windowscodecs.dll

Description: Microsoft Windows Codecs Library

Version: 10.0.19041.1706

Architecture: 32-bit

Operating System: Windows NT

SHA256: 24febb21d5c69d72bab89afd6e85e006

File Size: 6.3 MB

Uploaded At: Sept. 5, 2026, 1:37 a.m.

Views: 1

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory, OpenProcess, VirtualAllocEx

Exported Functions

(Ordinal: 2, Address: 0xe880)
(Ordinal: 3, Address: 0xe880)
(Ordinal: 4, Address: 0xe880)
(Ordinal: 5, Address: 0xe880)
(Ordinal: 6, Address: 0xe880)
(Ordinal: 7, Address: 0xe880)
(Ordinal: 8, Address: 0xe880)
(Ordinal: 9, Address: 0xe880)
(Ordinal: 10, Address: 0xe880)
(Ordinal: 11, Address: 0xe880)
(Ordinal: 12, Address: 0xe880)
(Ordinal: 13, Address: 0xe880)
(Ordinal: 14, Address: 0xe880)
(Ordinal: 15, Address: 0xe880)
(Ordinal: 16, Address: 0xe880)
(Ordinal: 17, Address: 0xe880)
(Ordinal: 18, Address: 0xe880)
(Ordinal: 19, Address: 0xe880)
(Ordinal: 20, Address: 0xe880)
(Ordinal: 21, Address: 0xe880)
(Ordinal: 22, Address: 0xe880)
(Ordinal: 23, Address: 0xe880)
(Ordinal: 24, Address: 0xe880)
(Ordinal: 25, Address: 0xe880)
(Ordinal: 26, Address: 0xe880)
(Ordinal: 27, Address: 0xe880)
(Ordinal: 28, Address: 0xe880)
(Ordinal: 29, Address: 0xe880)
(Ordinal: 30, Address: 0xe880)
(Ordinal: 31, Address: 0xe880)
(Ordinal: 32, Address: 0xe880)
(Ordinal: 33, Address: 0xe880)
(Ordinal: 34, Address: 0xe880)
(Ordinal: 35, Address: 0xe880)
(Ordinal: 36, Address: 0xe880)
(Ordinal: 37, Address: 0xe880)
(Ordinal: 38, Address: 0xe880)
(Ordinal: 39, Address: 0xe880)
(Ordinal: 40, Address: 0xe880)
(Ordinal: 41, Address: 0xe880)
(Ordinal: 42, Address: 0xe880)
(Ordinal: 43, Address: 0xe880)
(Ordinal: 44, Address: 0xe880)
(Ordinal: 45, Address: 0xe880)
(Ordinal: 46, Address: 0xe880)
(Ordinal: 47, Address: 0xe880)
(Ordinal: 48, Address: 0xe880)
(Ordinal: 49, Address: 0xe880)
(Ordinal: 50, Address: 0xe880)
(Ordinal: 51, Address: 0xe880)
(Ordinal: 52, Address: 0xe880)
(Ordinal: 53, Address: 0xe880)
(Ordinal: 54, Address: 0xe880)
(Ordinal: 55, Address: 0xe880)
(Ordinal: 56, Address: 0xe880)
(Ordinal: 57, Address: 0xe880)
(Ordinal: 58, Address: 0xe880)
(Ordinal: 59, Address: 0xe880)
(Ordinal: 60, Address: 0xe880)
(Ordinal: 61, Address: 0xe880)
(Ordinal: 62, Address: 0xe880)
(Ordinal: 63, Address: 0xe880)
(Ordinal: 64, Address: 0xe880)
(Ordinal: 65, Address: 0xe880)
(Ordinal: 66, Address: 0xe880)
(Ordinal: 67, Address: 0xe880)
(Ordinal: 68, Address: 0xe880)
(Ordinal: 69, Address: 0xe880)
(Ordinal: 70, Address: 0xe880)
(Ordinal: 71, Address: 0xe880)
(Ordinal: 72, Address: 0xe880)
(Ordinal: 73, Address: 0xe880)
(Ordinal: 74, Address: 0xe880)
(Ordinal: 75, Address: 0xe880)
(Ordinal: 76, Address: 0xe880)
(Ordinal: 77, Address: 0xe880)
(Ordinal: 78, Address: 0xe880)
(Ordinal: 79, Address: 0xe880)
(Ordinal: 80, Address: 0xe880)
(Ordinal: 81, Address: 0xe880)
(Ordinal: 82, Address: 0xe880)
(Ordinal: 83, Address: 0xe880)
(Ordinal: 84, Address: 0xe880)
(Ordinal: 85, Address: 0xe880)
(Ordinal: 86, Address: 0xe880)
(Ordinal: 87, Address: 0xe880)
(Ordinal: 88, Address: 0xe880)
(Ordinal: 89, Address: 0xe880)
(Ordinal: 90, Address: 0xe880)
(Ordinal: 91, Address: 0xe880)
(Ordinal: 92, Address: 0xe880)
(Ordinal: 93, Address: 0xe880)
(Ordinal: 94, Address: 0xe880)
(Ordinal: 95, Address: 0xe880)
(Ordinal: 96, Address: 0xe880)
(Ordinal: 97, Address: 0xe880)
(Ordinal: 98, Address: 0xe880)
(Ordinal: 99, Address: 0xe880)
(Ordinal: 100, Address: 0xe880)
(Ordinal: 101, Address: 0xe880)
(Ordinal: 102, Address: 0xe880)
(Ordinal: 103, Address: 0xe880)
(Ordinal: 104, Address: 0xe880)
(Ordinal: 105, Address: 0xe880)
(Ordinal: 106, Address: 0xe880)
(Ordinal: 107, Address: 0xe880)
(Ordinal: 108, Address: 0xe880)
(Ordinal: 109, Address: 0xe880)
(Ordinal: 110, Address: 0xe880)
(Ordinal: 111, Address: 0xe880)
(Ordinal: 112, Address: 0xe880)
(Ordinal: 113, Address: 0xe880)
(Ordinal: 114, Address: 0xe880)
(Ordinal: 115, Address: 0xe880)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x1007d010)
GetUserNameA (Address: 0x1007d004)
LookupPrivilegeValueW (Address: 0x1007d00c)
OpenProcessToken (Address: 0x1007d000)
RegCloseKey (Address: 0x1007d018)
RegOpenKeyExA (Address: 0x1007d014)
RegQueryValueExA (Address: 0x1007d008)

