mscoreei.dll
v4.8.4180.0
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 126
InitErrors
#17 · 0x28a20
PostError
#18 · 0x28b40
InitSSAutoEnterThread
#19 · 0x28b70
UpdateError
#20 · 0x28bd0
CloseCtrs
#21 · 0x2b750
LoadStringRC
#22 · 0x28c20
ReOpenMetaDataWithMemory
#23 · 0x28db0
#24 · 0xa430
CollectCtrs
#25 · 0x2b6e0
CorDllMainWorker
#26 · 0x2af50
CorDllMainWorkerForThunk
#27 · 0x2b170
EEDllGetClassObjectFromClass
#28 · 0x29200
GetPrivateContextsPerfCounters
#29 · 0x297b0
GetProcessExecutableHeap
#30 · 0x2c80
GetStartupFlags
#31 · 0x10ba0
GetTargetForVTableEntry
#32 · 0x399a0
GetTokenForVTableEntry
#33 · 0x398d0
LogHelp_LogAssert
#34 · 0x29670
LogHelp_NoGuiOnAssert
#35 · 0x296f0
LogHelp_TerminateOnAssert
#36 · 0x29750
OnShimDllMainCalled
#37 · 0x11b0
OpenCtrs
#38 · 0x2b470
PostErrorVA
#39 · 0x28a90
RegisterShimImplCallback
#40 · 0x1f20
SetTargetForVTableEntry
#41 · 0x39940
CLRCreateInstance
#42 · 0xd960
CallFunctionShim
#43 · 0x29940
ClrCreateManagedInstance
#44 · 0x290f0
CoEEShutDownCOM
#45 · 0x29270
CoInitializeCor
#46 · 0x287f0
CoInitializeEE
#47 · 0x286f0
CoUninitializeCor
#48 · 0x28870
CoUninitializeEE
#49 · 0x28770
CorBindToCurrentRuntime
#50 · 0x267d0
CorBindToRuntime
#51 · 0x25ec0
CorBindToRuntimeByCfg
#52 · 0x26410
CorBindToRuntimeByPath
#53 · 0x257f0
CorBindToRuntimeByPathEx
#54 · 0x25b50
CorBindToRuntimeEx
#55 · 0x262a0
CorBindToRuntimeHost
#56 · 0x26650
CorExitProcess
#57 · 0x29910
CorGetSvc
#58 · 0x27a20
CorIsLatestSvc
#59 · 0x27bf0
CorMarkThreadInThreadPool
#60 · 0x1000
CorTickleSvc
#61 · 0x27cc0
CreateConfigStream
#62 · 0x7390
CreateDebuggingInterfaceFromVersion
#63 · 0x2d8a0
CreateInterface
#64 · 0xd960
DllCanUnloadNow
#65 · 0x29a00
DllGetClassObject
#66 · 0x2a400
DllRegisterServer
#67 · 0x2a8c0
DllUnregisterServer
#68 · 0x2a970
EEDllRegisterServer
#69 · 0x29810
EEDllUnregisterServer
#70 · 0x29890
GetAssemblyMDImport
#71 · 0x2aa20
GetCORRequiredVersion
#72 · 0x26ad0
GetCORRootDirectory
#73 · 0x27b10
GetCORSystemDirectory
#74 · 0x27f60
GetCORSystemDirectory_RetAddr
#75 · 0x10a40
GetCORVersion
#76 · 0x109a0
GetCompileInfo
#77 · 0x29210
GetFileVersion
#78 · 0x2d3f0
GetHashFromAssemblyFile
#79 · 0x37260
GetHashFromAssemblyFileW
#80 · 0x37330
GetHashFromBlob
#81 · 0x37670
GetHashFromFile
#82 · 0x37400
GetHashFromFileW
#83 · 0x374d0
GetHashFromHandle
#84 · 0x375a0
GetHostConfigurationFile
#85 · 0x10c10
GetMetaDataInternalInterface
#86 · 0x10d40
GetMetaDataInternalInterfaceFromPublic
#87 · 0x28980
GetMetaDataPublicInterfaceFromInternal
#88 · 0x288e0
GetPermissionRequests
#89 · 0x28fe0
GetRealProcAddress
#90 · 0x27fb0
GetRequestedRuntimeInfo
#91 · 0x270b0
GetRequestedRuntimeVersion
#92 · 0x27470
GetRequestedRuntimeVersionForCLSID
#93 · 0x27720
GetVersionFromProcess
#94 · 0x2e200
GetXMLElement
