msimg32.dll
v6.3.9600.17415
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported functions 5
AlphaBlend
#1 · 0x10d3
DllInitialize
#2 · 0x130c
GradientFill
#3 · 0x1192
TransparentBlt
#4 · 0x12f6
vSetDdrawflag
#5 · 0x10e9
No function matches your filter.
Imported DLLs & functions 38
KERNEL32.dll
29
CloseHandle
0x1800062a4
DeleteCriticalSection
0x1800062cc
DisableThreadLibraryCalls
0x18000627c
DuplicateHandle
0x180006304
EnterCriticalSection
0x1800062ac
FreeLibrary
0x180006324
GetCurrentProcess
0x1800062f4
GetCurrentThread
0x1800062fc
GetModuleFileNameW
0x18000631c
GetModuleHandleW
0x180006294
GetProcAddress
0x18000633c
GetSystemDirectoryW
0x18000628c
HeapAlloc
0x1800062ec
HeapCreate
0x18000626c
HeapDestroy
0x180006274
HeapFree
0x1800062bc
HeapReAlloc
0x180006344
InitializeCriticalSection
0x1800062dc
LeaveCriticalSection
0x1800062b4
LoadLibraryW
0x18000632c
MultiByteToWideChar
0x18000634c
RegisterWaitForSingleObject
0x18000630c
TlsAlloc
0x1800062d4
TlsFree
0x1800062c4
TlsGetValue
0x1800062e4
TlsSetValue
0x180006314
UnregisterWait
0x18000629c
WideCharToMultiByte
0x180006334
WriteProcessMemory
0x180006284
free
0x18000625c
malloc
0x180006254
memcpy
0x180006234
memmove
0x18000622c
memset
0x18000621c
strcpy
0x180006244
strlen
0x18000623c
wcscmp
0x180006224
wcslen
0x18000624c
No function matches your filter.