mscoreei.dll
v4.8.4084.0
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 126
InitErrors
#17 · 0x28a10
PostError
#18 · 0x28b30
InitSSAutoEnterThread
#19 · 0x28b60
UpdateError
#20 · 0x28bc0
CloseCtrs
#21 · 0x2b740
LoadStringRC
#22 · 0x28c10
ReOpenMetaDataWithMemory
#23 · 0x28da0
#24 · 0x9a80
CollectCtrs
#25 · 0x2b6d0
CorDllMainWorker
#26 · 0x2af40
CorDllMainWorkerForThunk
#27 · 0x2b160
EEDllGetClassObjectFromClass
#28 · 0x291f0
GetPrivateContextsPerfCounters
#29 · 0x297a0
GetProcessExecutableHeap
#30 · 0x2240
GetStartupFlags
#31 · 0x10b90
GetTargetForVTableEntry
#32 · 0x39990
GetTokenForVTableEntry
#33 · 0x398c0
LogHelp_LogAssert
#34 · 0x29660
LogHelp_NoGuiOnAssert
#35 · 0x296e0
LogHelp_TerminateOnAssert
#36 · 0x29740
OnShimDllMainCalled
#37 · 0x1470
OpenCtrs
#38 · 0x2b460
PostErrorVA
#39 · 0x28a80
RegisterShimImplCallback
#40 · 0x14e0
SetTargetForVTableEntry
#41 · 0x39930
CLRCreateInstance
#42 · 0xd780
CallFunctionShim
#43 · 0x29930
ClrCreateManagedInstance
#44 · 0x290e0
CoEEShutDownCOM
#45 · 0x29260
CoInitializeCor
#46 · 0x287e0
CoInitializeEE
#47 · 0x286e0
CoUninitializeCor
#48 · 0x28860
CoUninitializeEE
#49 · 0x28760
CorBindToCurrentRuntime
#50 · 0x267c0
CorBindToRuntime
#51 · 0x25eb0
CorBindToRuntimeByCfg
#52 · 0x26400
CorBindToRuntimeByPath
#53 · 0x257e0
CorBindToRuntimeByPathEx
#54 · 0x25b40
CorBindToRuntimeEx
#55 · 0x26290
CorBindToRuntimeHost
#56 · 0x26640
CorExitProcess
#57 · 0x29900
CorGetSvc
#58 · 0x27a10
CorIsLatestSvc
#59 · 0x27be0
CorMarkThreadInThreadPool
#60 · 0x1460
CorTickleSvc
#61 · 0x27cb0
CreateConfigStream
#62 · 0x68d0
CreateDebuggingInterfaceFromVersion
#63 · 0x2d890
CreateInterface
#64 · 0xd780
DllCanUnloadNow
#65 · 0x299f0
DllGetClassObject
#66 · 0x2a3f0
DllRegisterServer
#67 · 0x2a8b0
DllUnregisterServer
#68 · 0x2a960
EEDllRegisterServer
#69 · 0x29800
EEDllUnregisterServer
#70 · 0x29880
GetAssemblyMDImport
#71 · 0x2aa10
GetCORRequiredVersion
#72 · 0x26ac0
GetCORRootDirectory
#73 · 0x27b00
GetCORSystemDirectory
#74 · 0x27f50
GetCORSystemDirectory_RetAddr
#75 · 0x10a30
GetCORVersion
#76 · 0x10990
GetCompileInfo
#77 · 0x29200
GetFileVersion
#78 · 0x2d3e0
GetHashFromAssemblyFile
#79 · 0x37250
GetHashFromAssemblyFileW
#80 · 0x37320
GetHashFromBlob
#81 · 0x37660
GetHashFromFile
#82 · 0x373f0
GetHashFromFileW
#83 · 0x374c0
GetHashFromHandle
#84 · 0x37590
GetHostConfigurationFile
#85 · 0x10c00
GetMetaDataInternalInterface
#86 · 0x10d30
GetMetaDataInternalInterfaceFromPublic
#87 · 0x28970
GetMetaDataPublicInterfaceFromInternal
#88 · 0x288d0
GetPermissionRequests
#89 · 0x28fd0
GetRealProcAddress
#90 · 0x27fa0
GetRequestedRuntimeInfo
#91 · 0x270a0
GetRequestedRuntimeVersion
#92 · 0x27460
GetRequestedRuntimeVersionForCLSID
#93 · 0x27710
GetVersionFromProcess
#94 · 0x2e1f0
GetXMLElement