#95 · 0x47cd0
GetXMLElementAttribute
#96 · 0x47cd0
GetXMLObject
#97 · 0x141e0
IEE
#98 · 0x10e00
LoadLibraryShim
#99 · 0x280e0
LoadLibraryWithPolicyShim
#100 · 0x28030
LoadStringRCEx
#101 · 0x28cd0
LockClrVersion
#102 · 0x23c20
MetaDataGetDispenser
#103 · 0x28650
ND_CopyObjDst
#104 · 0x29650
ND_CopyObjSrc
#105 · 0x29630
ND_RI2
#106 · 0xffa0
ND_RI4
#107 · 0x295e0
ND_RI8
#108 · 0x295f0
ND_RU1
#109 · 0xff90
ND_WI2
#110 · 0x29600
ND_WI4
#111 · 0x29610
ND_WI8
#112 · 0x29620
ND_WU1
#113 · 0xffb0
ReOpenMetaDataWithMemoryEx
#114 · 0x28e50
RunDll32ShimW
#115 · 0x28310
RuntimeOSHandle
#116 · 0x29550
RuntimeOpenImage
#117 · 0x29440
RuntimeReleaseHandle
#118 · 0x294d0
StrongNameCompareAssemblies
#119 · 0x37090
StrongNameErrorInfo
#120 · 0x36520
StrongNameFreeBuffer
#121 · 0x36600
StrongNameGetBlob
#122 · 0x37750
StrongNameGetBlobFromImage
#123 · 0x377f0
StrongNameGetPublicKey
#124 · 0x36920
StrongNameHashSize
#125 · 0x37130
StrongNameKeyDelete
#126 · 0x368a0
StrongNameKeyGen
#127 · 0x36680
StrongNameKeyGenEx
#128 · 0x36730
StrongNameKeyInstall
#129 · 0x36800
StrongNameSignatureGeneration
#130 · 0x369f0
StrongNameSignatureGenerationEx
#131 · 0x36ad0
StrongNameSignatureSize
#132 · 0x371c0
StrongNameSignatureVerification
#133 · 0x36ea0
StrongNameSignatureVerificationEx
#134 · 0x36f40
StrongNameSignatureVerificationFromImage
#135 · 0x36fe0
StrongNameTokenFromAssembly
#136 · 0x36bd0
StrongNameTokenFromAssemblyEx
#137 · 0x36c70
StrongNameTokenFromPublicKey
#138 · 0x36d40
TranslateSecurityAttributes
#139 · 0x28f00
_CorDllMain
#140 · 0x2ac50
_CorExeMain
#141 · 0x8b90
_CorExeMain2
#142 · 0x2b2b0
No function matches your filter.
Imported DLLs & functions 135
KERNEL32.dll
135
ActivateActCtx
0x18006e268
CloseHandle
0x18006e058
CreateActCtxW
0x18006e260
CreateEventW
0x18006e300
CreateFileMappingW
0x18006e148
CreateFileW
0x18006e0e0
CreateMutexW
0x18006e0b8
CreateProcessW
0x18006e2d8
CreateSemaphoreW
0x18006e328
CreateToolhelp32Snapshot
0x18006e168
DeactivateActCtx
0x18006e270
DebugBreak
0x18006e1a8
DeleteCriticalSection
0x18006e0d8
DisableThreadLibraryCalls
0x18006e090
EncodePointer
0x18006e348
EnterCriticalSection
0x18006e0c0
ExitProcess
0x18006e0a0
FindClose
0x18006e198
FindFirstFileExA
0x18006e3d8
FindFirstFileW
0x18006e188
FindNextFileA
0x18006e3e0
FindNextFileW
0x18006e190
FlushFileBuffers
0x18006e120
FlushInstructionCache
0x18006e1d8
FormatMessageW
0x18006e230
FreeEnvironmentStringsW
0x18006e250
FreeLibrary
0x18006e028
GetACP
0x18006e228
GetCommandLineA
0x18006e3f8
GetCommandLineW
0x18006e400
GetConsoleCP
0x18006e3c8
GetConsoleMode
0x18006e3d0
GetCPInfo
0x18006e220
GetCurrentProcess
0x18006e098
GetCurrentProcessId
0x18006e2d0
GetCurrentThread
0x18006e2a8
GetCurrentThreadId
0x18006e108
GetDateFormatW
0x18006e100
