Windows.System.Diagnostics.dll
v10.0.19041.4355
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x4f90
DllGetActivationFactory
#2 · 0x5060
No function matches your filter.
Imported DLLs & functions 210
GetApplicationUserModelId
0x180043b30
GetPackageFamilyName
0x180043b18
GetPackageFullName
0x180043b28
PackageFamilyNameFromFullName
0x180043b20
FormatApplicationUserModelId
0x180043b48
ParseApplicationUserModelId
0x180043b40
BiPtEnumerateWorkItemsForPackageNameEx
0x180043b60
BiPtFreeMemory
0x180043b68
BiPtQueryWorkItemEx
0x180043b58
CoCreateFreeThreadedMarshaler
0x180043bc0
CoCreateInstance
0x180043b88
CoGetApartmentType
0x180043b98
CoGetCallContext
0x180043bb0
CoGetCallerTID
0x180043b90
CoGetInterfaceAndReleaseStream
0x180043b80
CoIncrementMTAUsage
0x180043bd0
CoMarshalInterface
0x180043b78
CoReleaseMarshalData
0x180043ba8
CoTaskMemAlloc
0x180043bc8
CoTaskMemFree
0x180043ba0
CreateStreamOnHGlobal
0x180043bb8
RoGetAgileReference
0x180043be0
DebugBreak
0x180043bf0
IsDebuggerPresent
0x180043c00
OutputDebugStringW
0x180043bf8
DelayLoadFailureHook
0x180043c10
ResolveDelayLoadedAPI
0x180043c20
GetLastError
0x180043c48
RaiseException
0x180043c30
SetLastError
0x180043c50
SetUnhandledExceptionFilter
0x180043c38
UnhandledExceptionFilter
0x180043c40
CloseHandle
0x180043c60
GetProcessHeap
0x180043c80
HeapAlloc
0x180043c70
HeapFree
0x180043c78
InitializeSListHead
0x180043cb0
InterlockedFlushSList
0x180043cb8
InterlockedPushEntrySList
0x180043ca8
GetModuleFileNameA
0x180043cd8
GetModuleHandleExW
0x180043cc8
GetModuleHandleW
0x180043ce0
GetProcAddress
0x180043cd0
FormatMessageW
0x180043cf0
ExpandEnvironmentStringsW
0x180043d00
GetCurrentProcess
0x180043d28
GetCurrentProcessId
0x180043d50
GetCurrentThread
0x180043d18
GetCurrentThreadId
0x180043d38
GetProcessId
0x180043d20
OpenProcessToken
0x180043d10
OpenThreadToken
0x180043d58
TerminateProcess
0x180043d30
TlsAlloc
0x180043d48
TlsFree
0x180043d40
IsProcessorFeaturePresent
0x180043d68
OpenProcess
0x180043d70
GetSystemTimes
0x180043d80
QueryPerformanceCounter
0x180043d90
QueryFullProcessImageNameW
0x180043da0
PsmGetApplicationNameFromKey
0x180043db0
PsmGetPackageFullNameFromKey
0x180043db8
RegCloseKey
0x180043dc8
RegEnumKeyExW
0x180043dd8
RegGetValueW
0x180043de8
RegOpenKeyExW
0x180043de0
RegQueryInfoKeyW
0x180043dd0
RtlCaptureContext
0x180043e00
RtlLookupFunctionEntry
0x180043e08
RtlVirtualUnwind
0x180043df8
CompareStringOrdinal
0x180043e18
MultiByteToWideChar
0x180043e20
AcquireSRWLockExclusive
0x180043e78
AcquireSRWLockShared
0x180043e60
CreateEventExW
0x180043e38
CreateMutexExW
0x180043e40
CreateSemaphoreExW
0x180043e70
InitializeSRWLock
0x180043e98
OpenSemaphoreW
0x180043e48
ReleaseMutex
0x180043e88
ReleaseSemaphore
0x180043e90
ReleaseSRWLockExclusive
0x180043e80
ReleaseSRWLockShared
0x180043e68
ResetEvent
0x180043e30
SetEvent
0x180043ea0
WaitForSingleObject
0x180043e58
WaitForSingleObjectEx
0x180043e50
InitOnceBeginInitialize
0x180043ec8
InitOnceComplete
0x180043eb8
InitOnceExecuteOnce
0x180043ec0
Sleep
0x180043eb0
WaitOnAddress
0x180043ed8
WakeByAddressAll
0x180043ed0
GetRestrictedErrorInfo
0x180043f28
RoOriginateError
0x180043f18
RoOriginateErrorW
0x180043f30
RoTransformError
0x180043f38
SetRestrictedErrorInfo
0x180043f20
IsErrorPropagationEnabled
0x180043f58
RoGetMatchingRestrictedErrorInfo
