dbgshim.dll
v5.0.1722.21314
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 14
CLRCreateInstance
#1 · 0x2e90
CloseCLREnumeration
#2 · 0x2430
CloseResumeHandle
#3 · 0x1450
CreateDebuggingInterfaceFromVersion2
#4 · 0x2960
CreateDebuggingInterfaceFromVersion
#5 · 0x2c50
CreateDebuggingInterfaceFromVersionEx
#6 · 0x2940
CreateProcessForLaunch
#7 · 0x1380
CreateVersionStringFromModule
#8 · 0x25d0
EnumerateCLRs
#9 · 0x2220
GetStartupNotificationEvent
#10 · 0x19e0
RegisterForRuntimeStartup
#11 · 0x1920
RegisterForRuntimeStartupEx
#12 · 0x1940
ResumeProcess
#13 · 0x1420
UnregisterForRuntimeStartup
#14 · 0x19c0
No function matches your filter.
Imported DLLs & functions 102
ADVAPI32.dll
11
AddAccessAllowedAce
0x10011024
CopySid
0x10011004
GetLengthSid
0x10011000
GetSidSubAuthority
0x10011010
GetSidSubAuthorityCount
0x1001100c
GetTokenInformation
0x10011014
InitializeAcl
0x10011028
InitializeSecurityDescriptor
0x10011020
OpenProcessToken
0x10011018
SetSecurityDescriptorDacl
0x1001101c
SetSecurityDescriptorSacl
0x10011008
_cexit
0x10011160
_configure_narrow_argv
0x10011170
_errno
0x10011154
_execute_onexit_table
0x1001117c
_initialize_narrow_environment
0x10011174
_initialize_onexit_table
0x10011178
_initterm
0x10011164
_initterm_e
0x10011168
_seh_filter_dll
0x1001116c
abort
0x1001115c
terminate
0x10011158
__stdio_common_vsnprintf_s
0x10011190
__stdio_common_vsnwprintf_s
0x10011188
__stdio_common_vswprintf_s
0x1001118c
__stdio_common_vswscanf
0x10011184
_stricmp
0x100111a0
_wcsicmp
0x1001119c
strcpy_s
0x100111ac
strncmp
0x100111a4
wcscpy_s
0x100111b0
wcsncmp
0x100111a8
wcsncpy_s
0x10011198
KERNEL32.dll
60
CloseHandle
0x100110c0
CreateEventW
0x100110d4
CreateFileMappingW
0x10011068
CreateFileW
0x10011034
CreateProcessW
0x100110a8
CreateThread
0x100110bc
DeleteCriticalSection
0x10011078
DuplicateHandle
0x100110dc
EncodePointer
0x100110fc
EnterCriticalSection
0x1001107c
FormatMessageW
0x10011058
FreeLibrary
0x100110a4
GetCurrentProcess
0x1001109c
GetCurrentProcessId
0x100110ac
GetCurrentThreadId
0x100110ec
GetFileSize
0x100110b4
GetFullPathNameW
0x1001106c
GetLastError
0x100110c8
GetProcAddress
0x100110b8
GetProcessHeap
0x10011044
GetSystemInfo
0x10011084
GetSystemTimeAsFileTime
0x10011070
HeapAlloc
0x1001103c
HeapFree
0x10011040
InitializeCriticalSection
0x10011074
InitializeCriticalSectionAndSpinCount
0x100110f8
InitializeSListHead
0x10011108
InterlockedFlushSList
0x10011100
IsDBCSLeadByte
0x10011054
IsDebuggerPresent
0x1001108c
IsProcessorFeaturePresent
0x10011110
K32EnumProcessModules
0x100110a0
K32GetModuleFileNameExW
0x100110f4
LCMapStringEx
0x1001104c
LeaveCriticalSection
0x10011080
LoadLibraryExW
0x10011064
LoadLibraryW
0x10011038
LocalFree
0x1001105c
MapViewOfFile
0x10011030
MultiByteToWideChar
0x10011050
OpenEventW
0x100110e8
OpenProcess
0x100110d8
ProcessIdToSessionId
0x100110d0
QueryPerformanceCounter
0x1001110c
RaiseException
0x10011048
ReadProcessMemory
0x100110b0
ResumeThread
0x100110e4
RtlUnwind
0x10011104
SetEvent
0x100110c4
SetLastError
0x10011060
SetUnhandledExceptionFilter
0x10011114
Sleep
0x100110cc
TerminateProcess
0x10011088
TlsAlloc
0x10011098
TlsFree
0x1001111c
TlsGetValue
0x10011094
TlsSetValue
0x10011090
UnhandledExceptionFilter
0x10011118
UnmapViewOfFile
0x100110e0
WaitForSingleObject
0x100110f0
CoTaskMemFree
0x100111b8
SetErrorInfo
0x10011124
LoadStringW
0x1001112c
GetFileVersionInfoExW
0x1001113c
GetFileVersionInfoSizeExW
0x10011134
VerQueryValueW
0x10011138
No function matches your filter.