mscoreei.dll
v4.8.4180.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 126
InitErrors
#17 · 0x30290
PostError
#18 · 0x30390
InitSSAutoEnterThread
#19 · 0x303b0
UpdateError
#20 · 0x30400
CloseCtrs
#21 · 0x32370
LoadStringRC
#22 · 0x30450
ReOpenMetaDataWithMemory
#23 · 0x30540
#24 · 0xe3f0
CollectCtrs
#25 · 0x32340
CorDllMainWorker
#26 · 0x31f50
CorDllMainWorkerForThunk
#27 · 0xf750
EEDllGetClassObjectFromClass
#28 · 0x30760
GetPrivateContextsPerfCounters
#29 · 0x30bd0
GetProcessExecutableHeap
#30 · 0x1e60
GetStartupFlags
#31 · 0x2f5a0
GetTargetForVTableEntry
#32 · 0x40010
GetTokenForVTableEntry
#33 · 0x3ff70
LogHelp_LogAssert
#34 · 0x30a80
LogHelp_NoGuiOnAssert
#35 · 0x30af0
LogHelp_TerminateOnAssert
#36 · 0x30b60
OnShimDllMainCalled
#37 · 0x9630
OpenCtrs
#38 · 0x320e0
PostErrorVA
#39 · 0x302f0
RegisterShimImplCallback
#40 · 0x14d0
SetTargetForVTableEntry
#41 · 0x40000
CLRCreateInstance
#42 · 0xb790
CallFunctionShim
#43 · 0x30cd0
ClrCreateManagedInstance
#44 · 0x32e0
CoEEShutDownCOM
#45 · 0x307d0
CoInitializeCor
#46 · 0x30050
CoInitializeEE
#47 · 0x3260
CoUninitializeCor
#48 · 0x300d0
CoUninitializeEE
#49 · 0x2ffd0
CorBindToCurrentRuntime
#50 · 0x2dce0
CorBindToRuntime
#51 · 0x2d4b0
CorBindToRuntimeByCfg
#52 · 0x2d940
CorBindToRuntimeByPath
#53 · 0x2cec0
CorBindToRuntimeByPathEx
#54 · 0x2d1b0
CorBindToRuntimeEx
#55 · 0x2d7e0
CorBindToRuntimeHost
#56 · 0x2db70
CorExitProcess
#57 · 0x30c40
CorGetSvc
#58 · 0x2ee50
CorIsLatestSvc
#59 · 0x2f020
CorMarkThreadInThreadPool
#60 · 0x4110
CorTickleSvc
#61 · 0x2f0c0
CreateConfigStream
#62 · 0x96a0
CreateDebuggingInterfaceFromVersion
#63 · 0x347e0
CreateInterface
#64 · 0xb790
DllCanUnloadNow
#65 · 0x30d40
DllGetClassObject
#66 · 0x31640
DllRegisterServer
#67 · 0x31a60
DllUnregisterServer
#68 · 0x31b10
EEDllRegisterServer
#69 · 0x33f0
EEDllUnregisterServer
#70 · 0x3470
GetAssemblyMDImport
#71 · 0x31bc0
GetCORRequiredVersion
#72 · 0x2df70
GetCORRootDirectory
#73 · 0x2ef30
GetCORSystemDirectory
#74 · 0x2f570
GetCORSystemDirectory_RetAddr
#75 · 0x2f300
GetCORVersion
#76 · 0x2e060
GetCompileInfo
#77 · 0x30770
GetFileVersion
#78 · 0x34080
GetHashFromAssemblyFile
#79 · 0x3e790
GetHashFromAssemblyFileW
#80 · 0x3e800
GetHashFromBlob
#81 · 0x3e9c0
GetHashFromFile
#82 · 0x3e870
GetHashFromFileW
#83 · 0x3e8e0
GetHashFromHandle
#84 · 0x3e950
GetHostConfigurationFile
#85 · 0x2f600
GetMetaDataInternalInterface
#86 · 0x30220
GetMetaDataInternalInterfaceFromPublic
#87 · 0x301b0
GetMetaDataPublicInterfaceFromInternal
#88 · 0x30140
GetPermissionRequests
#89 · 0x306d0
GetRealProcAddress
#90 · 0x2f880
GetRequestedRuntimeInfo
#91 · 0x2e520
GetRequestedRuntimeVersion
#92 · 0x2e8e0
GetRequestedRuntimeVersionForCLSID
#93 · 0x2eb90
GetVersionFromProcess
