mscordbi.dll
v5.0.1722.21314
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess
Exported functions 8
CoreCLRCreateCordbObject
#1 · 0x6f70
CoreCLRCreateCordbObjectEx
#2 · 0x6e70
CreateCordbObject
#3 · 0x6e30
DllGetClassObjectInternal
#4 · 0x6f90
OpenVirtualProcess2
#5 · 0xbf70
OpenVirtualProcess
#6 · 0xbfc0
OpenVirtualProcessImpl2
#7 · 0xbf20
OpenVirtualProcessImpl
#8 · 0xbcd0
No function matches your filter.
Imported DLLs & functions 145
ADVAPI32.dll
12
AdjustTokenPrivileges
0x100b6024
GetSidSubAuthority
0x100b6004
GetSidSubAuthorityCount
0x100b6000
GetTokenInformation
0x100b6008
LookupPrivilegeValueW
0x100b602c
OpenProcessToken
0x100b6028
OpenThreadToken
0x100b6014
RegCloseKey
0x100b6020
RegOpenKeyExW
0x100b601c
RegQueryValueExW
0x100b6018
RevertToSelf
0x100b6010
SetThreadToken
0x100b600c
wcstoul
0x100b61b8
_cexit
0x100b61e8
_configure_narrow_argv
0x100b6200
_errno
0x100b61e0
_execute_onexit_table
0x100b61ec
_initialize_narrow_environment
0x100b6204
_initialize_onexit_table
0x100b6208
_initterm
0x100b61f0
_initterm_e
0x100b61f4
_invalid_parameter_noinfo
0x100b61dc
_seh_filter_dll
0x100b61fc
abort
0x100b61e4
terminate
0x100b61f8
__acrt_iob_func
0x100b6214
__stdio_common_vfprintf
0x100b621c
__stdio_common_vsnprintf_s
0x100b6218
__stdio_common_vsnwprintf_s
0x100b6210
_wcsicmp
0x100b6228
strcpy_s
0x100b6248
strncmp
0x100b6224
strncpy_s
0x100b6238
wcscat_s
0x100b622c
wcscpy_s
0x100b6230
wcsncat_s
0x100b6240
wcsncmp
0x100b623c
wcsncpy_s
0x100b6244
wcsnlen
0x100b6234
KERNEL32.dll
90
CloseHandle
0x100b614c
ContinueDebugEvent
0x100b60a0
CreateEventW
0x100b606c
CreateFileMappingW
0x100b6040
CreateFileW
0x100b60ec
CreateProcessW
0x100b6138
CreateSemaphoreExW
0x100b6164
CreateThread
0x100b6090
DebugActiveProcess
0x100b60b4
DebugActiveProcessStop
0x100b60b8
DebugBreak
0x100b6118
DeleteCriticalSection
0x100b6058
DuplicateHandle
0x100b608c
EncodePointer
0x100b617c
EnterCriticalSection
0x100b6050
FlushFileBuffers
0x100b6144
FlushInstructionCache
0x100b607c
FormatMessageW
0x100b6130
FreeLibrary
0x100b60a4
GetACP
0x100b6124
GetCurrentProcess
0x100b6054
GetCurrentProcessId
0x100b6148
GetCurrentThread
0x100b6120
GetCurrentThreadId
0x100b6078
GetEnvironmentVariableW
0x100b60f4
GetFileAttributesExW
0x100b60e8
GetFileSize
0x100b603c
GetFullPathNameW
0x100b60f8
GetLastError
0x100b6150
GetModuleFileNameW
0x100b60f0
GetModuleHandleW
0x100b60ac
GetProcAddress
0x100b6064
GetProcessHeap
0x100b60d8
GetSystemInfo
0x100b6110
GetSystemTimeAsFileTime
0x100b6108
GetThreadContext
0x100b6098
HeapAlloc
0x100b60d0
HeapCreate
0x100b60dc
HeapFree
0x100b60d4
InitializeCriticalSection
0x100b605c
InitializeCriticalSectionAndSpinCount
0x100b6178
InitializeSListHead
0x100b6188
InterlockedFlushSList
0x100b6180
IsDBCSLeadByte
0x100b612c
IsDebuggerPresent
0x100b6114
IsProcessorFeaturePresent
0x100b6190
IsWow64Process
0x100b60c4
LCMapStringEx
0x100b6128
LeaveCriticalSection
0x100b604c
LoadLibraryExW
0x100b60e4
LoadLibraryW
0x100b6060
LocalFree
0x100b6134
MapViewOfFile
0x100b6044
MultiByteToWideChar
0x100b6038
OpenProcess
0x100b60c0
OpenThread
0x100b6080
QueryPerformanceCounter
0x100b618c
RaiseException
0x100b610c
ReadFile
0x100b615c
ReadProcessMemory
0x100b60c8
ReleaseSemaphore
0x100b6140
ResetEvent
0x100b6074
ResumeThread
0x100b6088
RtlUnwind
0x100b6184
SetEvent
0x100b6070
SetFilePointer
0x100b613c
SetLastError
0x100b60e0
SetThreadContext
0x100b609c
SetUnhandledExceptionFilter
0x100b6194
Sleep
0x100b60b0
SleepEx
0x100b60fc
SuspendThread
0x100b6084
SwitchToThread
0x100b611c
TerminateProcess
0x100b6094
TlsAlloc
0x100b6174
TlsFree
0x100b6168
TlsGetValue
0x100b6170
TlsSetValue
0x100b616c
UnhandledExceptionFilter
0x100b6198
UnmapViewOfFile
0x100b6034
VirtualAlloc
0x100b6100
VirtualFree
0x100b6104
VirtualQueryEx
0x100b60a8
WaitForDebugEvent
0x100b60bc
WaitForMultipleObjectsEx
0x100b6068
WaitForSingleObject
0x100b6154
WaitForSingleObjectEx
0x100b6160
WideCharToMultiByte
0x100b6048
WriteFile
0x100b6158
WriteProcessMemory
0x100b60cc
CoCreateGuid
0x100b6264
CoTaskMemAlloc
0x100b6268
CoTaskMemFree
0x100b626c
CreateStreamOnHGlobal
0x100b625c
IIDFromString
0x100b6260
LoadStringW
0x100b61b0
No function matches your filter.