Windows.System.SystemManagement.dll
Description: Windows Runtime SystemManagement DLL
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5848
Architecture: 64-bit
Operating System: Windows NT
SHA256: 93165e08a835e650971c9399e315fb8f
File Size: 317.5 KB
Uploaded At: Dec. 1, 2025, 7:44 a.m.
Views: 4
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x7b10)
- DllGetActivationFactory (Ordinal: 2, Address: 0x7bf0)
- DllGetClassObject (Ordinal: 3, Address: 0x7c00)
Imported DLLs & Functions
api-ms-win-appmodel-runtime-l1-1-0.dll
- GetPackageFamilyName (Address: 0x18003c048)
- GetPackageId (Address: 0x18003c040)
- GetPackagePath (Address: 0x18003c050)
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x18003c060)
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x18003c0d0)
- CoCreateInstance (Address: 0x18003c098)
- CoDecrementMTAUsage (Address: 0x18003c090)
- CoGetApartmentType (Address: 0x18003c0b8)
- CoGetCallContext (Address: 0x18003c0e8)
- CoGetMalloc (Address: 0x18003c088)
- CoImpersonateClient (Address: 0x18003c0c0)
- CoIncrementMTAUsage (Address: 0x18003c080)
- CoInitializeEx (Address: 0x18003c0d8)
- CoMarshalInterface (Address: 0x18003c0a0)
- CoReleaseMarshalData (Address: 0x18003c0b0)
- CoRevertToSelf (Address: 0x18003c078)
- CoTaskMemAlloc (Address: 0x18003c0c8)
- CoTaskMemFree (Address: 0x18003c070)
- CoUninitialize (Address: 0x18003c0e0)
- CreateStreamOnHGlobal (Address: 0x18003c0a8)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x18003c0f8)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x18003c188)
- CStdStubBuffer2_CountRefs (Address: 0x18003c180)
- CStdStubBuffer2_Disconnect (Address: 0x18003c1e0)
- CStdStubBuffer2_QueryInterface (Address: 0x18003c1f8)
- NdrProxyForwardingFunction3 (Address: 0x18003c198)
- NdrProxyForwardingFunction4 (Address: 0x18003c1d8)
- NdrProxyForwardingFunction5 (Address: 0x18003c200)
- ObjectStublessClient10 (Address: 0x18003c1a8)
- ObjectStublessClient11 (Address: 0x18003c128)
- ObjectStublessClient12 (Address: 0x18003c140)
- ObjectStublessClient13 (Address: 0x18003c1f0)
- ObjectStublessClient14 (Address: 0x18003c130)
- ObjectStublessClient15 (Address: 0x18003c190)
- ObjectStublessClient16 (Address: 0x18003c1a0)
- ObjectStublessClient17 (Address: 0x18003c1b0)
- ObjectStublessClient18 (Address: 0x18003c108)
- ObjectStublessClient19 (Address: 0x18003c1e8)
- ObjectStublessClient20 (Address: 0x18003c150)
- ObjectStublessClient21 (Address: 0x18003c158)
- ObjectStublessClient22 (Address: 0x18003c118)
- ObjectStublessClient23 (Address: 0x18003c1c0)
- ObjectStublessClient24 (Address: 0x18003c148)
- ObjectStublessClient25 (Address: 0x18003c120)
- ObjectStublessClient26 (Address: 0x18003c1c8)
- ObjectStublessClient27 (Address: 0x18003c110)
- ObjectStublessClient28 (Address: 0x18003c138)
- ObjectStublessClient29 (Address: 0x18003c160)
- ObjectStublessClient3 (Address: 0x18003c178)
- ObjectStublessClient6 (Address: 0x18003c1b8)
- ObjectStublessClient7 (Address: 0x18003c170)
- ObjectStublessClient8 (Address: 0x18003c168)
- ObjectStublessClient9 (Address: 0x18003c1d0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18003c220)
- IsDebuggerPresent (Address: 0x18003c210)
- OutputDebugStringW (Address: 0x18003c218)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18003c230)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18003c240)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18003c270)
- RaiseException (Address: 0x18003c258)
- SetLastError (Address: 0x18003c268)
- SetUnhandledExceptionFilter (Address: 0x18003c260)
- UnhandledExceptionFilter (Address: 0x18003c250)
api-ms-win-core-file-l1-1-0.dll
- ReadFile (Address: 0x18003c288)
- WriteFile (Address: 0x18003c280)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18003c298)