#94 · 0x34ff0
GetXMLElement
#95 · 0x50740
GetXMLElementAttribute
#96 · 0x50750
GetXMLObject
#97 · 0x221a0
IEE
#98 · 0x30c70
LoadLibraryShim
#99 · 0x2f970
LoadLibraryWithPolicyShim
#100 · 0x2f8e0
LoadStringRCEx
#101 · 0x304c0
LockClrVersion
#102 · 0x2afb0
MetaDataGetDispenser
#103 · 0x2ff60
ND_CopyObjDst
#104 · 0x30a60
ND_CopyObjSrc
#105 · 0x30a40
ND_RI2
#106 · 0x14610
ND_RI4
#107 · 0x309b0
ND_RI8
#108 · 0x309c0
ND_RU1
#109 · 0x14630
ND_WI2
#110 · 0x309e0
ND_WI4
#111 · 0x30a00
ND_WI8
#112 · 0x30a20
ND_WU1
#113 · 0x14650
ReOpenMetaDataWithMemoryEx
#114 · 0x305b0
RunDll32ShimW
#115 · 0x2fbd0
RuntimeOSHandle
#116 · 0x30930
RuntimeOpenImage
#117 · 0x30830
RuntimeReleaseHandle
#118 · 0x308b0
StrongNameCompareAssemblies
#119 · 0x3e670
StrongNameErrorInfo
#120 · 0x3e000
StrongNameFreeBuffer
#121 · 0x3e0a0
StrongNameGetBlob
#122 · 0x3ea30
StrongNameGetBlobFromImage
#123 · 0x3ea90
StrongNameGetPublicKey
#124 · 0x3e280
StrongNameHashSize
#125 · 0x3e6d0
StrongNameKeyDelete
#126 · 0x3e220
StrongNameKeyGen
#127 · 0x3e0f0
StrongNameKeyGenEx
#128 · 0x3e150
StrongNameKeyInstall
#129 · 0x3e1c0
StrongNameSignatureGeneration
#130 · 0x3e2f0
StrongNameSignatureGenerationEx
#131 · 0x3e360
StrongNameSignatureSize
#132 · 0x3e730
StrongNameSignatureVerification
#133 · 0x3e550
StrongNameSignatureVerificationEx
#134 · 0x3e5b0
StrongNameSignatureVerificationFromImage
#135 · 0x3e610
StrongNameTokenFromAssembly
#136 · 0x3e3d0
StrongNameTokenFromAssemblyEx
#137 · 0x3e430
StrongNameTokenFromPublicKey
#138 · 0x3e500
TranslateSecurityAttributes
#139 · 0x30640
_CorDllMain
#140 · 0x31d70
_CorExeMain2
#141 · 0xd350
_CorExeMain
#142 · 0xfa20
No function matches your filter.
Imported DLLs & functions 137
KERNEL32.dll
137
ActivateActCtx
0x10084138
CloseHandle
0x1008402c
CreateActCtxW
0x10084134
CreateEventW
0x10084188
CreateFileMappingW
0x100840a8
CreateFileW
0x10084074
CreateMutexW
0x10084060
CreateProcessW
0x10084174
CreateSemaphoreW
0x1008419c
CreateToolhelp32Snapshot
0x100840b8
DeactivateActCtx
0x1008413c
DebugBreak
0x10084140
DecodePointer
0x100841b0
DeleteCriticalSection
0x10084070
DisableThreadLibraryCalls
0x1008404c
EncodePointer
0x100841ac
EnterCriticalSection
0x10084064
ExitProcess
0x10084054
FindClose
0x100840d0
FindFirstFileExA
0x100841ec
FindFirstFileW
0x100840c8
FindNextFileA
0x100841f0
FindNextFileW
0x100840cc
FlushFileBuffers
0x10084094
FlushInstructionCache
0x100840ec
FormatMessageW
0x1008411c
FreeEnvironmentStringsW
0x1008412c
FreeLibrary
0x10084014
GetACP
0x10084118
GetCommandLineA
0x100841fc
GetCommandLineW
0x10084200
GetConsoleCP
0x100841e4
GetConsoleMode
0x100841e8
GetCPInfo
0x10084114
GetCurrentProcess
0x10084050
GetCurrentProcessId
0x10084170
GetCurrentThread
0x10084158
GetCurrentThreadId
0x10084088
