Windows 10 DLL File Information - diagtrack.dll

The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.

General Information

File Description:	Microsoft Windows Diagnostics Tracking
File Version:	10.0.10130.0 (fbl_impressive.150522-2224)
Company:	Microsoft Corporation
Product Name:	Microsoft® Windows® Operating System
DLL popularity	Very Low - 2 other DLL files in system32 directory are statically linked to this file.
File Size:	1,133 KB
Total Number of Exported Functions:	6
Total Number of Exported Functions With Names:	6

Section Headers

Name	Virtual Address	Raw Data Size	% of File	Characteristics	Section Contains...
.text	0x00001000	1,043,968 Bytes	89.9%	Read, Execute	Code
.data	0x00100000	3,584 Bytes	0.3%	Write, Read	Initialized Data
.idata	0x00102000	15,360 Bytes	1.3%	Read	Initialized Data
.didat	0x00106000	512 Bytes	0.0%	Write, Read	Initialized Data
.rsrc	0x00107000	40,960 Bytes	3.5%	Read	Initialized Data
.reloc	0x00111000	47,104 Bytes	4.1%	Read, Discardable	Initialized Data

Static Linking

diagtrack.dll is statically linked to the following files:

msvcrt.dll
api-ms-win-core-libraryloader-l1-1-1.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-debug-l1-1-1.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-file-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-io-l1-1-1.dll
api-ms-win-core-sysinfo-l1-2-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-service-core-l1-1-1.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-eventing-controller-l1-1-0.dll
api-ms-win-core-file-l2-1-0.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-threadpool-legacy-l1-1-0.dll
api-ms-win-core-processtopology-obsolete-l1-1-0.dll
api-ms-win-downlevel-kernel32-l1-1-0.dll
ntdll.dll
api-ms-win-shcore-sysinfo-l1-1-0.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-security-lsalookup-l2-1-0.dll
api-ms-win-core-timezone-l1-1-0.dll
api-ms-win-core-processenvironment-l1-2-0.dll
bcrypt.dll
CRYPT32.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-winsvc-l1-2-0.dll
api-ms-win-core-memory-l1-1-1.dll
RPCRT4.dll
OLEAUT32.dll
api-ms-win-eventing-consumer-l1-1-0.dll
WS2_32.dll
api-ms-win-core-psapi-l1-1-0.dll
api-ms-win-core-wow64-l1-1-0.dll
api-ms-win-core-heap-l1-2-0.dll
api-ms-win-core-kernel32-legacy-l1-1-0.dll
api-ms-win-core-registry-l2-1-0.dll
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
api-ms-win-eventing-legacy-l1-1-0.dll
api-ms-win-core-heap-obsolete-l1-1-0.dll
api-ms-win-core-toolhelp-l1-1-0.dll
api-ms-win-core-string-obsolete-l1-1-0.dll
api-ms-win-core-url-l1-1-0.dll
CRYPTSP.dll
api-ms-win-core-job-l2-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
XmlLite.dll
api-ms-win-shcore-stream-l1-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-winrt-error-l1-1-1.dll

This means that when diagtrack.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, diagtrack.dll won't be loaded.

List of files that are statically linked to diagtrack.dll

diagtrack_win.dll
diagtrack_wininternal.dll

This means that when one of the above files is loaded, diagtrack.dll will be loaded too. (The opposite of the previous 'Static Linking' section)

General Resources Information

Resource Type	Number of Items	Total Size	% of File
Icons	0	0 Bytes	0.0%
Animated Icons	0	0 Bytes	0.0%
Cursors	0	0 Bytes	0.0%
Animated Cursors	0	0 Bytes	0.0%
Bitmaps	0	0 Bytes	0.0%
AVI Files	0	0 Bytes	0.0%
Dialog-Boxes	0	0 Bytes	0.0%
HTML Related Files	0	0 Bytes	0.0%
Menus	0	0 Bytes	0.0%
Strings	7	698 Bytes	0.1%
Type Libraries	0	0 Bytes	0.0%
Manifest	1	673 Bytes	0.1%
All Others	4	40,810 Bytes	3.5%
Total	12	42,181 Bytes	3.6%

Icons in this file

No icons found in this file

Cursors in this file

No cursors found in this file

Dialog-boxes list (up to 1000 dialogs)

No dialog resources in this file.

