DiagnosticInvoker.dll

Description: Microsoft Windows operating system.

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: f1a4841c4289fcf860e776055574ac22

File Size: 77.0 KB

Uploaded At: Dec. 1, 2025, 7:55 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllGetActivationFactory (Ordinal: 1, Address: 0x7850)
  • DllCanUnloadNow (Ordinal: 2, Address: 0x77d0)
  • DllGetClassObject (Ordinal: 3, Address: 0x7800)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x10012084)
  • CoCreateInstance (Address: 0x10012090)
  • CoGetCallContext (Address: 0x10012078)
  • CoGetInterfaceAndReleaseStream (Address: 0x1001208c)
  • CoMarshalInterface (Address: 0x10012088)
  • CoReleaseMarshalData (Address: 0x1001207c)
  • CoTaskMemAlloc (Address: 0x10012080)
  • CreateStreamOnHGlobal (Address: 0x10012094)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1001209c)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
  • CStdStubBuffer2_Connect (Address: 0x100120c8)
  • CStdStubBuffer2_CountRefs (Address: 0x100120d4)
  • CStdStubBuffer2_Disconnect (Address: 0x100120b8)
  • CStdStubBuffer2_QueryInterface (Address: 0x100120a8)
  • NdrProxyForwardingFunction3 (Address: 0x100120cc)
  • NdrProxyForwardingFunction4 (Address: 0x100120a4)
  • NdrProxyForwardingFunction5 (Address: 0x100120b0)
  • ObjectStublessClient10 (Address: 0x100120bc)
  • ObjectStublessClient3 (Address: 0x100120c0)
  • ObjectStublessClient6 (Address: 0x100120b4)
  • ObjectStublessClient7 (Address: 0x100120ac)
  • ObjectStublessClient8 (Address: 0x100120c4)
  • ObjectStublessClient9 (Address: 0x100120d0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x100120e0)
  • IsDebuggerPresent (Address: 0x100120e4)
  • OutputDebugStringW (Address: 0x100120dc)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x100120f0)
  • RaiseException (Address: 0x100120f8)
  • SetLastError (Address: 0x100120f4)
  • SetUnhandledExceptionFilter (Address: 0x100120fc)
  • UnhandledExceptionFilter (Address: 0x100120ec)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10012104)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1001210c)
  • HeapAlloc (Address: 0x10012114)
  • HeapFree (Address: 0x10012110)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1001211c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10012124)
  • GetModuleFileNameA (Address: 0x10012128)
  • GetModuleHandleExW (Address: 0x1001212c)
  • GetModuleHandleW (Address: 0x10012134)
  • GetProcAddress (Address: 0x10012130)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1001213c)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x10012144)
  • GetCurrentProcessId (Address: 0x1001214c)
  • GetCurrentThreadId (Address: 0x10012154)
  • OpenProcessToken (Address: 0x10012148)
  • TerminateProcess (Address: 0x10012150)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x10012160)
  • OpenProcess (Address: 0x1001215c)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x10012168)
  • QueryPerformanceFrequency (Address: 0x1001216c)
api-ms-win-core-registry-l1-1-0.dll
  • RegOpenKeyExW (Address: 0x10012174)
  • RegQueryValueExW (Address: 0x10012178)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x10012198)
  • AcquireSRWLockShared (Address: 0x100121a0)
  • CreateMutexExW (Address: 0x100121a4)
  • CreateSemaphoreExW (Address: 0x100121a8)
  • OpenSemaphoreW (Address: 0x10012194)
  • ReleaseMutex (Address: 0x10012184)
  • ReleaseSemaphore (Address: 0x1001218c)
  • ReleaseSRWLockExclusive (Address: 0x1001219c)
  • ReleaseSRWLockShared (Address: 0x10012190)
  • WaitForSingleObject (Address: 0x10012180)
  • WaitForSingleObjectEx (Address: 0x10012188)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x100121b0)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x100121bc)
  • GetTickCount64 (Address: 0x100121b8)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x100121c4)
  • EncodePointer (Address: 0x100121c8)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x100121d8)
  • RoOriginateError (Address: 0x100121dc)
  • RoOriginateErrorW (Address: 0x100121d0)
  • RoTransformError (Address: 0x100121d4)
  • SetRestrictedErrorInfo (Address: 0x100121e0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x100121ec)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x100121e8)
