mscordbi.dll
v4.8.9186.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess
Exported functions 5
CreateCordbObject
#1 · 0x1e690
DllGetClassObjectInternal
#2 · 0x1e6c0
OpenVirtualProcess2
#3 · 0x1ecf0
OpenVirtualProcess
#4 · 0x1ed40
OpenVirtualProcessImpl
#5 · 0x1ea60
No function matches your filter.
Imported DLLs & functions 168
ADVAPI32.dll
21
AdjustTokenPrivileges
0x1011e03c
CopySid
0x1011e00c
DeregisterEventSource
0x1011e048
EqualSid
0x1011e004
EventWrite
0x1011e02c
GetKernelObjectSecurity
0x1011e014
GetLengthSid
0x1011e01c
GetSecurityDescriptorOwner
0x1011e010
GetSidSubAuthority
0x1011e018
GetSidSubAuthorityCount
0x1011e050
GetTokenInformation
0x1011e028
LookupPrivilegeValueW
0x1011e044
OpenProcessToken
0x1011e040
OpenThreadToken
0x1011e024
RegCloseKey
0x1011e030
RegisterEventSourceW
0x1011e000
RegOpenKeyExW
0x1011e034
RegQueryValueExW
0x1011e038
ReportEventW
0x1011e008
RevertToSelf
0x1011e04c
SetThreadToken
0x1011e020
KERNEL32.dll
131
ActivateActCtx
0x1011e160
CloseHandle
0x1011e23c
ContinueDebugEvent
0x1011e258
CreateActCtxW
0x1011e15c
CreateEventW
0x1011e234
CreateFileMappingW
0x1011e074
CreateFileW
0x1011e06c
CreateMutexW
0x1011e134
CreateProcessW
0x1011e118
CreateSemaphoreW
0x1011e148
CreateThread
0x1011e208
CreateToolhelp32Snapshot
0x1011e084
DeactivateActCtx
0x1011e260
DebugActiveProcess
0x1011e0a0
DebugBreak
0x1011e0dc
DecodePointer
0x1011e17c
DeleteCriticalSection
0x1011e24c
DuplicateHandle
0x1011e20c
EncodePointer
0x1011e178
EnterCriticalSection
0x1011e240
ExitProcess
0x1011e198
FindClose
0x1011e0f0
FindFirstFileExA
0x1011e1c4
FindNextFileA
0x1011e1c8
FlushFileBuffers
0x1011e1b0
FlushInstructionCache
0x1011e21c
FormatMessageW
0x1011e108
FreeEnvironmentStringsW
0x1011e0e4
FreeLibrary
0x1011e05c
GetACP
0x1011e104
GetCommandLineA
0x1011e1d4
GetCommandLineW
0x1011e1d8
GetConsoleCP
0x1011e1b8
GetConsoleMode
0x1011e1bc
GetCPInfo
0x1011e100
GetCurrentProcess
0x1011e220
GetCurrentProcessId
0x1011e0ac
GetCurrentThread
0x1011e0f8
GetCurrentThreadId
0x1011e224
GetEnvironmentStringsW
0x1011e0e8
GetEnvironmentVariableW
0x1011e0e0
GetFileAttributesExW
0x1011e1f8
GetFileSize
0x1011e070
GetFileType
0x1011e1a8
GetLastError
0x1011e22c
GetModuleFileNameA
0x1011e1a0
GetModuleFileNameW
0x1011e098
GetModuleHandleExW
0x1011e19c
GetModuleHandleW
0x1011e218
GetOEMCP
0x1011e1d0
GetProcAddress
0x1011e250
GetProcessHeap
0x1011e0c8
GetStartupInfoW
0x1011e194
GetStdHandle
0x1011e1a4
GetStringTypeW
0x1011e1ac
GetSystemInfo
0x1011e0d0
GetSystemTimeAsFileTime
0x1011e0bc
GetThreadContext
0x1011e204
GetWindowsDirectoryW
0x1011e16c
HeapAlloc
0x1011e0c4
HeapCreate
0x1011e11c
HeapDestroy
0x1011e144
HeapFree
0x1011e0c0
HeapReAlloc
0x1011e1ec
HeapSize
0x1011e1e8
HeapValidate
0x1011e138
InitializeCriticalSection
0x1011e238
InitializeCriticalSectionAndSpinCount
0x1011e1c0
InitializeSListHead
0x1011e190
InterlockedFlushSList
0x1011e1f0
IsDBCSLeadByte
0x1011e10c
IsDebuggerPresent
0x1011e174
IsProcessorFeaturePresent
0x1011e188
IsValidCodePage
0x1011e1cc
IsWow64Process
0x1011e0b0
LCMapStringW
0x1011e114
LeaveCriticalSection
0x1011e244
LoadLibraryExW
0x1011e058
LocalFree
0x1011e110
MapViewOfFile
0x1011e078
Module32FirstW
0x1011e090
Module32NextW
0x1011e094
MultiByteToWideChar
0x1011e0f4
OpenFileMappingW
0x1011e1f4
OpenProcess
0x1011e060
OpenThread
0x1011e0a8
OutputDebugStringW
0x1011e0d8
QueryPerformanceCounter
0x1011e18c
RaiseException
0x1011e0cc
ReadFile
0x1011e200
ReadProcessMemory
0x1011e068
ReleaseActCtx
0x1011e170
ReleaseMutex
0x1011e064
ReleaseSemaphore
0x1011e12c
ResetEvent
0x1011e228
ResumeThread
0x1011e210
SetErrorMode
0x1011e164
SetEvent
0x1011e230
SetFilePointer
0x1011e1fc
SetFilePointerEx
0x1011e1e0
SetLastError
0x1011e0b8
SetStdHandle
0x1011e1dc
SetThreadContext
0x1011e130
SetUnhandledExceptionFilter
0x1011e184
Sleep
0x1011e080
SleepEx
0x1011e14c
SuspendThread
0x1011e214
SwitchToThread
0x1011e0fc
TerminateProcess
0x1011e168
Thread32First
0x1011e088
Thread32Next
0x1011e08c
TlsAlloc
0x1011e140
TlsFree
0x1011e154
TlsGetValue
0x1011e150
TlsSetValue
0x1011e120
UnhandledExceptionFilter
0x1011e180
UnmapViewOfFile
0x1011e07c
VerifyVersionInfoW
0x1011e0d4
VirtualAlloc
0x1011e25c
VirtualFree
0x1011e128
VirtualProtect
0x1011e124
VirtualQuery
0x1011e158
VirtualQueryEx
0x1011e09c
WaitForDebugEvent
0x1011e0a4
WaitForMultipleObjectsEx
0x1011e248
WaitForSingleObject
0x1011e254
WaitForSingleObjectEx
0x1011e13c
WideCharToMultiByte
0x1011e0ec
WriteConsoleW
0x1011e1e4
WriteFile
0x1011e1b4
WriteProcessMemory
0x1011e0b4
CoCreateFreeThreadedMarshaler
0x1011e2ac
CoCreateGuid
0x1011e2b0
CoTaskMemAlloc
0x1011e2b4
CoTaskMemFree
0x1011e2a4
CreateStreamOnHGlobal
0x1011e2a8
IIDFromString
0x1011e2a0
GetProcessWindowStation
0x1011e27c
GetUserObjectInformationW
0x1011e278
LoadStringW
0x1011e280
No function matches your filter.