String resources in this dll (up to 1000 strings)

String ID	String Text
501	Microsoft Corporation
502	Microsoft Windows Diagnostics Tracking
2000	Diagnostic Tracing
2001	A functional problem was detected and logs were collected for further investigation.
3000	diagtrack
3001	Diagnostics Tracking Service
3002	The Diagnostics Tracking Service enables data collection about functional issues in Windows components.

COM Classes/Interfaces

There is no type library in this file with COM classes/interfaces information

Exported Functions List

The following functions are exported by this dll:

RunDll32Main

ServiceMain

SvchostPushServiceGlobals

UtcSysprepGeneralize

class Microsoft::Diagnostics::CLifetimeManager gs_lifetimeManager

class std::basic_string,class std::allocator > __stdcall _LoadSharedStringResource(unsigned int)

Imported Functions List

The following functions are imported by this dll:

• msvcrt.dll:
  

  _CxxThrowException

  _XcptFilter

  __CxxFrameHandler

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_handle_func

  ___mb_cur_max_func

  __crtCompareStringW

  __crtLCMapStringW

  __dllonexit

  __pctype_func

  _amsg_exit

  _callnewh

  _errno

  _except_handler4_common

  _free_locale

  _ftol2

  _get_current_locale

  _get_errno

  _initterm

  _ismbblead

  _lock

  _onexit

  _purecall

  _set_errno

  _strcmpi

  _unlock

  _vscwprintf

  _vsnwprintf

  _wcsdup

  _wcsicmp

  _wcsnicmp

  _wcstoi64

  _wcstoui64

  _wcsupr

  _wfopen

  _wtof

  _wtoi

  _wtoi64

  abort

  calloc

  fclose

  fread

  free

  fseek

  fwprintf

  fwrite

  malloc

  memcmp

  memcpy

  memcpy_s

  memmove

  memmove_s

  memset

  public: __thiscall bad_cast::bad_cast(char const *)

  public: __thiscall bad_cast::bad_cast(class bad_cast const &)

  public: __thiscall exception::exception(char const * const &)

  public: __thiscall exception::exception(char const * const &,int)

  public: __thiscall exception::exception(class exception const &)

  public: __thiscall exception::exception(void)

  public: virtual __thiscall bad_cast::~bad_cast(void)

  public: virtual __thiscall exception::~exception(void)

  public: virtual __thiscall type_info::~type_info(void)

  public: virtual char const * __thiscall exception::what(void)const

  rand

  rand_s

  realloc

  setlocale

  sprintf_s

  srand

  strchr

  strnlen

  swprintf_s

  swscanf_s

  time

  towlower

  towupper

  void __cdecl operator delete(void *)

  void __cdecl operator delete[](void *)

  void __cdecl terminate(void)

  vswprintf_s

  wcscat_s

  wcschr

  wcscpy_s

  wcsncmp

  wcsnlen

• api-ms-win-core-libraryloader-l1-1-1.dll:
  

  KernelBase!DisableThreadLibraryCalls	KernelBase!FindResourceExW	KernelBase!FreeLibrary
  KernelBase!FreeResource	KernelBase!GetModuleFileNameA	KernelBase!GetModuleHandleExW
  KernelBase!GetModuleHandleW	KernelBase!GetProcAddress	KernelBase!LoadLibraryExW
  KernelBase!LoadResource	KernelBase!LoadStringW	KernelBase!LockResource
  KernelBase!SizeofResource

• api-ms-win-core-processthreads-l1-1-1.dll:
  