d3d11.dll

D3D11CreateDeviceAndSwapChain (Address: 0x1007d34c)

D3DCOMPILER_47.dll

D3DCompile (Address: 0x1007d020)

GDI32.dll

BitBlt (Address: 0x1007d028)
CreateCompatibleBitmap (Address: 0x1007d02c)
CreateCompatibleDC (Address: 0x1007d034)
CreateRoundRectRgn (Address: 0x1007d044)
DeleteDC (Address: 0x1007d03c)
DeleteObject (Address: 0x1007d040)
GetDIBits (Address: 0x1007d038)
SelectObject (Address: 0x1007d030)

IMM32.dll

ImmGetContext (Address: 0x1007d058)
ImmReleaseContext (Address: 0x1007d04c)
ImmSetCandidateWindow (Address: 0x1007d054)
ImmSetCompositionWindow (Address: 0x1007d050)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1007d21c)
CloseHandle (Address: 0x1007d140)
CreateFileW (Address: 0x1007d1ec)
CreateProcessW (Address: 0x1007d0fc)
CreateRemoteThread (Address: 0x1007d088)
CreateThread (Address: 0x1007d060)
CreateToolhelp32Snapshot (Address: 0x1007d0e0)
DecodePointer (Address: 0x1007d23c)
DeleteCriticalSection (Address: 0x1007d234)
DeleteFileW (Address: 0x1007d168)
DisableThreadLibraryCalls (Address: 0x1007d1fc)
EncodePointer (Address: 0x1007d238)
EnterCriticalSection (Address: 0x1007d228)
EnumSystemLocalesW (Address: 0x1007d130)
ExitProcess (Address: 0x1007d0f8)
ExitThread (Address: 0x1007d164)
FindClose (Address: 0x1007d1bc)
FindFirstFileExW (Address: 0x1007d1c0)
FindNextFileW (Address: 0x1007d1c4)
FindResourceW (Address: 0x1007d0f4)
FlsAlloc (Address: 0x1007d154)
FlsFree (Address: 0x1007d148)
FlsGetValue (Address: 0x1007d150)
FlsSetValue (Address: 0x1007d14c)
FlushFileBuffers (Address: 0x1007d20c)
FreeEnvironmentStringsW (Address: 0x1007d1e0)
FreeLibrary (Address: 0x1007d100)
FreeLibraryAndExitThread (Address: 0x1007d160)
GetACP (Address: 0x1007d1cc)
GetCommandLineA (Address: 0x1007d1d4)
GetCommandLineW (Address: 0x1007d1d8)
GetComputerNameA (Address: 0x1007d0bc)
GetConsoleMode (Address: 0x1007d120)
GetConsoleOutputCP (Address: 0x1007d200)
GetCPInfo (Address: 0x1007d1b4)
GetCurrentProcess (Address: 0x1007d0c8)
GetCurrentProcessId (Address: 0x1007d0b4)
GetCurrentThreadId (Address: 0x1007d224)
GetEnvironmentStringsW (Address: 0x1007d1dc)
GetEnvironmentVariableA (Address: 0x1007d098)
GetExitCodeProcess (Address: 0x1007d094)
GetFileSizeEx (Address: 0x1007d204)
GetFileType (Address: 0x1007d128)
GetLastError (Address: 0x1007d074)
GetLocaleInfoW (Address: 0x1007d13c)
GetLocalTime (Address: 0x1007d0ac)
GetModuleFileNameW (Address: 0x1007d0d4)
GetModuleHandleA (Address: 0x1007d0a0)
GetModuleHandleExW (Address: 0x1007d0cc)
GetModuleHandleW (Address: 0x1007d068)
GetOEMCP (Address: 0x1007d1d0)
GetProcAddress (Address: 0x1007d064)
GetProcessHeap (Address: 0x1007d1e4)
GetStartupInfoW (Address: 0x1007d1a0)