  • RoReportFailedDelegate (Address: 0x100121f0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x100121fc)
  • RoGetActivationFactory (Address: 0x100121f8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • HSTRING_UserFree (Address: 0x10012224)
  • HSTRING_UserMarshal (Address: 0x10012228)
  • HSTRING_UserSize (Address: 0x1001222c)
  • HSTRING_UserUnmarshal (Address: 0x10012220)
  • WindowsCreateString (Address: 0x10012210)
  • WindowsCreateStringReference (Address: 0x10012204)
  • WindowsDeleteString (Address: 0x1001220c)
  • WindowsDuplicateString (Address: 0x10012208)
  • WindowsGetStringRawBuffer (Address: 0x10012214)
  • WindowsIsStringEmpty (Address: 0x1001221c)
  • WindowsStringHasEmbeddedNull (Address: 0x10012218)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1001229c)
  • __std_terminate (Address: 0x10012298)
  • _CxxThrowException (Address: 0x1001226c)
  • _except_handler4_common (Address: 0x10012268)
  • _o___std_exception_copy (Address: 0x10012284)
  • _o___std_exception_destroy (Address: 0x10012280)
  • _o___std_type_info_destroy_list (Address: 0x1001227c)
  • _o___stdio_common_vsnprintf_s (Address: 0x10012278)
  • _o___stdio_common_vsprintf_s (Address: 0x10012274)
  • _o___stdio_common_vswprintf (Address: 0x10012270)
  • _o__callnewh (Address: 0x10012294)
  • _o__cexit (Address: 0x10012288)
  • _o__configure_narrow_argv (Address: 0x10012290)
  • _o__crt_atexit (Address: 0x1001228c)
  • _o__errno (Address: 0x10012234)
  • _o__execute_onexit_table (Address: 0x10012238)
  • _o__initialize_narrow_environment (Address: 0x1001223c)
  • _o__initialize_onexit_table (Address: 0x10012240)
  • _o__invalid_parameter_noinfo (Address: 0x10012244)
  • _o__purecall (Address: 0x10012248)
  • _o__register_onexit_function (Address: 0x1001224c)
  • _o__seh_filter_dll (Address: 0x10012250)
  • _o_calloc (Address: 0x10012258)
  • _o_free (Address: 0x1001225c)
  • _o_malloc (Address: 0x10012260)
  • _o_terminate (Address: 0x10012264)
  • memcmp (Address: 0x100122a0)
  • memcpy (Address: 0x10012254)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x100122a8)
  • _initterm_e (Address: 0x100122ac)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x100122b4)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x100122c0)
  • EventSetInformation (Address: 0x100122c4)
  • EventUnregister (Address: 0x100122c8)
  • EventWriteTransfer (Address: 0x100122bc)
api-ms-win-security-base-l1-1-0.dll
  • DuplicateTokenEx (Address: 0x100122d0)
  • GetTokenInformation (Address: 0x100122d4)
api-ms-win-security-capability-l1-1-0.dll
  • CapabilityCheck (Address: 0x100122dc)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x100122e4)
  • SHTaskPoolQueueTask (Address: 0x100122e8)
ntdll.dll
  • RtlGetDeviceFamilyInfoEnum (Address: 0x100122f0)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x10012028)
  • CStdStubBuffer_Connect (Address: 0x10012014)
  • CStdStubBuffer_CountRefs (Address: 0x1001204c)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x10012008)
  • CStdStubBuffer_DebugServerRelease (Address: 0x10012010)
  • CStdStubBuffer_Disconnect (Address: 0x10012070)
  • CStdStubBuffer_Invoke (Address: 0x10012034)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1001200c)
  • CStdStubBuffer_QueryInterface (Address: 0x10012024)
  • IUnknown_AddRef_Proxy (Address: 0x10012004)
  • IUnknown_QueryInterface_Proxy (Address: 0x10012000)
  • IUnknown_Release_Proxy (Address: 0x1001202c)
  • NdrClientCall4 (Address: 0x10012050)
  • NdrCStdStubBuffer_Release (Address: 0x10012038)
  • NdrCStdStubBuffer2_Release (Address: 0x10012048)
  • NdrDllCanUnloadNow (Address: 0x1001203c)
  • NdrDllGetClassObject (Address: 0x10012040)
  • NdrOleAllocate (Address: 0x1001201c)
  • NdrOleFree (Address: 0x10012020)
  • NdrRpcSmClientAllocate (Address: 0x10012054)
  • NdrRpcSmClientFree (Address: 0x10012058)
  • NdrServerCall2 (Address: 0x1001205c)
  • NdrStubCall2 (Address: 0x10012018)
  • NdrStubForwardingFunction (Address: 0x10012030)
  • RpcBindingFree (Address: 0x10012060)
  • RpcBindingFromStringBindingW (Address: 0x10012068)
  • RpcStringBindingComposeW (Address: 0x1001206c)
  • RpcStringFreeW (Address: 0x10012064)
  • UuidCreate (Address: 0x10012044)