  KernelBase!DeleteProcThreadAttributeList	KernelBase!InitializeProcThreadAttributeList
  KernelBase!OpenThreadToken	KernelBase!UpdateProcThreadAttribute
  kernel32!CreateProcessAsUserW	kernel32!CreateProcessW
  kernel32!CreateThread	kernel32!GetCurrentProcess
  kernel32!GetCurrentProcessId	kernel32!GetCurrentThread
  kernel32!GetCurrentThreadId	kernel32!GetExitCodeProcess
  kernel32!GetThreadPriority	kernel32!OpenProcess
  kernel32!ResumeThread	kernel32!SetThreadPriority
  kernel32!TerminateProcess

• api-ms-win-eventing-provider-l1-1-0.dll:
  

  ntdll!EtwEventActivityIdControl	ntdll!EtwEventRegister	ntdll!EtwEventSetInformation
  ntdll!EtwEventUnregister	ntdll!EtwEventWrite	ntdll!EtwEventWriteTransfer

• api-ms-win-core-errorhandling-l1-1-1.dll:
  

  KernelBase!GetLastError	KernelBase!RaiseException	KernelBase!SetUnhandledExceptionFilter
  KernelBase!UnhandledExceptionFilter	ntdll!RtlRestoreLastWin32Error

• api-ms-win-core-registry-l1-1-0.dll:
  

  KernelBase!RegCloseKey	KernelBase!RegCreateKeyExW	KernelBase!RegDeleteKeyExW
  KernelBase!RegDeleteTreeW	KernelBase!RegDeleteValueW	KernelBase!RegEnumKeyExW
  KernelBase!RegEnumValueW	KernelBase!RegGetValueW	KernelBase!RegNotifyChangeKeyValue
  KernelBase!RegOpenKeyExW	KernelBase!RegQueryInfoKeyW	KernelBase!RegQueryValueExW
  KernelBase!RegSetValueExW

• api-ms-win-core-debug-l1-1-1.dll:
  

  KernelBase!OutputDebugStringW

• api-ms-win-core-localization-l1-2-0.dll:
  

  KernelBase!FormatMessageW	KernelBase!GetSystemDefaultLCID
  KernelBase!GetSystemPreferredUILanguages	KernelBase!GetUserGeoID

• api-ms-win-core-file-l1-2-0.dll:
  

  KernelBase!CreateDirectoryW	KernelBase!CreateFileW	KernelBase!DeleteFileW
  KernelBase!FindClose	KernelBase!FindCloseChangeNotification	KernelBase!FindFirstChangeNotificationW
  KernelBase!FindFirstFileExW	KernelBase!FindFirstFileW	KernelBase!FindNextChangeNotification
  KernelBase!FindNextFileW	KernelBase!GetFileAttributesW	KernelBase!GetFileSize
  KernelBase!GetFileSizeEx	KernelBase!GetTempFileNameW	KernelBase!GetTempPathW
  KernelBase!ReadFile	KernelBase!RemoveDirectoryW	KernelBase!SetEndOfFile
  KernelBase!SetFileAttributesW	KernelBase!SetFilePointer	KernelBase!SetFilePointerEx
  KernelBase!WriteFile

• api-ms-win-core-handle-l1-1-0.dll:
  

  KernelBase!CloseHandle

• api-ms-win-core-io-l1-1-1.dll:
  

  kernel32!DeviceIoControl

• api-ms-win-core-sysinfo-l1-2-0.dll:
  

  KernelBase!GetNativeSystemInfo	KernelBase!GetProductInfo	KernelBase!GetSystemDirectoryW
  KernelBase!GetSystemTime	KernelBase!GetSystemTimeAsFileTime	KernelBase!GetTickCount
  KernelBase!GetTickCount64	KernelBase!GetVersionExW	KernelBase!GlobalMemoryStatusEx

• api-ms-win-core-synch-l1-2-0.dll:
  

