mscorsvc.dll
v4.8.4084.0
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 7
CorCreateNGenProcess
#1 · 0x35250
CorGetNGenPolicy
#2 · 0x354e0
CorGetSvc
#3 · 0x8560
CorInitSvcLogger
#4 · 0x18da0
CorSetCriticalTaskState
#5 · 0x25fd0
CorStopNonCriticalTask
#6 · 0x26490
CorSvcLog
#7 · 0x18e10
No function matches your filter.
Imported DLLs & functions 217
ADVAPI32.dll
25
ConvertSidToStringSidW
0x180053050
ConvertStringSidToSidW
0x180053068
CreateProcessAsUserW
0x180053080
DeregisterEventSource
0x180053088
DuplicateTokenEx
0x180053060
EventWrite
0x1800530a0
FreeSid
0x180053058
GetLengthSid
0x180053078
GetSidSubAuthority
0x1800530c0
GetSidSubAuthorityCount
0x1800530b8
GetTokenInformation
0x180053048
OpenProcessToken
0x180053040
RegCloseKey
0x180053008
RegCreateKeyExW
0x1800530a8
RegDeleteKeyW
0x180053010
RegDeleteValueW
0x180053028
RegEnumKeyExW
0x180053030
RegEnumValueW
0x180053038
RegisterEventSourceW
0x180053090
RegNotifyChangeKeyValue
0x180053000
RegOpenKeyExW
0x1800530b0
RegQueryValueExW
0x180053018
RegSetValueExW
0x180053020
ReportEventW
0x180053098
SetTokenInformation
0x180053070
CreateApplicationContext
0x1800536e8
CreateAssemblyCache
0x1800536f0
CreateAssemblyNameObject
0x1800536f8
InitializeFusion
0x180053700
KERNEL32.dll
113
ActivateActCtx
0x1800532f0
CloseHandle
0x180053398
CreateActCtxW
0x1800532f8
CreateDirectoryW
0x180053120
CreateEventW
0x1800533a0
CreateFileMappingW
0x180053138
CreateFileW
0x180053248
CreateMutexW
0x1800532a0
CreatePipe
0x180053188
CreateProcessW
0x1800531d0
CreateSemaphoreW
0x180053270
CreateThread
0x1800533b0
DeactivateActCtx
0x1800532e8
DebugBreak
0x1800530d0
DeleteCriticalSection
0x180053350
DeleteFileW
0x180053378
EnterCriticalSection
0x180053328
ExitProcess
0x180053160
FileTimeToSystemTime
0x1800533e8
FindClose
0x1800531f0
FindFirstFileW
0x180053390
FindNextFileW
0x1800532d8
FormatMessageW
0x180053430
FreeLibrary
0x180053198
GetACP
0x180053440
GetCommandLineW
0x180053150
GetCPInfo
0x180053448
GetCurrentProcess
0x1800530e0
GetCurrentProcessId
0x180053170
GetCurrentThreadId
0x1800531c0
GetEnvironmentVariableW
0x180053100
GetExitCodeProcess
0x180053158
GetFileAttributesExW
0x180053308
GetFileAttributesW
0x1800533d0
GetFileSize
0x180053130
GetFileSizeEx
0x180053310
GetFullPathNameW
0x1800533c8
GetLastError
0x1800533a8
GetLocalTime
0x1800531b8
GetModuleFileNameW
0x180053200
GetModuleHandleW
0x180053208
GetProcAddress
0x1800533c0
GetProcessAffinityMask
0x180053388
GetProcessHeap
0x180053450
GetSystemDirectoryW
0x180053380
GetSystemInfo
0x180053410
GetSystemPowerStatus
0x1800533b8
GetSystemTime
0x1800533d8
GetSystemTimeAsFileTime
0x180053320
GetSystemWindowsDirectoryW
0x1800531e8
GetTickCount
0x180053340
GetVersionExW
0x1800530e8
GetWindowsDirectoryW
0x1800531e0
GlobalAlloc
0x180053180
GlobalMemoryStatusEx
0x180053110
HeapAlloc
0x1800533f8
HeapCreate
0x1800532d0
HeapDestroy
0x180053278
HeapFree
0x1800533f0
HeapValidate
0x180053290
InitializeCriticalSection
0x180053348
InitializeSListHead
0x180053210
IsDBCSLeadByte
0x180053428
IsDebuggerPresent
0x180053370
IsProcessorFeaturePresent
0x180053218
LCMapStringW
0x180053420
LeaveCriticalSection
0x180053330
LoadLibraryExA
0x1800531f8
LoadLibraryExW
0x180053148
LocalFree
0x1800531a8
MapViewOfFile
0x180053140
MoveFileExW
0x180053300