#95 · 0x47be0
GetXMLElementAttribute
#96 · 0x47be0
GetXMLObject
#97 · 0x141d0
IEE
#98 · 0x10df0
LoadLibraryShim
#99 · 0x280d0
LoadLibraryWithPolicyShim
#100 · 0x28020
LoadStringRCEx
#101 · 0x28cc0
LockClrVersion
#102 · 0x23c10
MetaDataGetDispenser
#103 · 0x28640
ND_CopyObjDst
#104 · 0x29640
ND_CopyObjSrc
#105 · 0x29620
ND_RI2
#106 · 0xff90
ND_RI4
#107 · 0x295d0
ND_RI8
#108 · 0x295e0
ND_RU1
#109 · 0xff80
ND_WI2
#110 · 0x295f0
ND_WI4
#111 · 0x29600
ND_WI8
#112 · 0x29610
ND_WU1
#113 · 0xffa0
ReOpenMetaDataWithMemoryEx
#114 · 0x28e40
RunDll32ShimW
#115 · 0x28300
RuntimeOSHandle
#116 · 0x29540
RuntimeOpenImage
#117 · 0x29430
RuntimeReleaseHandle
#118 · 0x294c0
StrongNameCompareAssemblies
#119 · 0x37080
StrongNameErrorInfo
#120 · 0x36510
StrongNameFreeBuffer
#121 · 0x365f0
StrongNameGetBlob
#122 · 0x37740
StrongNameGetBlobFromImage
#123 · 0x377e0
StrongNameGetPublicKey
#124 · 0x36910
StrongNameHashSize
#125 · 0x37120
StrongNameKeyDelete
#126 · 0x36890
StrongNameKeyGen
#127 · 0x36670
StrongNameKeyGenEx
#128 · 0x36720
StrongNameKeyInstall
#129 · 0x367f0
StrongNameSignatureGeneration
#130 · 0x369e0
StrongNameSignatureGenerationEx
#131 · 0x36ac0
StrongNameSignatureSize
#132 · 0x371b0
StrongNameSignatureVerification
#133 · 0x36e90
StrongNameSignatureVerificationEx
#134 · 0x36f30
StrongNameSignatureVerificationFromImage
#135 · 0x36fd0
StrongNameTokenFromAssembly
#136 · 0x36bc0
StrongNameTokenFromAssemblyEx
#137 · 0x36c60
StrongNameTokenFromPublicKey
#138 · 0x36d30
TranslateSecurityAttributes
#139 · 0x28ef0
_CorDllMain
#140 · 0x2ac40
_CorExeMain
#141 · 0x81a0
_CorExeMain2
#142 · 0x2b2a0
No function matches your filter.
Imported DLLs & functions 135
KERNEL32.dll
135
ActivateActCtx
0x18006e268
CloseHandle
0x18006e058
CreateActCtxW
0x18006e260
CreateEventW
0x18006e300
CreateFileMappingW
0x18006e148
CreateFileW
0x18006e0e0
CreateMutexW
0x18006e0b8
CreateProcessW
0x18006e2d8
CreateSemaphoreW
0x18006e328
CreateToolhelp32Snapshot
0x18006e168
DeactivateActCtx
0x18006e270
DebugBreak
0x18006e1a8
DeleteCriticalSection
0x18006e0d8
DisableThreadLibraryCalls
0x18006e090
EncodePointer
0x18006e348
EnterCriticalSection
0x18006e0c0
ExitProcess
0x18006e0a0
FindClose
0x18006e198
FindFirstFileExA
0x18006e3d8
FindFirstFileW
0x18006e188
FindNextFileA
0x18006e3e0
FindNextFileW
0x18006e190
FlushFileBuffers
0x18006e120
FlushInstructionCache
0x18006e1d8
FormatMessageW
0x18006e230
FreeEnvironmentStringsW
0x18006e250
FreeLibrary
0x18006e028
GetACP
0x18006e228
GetCommandLineA
0x18006e3f8
GetCommandLineW
0x18006e400
GetConsoleCP
0x18006e3c8
GetConsoleMode
0x18006e3d0
GetCPInfo
0x18006e220
GetCurrentProcess
0x18006e098
GetCurrentProcessId
0x18006e2d0
GetCurrentThread
0x18006e2a8
GetCurrentThreadId
0x18006e108
GetDateFormatW
0x18006e100
