MSVCR100.dll
Description: Microsoft C Runtime Library [File deleted after analysis due to size limit > 20MB]
Authors: Microsoft Corporation
Version: 10.0.19348.1
Architecture: 32-bit
Operating System: Windows NT
SHA256: cbba5f4f727e7d279e40d93be5741c85
File Size: 22.0 MB
Uploaded At: Aug. 20, 2026, 10:08 a.m.
Views: 15
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- ?terminate@@YAXXZ (Ordinal: 1, Address: 0x1000)
- _XcptFilter (Ordinal: 2, Address: 0x1010)
- __dllonexit (Ordinal: 3, Address: 0x1020)
- __getmainargs (Ordinal: 4, Address: 0x1030)
- __set_app_type (Ordinal: 5, Address: 0x1060)
- __setusermatherr (Ordinal: 6, Address: 0x1070)
- _acmdln (Ordinal: 7, Address: 0x7000)
- _amsg_exit (Ordinal: 8, Address: 0x1080)
- _cexit (Ordinal: 9, Address: 0x1090)
- _commode (Ordinal: 10, Address: 0x706c)
- _configthreadlocale (Ordinal: 11, Address: 0x10a0)
- _controlfp_s (Ordinal: 12, Address: 0x10b0)
- _crt_debugger_hook (Ordinal: 13, Address: 0x10d0)
- _except_handler4_common (Ordinal: 14, Address: 0x10e0)
- _exit (Ordinal: 15, Address: 0x10f0)
- _fmode (Ordinal: 16, Address: 0x7070)
- _initterm (Ordinal: 17, Address: 0x1100)
- _initterm_e (Ordinal: 18, Address: 0x1130)
- _invoke_watson (Ordinal: 19, Address: 0x1170)
- _ismbblead (Ordinal: 20, Address: 0x1180)
- _lock (Ordinal: 21, Address: 0x1190)
- _onexit (Ordinal: 22, Address: 0x11a0)
- _unlock (Ordinal: 23, Address: 0x11b0)
- exit (Ordinal: 24, Address: 0x11c0)
- wcsncat_s (Ordinal: 25, Address: 0x11d0)
Imported DLLs & Functions
api-ms-win-crt-environment-l1-1-0.dll
- __p__environ (Address: 0x10005b7c)
- __p__wenviron (Address: 0x10005b80)
api-ms-win-crt-heap-l1-1-0.dll
- _set_new_mode (Address: 0x10005b88)
- calloc (Address: 0x10005b8c)
- free (Address: 0x10005b90)
api-ms-win-crt-runtime-l1-1-0.dll
- __p___argc (Address: 0x10005b28)
- __p___argv (Address: 0x10005b2c)
- __p___wargv (Address: 0x10005b30)
- _configure_narrow_argv (Address: 0x10005b34)
- _configure_wide_argv (Address: 0x10005b38)
- _crt_at_quick_exit (Address: 0x10005b3c)
- _crt_atexit (Address: 0x10005b40)
- _execute_onexit_table (Address: 0x10005b44)
- _exit (Address: 0x10005b48)
- _initialize_narrow_environment (Address: 0x10005b4c)
- _initialize_onexit_table (Address: 0x10005b50)
- _initialize_wide_environment (Address: 0x10005b54)
- _initterm (Address: 0x10005b58)
- _register_onexit_function (Address: 0x10005b5c)
- abort (Address: 0x10005b60)
api-ms-win-crt-stdio-l1-1-0.dll
- __acrt_iob_func (Address: 0x10005b68)
- __stdio_common_vfprintf (Address: 0x10005b6c)
- __stdio_common_vfwprintf (Address: 0x10005b70)
- fwrite (Address: 0x10005b74)
api-ms-win-crt-string-l1-1-0.dll
- strlen (Address: 0x10005bac)
- strncmp (Address: 0x10005bb0)
api-ms-win-crt-time-l1-1-0.dll
- __daylight (Address: 0x10005b98)
- __timezone (Address: 0x10005b9c)
- __tzname (Address: 0x10005ba0)
- _tzset (Address: 0x10005ba4)
KERNEL32.dll
- AddVectoredExceptionHandler (Address: 0x10005a90)
- CloseHandle (Address: 0x10005a94)
- CreateThread (Address: 0x10005a98)
- CreateToolhelp32Snapshot (Address: 0x10005a9c)
- DeleteCriticalSection (Address: 0x10005aa0)
- DisableThreadLibraryCalls (Address: 0x10005aa4)
- EnterCriticalSection (Address: 0x10005aa8)
- ExitProcess (Address: 0x10005aac)
- ExpandEnvironmentStringsA (Address: 0x10005ab0)
- GetCurrentThreadId (Address: 0x10005ab4)
- GetLastError (Address: 0x10005ab8)
- GetModuleFileNameA (Address: 0x10005abc)
- GetModuleHandleA (Address: 0x10005ac0)
- GetProcAddress (Address: 0x10005ac4)
- GetProcessHeap (Address: 0x10005ac8)
- HeapAlloc (Address: 0x10005acc)
- HeapFree (Address: 0x10005ad0)
- InitializeCriticalSection (Address: 0x10005ad4)
- LeaveCriticalSection (Address: 0x10005ad8)
- lstrcmpiA (Address: 0x10005b10)
- lstrcpyA (Address: 0x10005b14)
- lstrlenW (Address: 0x10005b18)
- OpenProcess (Address: 0x10005adc)
- OpenThread (Address: 0x10005ae0)
- Process32First (Address: 0x10005ae4)
- Process32Next (Address: 0x10005ae8)
- ReadFile (Address: 0x10005aec)
- SetEnvironmentVariableA (Address: 0x10005af0)
- SetFilePointer (Address: 0x10005af4)
- Sleep (Address: 0x10005af8)
- SuspendThread (Address: 0x10005afc)
- TlsGetValue (Address: 0x10005b00)
- VirtualProtect (Address: 0x10005b04)
- VirtualQuery (Address: 0x10005b08)
- WriteFile (Address: 0x10005b0c)
USER32.dll
- wsprintfA (Address: 0x10005b20)