  KernelBase!CreateEventExW	KernelBase!CreateEventW
  KernelBase!CreateWaitableTimerExW	KernelBase!InitOnceBeginInitialize
  KernelBase!InitOnceComplete	KernelBase!InitializeCriticalSectionAndSpinCount
  KernelBase!InitializeCriticalSectionEx	KernelBase!ResetEvent
  KernelBase!SetEvent	KernelBase!SetWaitableTimer
  KernelBase!SetWaitableTimerEx	KernelBase!Sleep
  KernelBase!SleepConditionVariableSRW	KernelBase!WaitForMultipleObjectsEx
  KernelBase!WaitForSingleObject	ntdll!RtlAcquireSRWLockExclusive
  ntdll!RtlAcquireSRWLockShared	ntdll!RtlDeleteCriticalSection
  ntdll!RtlEnterCriticalSection	ntdll!RtlInitializeConditionVariable
  ntdll!RtlInitializeConditionVariable	ntdll!RtlInitializeCriticalSection
  ntdll!RtlLeaveCriticalSection	ntdll!RtlReleaseSRWLockExclusive
  ntdll!RtlReleaseSRWLockShared	ntdll!RtlWakeConditionVariable

• api-ms-win-core-threadpool-l1-2-0.dll:
  

  KernelBase!CreateThreadpool	KernelBase!CreateThreadpoolTimer	KernelBase!CreateThreadpoolWork
  ntdll!TpPostWork	ntdll!TpReleasePool	ntdll!TpReleaseTimer
  ntdll!TpReleaseWork	ntdll!TpSetPoolMaxThreads	ntdll!TpSetTimer
  ntdll!TpWaitForTimer	ntdll!TpWaitForWork

• api-ms-win-service-core-l1-1-1.dll:
  

  sechost!EnumServicesStatusExW

  sechost!RegisterServiceCtrlHandlerExW

  sechost!SetServiceStatus

• api-ms-win-core-com-l1-1-0.dll:
  

  combase!CLSIDFromString	combase!CoCancelCall	combase!CoCreateFreeThreadedMarshaler
  combase!CoCreateGuid	combase!CoCreateInstance	combase!CoDisableCallCancellation
  combase!CoEnableCallCancellation	combase!CoGetApartmentType	combase!CoInitializeEx
  combase!CoTaskMemAlloc	combase!CoTaskMemFree	combase!CoUninitialize
  combase!CoWaitForMultipleHandles	combase!CreateStreamOnHGlobal	combase!PropVariantClear
  combase!StringFromCLSID	combase!StringFromGUID2

• api-ms-win-eventing-controller-l1-1-0.dll:
  

  sechost!ControlTraceW	sechost!EnableTraceEx2	sechost!StartTraceW	sechost!StopTraceW
  sechost!TraceSetInformation

• api-ms-win-core-file-l2-1-0.dll:
  

  KernelBase!MoveFileExW

• api-ms-win-core-profile-l1-1-0.dll:
  

  ntdll!RtlQueryPerformanceCounter

  ntdll!RtlQueryPerformanceFrequency

• api-ms-win-core-threadpool-legacy-l1-1-0.dll:
  

  KernelBase!CreateTimerQueueTimer

  KernelBase!DeleteTimerQueueTimer

  KernelBase!UnregisterWaitEx

• api-ms-win-core-processtopology-obsolete-l1-1-0.dll:
  

  kernel32!GetActiveProcessorCount

• api-ms-win-downlevel-kernel32-l1-1-0.dll:
  

  KernelBase!GetPhysicallyInstalledSystemMemory

• ntdll.dll:
  

