b0)
- EventUnregister (Address: 0x100364a8)
- EventWriteTransfer (Address: 0x100364b4)
api-ms-win-security-base-l1-1-0.dll
- GetTokenInformation (Address: 0x100364bc)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x100364c4)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x100364d0)
- SHTaskPoolQueueTask (Address: 0x100364cc)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x100364d8)
msvcp_win.dll
- ?__ExceptionPtrAssign@@YAXPAXPBX@Z (Address: 0x100364e8)
- ?__ExceptionPtrCopy@@YAXPAXPBX@Z (Address: 0x100364f4)
- ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z (Address: 0x100364f0)
- ?__ExceptionPtrCreate@@YAXPAX@Z (Address: 0x10036500)
- ?__ExceptionPtrCurrentException@@YAXPAX@Z (Address: 0x100364f8)
- ?__ExceptionPtrDestroy@@YAXPAX@Z (Address: 0x100364ec)
- ?__ExceptionPtrRethrow@@YAXPBX@Z (Address: 0x100364fc)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100364e0)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100364e4)
ntdll.dll
- NtDeleteWnfStateData (Address: 0x10036518)
- NtInitiatePowerAction (Address: 0x10036520)
- NtPowerInformation (Address: 0x10036524)
- NtQueryWnfStateData (Address: 0x1003650c)
- RtlAcquirePrivilege (Address: 0x10036528)
- RtlNtStatusToDosError (Address: 0x1003651c)
- RtlPublishWnfStateData (Address: 0x10036514)
- RtlReleasePrivilege (Address: 0x1003652c)
- RtlSubscribeWnfStateChangeNotification (Address: 0x10036508)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x10036510)
OLEAUT32.dll
- SysFreeString (Address: 0x10036000)
- SysStringLen (Address: 0x10036004)
- VariantClear (Address: 0x10036008)
- VariantInit (Address: 0x1003600c)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x10036034)
- CStdStubBuffer_Connect (Address: 0x1003604c)
- CStdStubBuffer_CountRefs (Address: 0x10036058)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1003602c)
- CStdStubBuffer_DebugServerRelease (Address: 0x10036048)
- CStdStubBuffer_Disconnect (Address: 0x10036050)
- CStdStubBuffer_Invoke (Address: 0x10036020)
- CStdStubBuffer_IsIIDSupported (Address: 0x1003605c)
- CStdStubBuffer_QueryInterface (Address: 0x10036054)
- IUnknown_AddRef_Proxy (Address: 0x10036028)
- IUnknown_QueryInterface_Proxy (Address: 0x10036060)
- IUnknown_Release_Proxy (Address: 0x10036038)
- NdrCStdStubBuffer_Release (Address: 0x1003601c)
- NdrCStdStubBuffer2_Release (Address: 0x1003603c)
- NdrDllCanUnloadNow (Address: 0x10036018)
- NdrDllGetClassObject (Address: 0x10036014)
- NdrOleAllocate (Address: 0x10036044)
- NdrOleFree (Address: 0x10036030)
- NdrStubCall2 (Address: 0x10036024)
- NdrStubForwardingFunction (Address: 0x10036040)
tzautoupdate.dll
- AttemptToUpdateTimeZone (Address: 0x10036534)
UMPDC.dll
- PdcNotificationClientRegister (Address: 0x10036068)