mscordbi.dll
v8.0.2025.41914
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess
Exported functions 9
CoreCLRCreateCordbObject
#1 · 0x1300
CoreCLRCreateCordbObject3
#2 · 0x10d0
CoreCLRCreateCordbObjectEx
#3 · 0x11e0
CreateCordbObject
#4 · 0x1090
DllGetClassObjectInternal
#5 · 0x1420
OpenVirtualProcess
#6 · 0x7170
OpenVirtualProcess2
#7 · 0x7120
OpenVirtualProcessImpl
#8 · 0x6eb0
OpenVirtualProcessImpl2
#9 · 0x7080
No function matches your filter.
Imported DLLs & functions 144
ADVAPI32.dll
12
AdjustTokenPrivileges
0x1800f1048
GetSidSubAuthority
0x1800f1008
GetSidSubAuthorityCount
0x1800f1000
GetTokenInformation
0x1800f1010
LookupPrivilegeValueW
0x1800f1058
OpenProcessToken
0x1800f1050
OpenThreadToken
0x1800f1028
RegCloseKey
0x1800f1040
RegOpenKeyExW
0x1800f1038
RegQueryValueExW
0x1800f1030
RevertToSelf
0x1800f1020
SetThreadToken
0x1800f1018
wcstoul
0x1800f13a0
_cexit
0x1800f1408
_configure_narrow_argv
0x1800f13e0
_errno
0x1800f1418
_execute_onexit_table
0x1800f1400
_initialize_narrow_environment
0x1800f1428
_initialize_onexit_table
0x1800f13f8
_initterm
0x1800f13f0
_initterm_e
0x1800f13e8
_invalid_parameter_noinfo
0x1800f1420
_seh_filter_dll
0x1800f13d8
abort
0x1800f1410
terminate
0x1800f13d0
__stdio_common_vsnprintf_s
0x1800f1438
_wcsicmp
0x1800f1468
strcmp
0x1800f1478
strcpy_s
0x1800f1498
strlen
0x1800f14a0
strncmp
0x1800f1488
strncpy_s
0x1800f1490
wcscat_s
0x1800f1448
wcscpy_s
0x1800f1460
wcsncat_s
0x1800f1470
wcsncmp
0x1800f1480
wcsncpy_s
0x1800f1458
wcsnlen
0x1800f1450
KERNEL32.dll
96
CloseHandle
0x1800f12a0
ContinueDebugEvent
0x1800f1128
CopyContext
0x1800f1108
CreateEventW
0x1800f12b0
CreateFileMappingW
0x1800f1150
CreateFileW
0x1800f1078
CreateProcessW
0x1800f1258
CreateSemaphoreExW
0x1800f1278
CreateThread
0x1800f10f8
DebugActiveProcess
0x1800f1170
DebugActiveProcessStop
0x1800f1178
DebugBreak
0x1800f11d8
DeleteCriticalSection
0x1800f1090
DuplicateHandle
0x1800f12b8
EncodePointer
0x1800f1308
EnterCriticalSection
0x1800f1088
FlushFileBuffers
0x1800f1070
FlushInstructionCache
0x1800f10d8
FormatMessageW
0x1800f1210
FreeLibrary
0x1800f1130
GetACP
0x1800f11f8
GetCurrentProcess
0x1800f12d0
GetCurrentProcessId
0x1800f1068
GetCurrentThread
0x1800f1248
GetCurrentThreadId
0x1800f10d0
GetEnvironmentVariableW
0x1800f1230
GetFileAttributesExW
0x1800f1238
GetFileSize
0x1800f1148
GetFullPathNameW
0x1800f1240
GetLastError
0x1800f12a8
GetModuleFileNameW
0x1800f1228
GetModuleHandleW
0x1800f1140
GetProcAddress
0x1800f10b0
GetProcessHeap
0x1800f11d0
GetSystemInfo
0x1800f1220
GetSystemTimeAsFileTime
0x1800f11c0
GetThreadContext
0x1800f1120
HeapAlloc
0x1800f11a8
HeapCreate
0x1800f11c8
HeapFree
0x1800f11b0
InitializeContext
0x1800f1100
InitializeCriticalSection
0x1800f1098
InitializeCriticalSectionAndSpinCount
0x1800f1300
InitializeSListHead
0x1800f1328
InterlockedFlushSList
0x1800f1310
IsDebuggerPresent
0x1800f1320
IsProcessorFeaturePresent
0x1800f1330
IsWow64Process
0x1800f1190
LCMapStringEx
0x1800f1200
LeaveCriticalSection
0x1800f1080
LoadLibraryExW
0x1800f10a8
LocalFree
0x1800f1218
MapViewOfFile
0x1800f1158
MultiByteToWideChar
0x1800f1208
OpenProcess
0x1800f1188
OpenThread
0x1800f10e0
QueryPerformanceCounter
0x1800f11b8
QueryPerformanceFrequency
0x1800f12d8
RaiseException
0x1800f11e8
ReadFile
0x1800f12e0
ReadProcessMemory
0x1800f1198
ReleaseSemaphore
0x1800f1288
ResetEvent
0x1800f10c8
ResumeThread
0x1800f10f0
RtlCaptureContext
0x1800f1358
RtlLookupFunctionEntry
0x1800f1350
RtlPcToFileHeader
0x1800f1360
RtlUnwindEx
0x1800f1318
RtlVirtualUnwind
0x1800f1348
SetEvent
0x1800f10c0
SetFilePointer
0x1800f1290
SetLastError
0x1800f11f0
SetThreadContext
0x1800f1110
SetUnhandledExceptionFilter
0x1800f1338
Sleep
0x1800f1168
SleepEx
0x1800f1260
SuspendThread
0x1800f10e8
SwitchToThread
0x1800f1250
TerminateProcess
0x1800f1118
TlsAlloc
0x1800f12f8
TlsFree
0x1800f1298
TlsGetValue
0x1800f12f0
TlsSetValue
0x1800f12e8
UnhandledExceptionFilter
0x1800f1340
UnmapViewOfFile
0x1800f1160
VirtualAlloc
0x1800f1268
VirtualFree
0x1800f1270
VirtualQuery
0x1800f11e0
VirtualQueryEx
0x1800f1138
WaitForDebugEvent
0x1800f1180
WaitForMultipleObjectsEx
0x1800f10b8
WaitForSingleObject
0x1800f12c0
WaitForSingleObjectEx
0x1800f1280
WideCharToMultiByte
0x1800f10a0
WriteFile
0x1800f12c8
WriteProcessMemory
0x1800f11a0
LoadStringW
0x1800f1390
No function matches your filter.