  AlpcGetMessageAttribute	AlpcInitializeMessageAttribute
  EtwTraceMessage	NtAlpcCancelMessage
  NtAlpcConnectPort	NtAlpcDisconnectPort
  NtAlpcQueryInformation	NtAlpcSendWaitReceivePort
  NtClose	NtPowerInformation
  NtQueryInformationProcess	NtQueryInformationThread
  NtQueryLicenseValue	NtQuerySystemInformation
  NtSetInformationFile	NtSetInformationThread
  RtlAllocateHeap	RtlCheckPortableOperatingSystem
  RtlCreateBootStatusDataFile	RtlFreeHeap
  RtlGetSetBootStatusData	RtlGetVersion
  RtlInitUnicodeString	RtlLockBootStatusData
  RtlNtStatusToDosError	RtlPublishWnfStateData
  RtlQueryWnfStateData	RtlSubscribeWnfStateChangeNotification
  RtlUnlockBootStatusData	RtlUnsubscribeWnfNotificationWaitForCompletion
  RtlWaitOnAddress	RtlWakeAddressAll
  TpAllocAlpcCompletion	TpReleaseAlpcCompletion
  TpWaitForAlpcCompletion	vDbgPrintEx

• api-ms-win-shcore-sysinfo-l1-1-0.dll:
  

  SHCore!IsOS

• api-ms-win-core-string-l1-1-0.dll:
  

  KernelBase!GetStringTypeW

  KernelBase!MultiByteToWideChar

  KernelBase!WideCharToMultiByte

• api-ms-win-security-sddl-l1-1-0.dll:
  

  sechost!ConvertSidToStringSidW

  sechost!ConvertStringSecurityDescriptorToSecurityDescriptorW

  sechost!ConvertStringSidToSidW

• api-ms-win-security-base-l1-2-0.dll:
  

  KernelBase!AdjustTokenPrivileges	KernelBase!AllocateLocallyUniqueId	KernelBase!DuplicateTokenEx
  KernelBase!GetLengthSid	KernelBase!GetSecurityDescriptorControl	KernelBase!GetSecurityDescriptorDacl
  KernelBase!GetSecurityDescriptorGroup	KernelBase!GetSecurityDescriptorLength	KernelBase!GetSecurityDescriptorOwner
  KernelBase!GetSecurityDescriptorSacl	KernelBase!GetTokenInformation	KernelBase!ImpersonateLoggedOnUser
  KernelBase!ImpersonateSelf	KernelBase!MakeSelfRelativeSD	KernelBase!RevertToSelf

• api-ms-win-security-lsalookup-l2-1-0.dll:
  

  advapi32!LookupAccountSidW

• api-ms-win-core-timezone-l1-1-0.dll:
  

  KernelBase!FileTimeToSystemTime

  KernelBase!SystemTimeToFileTime

• api-ms-win-core-processenvironment-l1-2-0.dll:
  

  KernelBase!ExpandEnvironmentStringsW	KernelBase!GetEnvironmentVariableW	KernelBase!GetStdHandle
  KernelBase!SetEnvironmentVariableW

• bcrypt.dll:
  

  BCryptCloseAlgorithmProvider	BCryptCreateHash	BCryptDestroyHash	BCryptDestroyKey
  BCryptFinishHash	BCryptGenRandom	BCryptGetProperty	BCryptHashData
  BCryptOpenAlgorithmProvider

• CRYPT32.dll:
  

  CertAddCertificateContextToStore	CertCloseStore	CertCreateCertificateContext
  CertFreeCertificateChain	CertFreeCertificateChainEngine	CertFreeCertificateContext
  CertGetCertificateChain	CertOpenStore	CertVerifyCertificateChainPolicy
  CryptImportPublicKeyInfoEx2	CryptStringToBinaryA

• api-ms-win-service-management-l1-1-0.dll:
  

  sechost!CloseServiceHandle

  sechost!OpenSCManagerW

  sechost!OpenServiceW

• api-ms-win-service-winsvc-l1-2-0.dll:
  

  sechost!ControlService

  sechost!QueryServiceStatus

• api-ms-win-core-memory-l1-1-1.dll:
  

  KernelBase!CreateFileMappingW	KernelBase!FlushViewOfFile	KernelBase!MapViewOfFile	KernelBase!UnmapViewOfFile
  KernelBase!VirtualAlloc	KernelBase!VirtualFree

