VsGraphicsCapture.dll

Description: Microsoft Visual Studio Graphics Capture

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 64cebdd67ccba99a096dbf0ccb35d109

File Size: 117.5 KB

Uploaded At: Dec. 1, 2025, 8:06 a.m.

Views: 21

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • PixCapture_BeginCommunication_2 (Ordinal: 1, Address: 0x9680)
  • PixCapture_BeginCommunication (Ordinal: 2, Address: 0x95d0)
  • PixCapture_EndCommunication (Ordinal: 3, Address: 0x98d0)
  • PixCapture_ExitProcess (Ordinal: 4, Address: 0x99b0)
  • PixCapture_IsLegacyMachine (Ordinal: 5, Address: 0x9760)
  • PixCapture_RunAction (Ordinal: 6, Address: 0x9860)
  • PixCapture_RunAction_2 (Ordinal: 7, Address: 0x9880)
  • PixCapture_RunAction_3 (Ordinal: 8, Address: 0x98a0)
  • PixCapture_RunExperiment (Ordinal: 9, Address: 0x9770)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll
  • CoCreateInstance (Address: 0x1001c040)
  • CoInitializeEx (Address: 0x1001c030)
  • CoTaskMemAlloc (Address: 0x1001c038)
  • CoTaskMemFree (Address: 0x1001c044)
  • CoTaskMemRealloc (Address: 0x1001c03c)
  • CoUninitialize (Address: 0x1001c034)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1001c050)
  • IsDebuggerPresent (Address: 0x1001c054)
  • OutputDebugStringW (Address: 0x1001c04c)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1001c05c)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1001c064)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1001c074)
  • RaiseException (Address: 0x1001c070)
  • SetLastError (Address: 0x1001c078)
  • SetUnhandledExceptionFilter (Address: 0x1001c06c)
  • UnhandledExceptionFilter (Address: 0x1001c07c)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1001c0a0)
  • DeleteFileW (Address: 0x1001c098)
  • FlushFileBuffers (Address: 0x1001c084)
  • GetFileAttributesW (Address: 0x1001c094)
  • GetFileSize (Address: 0x1001c0ac)
  • GetFileSizeEx (Address: 0x1001c0a8)
  • GetFullPathNameW (Address: 0x1001c090)
  • GetTempFileNameW (Address: 0x1001c09c)
  • ReadFile (Address: 0x1001c08c)
  • SetFilePointerEx (Address: 0x1001c088)
  • WriteFile (Address: 0x1001c0a4)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x1001c0b4)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1001c0bc)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1001c0d0)
  • HeapAlloc (Address: 0x1001c0cc)
  • HeapDestroy (Address: 0x1001c0c4)
  • HeapFree (Address: 0x1001c0d8)
  • HeapReAlloc (Address: 0x1001c0c8)
  • HeapSize (Address: 0x1001c0d4)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalFree (Address: 0x1001c0e0)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x1001c0e8)
api-ms-win-core-io-l1-1-0.dll
  • GetOverlappedResult (Address: 0x1001c0f0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • CreateSemaphoreW (Address: 0x1001c0f8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x1001c110)
  • FreeLibrary (Address: 0x1001c118)
  • GetModuleFileNameA (Address: 0x1001c11c)
  • GetModuleFileNameW (Address: 0x1001c108)
  • GetModuleHandleExW (Address: 0x1001c120)
  • GetModuleHandleW (Address: 0x1001c128)
  • GetProcAddress (Address: 0x1001c124)
  • LoadLibraryExW (Address: 0x1001c100)
  • LoadResource (Address: 0x1001c10c)
  • LockResource (Address: 0x1001c114)
  • SizeofResource (Address: 0x1001c104)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1001c134)
  • GetThreadLocale (Address: 0x1001c138)
  • SetThreadLocale (Address: 0x1001c130)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1001c144)
  • MapViewOfFile (Address: 0x1001c140)
  • UnmapViewOfFile (Address: 0x1001c148)
api-ms-win-core-namedpipe-l1-1-0.dll
  • DisconnectNamedPipe (Address: 0x1001c150)
  • WaitNamedPipeW (Address: 0x1001c154)
api-ms-win-core-processenvironment-l1-1-0.dll
  • GetEnvironmentVariableW (Address: 0x1001c15c)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x1001c17c)
  • CreateThread (Address: 0x1001c170)
  • GetCurrentProcess (Address: 0x1001c168)
  • GetCurrentProcessId (Address: 0x1001c164)
  • GetCurrentThreadId (Address: 0x1001c178)
  • ProcessIdToSessionId (Address: 0x1001c180)
  • ResumeThread (Address: 0x1001c16c)
  • TerminateProcess (Address: 0x1001c174)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1001c18c)
  • OpenProcess (Address: 0x1001c188)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1001c194)
api-ms-win-core-psapi-l1-1-0.dll
  • QueryFullProcessImageNameW (Address: 0x1001c19c)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1001c1b8)
  • RegCreateKeyExW (Address: 0x1001c1a8)