GetEnvironmentStringsW
0x18006e258
GetEnvironmentVariableW
0x18006e038
GetFileAttributesExW
0x18006e1e0
GetFileAttributesW
0x18006e118
GetFileSize
0x18006e140
GetFileType
0x18006e3b8
GetFullPathNameW
0x18006e008
GetLastError
0x18006e010
GetLocalTime
0x18006e0f0
GetModuleFileNameA
0x18006e3a8
GetModuleFileNameW
0x18006e048
GetModuleHandleA
0x18006e288
GetModuleHandleExW
0x18006e018
GetModuleHandleW
0x18006e088
GetOEMCP
0x18006e3f0
GetProcAddress
0x18006e020
GetProcessHeap
0x18006e218
GetProcessId
0x18006e1b0
GetStartupInfoW
0x18006e380
GetStdHandle
0x18006e3b0
GetStringTypeW
0x18006e3c0
GetSystemDefaultLangID
0x18006e290
GetSystemDefaultLCID
0x18006e1e8
GetSystemDirectoryW
0x18006e128
GetSystemInfo
0x18006e080
GetSystemTimeAsFileTime
0x18006e298
GetTickCount
0x18006e110
GetTimeFormatW
0x18006e0f8
GetVersionExW
0x18006e1c8
GetWindowsDirectoryW
0x18006e068
HeapAlloc
0x18006e210
HeapCreate
0x18006e1f0
HeapDestroy
0x18006e1f8
HeapFree
0x18006e208
HeapReAlloc
0x18006e428
HeapSize
0x18006e420
HeapValidate
0x18006e2f8
InitializeCriticalSection
0x18006e0d0
InitializeCriticalSectionAndSpinCount
0x18006e158
InitializeSListHead
0x18006e388
InterlockedFlushSList
0x18006e398
IsDBCSLeadByte
0x18006e238
IsDBCSLeadByteEx
0x18006e430
IsDebuggerPresent
0x18006e280
IsProcessorFeaturePresent
0x18006e378
IsValidCodePage
0x18006e3e8
LCMapStringW
0x18006e248
LeaveCriticalSection
0x18006e0c8
LoadLibraryExA
0x18006e1a0
LoadLibraryExW
0x18006e030
LocalFree
0x18006e240
lstrlenW
0x18006e180
MapViewOfFile
0x18006e150
Module32FirstW
0x18006e1b8
Module32NextW
0x18006e1c0
MultiByteToWideChar
0x18006e130
OpenProcess
0x18006e2c8
OutputDebugStringW
0x18006e0a8
QueryPerformanceCounter
0x18006e2a0
RaiseException
0x18006e200
ReadFile
0x18006e178
ReadProcessMemory
0x18006e170
ReleaseActCtx
0x18006e278
ReleaseMutex
0x18006e0b0
ReleaseSemaphore
0x18006e2f0
ResetEvent
0x18006e320
RtlCaptureContext
0x18006e350
RtlLookupFunctionEntry
0x18006e358
RtlPcToFileHeader
0x18006e3a0
RtlUnwindEx
0x18006e390
RtlVirtualUnwind
0x18006e360
SetEnvironmentVariableW
0x18006e060
SetErrorMode
0x18006e040
SetEvent
0x18006e308
SetFilePointerEx
0x18006e410
SetLastError
0x18006e138
SetStdHandle
0x18006e408
SetUnhandledExceptionFilter
0x18006e370
SleepEx
0x18006e330
TerminateProcess
0x18006e2b0
TlsAlloc
0x18006e318
TlsFree
0x18006e340
TlsGetValue
0x18006e338
TlsSetValue
0x18006e2e0
UnhandledExceptionFilter
0x18006e368
UnmapViewOfFile
0x18006e160
VerifyVersionInfoW
0x18006e2c0
VerSetConditionMask
0x18006e2b8
VirtualAlloc
0x18006e078
VirtualFree
0x18006e2e8
VirtualProtect
0x18006e1d0
VirtualQuery
0x18006e070
WaitForSingleObject
0x18006e050
WaitForSingleObjectEx
0x18006e310
WideCharToMultiByte
0x18006e000
WriteConsoleW
0x18006e418
WriteFile
0x18006e0e8
No function matches your filter.