mscorsvc.dll
v4.8.4084.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 7
CorCreateNGenProcess
#1 · 0x3d5d0
CorGetNGenPolicy
#2 · 0x3d820
CorGetSvc
#3 · 0x102a0
CorInitSvcLogger
#4 · 0x1c8f0
CorSetCriticalTaskState
#5 · 0x2c480
CorStopNonCriticalTask
#6 · 0x2c930
CorSvcLog
#7 · 0x1ca40
No function matches your filter.
Imported DLLs & functions 214
ADVAPI32.dll
25
ConvertSidToStringSidW
0x10067028
ConvertStringSidToSidW
0x10067034
CreateProcessAsUserW
0x10067040
DeregisterEventSource
0x10067044
DuplicateTokenEx
0x10067030
EventWrite
0x10067050
FreeSid
0x1006702c
GetLengthSid
0x1006703c
GetSidSubAuthority
0x10067060
GetSidSubAuthorityCount
0x1006705c
GetTokenInformation
0x10067024
OpenProcessToken
0x10067020
RegCloseKey
0x10067004
RegCreateKeyExW
0x10067054
RegDeleteKeyW
0x10067008
RegDeleteValueW
0x10067014
RegEnumKeyExW
0x10067018
RegEnumValueW
0x1006701c
RegisterEventSourceW
0x10067048
RegNotifyChangeKeyValue
0x10067000
RegOpenKeyExW
0x10067058
RegQueryValueExW
0x1006700c
RegSetValueExW
0x10067010
ReportEventW
0x1006704c
SetTokenInformation
0x10067038
CreateApplicationContext
0x10067368
CreateAssemblyCache
0x1006736c
CreateAssemblyNameObject
0x10067370
InitializeFusion
0x10067374
KERNEL32.dll
110
ActivateActCtx
0x10067170
CloseHandle
0x100671cc
CreateActCtxW
0x10067174
CreateDirectoryW
0x10067090
CreateEventW
0x100671d0
CreateFileMappingW
0x1006709c
CreateFileW
0x1006711c
CreateMutexW
0x10067148
CreatePipe
0x100670c4
CreateProcessW
0x100670e8
CreateSemaphoreW
0x10067130
CreateThread
0x100671d8
DeactivateActCtx
0x1006716c
DebugBreak
0x10067068
DeleteCriticalSection
0x1006719c
DeleteFileW
0x100671b0
EnterCriticalSection
0x10067188
ExitProcess
0x100670b0
FileTimeToSystemTime
0x100671f4
FindClose
0x100670f8
FindFirstFileW
0x100671bc
FindNextFileW
0x10067164
FormatMessageW
0x1006720c
FreeLibrary
0x100670cc
GetACP
0x10067214
GetCommandLineW
0x100670a8
GetCPInfo
0x10067218
GetCurrentProcess
0x10067070
GetCurrentProcessId
0x100670b8
GetCurrentThreadId
0x100670e0
GetEnvironmentVariableW
0x10067080
GetExitCodeProcess
0x100670ac
GetFileAttributesExW
0x1006717c
GetFileAttributesW
0x100671e8
GetFileSize
0x10067098
GetFileSizeEx
0x10067180
GetFullPathNameW
0x100671e4
GetLastError
0x100671d4
GetLocalTime
0x100670dc
GetModuleFileNameW
0x10067100
GetModuleHandleW
0x10067104
GetProcAddress
0x100671e0
GetProcessAffinityMask
0x100671b8
GetProcessHeap
0x1006721c
GetSystemDirectoryW
0x100671b4
GetSystemInfo
0x100671c8
GetSystemPowerStatus
0x100671dc
GetSystemTime
0x100671ec
GetSystemTimeAsFileTime
0x10067184
GetSystemWindowsDirectoryW
0x100670f4
GetTickCount
0x10067194
GetVersionExW
0x10067074
GetWindowsDirectoryW
0x100670f0
GlobalAlloc
0x100670c0
GlobalMemoryStatusEx
0x10067088
HeapAlloc
0x100671fc
HeapCreate
0x10067160
HeapDestroy
0x10067134
HeapFree
0x100671f8
HeapValidate
0x10067140
InitializeCriticalSection
0x10067198
InitializeSListHead
0x10067108
IsDBCSLeadByte
0x10067208
IsDebuggerPresent
0x100671ac
IsProcessorFeaturePresent
0x10067110
LCMapStringW
0x10067204
LeaveCriticalSection
0x1006718c
LoadLibraryExA
0x100670fc
LoadLibraryExW
0x100670a4
LocalFree
0x100670d4