- SetHandleInformation (Address: 0x18003c2a0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18003c2b8)
- HeapAlloc (Address: 0x18003c2c0)
- HeapFree (Address: 0x18003c2b0)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x18003c2d8)
- InterlockedFlushSList (Address: 0x18003c2d0)
api-ms-win-core-io-l1-1-1.dll
- CancelSynchronousIo (Address: 0x18003c2e8)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x18003c2f8)
- FreeLibrary (Address: 0x18003c310)
- GetModuleFileNameA (Address: 0x18003c300)
- GetModuleHandleExW (Address: 0x18003c318)
- GetModuleHandleW (Address: 0x18003c308)
- GetProcAddress (Address: 0x18003c320)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18003c330)
api-ms-win-core-namedpipe-l1-1-0.dll
- CreatePipe (Address: 0x18003c340)
- PeekNamedPipe (Address: 0x18003c348)
api-ms-win-core-path-l1-1-0.dll
- PathCchCanonicalize (Address: 0x18003c358)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x18003c3a8)
- CreateThread (Address: 0x18003c388)
- GetCurrentProcess (Address: 0x18003c390)
- GetCurrentProcessId (Address: 0x18003c370)
- GetCurrentThread (Address: 0x18003c3b0)
- GetCurrentThreadId (Address: 0x18003c3a0)
- GetExitCodeProcess (Address: 0x18003c378)
- OpenProcessToken (Address: 0x18003c398)
- OpenThreadToken (Address: 0x18003c3b8)
- TerminateProcess (Address: 0x18003c368)
- TerminateThread (Address: 0x18003c380)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x18003c3c8)
- OpenProcess (Address: 0x18003c3d0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18003c3e0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18003c3f0)
- RegDeleteValueW (Address: 0x18003c408)
- RegEnumKeyExW (Address: 0x18003c428)
- RegGetValueW (Address: 0x18003c410)
- RegLoadMUIStringW (Address: 0x18003c420)
- RegOpenKeyExW (Address: 0x18003c418)
- RegQueryInfoKeyW (Address: 0x18003c3f8)
- RegQueryValueExW (Address: 0x18003c400)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x18003c438)
api-ms-win-core-registry-l2-1-0.dll
- RegCreateKeyW (Address: 0x18003c448)
- RegDeleteKeyW (Address: 0x18003c450)
- RegOpenKeyW (Address: 0x18003c458)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathIsRelativeW (Address: 0x18003c468)
api-ms-win-core-shutdown-l1-1-0.dll
- AbortSystemShutdownW (Address: 0x18003c480)
- InitiateSystemShutdownExW (Address: 0x18003c478)
api-ms-win-core-string-l1-1-0.dll
- MultiByteToWideChar (Address: 0x18003c490)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18003c518)
- AcquireSRWLockShared (Address: 0x18003c4f8)
- CancelWaitableTimer (Address: 0x18003c4b0)
- CreateEventExW (Address: 0x18003c4a8)
- CreateEventW (Address: 0x18003c548)
- CreateMutexExW (Address: 0x18003c500)
- CreateSemaphoreExW (Address: 0x18003c540)
- DeleteCriticalSection (Address: 0x18003c4e0)
- EnterCriticalSection (Address: 0x18003c4d8)
- InitializeCriticalSectionAndSpinCount (Address: 0x18003c4c0)
- InitializeCriticalSectionEx (Address: 0x18003c4e8)
- InitializeSRWLock (Address: 0x18003c4f0)
- LeaveCriticalSection (Address: 0x18003c4d0)
- OpenSemaphoreW (Address: 0x18003c550)
- ReleaseMutex (Address: 0x18003c528)
- ReleaseSemaphore (Address: 0x18003c538)
- ReleaseSRWLockExclusive (Address: 0x18003c520)
- ReleaseSRWLockShared (Address: 0x18003c508)
- ResetEvent (Address: 0x18003c4a0)
- SetEvent (Address: 0x18003c4b8)
- SetWaitableTimer (Address: 0x18003c4c8)
- WaitForSingleObject (Address: 0x18003c530)
- WaitForSingleObjectEx (Address: 0x18003c510)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x18003c560)
- InitOnceComplete (Address: 0x18003c570)
- InitOnceExecuteOnce (Address: 0x18003c568)
api-ms-win-core-synch-l1-2-1.dll
- CreateWaitableTimerW (Address: 0x18003c580)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemDirectoryW (Address: 0x18003c590)
- GetSystemTimeAsFileTime (Address: 0x18003c5a0)