MultiByteToWideChar
0x180053438
OpenEventW
0x180053168
OpenProcess
0x180053190
OutputDebugStringW
0x1800531c8
QueryPerformanceCounter
0x180053318
RaiseException
0x1800531b0
ReadFile
0x180053178
ReleaseActCtx
0x1800532e0
ReleaseMutex
0x180053298
ReleaseSemaphore
0x1800532b0
ResetEvent
0x180053358
RtlCaptureContext
0x180053240
RtlLookupFunctionEntry
0x180053238
RtlVirtualUnwind
0x180053230
SetConsoleCtrlHandler
0x1800530f0
SetEnvironmentVariableW
0x180053108
SetErrorMode
0x180053118
SetEvent
0x180053338
SetLastError
0x180053128
SetProcessShutdownParameters
0x1800530f8
SetUnhandledExceptionFilter
0x180053220
SleepEx
0x180053268
SystemTimeToFileTime
0x1800533e0
TerminateProcess
0x1800530d8
TlsAlloc
0x180053280
TlsFree
0x180053258
TlsGetValue
0x180053260
TlsSetValue
0x1800532c8
UnhandledExceptionFilter
0x180053228
UnmapViewOfFile
0x1800531a0
VerifyVersionInfoW
0x180053400
VerSetConditionMask
0x180053408
VirtualAlloc
0x1800532a8
VirtualFree
0x1800532b8
VirtualProtect
0x1800532c0
VirtualQuery
0x180053250
WaitForMultipleObjects
0x180053368
WaitForSingleObject
0x180053360
WaitForSingleObjectEx
0x180053288
WideCharToMultiByte
0x180053418
WriteFile
0x1800531d8
CLRCreateInstance
0x1800536c8
CreateConfigStream
0x1800536c0
GetRequestedRuntimeInfo
0x1800536d0
GetXMLObject
0x1800536d8
ole32.dll
10
CoAddRefServerProcess
0x180053620
CoCreateGuid
0x180053610
CoCreateInstance
0x180053600
CoDisconnectObject
0x180053608
CoInitializeEx
0x180053640
CoReleaseServerProcess
0x180053618
CoTaskMemFree
0x180053628
CoUninitialize
0x180053648
CoUnmarshalInterface
0x180053638
CreateStreamOnHGlobal
0x180053630
OLEAUT32.dll
12
SafeArrayCreateVector
0x180053660
SafeArrayDestroy
0x180053678
SafeArrayGetElement
0x180053668
SafeArrayGetUBound
0x180053670
SafeArrayPutElement
0x180053658
SetErrorInfo
0x1800536a0
SysAllocString
0x1800536b0
SysFreeString
0x1800536a8
SysStringLen
0x180053680
VariantChangeType
0x180053688
VariantClear
0x180053690
VariantInit
0x180053698
__acrt_iob_func
0x180053530
__stdio_common_vfwprintf
0x180053520
__stdio_common_vsnprintf_s
0x180053510
__stdio_common_vsnwprintf_s
0x180053518
__stdio_common_vswprintf_s
0x180053550
_cexit
0x1800535b8
_configure_narrow_argv
0x180053588
_crt_atexit
0x1800535b0
_errno
0x1800534f8
_execute_onexit_table
0x1800535a8
_flushall
0x1800534d0
_initialize_narrow_environment
0x180053590
_initialize_onexit_table
0x180053598
_initterm
0x1800534f0
_initterm_e
0x180053578
_putws
0x1800534c8
_register_onexit_function
0x1800535a0
_seh_filter_dll
0x180053580
_wcsicmp
0x180053560
_wcsnicmp
0x180053548
_wtoi
0x180053558
fflush
0x180053528
free
0x1800535c8
iswspace
0x1800534e8
malloc
0x1800534c0
strcpy_s
0x180053508
strncmp
0x180053500
wcscat_s
0x1800534e0
wcscpy_s
0x180053540
wcsncmp
0x1800535c0
wcsncpy_s
0x180053538
wcstok_s
0x1800534d8
wcstol
0x180053568
wcstoul
0x180053570
GetProcessWindowStation
0x1800535d8
GetUserObjectInformationW
0x1800535e8
LoadStringW
0x1800535f0
SystemParametersInfoW
0x1800535e0
__C_specific_handler
0x180053488
__CxxFrameHandler3
0x180053478
__std_type_info_destroy_list
0x180053470
_CxxThrowException
0x180053490
_purecall
0x180053498
memcpy
0x180053460
memmove
0x180053480
memset
0x180053468
wcschr
0x1800534b0
wcsrchr
0x1800534a0
wcsstr
0x1800534a8
No function matches your filter.