Windows.System.Diagnostics.dll
v10.0.19041.6456
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
DllCanUnloadNow
#1 · 0x106c0
DllGetActivationFactory
#2 · 0x10710
No function matches your filter.
Imported DLLs & functions 223
GetApplicationUserModelId
0x10043050
GetPackageFamilyName
0x10043044
GetPackageFullName
0x1004304c
PackageFamilyNameFromFullName
0x10043048
FormatApplicationUserModelId
0x1004305c
ParseApplicationUserModelId
0x10043058
BiPtEnumerateWorkItemsForPackageNameEx
0x10043068
BiPtFreeMemory
0x1004306c
BiPtQueryWorkItemEx
0x10043064
CoCreateFreeThreadedMarshaler
0x100430a0
CoCreateInstance
0x10043080
CoGetApartmentType
0x10043088
CoGetCallContext
0x10043094
CoGetCallerTID
0x10043084
CoGetInterfaceAndReleaseStream
0x10043078
CoGetMalloc
0x10043098
CoIncrementMTAUsage
0x100430a8
CoInitializeEx
0x1004307c
CoMarshalInterface
0x10043074
CoReleaseMarshalData
0x10043090
CoTaskMemAlloc
0x100430a4
CoTaskMemFree
0x1004308c
CreateStreamOnHGlobal
0x1004309c
RoGetAgileReference
0x100430b0
DebugBreak
0x100430b8
IsDebuggerPresent
0x100430c0
OutputDebugStringW
0x100430bc
DelayLoadFailureHook
0x100430c8
ResolveDelayLoadedAPI
0x100430d0
GetLastError
0x100430e4
RaiseException
0x100430d8
SetLastError
0x100430e8
SetUnhandledExceptionFilter
0x100430dc
UnhandledExceptionFilter
0x100430e0
RaiseFailFastException
0x100430f0
GetProcessHeap
0x1004310c
HeapAlloc
0x10043104
HeapFree
0x10043108
InitializeSListHead
0x10043124
InterlockedFlushSList
0x10043128
InterlockedPushEntrySList
0x10043120
QueryInformationJobObject
0x10043130
RegisterWaitForSingleObject
0x10043138
GetModuleFileNameA
0x10043148
GetModuleHandleExW
0x10043140
GetModuleHandleW
0x1004314c
GetProcAddress
0x10043144
FormatMessageW
0x10043154
ExpandEnvironmentStringsW
0x1004315c
GetCurrentProcess
0x1004317c
GetCurrentProcessId
0x10043190
GetCurrentThread
0x10043170
GetCurrentThreadId
0x10043184
GetProcessId
0x10043174
OpenProcessToken
0x10043164
OpenThreadToken
0x10043194
SuspendThread
0x10043168
TerminateProcess
0x10043180
TlsAlloc
0x1004318c
TlsFree
0x10043188
TlsGetValue
0x1004316c
TlsSetValue
0x10043178
IsProcessorFeaturePresent
0x1004319c
OpenProcess
0x100431a0
GetSystemTimes
0x100431a8
QueryPerformanceCounter
0x100431b0
QueryFullProcessImageNameW
0x100431b8
PsmGetApplicationNameFromKey
0x100431c0
PsmGetPackageFullNameFromKey
0x100431c4
RegCloseKey
0x100431dc
RegEnumKeyExW
0x100431d4
RegGetValueW
0x100431cc
RegOpenKeyExW
0x100431d8
RegQueryInfoKeyW
0x100431d0
AcquireSRWLockExclusive
0x10043234
AcquireSRWLockShared
0x10043218
CancelWaitableTimer
0x10043230
CreateEventExW
0x10043210
CreateMutexExW
0x10043220
CreateSemaphoreExW
0x10043224
CreateWaitableTimerExW
0x10043204
InitializeSRWLock
0x10043200
OpenSemaphoreW
0x10043214
ReleaseMutex
0x100431f8
ReleaseSemaphore
0x1004322c
ReleaseSRWLockExclusive
0x10043228
ReleaseSRWLockShared
0x1004321c
ResetEvent
0x1004320c
SetEvent
0x100431f0
SetWaitableTimer
0x10043208
WaitForSingleObject
0x100431f4
WaitForSingleObjectEx
0x100431fc
InitOnceBeginInitialize
0x1004323c
InitOnceComplete
0x1004324c
InitOnceExecuteOnce
0x10043240
Sleep
0x10043248
WaitOnAddress
0x10043250
WakeByAddressAll
0x10043244
GetRestrictedErrorInfo
0x10043278
RoOriginateError
0x10043270
RoOriginateErrorW
0x1004327c
RoTransformError
0x10043280
SetRestrictedErrorInfo
0x10043274