- GetVersionExW (Address: 0x18003c598)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetProductInfo (Address: 0x18003c5b0)
- SetSystemTime (Address: 0x18003c5b8)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x18003c5f8)
- CloseThreadpoolWait (Address: 0x18003c5e8)
- CloseThreadpoolWork (Address: 0x18003c610)
- CreateThreadpoolTimer (Address: 0x18003c5d8)
- CreateThreadpoolWait (Address: 0x18003c5d0)
- CreateThreadpoolWork (Address: 0x18003c600)
- FreeLibraryWhenCallbackReturns (Address: 0x18003c608)
- SetThreadpoolTimer (Address: 0x18003c620)
- SetThreadpoolWait (Address: 0x18003c5c8)
- SubmitThreadpoolWork (Address: 0x18003c618)
- WaitForThreadpoolTimerCallbacks (Address: 0x18003c5f0)
- WaitForThreadpoolWaitCallbacks (Address: 0x18003c5e0)
api-ms-win-core-timezone-l1-1-0.dll
- EnumDynamicTimeZoneInformation (Address: 0x18003c640)
- FileTimeToSystemTime (Address: 0x18003c648)
- GetDynamicTimeZoneInformation (Address: 0x18003c630)
- SetDynamicTimeZoneInformation (Address: 0x18003c638)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x18003c658)
- EncodePointer (Address: 0x18003c660)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x18003c680)
- RoOriginateError (Address: 0x18003c670)
- RoOriginateErrorW (Address: 0x18003c678)
- RoTransformError (Address: 0x18003c690)
- SetRestrictedErrorInfo (Address: 0x18003c688)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x18003c6b0)
- RoGetMatchingRestrictedErrorInfo (Address: 0x18003c6a8)
- RoOriginateLanguageException (Address: 0x18003c6b8)
- RoReportFailedDelegate (Address: 0x18003c6a0)
api-ms-win-core-winrt-l1-1-0.dll
- RoGetActivationFactory (Address: 0x18003c6d8)
- RoInitialize (Address: 0x18003c6c8)
- RoUninitialize (Address: 0x18003c6d0)
api-ms-win-core-winrt-robuffer-l1-1-0.dll
- RoGetBufferMarshaler (Address: 0x18003c6e8)
api-ms-win-core-winrt-string-l1-1-0.dll
- HSTRING_UserFree (Address: 0x18003c728)
- HSTRING_UserFree64 (Address: 0x18003c738)
- HSTRING_UserMarshal (Address: 0x18003c748)
- HSTRING_UserMarshal64 (Address: 0x18003c720)
- HSTRING_UserSize (Address: 0x18003c768)
- HSTRING_UserSize64 (Address: 0x18003c730)
- HSTRING_UserUnmarshal (Address: 0x18003c780)
- HSTRING_UserUnmarshal64 (Address: 0x18003c710)
- WindowsCreateString (Address: 0x18003c6f8)
- WindowsCreateStringReference (Address: 0x18003c700)
- WindowsDeleteString (Address: 0x18003c708)
- WindowsDeleteStringBuffer (Address: 0x18003c770)
- WindowsDuplicateString (Address: 0x18003c740)
- WindowsGetStringLen (Address: 0x18003c788)
- WindowsGetStringRawBuffer (Address: 0x18003c750)
- WindowsIsStringEmpty (Address: 0x18003c758)
- WindowsPreallocateStringBuffer (Address: 0x18003c760)
- WindowsPromoteStringBuffer (Address: 0x18003c778)
- WindowsStringHasEmbeddedNull (Address: 0x18003c718)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x18003c7e8)
- __CxxFrameHandler3 (Address: 0x18003c7f0)
- __CxxFrameHandler4 (Address: 0x18003c888)
- __std_terminate (Address: 0x18003c880)
- _CxxThrowException (Address: 0x18003c7f8)
- _o___std_exception_copy (Address: 0x18003c830)
- _o___std_exception_destroy (Address: 0x18003c828)
- _o___std_type_info_destroy_list (Address: 0x18003c820)
- _o___stdio_common_vsnprintf_s (Address: 0x18003c878)
- _o___stdio_common_vswprintf (Address: 0x18003c870)
- _o___stdio_common_vswprintf_s (Address: 0x18003c868)
- _o__callnewh (Address: 0x18003c860)
- _o__cexit (Address: 0x18003c858)
- _o__configure_narrow_argv (Address: 0x18003c850)
- _o__crt_atexit (Address: 0x18003c848)
- _o__errno (Address: 0x18003c840)
- _o__execute_onexit_table (Address: 0x18003c838)
- _o__initialize_narrow_environment (Address: 0x18003c818)
- _o__initialize_onexit_table (Address: 0x18003c810)
