SettingsHandlers_Startup.dll

Description: System Settings Startup Handlers Implementation

Version: 10.0.19041.5072

Architecture: 64-bit

Operating System: Windows NT

SHA256: 5c00fae72fb6d017e7d9b2c79270b16b

File Size: 149.5 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

GetSetting (Ordinal: 1, Address: 0x12a0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18001c998)
CoCreateInstance (Address: 0x18001c9a0)
CoDecrementMTAUsage (Address: 0x18001c970)
CoGetMalloc (Address: 0x18001c9a8)
CoIncrementMTAUsage (Address: 0x18001c978)
CoInitializeEx (Address: 0x18001c988)
CoTaskMemAlloc (Address: 0x18001c990)
CoTaskMemFree (Address: 0x18001c9b0)
CoTaskMemRealloc (Address: 0x18001c9c0)
CoUninitialize (Address: 0x18001c980)
CoWaitForMultipleHandles (Address: 0x18001c9b8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001c9d0)
IsDebuggerPresent (Address: 0x18001c9d8)
OutputDebugStringW (Address: 0x18001c9e0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001c9f0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001ca00)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001ca28)
RaiseException (Address: 0x18001ca20)
SetLastError (Address: 0x18001ca18)
SetUnhandledExceptionFilter (Address: 0x18001ca30)
UnhandledExceptionFilter (Address: 0x18001ca10)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18001ca50)
CreateFileW (Address: 0x18001ca60)
FindClose (Address: 0x18001ca48)
FindFirstFileW (Address: 0x18001ca40)
FindNextFileW (Address: 0x18001ca68)
GetFileAttributesExW (Address: 0x18001ca58)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001ca78)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001ca98)
HeapAlloc (Address: 0x18001ca90)
HeapFree (Address: 0x18001ca88)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18001cab0)
LocalFree (Address: 0x18001caa8)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18001cac0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001caf8)
FreeLibrary (Address: 0x18001cae0)
GetModuleFileNameA (Address: 0x18001cad0)
GetModuleHandleExW (Address: 0x18001cad8)
GetModuleHandleW (Address: 0x18001caf0)
GetProcAddress (Address: 0x18001cae8)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18001cb08)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001cb18)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18001cb28)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18001cb88)
GetCurrentProcess (Address: 0x18001cb48)
GetCurrentProcessId (Address: 0x18001cb78)
GetCurrentThread (Address: 0x18001cb50)
GetCurrentThreadId (Address: 0x18001cb80)
GetExitCodeProcess (Address: 0x18001cb40)
GetProcessId (Address: 0x18001cb38)
GetProcessTimes (Address: 0x18001cb58)
OpenProcessToken (Address: 0x18001cb70)
OpenThreadToken (Address: 0x18001cb60)
TerminateProcess (Address: 0x18001cb68)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18001cba0)
OpenProcess (Address: 0x18001cb98)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001cbb0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001cbf0)
RegCreateKeyExW (Address: 0x18001cbd8)
RegEnumValueW (Address: 0x18001cbc8)
RegGetValueW (Address: 0x18001cbc0)
RegOpenKeyExW (Address: 0x18001cbd0)
RegQueryInfoKeyW (Address: 0x18001cbf8)
RegQueryValueExW (Address: 0x18001cbe0)
RegSetValueExW (Address: 0x18001cbe8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001cc08)
RtlLookupFunctionEntry (Address: 0x18001cc18)
RtlVirtualUnwind (Address: 0x18001cc10)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFileExistsW (Address: 0x18001cc38)
PathGetArgsW (Address: 0x18001cc28)
PathRemoveBlanksW (Address: 0x18001cc40)
PathRemoveExtensionW (Address: 0x18001cc48)
PathStripPathW (Address: 0x18001cc30)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

StrToIntExW (Address: 0x18001cc60)
StrTrimW (Address: 0x18001cc58)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x18001cc70)
CompareStringOrdinal (Address: 0x18001cc78)

api-ms-win-core-string-l2-1-0.dll

CharUpperBuffW (Address: 0x18001cc88)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001ccf0)
AcquireSRWLockShared (Address: 0x18001cce0)
CreateEventExW (Address: 0x18001cca0)
CreateEventW (Address: 0x18001ccd0)
CreateMutexExW (Address: 0x18001ccb8)
CreateSemaphoreExW (Address: 0x18001cd38)
DeleteCriticalSection (Address: 0x18001cd30)
EnterCriticalSection (Address: 0x18001cce8)
InitializeCriticalSectionEx (Address: 0x18001cd28)
InitializeSRWLock (Address: 0x18001cc98)
LeaveCriticalSection (Address: 0x18001cca8)
OpenSemaphoreW (Address: 0x18001ccc8)
ReleaseMutex (Address: 0x18001cd10)
ReleaseSemaphore (Address: 0x18001cd18)
ReleaseSRWLockExclusive (Address: 0x18001ccf8)
ReleaseSRWLockShared (Address: 0x18001ccc0)
ResetEvent (Address: 0x18001ccd8)
SetEvent (Address: 0x18001cd00)
WaitForMultipleObjectsEx (Address: 0x18001cd20)
WaitForSingleObject (Address: 0x18001ccb0)
WaitForSingleObjectEx (Address: 0x18001cd08)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18001cd48)
GetSystemTimeAsFileTime (Address: 0x18001cd58)
GetVersionExW (Address: 0x18001cd50)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x18001cd68)
GetProductInfo (Address: 0x18001cd70)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

