dwmcapDT64.dll

Description: 腾讯QQ

Version: 9.7.17.29215

Architecture: 64-bit

Operating System: Windows NT

SHA256: e82553b93cf4ef8f8e0c9ce71c83b06f

File Size: 123.4 KB

Uploaded At: Dec. 2, 2025, 2:46 p.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread, VirtualAllocEx

Exported Functions

DwmcapDTGetDesktopBitmap (Ordinal: 1, Address: 0x3250)
DwmcapDTGetSharedHandle (Ordinal: 2, Address: 0x3140)
DwmcapDT_Hook_InjectToDWM (Ordinal: 3, Address: 0x3930)
DwmcapDT_Hook_UndoAll (Ordinal: 4, Address: 0x3100)
GetRpcWindow (Ordinal: 5, Address: 0x2d7c)

Imported DLLs & Functions

d3d10_1.dll

D3D10CreateDevice1 (Address: 0x53f833f8)

dxgi.dll

CreateDXGIFactory (Address: 0x53f83408)

KERNEL32.dll

CloseHandle (Address: 0x53f83018)
CreateDirectoryW (Address: 0x53f83138)
CreateFileW (Address: 0x53f83130)
CreateRemoteThread (Address: 0x53f83060)
CreateThread (Address: 0x53f83040)
CreateToolhelp32Snapshot (Address: 0x53f83030)
DecodePointer (Address: 0x53f83340)
DeleteCriticalSection (Address: 0x53f83160)
DeleteFileW (Address: 0x53f830f8)
EncodePointer (Address: 0x53f83338)
EnterCriticalSection (Address: 0x53f830c8)
ExitProcess (Address: 0x53f83250)
FindClose (Address: 0x53f830e8)
FindFirstFileW (Address: 0x53f83100)
FindResourceExW (Address: 0x53f830b8)
FindResourceW (Address: 0x53f830b0)
FlsAlloc (Address: 0x53f83258)
FlsFree (Address: 0x53f83268)
FlsGetValue (Address: 0x53f83270)
FlsSetValue (Address: 0x53f83348)
FlushFileBuffers (Address: 0x53f832e0)
FreeEnvironmentStringsW (Address: 0x53f83350)
FreeLibraryAndExitThread (Address: 0x53f83038)
GetACP (Address: 0x53f83238)
GetCommandLineA (Address: 0x53f832b8)
GetCommandLineW (Address: 0x53f83150)
GetConsoleCP (Address: 0x53f832f8)
GetConsoleMode (Address: 0x53f832f0)
GetCPInfo (Address: 0x53f83240)
GetCurrentProcess (Address: 0x53f83090)
GetCurrentProcessId (Address: 0x53f83108)
GetCurrentThreadId (Address: 0x53f83168)
GetEnvironmentStringsW (Address: 0x53f83300)
GetFileAttributesW (Address: 0x53f83148)
GetFileType (Address: 0x53f83208)
GetLastError (Address: 0x53f83028)
GetModuleFileNameA (Address: 0x53f83158)
GetModuleFileNameW (Address: 0x53f83080)
GetModuleHandleW (Address: 0x53f83008)
GetOEMCP (Address: 0x53f83230)
GetProcAddress (Address: 0x53f83000)
GetProcessHeap (Address: 0x53f83318)
GetProcessTimes (Address: 0x53f83128)
GetStartupInfoW (Address: 0x53f83200)
GetStdHandle (Address: 0x53f83248)
GetStringTypeW (Address: 0x53f83220)
GetSystemInfo (Address: 0x53f831f8)
GetSystemTimeAsFileTime (Address: 0x53f83120)
GetThreadContext (Address: 0x53f83180)
GetTickCount (Address: 0x53f83110)
GetVersion (Address: 0x53f83278)
HeapAlloc (Address: 0x53f83198)
HeapCreate (Address: 0x53f831b8)
HeapDestroy (Address: 0x53f831b0)
HeapFree (Address: 0x53f831a0)
HeapReAlloc (Address: 0x53f83188)
HeapSetInformation (Address: 0x53f83280)
HeapSize (Address: 0x53f83310)
InitializeCriticalSection (Address: 0x53f830c0)
InitializeCriticalSectionAndSpinCount (Address: 0x53f83308)
IsDebuggerPresent (Address: 0x53f832a0)
IsValidCodePage (Address: 0x53f83228)
IsWow64Process (Address: 0x53f83088)
LCMapStringW (Address: 0x53f83218)
LeaveCriticalSection (Address: 0x53f830d0)
LoadLibraryW (Address: 0x53f832e8)
LoadResource (Address: 0x53f830a8)
LockResource (Address: 0x53f830a0)
Module32FirstW (Address: 0x53f83020)
Module32NextW (Address: 0x53f83010)
MoveFileW (Address: 0x53f830f0)
MultiByteToWideChar (Address: 0x53f83178)
OpenProcess (Address: 0x53f83078)
OpenThread (Address: 0x53f831c8)
QueryPerformanceCounter (Address: 0x53f83118)
RaiseException (Address: 0x53f832c0)
ResumeThread (Address: 0x53f831e0)
RtlCaptureContext (Address: 0x53f83290)
RtlLookupFunctionEntry (Address: 0x53f83328)
RtlPcToFileHeader (Address: 0x53f83320)
RtlUnwindEx (Address: 0x53f83330)
RtlVirtualUnwind (Address: 0x53f83298)
SetFileAttributesW (Address: 0x53f83140)
SetFilePointer (Address: 0x53f830d8)
SetHandleCount (Address: 0x53f83210)
SetLastError (Address: 0x53f83260)
SetStdHandle (Address: 0x53f832c8)
SetThreadContext (Address: 0x53f83190)
SetUnhandledExceptionFilter (Address: 0x53f832a8)
SizeofResource (Address: 0x53f83098)
Sleep (Address: 0x53f83048)
SuspendThread (Address: 0x53f831d8)
TerminateProcess (Address: 0x53f83288)
Thread32First (Address: 0x53f831a8)
Thread32Next (Address: 0x53f831c0)
UnhandledExceptionFilter (Address: 0x53f832b0)
VirtualAlloc (Address: 0x53f831f0)
VirtualAllocEx (Address: 0x53f83070)
VirtualFree (Address: 0x53f831e8)
VirtualFreeEx (Address: 0x53f83050)
VirtualProtect (Address: 0x53f831d0)
VirtualQuery (Address: 0x53f832d8)
WaitForSingleObject (Address: 0x53f83058)
WideCharToMultiByte (Address: 0x53f83170)
WriteConsoleW (Address: 0x53f832d0)
WriteFile (Address: 0x53f830e0)
WriteProcessMemory (Address: 0x53f83068)

SHELL32.dll

SHGetSpecialFolderPathW (Address: 0x53f83360)

USER32.dll

CreateWindowExW (Address: 0x53f83370)
DefWindowProcW (Address: 0x53f83398)
DestroyWindow (Address: 0x53f833a8)
DispatchMessageW (Address: 0x53f83378)
FindWindowExW (Address: 0x53f833d8)
FindWindowW (Address: 0x53f833c0)
GetDesktopWindow (Address: 0x53f833b0)
GetMessageW (Address: 0x53f83380)
GetWindowThreadProcessId (Address: 0x53f833c8)
IsWindow (Address: 0x53f833a0)
MessageBoxW (Address: 0x53f833b8)
PostQuitMessage (Address: 0x53f83388)
RegisterClassW (Address: 0x53f83390)
ReplyMessage (Address: 0x53f833e8)
SendMessageW (Address: 0x53f833d0)
UnregisterClassW (Address: 0x53f833e0)