MapViewOfFile
0x100670a0
MoveFileExW
0x10067178
MultiByteToWideChar
0x10067210
OpenEventW
0x100670b4
OpenProcess
0x100670c8
OutputDebugStringW
0x100670e4
QueryPerformanceCounter
0x1006710c
RaiseException
0x100670d8
ReadFile
0x100670bc
ReleaseActCtx
0x10067168
ReleaseMutex
0x10067144
ReleaseSemaphore
0x10067150
ResetEvent
0x100671a0
SetConsoleCtrlHandler
0x10067078
SetEnvironmentVariableW
0x10067084
SetErrorMode
0x1006708c
SetEvent
0x10067190
SetLastError
0x10067094
SetProcessShutdownParameters
0x1006707c
SetUnhandledExceptionFilter
0x10067114
SleepEx
0x1006712c
SystemTimeToFileTime
0x100671f0
TerminateProcess
0x1006706c
TlsAlloc
0x10067138
TlsFree
0x10067124
TlsGetValue
0x10067128
TlsSetValue
0x1006715c
UnhandledExceptionFilter
0x10067118
UnmapViewOfFile
0x100670d0
VerifyVersionInfoW
0x100671c0
VerSetConditionMask
0x100671c4
VirtualAlloc
0x1006714c
VirtualFree
0x10067154
VirtualProtect
0x10067158
VirtualQuery
0x10067120
WaitForMultipleObjects
0x100671a8
WaitForSingleObject
0x100671a4
WaitForSingleObjectEx
0x1006713c
WideCharToMultiByte
0x10067200
WriteFile
0x100670ec
CLRCreateInstance
0x10067358
CreateConfigStream
0x10067354
GetRequestedRuntimeInfo
0x1006735c
GetXMLObject
0x10067360
ole32.dll
10
CoAddRefServerProcess
0x10067304
CoCreateGuid
0x100672fc
CoCreateInstance
0x100672f4
CoDisconnectObject
0x100672f8
CoInitializeEx
0x10067314
CoReleaseServerProcess
0x10067300
CoTaskMemFree
0x10067308
CoUninitialize
0x10067318
CoUnmarshalInterface
0x10067310
CreateStreamOnHGlobal
0x1006730c
OLEAUT32.dll
12
SafeArrayCreateVector
0x10067324
SafeArrayDestroy
0x10067330
SafeArrayGetElement
0x10067328
SafeArrayGetUBound
0x1006732c
SafeArrayPutElement
0x10067320
SetErrorInfo
0x10067344
SysAllocString
0x1006734c
SysFreeString
0x10067348
SysStringLen
0x10067334
VariantChangeType
0x10067338
VariantClear
0x1006733c
VariantInit
0x10067340
__acrt_iob_func
0x1006728c
__stdio_common_vfwprintf
0x10067284
__stdio_common_vsnprintf_s
0x1006727c
__stdio_common_vsnwprintf_s
0x10067280
__stdio_common_vswprintf_s
0x1006729c
_cexit
0x100672d0
_configure_narrow_argv
0x100672b8
_crt_atexit
0x100672cc
_errno
0x10067270
_execute_onexit_table
0x100672c8
_flushall
0x1006725c
_initialize_narrow_environment
0x100672bc
_initialize_onexit_table
0x100672c0
_initterm
0x1006726c
_initterm_e
0x100672b0
_putws
0x10067258
_register_onexit_function
0x100672c4
_seh_filter_dll
0x100672b4
_wcsicmp
0x100672a4
_wcsnicmp
0x10067298
_wtoi
0x100672a0
fflush
0x10067288
free
0x100672d8
iswspace
0x10067268
malloc
0x10067254
strcpy_s
0x10067278
strncmp
0x10067274
wcscat_s
0x10067264
wcscpy_s
0x10067294
wcsncmp
0x100672d4
wcsncpy_s
0x10067290
wcstok_s
0x10067260
wcstol
0x100672a8
wcstoul
0x100672ac
GetProcessWindowStation
0x100672e0
GetUserObjectInformationW
0x100672e8
LoadStringW
0x100672ec
SystemParametersInfoW
0x100672e4
__CxxFrameHandler3
0x10067234
__std_type_info_destroy_list
0x1006722c
_CxxThrowException
0x10067240
_except_handler4_common
0x10067230
_purecall
0x1006723c
memcpy
0x10067224
memmove
0x10067238
memset
0x10067228
wcschr
0x10067248
wcsrchr
0x10067244
wcsstr
0x1006724c
No function matches your filter.