0x180043f50
RoOriginateLanguageException
0x180043f48
RoReportFailedDelegate
0x180043f60
RoGetActivationFactory
0x180043f80
RoInitialize
0x180043f78
RoUninitialize
0x180043f70
WindowsCreateString
0x180043fa0
WindowsCreateStringReference
0x180043fa8
WindowsDeleteString
0x180043f98
WindowsDeleteStringBuffer
0x180043fd0
WindowsDuplicateString
0x180043f90
WindowsGetStringRawBuffer
0x180043fb0
WindowsIsStringEmpty
0x180043fc0
WindowsPreallocateStringBuffer
0x180043fd8
WindowsPromoteStringBuffer
0x180043fc8
WindowsStringHasEmbeddedNull
0x180043fb8
__C_specific_handler
0x180044058
__CxxFrameHandler3
0x180044060
__CxxFrameHandler4
0x1800440e0
__std_terminate
0x1800440d8
_CxxThrowException
0x180044068
_o___std_exception_copy
0x180044098
_o___std_exception_destroy
0x180044090
_o___std_type_info_destroy_list
0x180044088
_o___stdio_common_vsnprintf_s
0x1800440c0
_o___stdio_common_vswprintf
0x1800440a0
_o__callnewh
0x1800440b0
_o__cexit
0x1800440a8
_o__configure_narrow_argv
0x180044078
_o__crt_atexit
0x180044070
_o__errno
0x1800440c8
_o__execute_onexit_table
0x1800440b8
_o__initialize_narrow_environment
0x180043fe8
_o__initialize_onexit_table
0x180043ff0
_o__invalid_parameter_noinfo
0x180043ff8
_o__invalid_parameter_noinfo_noreturn
0x180044000
_o__purecall
0x180044008
_o__register_onexit_function
0x180044010
_o__seh_filter_dll
0x180044018
_o__wcsicmp
0x1800440d0
_o_free
0x180044028
_o_iswspace
0x180044030
_o_malloc
0x180044038
_o_realloc
0x180044040
_o_terminate
0x180044048
_o_toupper
0x180044050
memcpy
0x1800440e8
memmove
0x180044020
wcschr
0x180044080
memset
0x180044110
EventActivityIdControl
0x180044130
EventProviderEnabled
0x180044120
EventRegister
0x180044138
EventSetInformation
0x180044140
EventUnregister
0x180044128
EventWriteTransfer
0x180044148
FreeTransientObjectSecurityDescriptor
0x180044158
QueryTransientObjectSecurityDescriptor
0x180044160
CopySid
0x180044170
CreateWellKnownSid
0x180044188
DuplicateTokenEx
0x180044198
GetLengthSid
0x180044180
GetSidSubAuthority
0x1800441a0
GetTokenInformation
0x180044190
IsValidSid
0x180044178
CapabilityCheck
0x1800441b0
SHTaskPoolAllowThreadReuse
0x1800441c0
SHTaskPoolQueueTask
0x1800441c8
?_Xbad_function_call@std@@YAXXZ
0x1800441e0
?_Xlength_error@std@@YAXPEBD@Z
0x1800441d8
ntdll.dll
24
NtQueryInformationJobObject
0x180044288
NtQueryInformationToken
0x1800441f8
NtQuerySecurityAttributesToken
0x180044268
NtQuerySystemInformation
0x180044290
NtQueryWnfStateData
0x180044240
RtlAcquireSRWLockExclusive
0x180044298
RtlAllocateHeap
0x180044230
RtlCompareUnicodeString
0x180044260
RtlCopySid
0x180044278
RtlFreeHeap
0x1800441f0
RtlInitializeSRWLock
0x1800442a8
RtlInitUnicodeString
0x180044208
RtlLengthSid
0x180044280
RtlNtStatusToDosErrorNoTeb
0x180044200
RtlRbInsertNodeEx
0x180044250
RtlRbRemoveNode
0x180044238
RtlReleaseSRWLockExclusive
0x1800442a0
RtlSubscribeWnfStateChangeNotification
0x180044258
RtlUnsubscribeWnfNotificationWaitForCompletion
0x180044210
RtlValidSid
0x180044270
TpAllocWork
0x180044248
TpPostWork
0x180044228
TpReleaseWork
0x180044218
TpWaitForWork
0x180044220
I_RpcExceptionFilter
0x180043b08
I_RpcMapWin32Status
0x180043b00
NdrClientCall3
0x180043ae8
RpcBindingBind
0x180043ae0
RpcBindingCreateW
0x180043ad8
RpcBindingFree
0x180043af8
RpcExceptionFilter
0x180043af0
No function matches your filter.