KeyboardHook.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory, VirtualAllocEx, CreateRemoteThread
Exported functions 10
GetHookStatus
#1 · 0x4710
GetLastHookError
#2 · 0x4de0
GetWmiLastError
#3 · 0x87c0
InjectIntoRdpClient
#4 · 0x4e00
IsHookActive
#5 · 0x52d0
IsWmiCaptureActive
#6 · 0x87e0
StartKeyboardHook
#7 · 0x5320
StartWmiKeyboardCapture
#8 · 0x87f0
StopKeyboardHook
#9 · 0x6b30
StopWmiKeyboardCapture
#10 · 0x8a80
No function matches your filter.
Imported DLLs & functions 121
_beginthreadex
0x18000b350
_cexit
0x18000b380
_configure_narrow_argv
0x18000b3a8
_crt_atexit
0x18000b388
_execute_onexit_table
0x18000b390
_initialize_narrow_environment
0x18000b3a0
_initialize_onexit_table
0x18000b370
_initterm
0x18000b378
_initterm_e
0x18000b360
_invoke_watson
0x18000b358
_register_onexit_function
0x18000b398
_seh_filter_dll
0x18000b3b0
terminate
0x18000b368
_wcsicmp
0x18000b3e0
strlen
0x18000b3d0
strncpy_s
0x18000b3d8
wcscat_s
0x18000b3c0
wcscpy_s
0x18000b3e8
wcslen
0x18000b3c8
DirectInput8Create
0x18000b000
KERNEL32.dll
50
AcquireSRWLockExclusive
0x18000b190
CloseHandle
0x18000b0b8
ConnectNamedPipe
0x18000b0c8
CopyFileW
0x18000b170
CreateDirectoryW
0x18000b098
CreateNamedPipeW
0x18000b0d8
CreateRemoteThread
0x18000b100
CreateThread
0x18000b0f8
CreateToolhelp32Snapshot
0x18000b178
DisconnectNamedPipe
0x18000b0d0
GetCurrentProcess
0x18000b040
GetCurrentProcessId
0x18000b0f0
GetCurrentThreadId
0x18000b010
GetEnvironmentVariableA
0x18000b090
GetFileAttributesW
0x18000b0a0
GetLastError
0x18000b0c0
GetModuleFileNameW
0x18000b148
GetModuleHandleA
0x18000b150
GetModuleHandleExW
0x18000b160
GetModuleHandleW
0x18000b158
GetProcAddress
0x18000b168
GetSystemTimeAsFileTime
0x18000b028
GetTempPathW
0x18000b0b0
GetTickCount
0x18000b128
InitializeSListHead
0x18000b020
IsDebuggerPresent
0x18000b060
IsProcessorFeaturePresent
0x18000b048
LocalFree
0x18000b018
MultiByteToWideChar
0x18000b198
OpenProcess
0x18000b120
Process32FirstW
0x18000b180
Process32NextW
0x18000b188
ProcessIdToSessionId
0x18000b118
QueryPerformanceCounter
0x18000b030
ReadFile
0x18000b0a8
ReleaseSRWLockExclusive
0x18000b108
RtlCaptureContext
0x18000b078
RtlLookupFunctionEntry
0x18000b070
RtlVirtualUnwind
0x18000b068
SetUnhandledExceptionFilter
0x18000b050
Sleep
0x18000b0e8
SleepConditionVariableSRW
0x18000b080
TerminateProcess
0x18000b038
TerminateThread
0x18000b110
UnhandledExceptionFilter
0x18000b058
VirtualAllocEx
0x18000b130
VirtualFreeEx
0x18000b140
WaitForSingleObject
0x18000b0e0
WakeAllConditionVariable
0x18000b088
WriteProcessMemory
0x18000b138
_Cnd_do_broadcast_at_thread_exit
0x18000b1c0
_Thrd_id
0x18000b1b8
_Thrd_join
0x18000b1b0
?_Throw_Cpp_error@std@@YAXH@Z
0x18000b1c8
?_Xlength_error@std@@YAXPEBD@Z
0x18000b1a8
CoCreateInstance
0x18000b408
CoInitializeEx
0x18000b418
CoInitializeSecurity
0x18000b3f8
CoSetProxyBlanket
0x18000b400
CoUninitialize
0x18000b410
USER32.dll
19
CallNextHookEx
0x18000b260
CreateWindowExA
0x18000b208
DefWindowProcA
0x18000b288
DestroyWindow
0x18000b210
FindWindowA
0x18000b240
GetClassNameA
0x18000b248
GetDesktopWindow
0x18000b280
GetForegroundWindow
0x18000b230
GetKeyboardState
0x18000b218
GetRawInputData
0x18000b268
GetSystemMetrics
0x18000b228
GetWindowRect
0x18000b238
MapVirtualKeyA
0x18000b220
MapVirtualKeyW
0x18000b278
PostQuitMessage
0x18000b1f8
RegisterClassA
0x18000b200
RegisterRawInputDevices
0x18000b270
SetWindowsHookExA
0x18000b250
UnhookWindowsHookEx
0x18000b258
__CxxFrameHandler4
0x18000b308
__C_specific_handler
0x18000b2f0
__current_exception
0x18000b2e0
__current_exception_context
0x18000b2c0
__std_exception_copy
0x18000b2a8
__std_exception_destroy
0x18000b2b0
__std_terminate
0x18000b2f8
__std_type_info_destroy_list
0x18000b2e8
_CxxThrowException
0x18000b2b8
memcpy
0x18000b2c8
memmove
0x18000b2d0
memset
0x18000b2d8
strstr
0x18000b298
wcsrchr
0x18000b2a0
No function matches your filter.