DiagnosticInvoker.dll
Description: Microsoft Windows operating system.
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4355
Architecture: 64-bit
Operating System: Windows NT
SHA256: fc5a556d4f74cd4693db7e8c6d7ae75e
File Size: 103.0 KB
Uploaded At: Dec. 1, 2025, 7:26 a.m.
Views: 8
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllGetActivationFactory (Ordinal: 1, Address: 0x4db0)
- DllCanUnloadNow (Ordinal: 2, Address: 0x4c10)
- DllGetClassObject (Ordinal: 3, Address: 0x4c80)
Imported DLLs & Functions
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x180012a28)
- CoCreateInstance (Address: 0x180012a60)
- CoGetCallContext (Address: 0x180012a30)
- CoGetInterfaceAndReleaseStream (Address: 0x180012a58)
- CoMarshalInterface (Address: 0x180012a50)
- CoReleaseMarshalData (Address: 0x180012a40)
- CoTaskMemAlloc (Address: 0x180012a38)
- CreateStreamOnHGlobal (Address: 0x180012a48)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x180012a70)
api-ms-win-core-com-midlproxystub-l1-1-0.dll
- CStdStubBuffer2_Connect (Address: 0x180012aa0)
- CStdStubBuffer2_CountRefs (Address: 0x180012aa8)
- CStdStubBuffer2_Disconnect (Address: 0x180012a80)
- CStdStubBuffer2_QueryInterface (Address: 0x180012ab8)
- NdrProxyForwardingFunction3 (Address: 0x180012ad8)
- NdrProxyForwardingFunction4 (Address: 0x180012ae0)
- NdrProxyForwardingFunction5 (Address: 0x180012a98)
- ObjectStublessClient10 (Address: 0x180012ac0)
- ObjectStublessClient3 (Address: 0x180012ad0)
- ObjectStublessClient6 (Address: 0x180012ac8)
- ObjectStublessClient7 (Address: 0x180012ab0)
- ObjectStublessClient8 (Address: 0x180012a88)
- ObjectStublessClient9 (Address: 0x180012a90)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x180012af8)
- IsDebuggerPresent (Address: 0x180012af0)
- OutputDebugStringW (Address: 0x180012b00)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180012b30)
- RaiseException (Address: 0x180012b28)
- SetLastError (Address: 0x180012b20)
- SetUnhandledExceptionFilter (Address: 0x180012b10)
- UnhandledExceptionFilter (Address: 0x180012b18)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x180012b40)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180012b50)
- HeapAlloc (Address: 0x180012b58)
- HeapFree (Address: 0x180012b60)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x180012b70)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x180012b80)
- GetModuleFileNameA (Address: 0x180012b88)
- GetModuleHandleExW (Address: 0x180012b90)
- GetModuleHandleW (Address: 0x180012ba0)
- GetProcAddress (Address: 0x180012b98)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x180012bb0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x180012bc0)
- GetCurrentProcessId (Address: 0x180012bd0)
- GetCurrentThreadId (Address: 0x180012be0)
- OpenProcessToken (Address: 0x180012bc8)
- TerminateProcess (Address: 0x180012bd8)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x180012bf8)
- OpenProcess (Address: 0x180012bf0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180012c08)
- QueryPerformanceFrequency (Address: 0x180012c10)
api-ms-win-core-registry-l1-1-0.dll
- RegOpenKeyExW (Address: 0x180012c20)
- RegQueryValueExW (Address: 0x180012c28)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x180012c40)
- RtlLookupFunctionEntry (Address: 0x180012c48)
- RtlVirtualUnwind (Address: 0x180012c38)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180012c88)
- AcquireSRWLockShared (Address: 0x180012c70)
- CreateMutexExW (Address: 0x180012ca0)
- CreateSemaphoreExW (Address: 0x180012c80)
- OpenSemaphoreW (Address: 0x180012ca8)
- ReleaseMutex (Address: 0x180012c58)
- ReleaseSemaphore (Address: 0x180012c68)
- ReleaseSRWLockExclusive (Address: 0x180012c90)
- ReleaseSRWLockShared (Address: 0x180012c78)
- WaitForSingleObject (Address: 0x180012c60)
- WaitForSingleObjectEx (Address: 0x180012c98)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x180012cb8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x180012cd0)
- GetTickCount64 (Address: 0x180012cc8)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x180012ce0)
- EncodePointer (Address: 0x180012ce8)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x180012d08)
- RoOriginateError (Address: 0x180012d10)
- RoOriginateErrorW (Address: 0x180012cf8)
- RoTransformError (Address: 0x180012d00)
- SetRestrictedErrorInfo (Address: 0x180012d18)
api-ms-win-core-winrt-error-l1-1-1.dll
- IsErrorPropagationEnabled (Address: 0x180012d30)