IsErrorPropagationEnabled
0x10043290
RoGetMatchingRestrictedErrorInfo
0x1004328c
RoOriginateLanguageException
0x10043288
RoReportFailedDelegate
0x10043294
RoGetActivationFactory
0x100432a4
RoInitialize
0x100432a0
RoUninitialize
0x1004329c
WindowsCreateString
0x100432b4
WindowsCreateStringReference
0x100432b8
WindowsDeleteString
0x100432b0
WindowsDeleteStringBuffer
0x100432cc
WindowsDuplicateString
0x100432ac
WindowsGetStringRawBuffer
0x100432bc
WindowsIsStringEmpty
0x100432c4
WindowsPreallocateStringBuffer
0x100432d0
WindowsPromoteStringBuffer
0x100432c8
WindowsStringHasEmbeddedNull
0x100432c0
__CxxFrameHandler3
0x10043354
__std_terminate
0x10043350
_CxxThrowException
0x10043318
_except_handler4_common
0x10043314
_o___std_exception_copy
0x10043338
_o___std_exception_destroy
0x10043334
_o___std_type_info_destroy_list
0x10043330
_o___stdio_common_vsnprintf_s
0x100432f4
_o___stdio_common_vsprintf
0x1004334c
_o___stdio_common_vswprintf
0x10043348
_o__callnewh
0x10043320
_o__cexit
0x1004331c
_o__configure_narrow_argv
0x10043340
_o__crt_atexit
0x1004333c
_o__errno
0x10043328
_o__execute_onexit_table
0x10043324
_o__initialize_narrow_environment
0x100432d8
_o__initialize_onexit_table
0x100432dc
_o__invalid_parameter_noinfo
0x100432e0
_o__invalid_parameter_noinfo_noreturn
0x100432e4
_o__purecall
0x100432e8
_o__register_onexit_function
0x100432ec
_o__seh_filter_dll
0x100432f0
_o__wcsicmp
0x10043344
_o_free
0x100432fc
_o_iswspace
0x10043300
_o_malloc
0x10043304
_o_realloc
0x10043308
_o_terminate
0x1004330c
_o_toupper
0x10043310
memcpy
0x10043358
memmove
0x100432f8
wcschr
0x1004332c
memset
0x1004336c
EventActivityIdControl
0x1004337c
EventProviderEnabled
0x10043374
EventRegister
0x10043380
EventSetInformation
0x10043384
EventUnregister
0x10043378
EventWriteTransfer
0x10043388
FreeTransientObjectSecurityDescriptor
0x10043390
QueryTransientObjectSecurityDescriptor
0x10043394
CopySid
0x1004339c
CreateWellKnownSid
0x100433a8
DuplicateTokenEx
0x100433b0
GetLengthSid
0x100433a4
GetSidSubAuthority
0x100433b4
GetTokenInformation
0x100433ac
IsValidSid
0x100433a0
CapabilityCheck
0x100433bc
SHTaskPoolAllowThreadReuse
0x100433c4
SHTaskPoolQueueTask
0x100433c8
CoreUIConfigureTestHost
0x10043000
CoreUICreate
0x10043004
MsgRelease
0x10043008
CoreUIFactoryCreate
0x10043010
ntdll.dll
24
NtQueryInformationJobObject
0x10043428
NtQueryInformationToken
0x100433e0
NtQuerySecurityAttributesToken
0x10043418
NtQuerySystemInformation
0x1004342c
NtQueryWnfStateData
0x10043404
RtlAcquireSRWLockExclusive
0x10043430
RtlAllocateHeap
0x100433fc
RtlCompareUnicodeString
0x10043414
RtlCopySid
0x10043420
RtlFreeHeap
0x100433dc
RtlInitializeSRWLock
0x10043438
RtlInitUnicodeString
0x100433e8
RtlLengthSid
0x10043424
RtlNtStatusToDosErrorNoTeb
0x100433e4
RtlRbInsertNodeEx
0x1004340c
RtlRbRemoveNode
0x10043400
RtlReleaseSRWLockExclusive
0x10043434
RtlSubscribeWnfStateChangeNotification
0x10043410
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100433ec
RtlValidSid
0x1004341c
TpAllocWork
0x10043408
TpPostWork
0x100433f8
TpReleaseWork
0x100433f0
TpWaitForWork
0x100433f4
I_RpcExceptionFilter
0x1004303c
I_RpcMapWin32Status
0x10043038
NdrClientCall4
0x1004302c
RpcBindingBind
0x10043028
RpcBindingCreateW
0x10043024
RpcBindingFree
0x10043034
RpcExceptionFilter
0x10043030
No function matches your filter.