• RPCRT4.dll:
  

  RpcStringFreeW

  UuidCreateSequential

  UuidToStringW

• OLEAUT32.dll:
  

  SysAllocString

  SysFreeString

• api-ms-win-eventing-consumer-l1-1-0.dll:
  

  sechost!CloseTrace

  sechost!OpenTraceW

  sechost!ProcessTrace

• WS2_32.dll:
  

  WSAAddressToStringW	WSACleanup	WSAStartup	htonl
  htons

• api-ms-win-core-psapi-l1-1-0.dll:
  

  KernelBase!GetPerformanceInfo

• api-ms-win-core-wow64-l1-1-0.dll:
  

  KernelBase!IsWow64Process

• api-ms-win-core-heap-l1-2-0.dll:
  

  KernelBase!GetProcessHeap	KernelBase!HeapDestroy	ntdll!RtlAllocateHeap	ntdll!RtlFreeHeap
  ntdll!RtlReAllocateHeap	ntdll!RtlSizeHeap

• api-ms-win-core-kernel32-legacy-l1-1-0.dll:
  

  KernelBase!RaiseFailFastException	kernel32!CopyFileW	kernel32!GetSystemPowerStatus
  kernel32!LoadLibraryW	kernel32!MoveFileW	kernel32!WTSGetActiveConsoleSessionId
  kernel32!WaitForMultipleObjects

• api-ms-win-core-registry-l2-1-0.dll:
  

  advapi32!RegDeleteKeyW

• api-ms-win-core-shlwapi-legacy-l1-1-0.dll:
  

  KernelBase!PathFileExistsW

• api-ms-win-eventing-legacy-l1-1-0.dll:
  

  advapi32!QueryTraceW

• api-ms-win-core-heap-obsolete-l1-1-0.dll:
  

  kernel32!GlobalFree

  kernel32!LocalAlloc

  kernel32!LocalFree

  kernel32!LocalReAlloc

• api-ms-win-core-toolhelp-l1-1-0.dll:
  

  kernel32!CreateToolhelp32Snapshot

  kernel32!Process32FirstW

  kernel32!Process32NextW

• api-ms-win-core-string-obsolete-l1-1-0.dll:
  

  kernel32!lstrlenW

• api-ms-win-core-url-l1-1-0.dll:
  

  KernelBase!UrlEscapeW

• CRYPTSP.dll:
  

  CryptAcquireContextW	CryptCreateHash	CryptDestroyHash	CryptGenRandom
  CryptGetHashParam	CryptHashData	CryptReleaseContext

• api-ms-win-core-job-l2-1-0.dll:
  

  kernel32!AssignProcessToJobObject	kernel32!CreateJobObjectW	kernel32!SetInformationJobObject
  kernel32!TerminateJobObject

• api-ms-win-core-apiquery-l1-1-0.dll:
  

  ntdll!ApiSetQueryApiSetPresence

• api-ms-win-core-delayload-l1-1-1.dll:
  

  KernelBase!DelayLoadFailureHook

  KernelBase!ResolveDelayLoadedAPI

• api-ms-win-core-winrt-l1-1-0.dll:
  

  combase!RoActivateInstance	combase!RoGetActivationFactory	combase!RoInitialize
  combase!RoUninitialize

• api-ms-win-core-winrt-string-l1-1-0.dll:
  

  combase!WindowsCreateString	combase!WindowsCreateStringReference	combase!WindowsDeleteString
  combase!WindowsGetStringRawBuffer

• XmlLite.dll:
  

  CreateXmlReader

  CreateXmlWriter

• api-ms-win-shcore-stream-l1-1-0.dll:
  

  SHCore!SHCreateStreamOnFileW

• api-ms-win-core-util-l1-1-0.dll:
  

  ntdll!RtlDecodePointer

  ntdll!RtlEncodePointer

• api-ms-win-core-winrt-error-l1-1-1.dll:
  

  combase!RoOriginateError

  combase!RoTransformError