GetStdHandle (Address: 0x1007d12c)
GetStringTypeW (Address: 0x1007d1f8)
GetSystemTimeAsFileTime (Address: 0x1007d24c)
GetTempPathW (Address: 0x1007d0d8)
GetTickCount (Address: 0x1007d090)
GetUserDefaultLCID (Address: 0x1007d134)
GetVolumeInformationA (Address: 0x1007d09c)
GlobalAlloc (Address: 0x1007d108)
GlobalFree (Address: 0x1007d10c)
GlobalLock (Address: 0x1007d0b0)
GlobalSize (Address: 0x1007d0a8)
GlobalUnlock (Address: 0x1007d0b8)
HeapAlloc (Address: 0x1007d15c)
HeapFree (Address: 0x1007d158)
HeapReAlloc (Address: 0x1007d1b8)
HeapSize (Address: 0x1007d1f0)
InitializeCriticalSectionAndSpinCount (Address: 0x1007d184)
InitializeCriticalSectionEx (Address: 0x1007d230)
InitializeSListHead (Address: 0x1007d19c)
InterlockedFlushSList (Address: 0x1007d18c)
IsDebuggerPresent (Address: 0x1007d1ac)
IsProcessorFeaturePresent (Address: 0x1007d1b0)
IsValidCodePage (Address: 0x1007d1c8)
IsValidLocale (Address: 0x1007d138)
IsWow64Process (Address: 0x1007d104)
LCMapStringEx (Address: 0x1007d240)
LCMapStringW (Address: 0x1007d208)
LeaveCriticalSection (Address: 0x1007d22c)
LoadLibraryA (Address: 0x1007d078)
LoadLibraryExW (Address: 0x1007d170)
LoadResource (Address: 0x1007d0f0)
LockResource (Address: 0x1007d0e8)
MultiByteToWideChar (Address: 0x1007d0a4)
OpenProcess (Address: 0x1007d0dc)
Process32FirstW (Address: 0x1007d0ec)
Process32NextW (Address: 0x1007d0e4)
QueryPerformanceCounter (Address: 0x1007d118)
QueryPerformanceFrequency (Address: 0x1007d114)
RaiseException (Address: 0x1007d190)
ReadConsoleW (Address: 0x1007d214)
ReadFile (Address: 0x1007d16c)
ReadProcessMemory (Address: 0x1007d084)
ReleaseSRWLockExclusive (Address: 0x1007d218)
RtlUnwind (Address: 0x1007d194)
SetEndOfFile (Address: 0x1007d1f4)
SetFilePointerEx (Address: 0x1007d124)
SetLastError (Address: 0x1007d188)
SetStdHandle (Address: 0x1007d1e8)
SetUnhandledExceptionFilter (Address: 0x1007d1a4)
SizeofResource (Address: 0x1007d0c0)
Sleep (Address: 0x1007d070)
SleepConditionVariableSRW (Address: 0x1007d248)
TerminateProcess (Address: 0x1007d198)
TlsAlloc (Address: 0x1007d180)
TlsFree (Address: 0x1007d174)
TlsGetValue (Address: 0x1007d17c)
TlsSetValue (Address: 0x1007d178)
TryAcquireSRWLockExclusive (Address: 0x1007d220)
UnhandledExceptionFilter (Address: 0x1007d1a8)
VirtualAlloc (Address: 0x1007d0d0)
VirtualAllocEx (Address: 0x1007d080)
VirtualFree (Address: 0x1007d0c4)
VirtualFreeEx (Address: 0x1007d08c)
VirtualProtect (Address: 0x1007d144)
VirtualProtectEx (Address: 0x1007d07c)
WakeAllConditionVariable (Address: 0x1007d244)
WideCharToMultiByte (Address: 0x1007d110)
WriteConsoleW (Address: 0x1007d210)
WriteFile (Address: 0x1007d11c)
WriteProcessMemory (Address: 0x1007d06c)