- RoGetMatchingRestrictedErrorInfo (Address: 0x180012d28)
- RoReportFailedDelegate (Address: 0x180012d38)
api-ms-win-core-winrt-l1-1-0.dll
- RoActivateInstance (Address: 0x180012d50)
- RoGetActivationFactory (Address: 0x180012d48)
api-ms-win-core-winrt-string-l1-1-0.dll
- HSTRING_UserFree (Address: 0x180012db0)
- HSTRING_UserFree64 (Address: 0x180012dc0)
- HSTRING_UserMarshal (Address: 0x180012dc8)
- HSTRING_UserMarshal64 (Address: 0x180012da8)
- HSTRING_UserSize (Address: 0x180012dd0)
- HSTRING_UserSize64 (Address: 0x180012db8)
- HSTRING_UserUnmarshal (Address: 0x180012da0)
- HSTRING_UserUnmarshal64 (Address: 0x180012d98)
- WindowsCreateString (Address: 0x180012d78)
- WindowsCreateStringReference (Address: 0x180012d60)
- WindowsDeleteString (Address: 0x180012d70)
- WindowsDuplicateString (Address: 0x180012d68)
- WindowsGetStringRawBuffer (Address: 0x180012d80)
- WindowsIsStringEmpty (Address: 0x180012d90)
- WindowsStringHasEmbeddedNull (Address: 0x180012d88)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x180012e38)
- __CxxFrameHandler3 (Address: 0x180012e40)
- __CxxFrameHandler4 (Address: 0x180012eb8)
- __std_terminate (Address: 0x180012eb0)
- _CxxThrowException (Address: 0x180012e48)
- _o___std_exception_copy (Address: 0x180012ea0)
- _o___std_exception_destroy (Address: 0x180012e98)
- _o___std_type_info_destroy_list (Address: 0x180012e90)
- _o___stdio_common_vsnprintf_s (Address: 0x180012e78)
- _o___stdio_common_vsprintf_s (Address: 0x180012e70)
- _o___stdio_common_vswprintf (Address: 0x180012e68)
- _o__callnewh (Address: 0x180012e60)
- _o__cexit (Address: 0x180012e58)
- _o__configure_narrow_argv (Address: 0x180012e50)
- _o__crt_atexit (Address: 0x180012ea8)
- _o__errno (Address: 0x180012e88)
- _o__execute_onexit_table (Address: 0x180012e80)
- _o__initialize_narrow_environment (Address: 0x180012de0)
- _o__initialize_onexit_table (Address: 0x180012de8)
- _o__invalid_parameter_noinfo (Address: 0x180012df0)
- _o__purecall (Address: 0x180012df8)
- _o__register_onexit_function (Address: 0x180012e00)
- _o__seh_filter_dll (Address: 0x180012e08)
- _o_calloc (Address: 0x180012e18)
- _o_free (Address: 0x180012e20)
- _o_malloc (Address: 0x180012e28)
- _o_terminate (Address: 0x180012e30)
- memcmp (Address: 0x180012ec0)
- memcpy (Address: 0x180012e10)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180012ed0)
- _initterm_e (Address: 0x180012ed8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180012ee8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x180012f00)
- EventSetInformation (Address: 0x180012f08)
- EventUnregister (Address: 0x180012f10)
- EventWriteTransfer (Address: 0x180012ef8)
api-ms-win-security-base-l1-1-0.dll
- DuplicateTokenEx (Address: 0x180012f20)
- GetTokenInformation (Address: 0x180012f28)
api-ms-win-security-capability-l1-1-0.dll
- CapabilityCheck (Address: 0x180012f38)
api-ms-win-shcore-taskpool-l1-1-0.dll
- SHTaskPoolAllowThreadReuse (Address: 0x180012f48)
- SHTaskPoolQueueTask (Address: 0x180012f50)
ntdll.dll
- RtlGetDeviceFamilyInfoEnum (Address: 0x180012f60)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x180012940)
- CStdStubBuffer_Connect (Address: 0x180012990)
- CStdStubBuffer_CountRefs (Address: 0x180012950)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x180012930)
- CStdStubBuffer_DebugServerRelease (Address: 0x180012968)
- CStdStubBuffer_Disconnect (Address: 0x180012970)
- CStdStubBuffer_Invoke (Address: 0x1800129a0)
- CStdStubBuffer_IsIIDSupported (Address: 0x180012988)
- CStdStubBuffer_QueryInterface (Address: 0x180012958)
- IUnknown_AddRef_Proxy (Address: 0x1800129c8)
- IUnknown_QueryInterface_Proxy (Address: 0x180012978)
- IUnknown_Release_Proxy (Address: 0x180012948)
- NdrClientCall3 (Address: 0x1800129d8)
- NdrCStdStubBuffer_Release (Address: 0x1800129a8)
- NdrCStdStubBuffer2_Release (Address: 0x1800129d0)
- NdrDllCanUnloadNow (Address: 0x1800129b0)
- NdrDllGetClassObject (Address: 0x1800129b8)
- NdrOleAllocate (Address: 0x180012960)
- NdrOleFree (Address: 0x180012938)
- NdrRpcSmClientAllocate (Address: 0x1800129e8)
- NdrRpcSmClientFree (Address: 0x180012a18)
- NdrServerCall2 (Address: 0x1800129e0)
- NdrServerCallAll (Address: 0x180012a10)
- NdrStubCall3 (Address: 0x180012980)
- NdrStubForwardingFunction (Address: 0x180012998)
- RpcBindingFree (Address: 0x1800129f0)
- RpcBindingFromStringBindingW (Address: 0x180012a00)
- RpcStringBindingComposeW (Address: 0x180012a08)
- RpcStringFreeW (Address: 0x1800129f8)
- UuidCreate (Address: 0x1800129c0)