dwmcapDT64.dll
v9.7.17.29215
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread, VirtualAllocEx
Exported functions 5
DwmcapDTGetDesktopBitmap
#1 · 0x3250
DwmcapDTGetSharedHandle
#2 · 0x3140
DwmcapDT_Hook_InjectToDWM
#3 · 0x3930
DwmcapDT_Hook_UndoAll
#4 · 0x3100
GetRpcWindow
#5 · 0x2d7c
No function matches your filter.
Imported DLLs & functions 126
D3D10CreateDevice1
0x53f833f8
dxgi.dll
1
CreateDXGIFactory
0x53f83408
KERNEL32.dll
107
CloseHandle
0x53f83018
CreateDirectoryW
0x53f83138
CreateFileW
0x53f83130
CreateRemoteThread
0x53f83060
CreateThread
0x53f83040
CreateToolhelp32Snapshot
0x53f83030
DecodePointer
0x53f83340
DeleteCriticalSection
0x53f83160
DeleteFileW
0x53f830f8
EncodePointer
0x53f83338
EnterCriticalSection
0x53f830c8
ExitProcess
0x53f83250
FindClose
0x53f830e8
FindFirstFileW
0x53f83100
FindResourceExW
0x53f830b8
FindResourceW
0x53f830b0
FlsAlloc
0x53f83258
FlsFree
0x53f83268
FlsGetValue
0x53f83270
FlsSetValue
0x53f83348
FlushFileBuffers
0x53f832e0
FreeEnvironmentStringsW
0x53f83350
FreeLibraryAndExitThread
0x53f83038
GetACP
0x53f83238
GetCommandLineA
0x53f832b8
GetCommandLineW
0x53f83150
GetConsoleCP
0x53f832f8
GetConsoleMode
0x53f832f0
GetCPInfo
0x53f83240
GetCurrentProcess
0x53f83090
GetCurrentProcessId
0x53f83108
GetCurrentThreadId
0x53f83168
GetEnvironmentStringsW
0x53f83300
GetFileAttributesW
0x53f83148
GetFileType
0x53f83208
GetLastError
0x53f83028
GetModuleFileNameA
0x53f83158
GetModuleFileNameW
0x53f83080
GetModuleHandleW
0x53f83008
GetOEMCP
0x53f83230
GetProcAddress
0x53f83000
GetProcessHeap
0x53f83318
GetProcessTimes
0x53f83128
GetStartupInfoW
0x53f83200
GetStdHandle
0x53f83248
GetStringTypeW
0x53f83220
GetSystemInfo
0x53f831f8
GetSystemTimeAsFileTime
0x53f83120
GetThreadContext
0x53f83180
GetTickCount
0x53f83110
GetVersion
0x53f83278
HeapAlloc
0x53f83198
HeapCreate
0x53f831b8
HeapDestroy
0x53f831b0
HeapFree
0x53f831a0
HeapReAlloc
0x53f83188
HeapSetInformation
0x53f83280
HeapSize
0x53f83310
InitializeCriticalSection
0x53f830c0
InitializeCriticalSectionAndSpinCount
0x53f83308
IsDebuggerPresent
0x53f832a0
IsValidCodePage
0x53f83228
IsWow64Process
0x53f83088
LCMapStringW
0x53f83218
LeaveCriticalSection
0x53f830d0
LoadLibraryW
0x53f832e8
LoadResource
0x53f830a8
LockResource
0x53f830a0
Module32FirstW
0x53f83020
Module32NextW
0x53f83010
MoveFileW
0x53f830f0
MultiByteToWideChar
0x53f83178
OpenProcess
0x53f83078
OpenThread
0x53f831c8
QueryPerformanceCounter
0x53f83118
RaiseException
0x53f832c0
ResumeThread
0x53f831e0
RtlCaptureContext
0x53f83290
RtlLookupFunctionEntry
0x53f83328
RtlPcToFileHeader
0x53f83320
RtlUnwindEx
0x53f83330
RtlVirtualUnwind
0x53f83298
SetFileAttributesW
0x53f83140
SetFilePointer
0x53f830d8
SetHandleCount
0x53f83210
SetLastError
0x53f83260
SetStdHandle
0x53f832c8
SetThreadContext
0x53f83190
SetUnhandledExceptionFilter
0x53f832a8
SizeofResource
0x53f83098
Sleep
0x53f83048
SuspendThread
0x53f831d8
TerminateProcess
0x53f83288
Thread32First
0x53f831a8
Thread32Next
0x53f831c0
UnhandledExceptionFilter
0x53f832b0
VirtualAlloc
0x53f831f0
VirtualAllocEx
0x53f83070
VirtualFree
0x53f831e8
VirtualFreeEx
0x53f83050
VirtualProtect
0x53f831d0
VirtualQuery
0x53f832d8
WaitForSingleObject
0x53f83058
WideCharToMultiByte
0x53f83170
WriteConsoleW
0x53f832d0
WriteFile
0x53f830e0
WriteProcessMemory
0x53f83068
SHGetSpecialFolderPathW
0x53f83360
USER32.dll
16
CreateWindowExW
0x53f83370
DefWindowProcW
0x53f83398
DestroyWindow
0x53f833a8
DispatchMessageW
0x53f83378
FindWindowExW
0x53f833d8
FindWindowW
0x53f833c0
GetDesktopWindow
0x53f833b0
GetMessageW
0x53f83380
GetWindowThreadProcessId
0x53f833c8
IsWindow
0x53f833a0
MessageBoxW
0x53f833b8
PostQuitMessage
0x53f83388
RegisterClassW
0x53f83390
ReplyMessage
0x53f833e8
SendMessageW
0x53f833d0
UnregisterClassW
0x53f833e0
No function matches your filter.