- _o__invalid_parameter_noinfo (Address: 0x18003c808)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x18003c800)
- _o__purecall (Address: 0x18003c798)
- _o__register_onexit_function (Address: 0x18003c7a0)
- _o__seh_filter_dll (Address: 0x18003c7a8)
- _o__wcsicmp (Address: 0x18003c7b0)
- _o_free (Address: 0x18003c7c0)
- _o_iswspace (Address: 0x18003c7c8)
- _o_malloc (Address: 0x18003c7d0)
- _o_realloc (Address: 0x18003c7d8)
- _o_terminate (Address: 0x18003c7e0)
- memcmp (Address: 0x18003c890)
- memcpy (Address: 0x18003c898)
- memmove (Address: 0x18003c7b8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x18003c8b0)
- _initterm_e (Address: 0x18003c8a8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x18003c8c0)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x18003c8f0)
- EventRegister (Address: 0x18003c8d8)
- EventSetInformation (Address: 0x18003c8e0)
- EventUnregister (Address: 0x18003c8d0)
- EventWriteTransfer (Address: 0x18003c8e8)
api-ms-win-security-base-l1-1-0.dll
- GetTokenInformation (Address: 0x18003c900)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x18003c910)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x18003c920)
- SHTaskPoolQueueTask (Address: 0x18003c928)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x18003c938)
msvcp_win.dll
- ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x18003c948)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x18003c950)
- ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x18003c960)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x18003c970)
- ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x18003c958)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x18003c980)
- ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x18003c978)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18003c968)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18003c988)
ntdll.dll
- NtDeleteWnfStateData (Address: 0x18003c9b8)
- NtInitiatePowerAction (Address: 0x18003c9c8)
- NtPowerInformation (Address: 0x18003c9d0)
- NtQueryWnfStateData (Address: 0x18003c9a0)
- RtlAcquirePrivilege (Address: 0x18003c9d8)
- RtlCaptureContext (Address: 0x18003c9f8)
- RtlLookupFunctionEntry (Address: 0x18003c9f0)
- RtlNtStatusToDosError (Address: 0x18003c9c0)
- RtlPublishWnfStateData (Address: 0x18003c9b0)
- RtlReleasePrivilege (Address: 0x18003c9e0)
- RtlSubscribeWnfStateChangeNotification (Address: 0x18003c998)
- RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18003c9a8)
- RtlVirtualUnwind (Address: 0x18003c9e8)
OLEAUT32.dll
- SysFreeString (Address: 0x18003bf60)
- SysStringLen (Address: 0x18003bf68)
- VariantClear (Address: 0x18003bf70)
- VariantInit (Address: 0x18003bf78)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x18003bfd0)
- CStdStubBuffer_Connect (Address: 0x18003bfe8)
- CStdStubBuffer_CountRefs (Address: 0x18003c000)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x18003bfb0)
- CStdStubBuffer_DebugServerRelease (Address: 0x18003c020)
- CStdStubBuffer_Disconnect (Address: 0x18003bff0)
- CStdStubBuffer_Invoke (Address: 0x18003bfc8)
- CStdStubBuffer_IsIIDSupported (Address: 0x18003c008)
- CStdStubBuffer_QueryInterface (Address: 0x18003bff8)
- IUnknown_AddRef_Proxy (Address: 0x18003bfa8)
- IUnknown_QueryInterface_Proxy (Address: 0x18003c018)
- IUnknown_Release_Proxy (Address: 0x18003bfd8)
- NdrCStdStubBuffer_Release (Address: 0x18003bf90)
- NdrCStdStubBuffer2_Release (Address: 0x18003bfc0)
- NdrDllCanUnloadNow (Address: 0x18003bf88)
- NdrDllGetClassObject (Address: 0x18003bf98)
- NdrOleAllocate (Address: 0x18003bfe0)
- NdrOleFree (Address: 0x18003bfb8)
- NdrStubCall3 (Address: 0x18003c010)
- NdrStubForwardingFunction (Address: 0x18003bfa0)
tzautoupdate.dll
- AttemptToUpdateTimeZone (Address: 0x18003ca08)
UMPDC.dll
- PdcNotificationClientRegister (Address: 0x18003c030)