QueueUserWorkItem (Address: 0x18001cd80)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18001cd90)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x18001cda8)
GetFileVersionInfoSizeExW (Address: 0x18001cdb0)
VerQueryValueW (Address: 0x18001cda0)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x18001cdc0)
RoTransformError (Address: 0x18001cdc8)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18001cde0)
RoGetMatchingRestrictedErrorInfo (Address: 0x18001cde8)
RoReportFailedDelegate (Address: 0x18001cdd8)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18001cdf8)
RoInitialize (Address: 0x18001ce00)
RoUninitialize (Address: 0x18001ce08)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x18001ce30)
WindowsCreateString (Address: 0x18001ce20)
WindowsCreateStringReference (Address: 0x18001ce28)
WindowsDeleteString (Address: 0x18001ce38)
WindowsDuplicateString (Address: 0x18001ce18)
WindowsGetStringRawBuffer (Address: 0x18001ce40)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18001ced0)
__CxxFrameHandler3 (Address: 0x18001cef0)
__CxxFrameHandler4 (Address: 0x18001cf60)
__std_terminate (Address: 0x18001cf58)
_CxxThrowException (Address: 0x18001cee8)
_o___std_exception_copy (Address: 0x18001cf50)
_o___std_exception_destroy (Address: 0x18001cf48)
_o___std_type_info_destroy_list (Address: 0x18001cf40)
_o___stdio_common_vsnprintf_s (Address: 0x18001cf38)
_o___stdio_common_vswprintf (Address: 0x18001cf30)
_o___stdio_common_vswscanf (Address: 0x18001cf28)
_o__beginthreadex (Address: 0x18001cf20)
_o__callnewh (Address: 0x18001cf18)
_o__cexit (Address: 0x18001cf10)
_o__configure_narrow_argv (Address: 0x18001cf08)
_o__crt_atexit (Address: 0x18001cf00)
_o__errno (Address: 0x18001cee0)
_o__execute_onexit_table (Address: 0x18001ced8)
_o__initialize_narrow_environment (Address: 0x18001ce50)
_o__initialize_onexit_table (Address: 0x18001ce58)
_o__invalid_parameter_noinfo (Address: 0x18001ce60)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18001ce68)
_o__purecall (Address: 0x18001ce70)
_o__register_onexit_function (Address: 0x18001ce78)
_o__seh_filter_dll (Address: 0x18001ce80)
_o__wcsicmp (Address: 0x18001ce90)
_o_bsearch_s (Address: 0x18001ce98)
_o_free (Address: 0x18001cea0)
_o_malloc (Address: 0x18001cea8)
_o_realloc (Address: 0x18001ceb0)
_o_terminate (Address: 0x18001ceb8)
_o_wcstod (Address: 0x18001cec0)
_o_wcstok_s (Address: 0x18001cec8)
memcpy (Address: 0x18001cf68)
memmove (Address: 0x18001ce88)
wcschr (Address: 0x18001cef8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18001cf80)
_initterm_e (Address: 0x18001cf78)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18001cf90)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

EnumWindows (Address: 0x18001cfa8)
GetWindowThreadProcessId (Address: 0x18001cfb0)
SendMessageW (Address: 0x18001cfa0)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x18001cfe0)
GetLengthSid (Address: 0x18001cfc0)
GetTokenInformation (Address: 0x18001cfd8)
ImpersonateLoggedOnUser (Address: 0x18001cfc8)
RevertToSelf (Address: 0x18001cfd0)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18001cff0)

api-ms-win-shcore-obsolete-l1-1-0.dll

SHStrDupW (Address: 0x18001d000)

api-ms-win-shcore-path-l1-1-0.dll

(Address: 0x18001d010)

api-ms-win-shcore-stream-l1-1-0.dll

SHCreateStreamOnFileW (Address: 0x18001d020)

api-ms-win-shcore-thread-l1-1-0.dll

SHCreateThread (Address: 0x18001d030)

api-ms-win-shell-namespace-l1-1-0.dll

ILFree (Address: 0x18001d050)
SHBindToParent (Address: 0x18001d048)
SHParseDisplayName (Address: 0x18001d040)

api-ms-win-shlwapi-winrt-storage-l1-1-1.dll

StrRetToBufW (Address: 0x18001d060)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x18001d070)
_Thrd_detach (Address: 0x18001d090)
?_Throw_C_error@std@@YAXH@Z (Address: 0x18001d078)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18001d088)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18001d080)

OLEAUT32.dll

SysAllocString (Address: 0x18001c938)
SysFreeString (Address: 0x18001c940)

SHCORE.dll

(Address: 0x18001c950)

XmlLite.dll

CreateXmlReader (Address: 0x18001c960)