Windows.Web.Diagnostics.dll

Description: Windows.Web.Diagnostics

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: a19c401de6ced91413ebaa6206633571

File Size: 163.0 KB

Uploaded At: Dec. 1, 2025, 8:07 a.m.

Views: 17

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x9b60)
DllGetActivationFactory (Ordinal: 2, Address: 0x9af0)
DllGetClassObject (Ordinal: 3, Address: 0x9b10)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1002605c)
CoCreateInstance (Address: 0x10026064)
CoTaskMemAlloc (Address: 0x10026060)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x1002606c)

api-ms-win-core-com-midlproxystub-l1-1-0.dll

CStdStubBuffer2_Connect (Address: 0x1002608c)
CStdStubBuffer2_CountRefs (Address: 0x10026098)
CStdStubBuffer2_Disconnect (Address: 0x100260c0)
CStdStubBuffer2_QueryInterface (Address: 0x10026080)
NdrProxyForwardingFunction3 (Address: 0x10026078)
NdrProxyForwardingFunction4 (Address: 0x10026088)
NdrProxyForwardingFunction5 (Address: 0x1002607c)
ObjectStublessClient10 (Address: 0x100260a4)
ObjectStublessClient11 (Address: 0x100260a8)
ObjectStublessClient12 (Address: 0x100260a0)
ObjectStublessClient13 (Address: 0x100260ac)
ObjectStublessClient14 (Address: 0x100260b0)
ObjectStublessClient15 (Address: 0x10026094)
ObjectStublessClient16 (Address: 0x10026074)
ObjectStublessClient17 (Address: 0x10026084)
ObjectStublessClient3 (Address: 0x10026090)
ObjectStublessClient6 (Address: 0x100260bc)
ObjectStublessClient7 (Address: 0x1002609c)
ObjectStublessClient8 (Address: 0x100260b8)
ObjectStublessClient9 (Address: 0x100260b4)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100260cc)
IsDebuggerPresent (Address: 0x100260d0)
OutputDebugStringW (Address: 0x100260c8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100260e0)
RaiseException (Address: 0x100260dc)
SetLastError (Address: 0x100260d8)
SetUnhandledExceptionFilter (Address: 0x100260e4)
UnhandledExceptionFilter (Address: 0x100260e8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100260f0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100260fc)
HeapAlloc (Address: 0x100260f8)
HeapFree (Address: 0x10026100)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

WaitForMultipleObjects (Address: 0x10026108)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x10026114)
GetModuleHandleExW (Address: 0x10026118)
GetModuleHandleW (Address: 0x10026110)
GetProcAddress (Address: 0x1002611c)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x10026124)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x10026134)
GetCurrentProcessId (Address: 0x1002612c)
GetCurrentThreadId (Address: 0x10026138)
TerminateProcess (Address: 0x10026130)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x10026140)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x10026148)

api-ms-win-core-string-l1-1-0.dll

GetStringTypeW (Address: 0x10026150)
MultiByteToWideChar (Address: 0x10026154)
WideCharToMultiByte (Address: 0x10026158)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10026184)
AcquireSRWLockShared (Address: 0x10026160)
CreateEventExW (Address: 0x100261a4)
CreateMutexExW (Address: 0x100261a0)
CreateSemaphoreExW (Address: 0x10026198)
DeleteCriticalSection (Address: 0x10026168)
EnterCriticalSection (Address: 0x10026178)
InitializeCriticalSectionEx (Address: 0x10026164)
InitializeSRWLock (Address: 0x1002619c)
LeaveCriticalSection (Address: 0x1002616c)
OpenSemaphoreW (Address: 0x10026190)
ReleaseMutex (Address: 0x1002617c)
ReleaseSemaphore (Address: 0x10026174)
ReleaseSRWLockExclusive (Address: 0x10026194)
ReleaseSRWLockShared (Address: 0x10026188)
SetEvent (Address: 0x10026170)
WaitForSingleObject (Address: 0x1002618c)
WaitForSingleObjectEx (Address: 0x10026180)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x100261ac)
Sleep (Address: 0x100261b0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x100261b8)
GetTickCount (Address: 0x100261bc)
GetTickCount64 (Address: 0x100261c0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWork (Address: 0x100261c8)
CreateThreadpoolWork (Address: 0x100261cc)
SubmitThreadpoolWork (Address: 0x100261d4)
WaitForThreadpoolWorkCallbacks (Address: 0x100261d0)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x100261e0)
EncodePointer (Address: 0x100261dc)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x100261e8)
RoOriginateErrorW (Address: 0x100261ec)
RoTransformError (Address: 0x100261f4)
SetRestrictedErrorInfo (Address: 0x100261f0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x10026200)
RoGetMatchingRestrictedErrorInfo (Address: 0x10026204)
RoReportFailedDelegate (Address: 0x100261fc)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x1002620c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x10026224)
WindowsCreateStringReference (Address: 0x10026220)
WindowsGetStringRawBuffer (Address: 0x10026214)
WindowsIsStringEmpty (Address: 0x1002621c)
WindowsStringHasEmbeddedNull (Address: 0x10026218)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x10026234)
OpenTraceW (Address: 0x10026230)
ProcessTrace (Address: 0x1002622c)

