3dmloader.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 1d5ca2f61e73ca802ae8429aef04f69d

File Size: 20.0 KB

Uploaded At: Aug. 23, 2026, 8:29 a.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported Functions

DllMain (Ordinal: 1, Address: 0x1c20)
HookLibrary (Ordinal: 2, Address: 0x1000)
Inject (Ordinal: 3, Address: 0x1970)
StartProcess (Ordinal: 4, Address: 0x1930)
UnhookLibrary (Ordinal: 5, Address: 0x18e0)
WaitForInjection (Ordinal: 6, Address: 0x10c0)

Imported DLLs & Functions

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x180004c38)
free (Address: 0x180004c40)
malloc (Address: 0x180004c48)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x180004c58)
_configure_narrow_argv (Address: 0x180004c60)
_crt_atexit (Address: 0x180004c68)
_execute_onexit_table (Address: 0x180004c70)
_initialize_narrow_environment (Address: 0x180004c78)
_initialize_onexit_table (Address: 0x180004c80)
_initterm (Address: 0x180004c88)
_initterm_e (Address: 0x180004c90)
_register_onexit_function (Address: 0x180004c98)
_seh_filter_dll (Address: 0x180004ca0)

api-ms-win-crt-stdio-l1-1-0.dll

__acrt_iob_func (Address: 0x180004c00)
__stdio_common_vfprintf (Address: 0x180004c08)

api-ms-win-crt-string-l1-1-0.dll

_wcsicmp (Address: 0x180004c18)
wcscpy_s (Address: 0x180004c20)
wcslen (Address: 0x180004c28)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x180004a38)
CloseHandle (Address: 0x180004a40)
CreateMutexA (Address: 0x180004a48)
CreateRemoteThreadEx (Address: 0x180004a50)
CreateToolhelp32Snapshot (Address: 0x180004a58)
FreeLibrary (Address: 0x180004a60)
GetCurrentProcess (Address: 0x180004a68)
GetCurrentProcessId (Address: 0x180004a70)
GetCurrentThreadId (Address: 0x180004a78)
GetExitCodeThread (Address: 0x180004a80)
GetFileAttributesW (Address: 0x180004a88)
GetLastError (Address: 0x180004a90)
GetModuleHandleW (Address: 0x180004a98)
GetProcAddress (Address: 0x180004aa0)
GetSystemTimeAsFileTime (Address: 0x180004aa8)
InitializeSListHead (Address: 0x180004ab0)
IsDebuggerPresent (Address: 0x180004ab8)
IsProcessorFeaturePresent (Address: 0x180004ac0)
LoadLibraryExW (Address: 0x180004ac8)
Module32FirstW (Address: 0x180004ad0)
Module32NextW (Address: 0x180004ad8)
OpenProcess (Address: 0x180004ae0)
Process32FirstW (Address: 0x180004ae8)
Process32NextW (Address: 0x180004af0)
QueryPerformanceCounter (Address: 0x180004af8)
ReleaseSRWLockExclusive (Address: 0x180004b00)
RtlCaptureContext (Address: 0x180004b08)
RtlLookupFunctionEntry (Address: 0x180004b10)
RtlVirtualUnwind (Address: 0x180004b18)
SetUnhandledExceptionFilter (Address: 0x180004b20)
Sleep (Address: 0x180004b28)
SleepConditionVariableSRW (Address: 0x180004b30)
TerminateProcess (Address: 0x180004b38)
UnhandledExceptionFilter (Address: 0x180004b40)
VirtualAllocEx (Address: 0x180004b48)
VirtualFreeEx (Address: 0x180004b50)
WaitForSingleObject (Address: 0x180004b58)
WakeAllConditionVariable (Address: 0x180004b60)
WriteProcessMemory (Address: 0x180004b68)

MSVCP140.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180004ba0)

SHELL32.dll

ShellExecuteW (Address: 0x180004b90)

USER32.dll

SetWindowsHookExW (Address: 0x180004b78)
UnhookWindowsHookEx (Address: 0x180004b80)

VCRUNTIME140.dll

__C_specific_handler (Address: 0x180004bb8)
__CxxFrameHandler3 (Address: 0x180004bc0)
__std_exception_copy (Address: 0x180004bc8)
__std_exception_destroy (Address: 0x180004bd0)
__std_type_info_destroy_list (Address: 0x180004bd8)
_CxxThrowException (Address: 0x180004bb0)
memcpy (Address: 0x180004be0)
memset (Address: 0x180004be8)
wcsrchr (Address: 0x180004bf0)