GetEnvironmentStringsW
0x18006e258
GetEnvironmentVariableW
0x18006e038
GetFileAttributesExW
0x18006e1e0
GetFileAttributesW
0x18006e118
GetFileSize
0x18006e140
GetFileType
0x18006e3b8
GetFullPathNameW
0x18006e008
GetLastError
0x18006e010
GetLocalTime
0x18006e0f0
GetModuleFileNameA
0x18006e3a8
GetModuleFileNameW
0x18006e048
GetModuleHandleA
0x18006e288
GetModuleHandleExW
0x18006e018
GetModuleHandleW
0x18006e088
GetOEMCP
0x18006e3f0
GetProcAddress
0x18006e020
GetProcessHeap
0x18006e218
GetProcessId
0x18006e1b0
GetStartupInfoW
0x18006e380
GetStdHandle
0x18006e3b0
GetStringTypeW
0x18006e3c0
GetSystemDefaultLangID
0x18006e290
GetSystemDefaultLCID
0x18006e1e8
GetSystemDirectoryW
0x18006e128
GetSystemInfo
0x18006e080
GetSystemTimeAsFileTime
0x18006e298
GetTickCount
0x18006e110
GetTimeFormatW
0x18006e0f8
GetVersionExW
0x18006e1c8
GetWindowsDirectoryW
0x18006e068
HeapAlloc
0x18006e210
HeapCreate
0x18006e1f0
HeapDestroy
0x18006e1f8
HeapFree
0x18006e208
HeapReAlloc
0x18006e428
HeapSize
0x18006e420
HeapValidate
0x18006e2f8
InitializeCriticalSection
0x18006e0d0
InitializeCriticalSectionAndSpinCount
0x18006e158
InitializeSListHead
0x18006e388
InterlockedFlushSList
0x18006e398
IsDBCSLeadByte
0x18006e238
IsDBCSLeadByteEx
0x18006e430
IsDebuggerPresent
0x18006e280
IsProcessorFeaturePresent
0x18006e378
IsValidCodePage
0x18006e3e8
LCMapStringW
0x18006e248
LeaveCriticalSection
0x18006e0c8
LoadLibraryExA
0x18006e1a0
LoadLibraryExW
0x18006e030
LocalFree
0x18006e240
lstrlenW
0x18006e180
MapViewOfFile
0x18006e150
Module32FirstW
0x18006e1b8
Module32NextW
0x18006e1c0
MultiByteToWideChar
0x18006e130
OpenProcess
0x18006e2c8
OutputDebugStringW
0x18006e0a8
QueryPerformanceCounter
0x18006e2a0
RaiseException
0x18006e200
ReadFile
0x18006e178
ReadProcessMemory
0x18006e170
ReleaseActCtx
0x18006e278
ReleaseMutex
0x18006e0b0
ReleaseSemaphore
0x18006e2f0
ResetEvent
0x18006e320
RtlCaptureContext
0x18006e350
RtlLookupFunctionEntry
0x18006e358
RtlPcToFileHeader
0x18006e3a0
RtlUnwindEx
0x18006e390
RtlVirtualUnwind
0x18006e360
SetEnvironmentVariableW
0x18006e060
SetErrorMode
0x18006e040
SetEvent
0x18006e308
SetFilePointerEx
0x18006e410
SetLastError
0x18006e138
SetStdHandle
0x18006e408
SetUnhandledExceptionFilter
0x18006e370
SleepEx
0x18006e330
TerminateProcess
0x18006e2b0
TlsAlloc
0x18006e318
TlsFree
0x18006e340
TlsGetValue
0x18006e338
TlsSetValue
0x18006e2e0
UnhandledExceptionFilter
0x18006e368
UnmapViewOfFile
0x18006e160
VerifyVersionInfoW
0x18006e2c0
VerSetConditionMask
0x18006e2b8
VirtualAlloc
0x18006e078
VirtualFree
0x18006e2e8
VirtualProtect
0x18006e1d0
VirtualQuery
0x18006e070
WaitForSingleObject
0x18006e050
WaitForSingleObjectEx
0x18006e310
WideCharToMultiByte
0x18006e000
WriteConsoleW
0x18006e418
WriteFile
0x18006e0e8
No function matches your filter.