dbgshim.dll
v6.0.2724.6912
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 14
CLRCreateInstance
#1 · 0x3c10
CloseCLREnumeration
#2 · 0x2fa0
CloseResumeHandle
#3 · 0x15a0
CreateDebuggingInterfaceFromVersion
#4 · 0x3a30
CreateDebuggingInterfaceFromVersion2
#5 · 0x3460
CreateDebuggingInterfaceFromVersionEx
#6 · 0x3450
CreateProcessForLaunch
#7 · 0x1470
CreateVersionStringFromModule
#8 · 0x31d0
EnumerateCLRs
#9 · 0x2ce0
GetStartupNotificationEvent
#10 · 0x1e10
RegisterForRuntimeStartup
#11 · 0x1990
RegisterForRuntimeStartupEx
#12 · 0x1b20
ResumeProcess
#13 · 0x1570
UnregisterForRuntimeStartup
#14 · 0x1cb0
No function matches your filter.
Imported DLLs & functions 107
ADVAPI32.dll
11
AddAccessAllowedAce
0x180017048
CopySid
0x180017008
GetLengthSid
0x180017000
GetSidSubAuthority
0x180017020
GetSidSubAuthorityCount
0x180017018
GetTokenInformation
0x180017028
InitializeAcl
0x180017050
InitializeSecurityDescriptor
0x180017040
OpenProcessToken
0x180017030
SetSecurityDescriptorDacl
0x180017038
SetSecurityDescriptorSacl
0x180017010
_cexit
0x180017318
_configure_narrow_argv
0x1800172e8
_crt_atexit
0x180017310
_errno
0x1800172c0
_execute_onexit_table
0x180017308
_initialize_narrow_environment
0x1800172f0
_initialize_onexit_table
0x1800172f8
_initterm
0x1800172d0
_initterm_e
0x1800172d8
_register_onexit_function
0x180017300
_seh_filter_dll
0x1800172e0
abort
0x1800172c8
terminate
0x180017320
__stdio_common_vsnprintf_s
0x180017338
__stdio_common_vsnwprintf_s
0x180017340
__stdio_common_vswprintf_s
0x180017330
__stdio_common_vswscanf
0x180017348
_stricmp
0x180017368
_wcsicmp
0x180017370
strcpy_s
0x180017358
strncmp
0x180017378
wcscpy_s
0x180017360
wcsncmp
0x180017380
wcsncpy_s
0x180017388
KERNEL32.dll
63
CloseHandle
0x1800171c0
CreateEventW
0x1800171d0
CreateFileMappingW
0x1800170c0
CreateFileW
0x1800171b0
CreateProcessW
0x1800170a8
CreateThread
0x180017088
DebugBreak
0x1800170f8
DeleteCriticalSection
0x180017150
DuplicateHandle
0x1800171d8
EncodePointer
0x180017200
EnterCriticalSection
0x180017158
FormatMessageW
0x180017108
FreeLibrary
0x1800170b0
GetCurrentProcess
0x1800171e8
GetCurrentProcessId
0x1800171b8
GetCurrentThreadId
0x1800171a0
GetFileSize
0x180017098
GetFullPathNameW
0x180017130
GetLastError
0x1800171c8
GetProcAddress
0x180017090
GetProcessHeap
0x1800170e8
GetSystemInfo
0x180017168
GetSystemTimeAsFileTime
0x180017140
HeapAlloc
0x1800170d8
HeapFree
0x1800170e0
InitializeCriticalSection
0x180017148
InitializeCriticalSectionAndSpinCount
0x1800171f8
InitializeSListHead
0x180017218
InterlockedFlushSList
0x180017208
IsDebuggerPresent
0x180017178
IsProcessorFeaturePresent
0x180017220
K32EnumProcessModules
0x1800170b8
K32GetModuleFileNameExW
0x1800171a8
LeaveCriticalSection
0x180017160
LoadLibraryExW
0x180017120
LoadLibraryW
0x1800170d0
LocalFree
0x180017110
MapViewOfFile
0x1800170c8
MultiByteToWideChar
0x180017100
OpenEventW
0x180017198
OpenProcess
0x180017068
ProcessIdToSessionId
0x180017070
QueryPerformanceCounter
0x180017138
RaiseException
0x1800170f0
ReadProcessMemory
0x1800170a0
ResumeThread
0x180017128
RtlCaptureContext
0x180017248
RtlLookupFunctionEntry
0x180017240
RtlPcToFileHeader
0x180017250
RtlUnwindEx
0x180017210
RtlVirtualUnwind
0x180017238
SetEvent
0x180017080
SetLastError
0x180017118
SetUnhandledExceptionFilter
0x180017228
Sleep
0x180017078
TerminateProcess
0x180017170
TlsAlloc
0x1800171f0
TlsFree
0x180017180
TlsGetValue
0x180017190
TlsSetValue
0x180017188
UnhandledExceptionFilter
0x180017230
UnmapViewOfFile
0x180017060
WaitForSingleObject
0x1800171e0
CoTaskMemFree
0x180017398
SetErrorInfo
0x180017260
LoadStringW
0x180017270
GetFileVersionInfoExW
0x180017288
GetFileVersionInfoSizeExW
0x180017280
VerQueryValueW
0x180017290
No function matches your filter.