  • RegDeleteValueW (Address: 0x1001c1b0)
  • RegEnumKeyExW (Address: 0x1001c1ac)
  • RegOpenKeyExW (Address: 0x1001c1c0)
  • RegQueryInfoKeyW (Address: 0x1001c1b4)
  • RegQueryValueExW (Address: 0x1001c1bc)
  • RegSetValueExW (Address: 0x1001c1a4)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x1001c1c8)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x1001c1d0)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x1001c1d8)
api-ms-win-core-synch-l1-1-0.dll
  • CreateEventW (Address: 0x1001c1ec)
  • CreateMutexExW (Address: 0x1001c204)
  • CreateSemaphoreExW (Address: 0x1001c1f0)
  • DeleteCriticalSection (Address: 0x1001c1e0)
  • EnterCriticalSection (Address: 0x1001c1f8)
  • InitializeCriticalSection (Address: 0x1001c1e8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1001c1fc)
  • LeaveCriticalSection (Address: 0x1001c200)
  • OpenSemaphoreW (Address: 0x1001c1f4)
  • ReleaseMutex (Address: 0x1001c20c)
  • ReleaseSemaphore (Address: 0x1001c214)
  • SetEvent (Address: 0x1001c218)
  • WaitForMultipleObjectsEx (Address: 0x1001c1e4)
  • WaitForSingleObject (Address: 0x1001c210)
  • WaitForSingleObjectEx (Address: 0x1001c208)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1001c220)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetLocalTime (Address: 0x1001c230)
  • GetSystemDirectoryW (Address: 0x1001c228)
  • GetSystemTimeAsFileTime (Address: 0x1001c22c)
api-ms-win-core-toolhelp-l1-1-0.dll
  • CreateToolhelp32Snapshot (Address: 0x1001c240)
  • Process32FirstW (Address: 0x1001c23c)
  • Process32NextW (Address: 0x1001c238)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x1001c24c)
  • GetFileVersionInfoSizeExW (Address: 0x1001c248)
  • VerQueryValueW (Address: 0x1001c250)
api-ms-win-crt-private-l1-1-0.dll
  • __CxxFrameHandler3 (Address: 0x1001c2dc)
  • __std_type_info_compare (Address: 0x1001c2d8)
  • _CxxThrowException (Address: 0x1001c2a4)
  • _except_handler4_common (Address: 0x1001c2a0)
  • _o___std_exception_copy (Address: 0x1001c2d4)
  • _o___std_exception_destroy (Address: 0x1001c2d0)
  • _o___std_type_info_destroy_list (Address: 0x1001c2cc)
  • _o___stdio_common_vsnprintf_s (Address: 0x1001c2c8)
  • _o___stdio_common_vswprintf (Address: 0x1001c2c4)
  • _o___stdio_common_vswprintf_s (Address: 0x1001c2c0)
  • _o__callnewh (Address: 0x1001c2bc)
  • _o__cexit (Address: 0x1001c2b8)
  • _o__configure_narrow_argv (Address: 0x1001c2b4)
  • _o__crt_atexit (Address: 0x1001c2b0)
  • _o__errno (Address: 0x1001c2ac)
  • _o__execute_onexit_table (Address: 0x1001c2a8)
  • _o__initialize_narrow_environment (Address: 0x1001c258)
  • _o__initialize_onexit_table (Address: 0x1001c25c)
  • _o__invalid_parameter_noinfo (Address: 0x1001c260)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x1001c264)
  • _o__purecall (Address: 0x1001c268)
  • _o__recalloc (Address: 0x1001c26c)
  • _o__register_onexit_function (Address: 0x1001c270)
  • _o__seh_filter_dll (Address: 0x1001c274)
  • _o__wcsnicmp (Address: 0x1001c27c)
  • _o_calloc (Address: 0x1001c280)
  • _o_free (Address: 0x1001c284)
  • _o_malloc (Address: 0x1001c288)
  • _o_terminate (Address: 0x1001c28c)
  • _o_wcscat_s (Address: 0x1001c290)
  • _o_wcscpy_s (Address: 0x1001c294)
  • _o_wcsncpy_s (Address: 0x1001c298)
  • _o_wmemcpy_s (Address: 0x1001c29c)
  • memcpy (Address: 0x1001c2e0)
  • memmove (Address: 0x1001c278)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1001c2ec)
  • _initterm_e (Address: 0x1001c2e8)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1001c2f4)
api-ms-win-security-base-l1-1-0.dll
  • AddAccessAllowedAceEx (Address: 0x1001c314)
  • AddAce (Address: 0x1001c300)
  • CreateWellKnownSid (Address: 0x1001c30c)
  • GetAce (Address: 0x1001c320)
  • GetAclInformation (Address: 0x1001c304)
  • GetFileSecurityW (Address: 0x1001c31c)
  • GetLengthSid (Address: 0x1001c324)
  • InitializeAcl (Address: 0x1001c2fc)
  • MakeAbsoluteSD (Address: 0x1001c308)
  • SetFileSecurityW (Address: 0x1001c310)
  • SetSecurityDescriptorDacl (Address: 0x1001c318)
DXToolsMonitor.dll
  • CreateSerializationController (Address: 0x1001c004)
  • CreateWin8Injector (Address: 0x1001c000)
OLEAUT32.dll
  • SysAllocString (Address: 0x1001c01c)
  • SysAllocStringByteLen (Address: 0x1001c028)
  • SysAllocStringLen (Address: 0x1001c00c)
  • SysFreeString (Address: 0x1001c024)
  • SysStringByteLen (Address: 0x1001c018)
  • VariantClear (Address: 0x1001c014)
  • VariantInit (Address: 0x1001c020)
  • VarUI4FromStr (Address: 0x1001c010)