api-ms-win-eventing-controller-l1-1-0.dll

EnableTraceEx2 (Address: 0x10026244)
QueryAllTracesW (Address: 0x10026240)
StartTraceW (Address: 0x10026248)
StopTraceW (Address: 0x1002623c)

api-ms-win-eventing-tdh-l1-1-0.dll

TdhGetProperty (Address: 0x10026250)

msvcrt.dll

___lc_codepage_func (Address: 0x10026288)
___lc_handle_func (Address: 0x1002628c)
___mb_cur_max_func (Address: 0x10026280)
__crtLCMapStringW (Address: 0x1002626c)
__CxxFrameHandler3 (Address: 0x100262ec)
__dllonexit (Address: 0x100262f8)
__pctype_func (Address: 0x10026290)
__uncaught_exception (Address: 0x10026260)
_amsg_exit (Address: 0x10026318)
_callnewh (Address: 0x100262a4)
_CxxThrowException (Address: 0x1002629c)
_errno (Address: 0x1002627c)
_except_handler4_common (Address: 0x100262f0)
_initterm (Address: 0x1002630c)
_ismbblead (Address: 0x10026274)
_lock (Address: 0x10026300)
_onexit (Address: 0x100262f4)
_purecall (Address: 0x10026320)
_unlock (Address: 0x100262fc)
_vsnprintf_s (Address: 0x10026328)
_vsnwprintf (Address: 0x1002632c)
_wcsdup (Address: 0x10026268)
_wcsicmp (Address: 0x100262cc)
_wcsnicmp (Address: 0x100262a8)
_wsetlocale (Address: 0x10026270)
_wtoi (Address: 0x100262c8)
_XcptFilter (Address: 0x1002631c)
??_V@YAXPAX@Z (Address: 0x100262e4)
??0bad_cast@@QAE@ABV0@@Z (Address: 0x100262d4)
??0bad_cast@@QAE@PBD@Z (Address: 0x100262d8)
??0exception@@QAE@ABQBD@Z (Address: 0x100262e0)
??0exception@@QAE@ABQBDH@Z (Address: 0x1002625c)
??0exception@@QAE@ABV0@@Z (Address: 0x10026324)
??0exception@@QAE@XZ (Address: 0x10026330)
??1bad_cast@@UAE@XZ (Address: 0x100262d0)
??1exception@@UAE@XZ (Address: 0x10026334)
??1type_info@@UAE@XZ (Address: 0x10026304)
??3@YAXPAX@Z (Address: 0x1002633c)
?terminate@@YAXXZ (Address: 0x10026308)
?what@exception@@UBEPBDXZ (Address: 0x100262dc)
abort (Address: 0x10026264)
calloc (Address: 0x10026284)
free (Address: 0x10026314)
localeconv (Address: 0x100262c0)
malloc (Address: 0x10026310)
memcmp (Address: 0x10026278)
memcpy (Address: 0x10026298)
memcpy_s (Address: 0x10026338)
memmove (Address: 0x10026294)
memmove_s (Address: 0x100262e8)
memset (Address: 0x10026258)
realloc (Address: 0x100262c4)
setlocale (Address: 0x100262a0)
sprintf_s (Address: 0x100262b8)
strcspn (Address: 0x100262b4)
vswprintf_s (Address: 0x100262b0)
wcsstr (Address: 0x100262ac)
wcstoul (Address: 0x100262bc)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x10026004)
CStdStubBuffer_Connect (Address: 0x10026020)
CStdStubBuffer_CountRefs (Address: 0x10026010)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x10026038)
CStdStubBuffer_DebugServerRelease (Address: 0x1002603c)
CStdStubBuffer_Disconnect (Address: 0x10026034)
CStdStubBuffer_Invoke (Address: 0x1002601c)
CStdStubBuffer_IsIIDSupported (Address: 0x10026028)
CStdStubBuffer_QueryInterface (Address: 0x10026044)
IUnknown_AddRef_Proxy (Address: 0x10026048)
IUnknown_QueryInterface_Proxy (Address: 0x1002602c)
IUnknown_Release_Proxy (Address: 0x10026054)
NdrCStdStubBuffer_Release (Address: 0x10026018)
NdrCStdStubBuffer2_Release (Address: 0x10026000)
NdrDllCanUnloadNow (Address: 0x10026014)
NdrDllGetClassObject (Address: 0x1002600c)
NdrOleAllocate (Address: 0x10026040)
NdrOleFree (Address: 0x10026008)
NdrStubCall2 (Address: 0x1002604c)
NdrStubForwardingFunction (Address: 0x10026050)
RpcStringFreeW (Address: 0x10026024)
UuidToStringW (Address: 0x10026030)