GetDateFormatW
0x10084084
GetEnvironmentStringsW
0x10084130
GetEnvironmentVariableW
0x1008401c
GetFileAttributesExW
0x100840f4
GetFileAttributesW
0x10084090
GetFileSize
0x100840a4
GetFileType
0x100841dc
GetFullPathNameW
0x10084004
GetLastError
0x10084008
GetLocalTime
0x1008407c
GetModuleFileNameA
0x100841d4
GetModuleFileNameW
0x10084024
GetModuleHandleA
0x1008414c
GetModuleHandleExW
0x1008400c
GetModuleHandleW
0x10084048
GetOEMCP
0x100841f8
GetProcAddress
0x10084010
GetProcessHeap
0x10084110
GetProcessId
0x100840dc
GetStartupInfoW
0x100841c0
GetStdHandle
0x100841d8
GetStringTypeW
0x100841e0
GetSystemDefaultLangID
0x10084150
GetSystemDefaultLCID
0x100840f8
GetSystemDirectoryW
0x10084098
GetSystemInfo
0x10084044
GetSystemTimeAsFileTime
0x10084154
GetSystemWow64DirectoryW
0x100840f0
GetTickCount
0x1008408c
GetTimeFormatW
0x10084080
GetVersionExW
0x100840e8
GetWindowsDirectoryW
0x10084034
GlobalMemoryStatus
0x10084038
HeapAlloc
0x1008410c
HeapCreate
0x100840fc
HeapDestroy
0x10084100
HeapFree
0x10084108
HeapReAlloc
0x10084214
HeapSize
0x10084210
HeapValidate
0x10084184
InitializeCriticalSection
0x1008406c
InitializeCriticalSectionAndSpinCount
0x100840b0
InitializeSListHead
0x100841c8
InterlockedDecrement
0x1008421c
InterlockedFlushSList
0x100841d0
InterlockedIncrement
0x10084220
IsDBCSLeadByte
0x10084120
IsDBCSLeadByteEx
0x10084218
IsDebuggerPresent
0x10084148
IsProcessorFeaturePresent
0x100841bc
IsValidCodePage
0x100841f4
IsWow64Process
0x10084168
LCMapStringW
0x10084128
LeaveCriticalSection
0x10084068
LoadLibraryExA
0x100840d4
LoadLibraryExW
0x10084018
LocalFree
0x10084124
lstrlenW
0x100840c4
MapViewOfFile
0x100840ac
Module32FirstW
0x100840e0
Module32NextW
0x100840e4
MultiByteToWideChar
0x1008409c
OpenProcess
0x1008416c
OutputDebugStringW
0x10084058
QueryPerformanceCounter
0x100841c4
RaiseException
0x10084104
ReadFile
0x100840c0
ReadProcessMemory
0x100840bc
ReleaseActCtx
0x10084144
ReleaseMutex
0x1008405c
ReleaseSemaphore
0x10084180
ResetEvent
0x10084198
RtlUnwind
0x100841cc
SetEnvironmentVariableW
0x10084030
SetErrorMode
0x10084020
SetEvent
0x1008418c
SetFilePointerEx
0x10084208
SetLastError
0x100840a0
SetStdHandle
0x10084204
SetUnhandledExceptionFilter
0x100841b8
SleepEx
0x100841a0
TerminateProcess
0x1008415c
TlsAlloc
0x10084194
TlsFree
0x100841a8
TlsGetValue
0x100841a4
TlsSetValue
0x10084178
UnhandledExceptionFilter
0x100841b4
UnmapViewOfFile
0x100840b4
VerifyVersionInfoW
0x10084164
VerSetConditionMask
0x10084160
VirtualAlloc
0x10084040
VirtualFree
0x1008417c
VirtualProtect
0x100840d8
VirtualQuery
0x1008403c
WaitForSingleObject
0x10084028
WaitForSingleObjectEx
0x10084190
WideCharToMultiByte
0x10084000
WriteConsoleW
0x1008420c
WriteFile
0x10084078
No function matches your filter.