ole32.dll

CoCreateInstance (Address: 0x1007d364)
CoInitializeEx (Address: 0x1007d360)
CoUninitialize (Address: 0x1007d358)
CreateStreamOnHGlobal (Address: 0x1007d354)
GetHGlobalFromStream (Address: 0x1007d35c)

OLEAUT32.dll

VariantClear (Address: 0x1007d254)
VariantInit (Address: 0x1007d258)

SHELL32.dll

ShellExecuteA (Address: 0x1007d260)

USER32.dll

ClientToScreen (Address: 0x1007d278)
CloseClipboard (Address: 0x1007d29c)
CreateWindowExW (Address: 0x1007d2d4)
DefWindowProcW (Address: 0x1007d2c4)
DestroyWindow (Address: 0x1007d2cc)
DispatchMessageW (Address: 0x1007d2e8)
EmptyClipboard (Address: 0x1007d2a0)
EnumDisplayMonitors (Address: 0x1007d2bc)
EnumWindows (Address: 0x1007d2f0)
GetCapture (Address: 0x1007d274)
GetClassNameW (Address: 0x1007d300)
GetClientRect (Address: 0x1007d304)
GetClipboardData (Address: 0x1007d2a4)
GetCursorPos (Address: 0x1007d2b4)
GetDC (Address: 0x1007d2b8)
GetForegroundWindow (Address: 0x1007d280)
GetKeyState (Address: 0x1007d268)
GetMessageExtraInfo (Address: 0x1007d26c)
GetSystemMetrics (Address: 0x1007d2d8)
GetWindowRect (Address: 0x1007d2c8)
GetWindowTextW (Address: 0x1007d314)
IsWindowUnicode (Address: 0x1007d28c)
LoadCursorW (Address: 0x1007d2fc)
LoadIconW (Address: 0x1007d2f8)
OpenClipboard (Address: 0x1007d298)
PeekMessageW (Address: 0x1007d2ec)
PostQuitMessage (Address: 0x1007d308)
RegisterClassExW (Address: 0x1007d2e0)
ReleaseCapture (Address: 0x1007d290)
ReleaseDC (Address: 0x1007d2c0)
ScreenToClient (Address: 0x1007d270)
SetCapture (Address: 0x1007d284)
SetClipboardData (Address: 0x1007d2a8)
SetCursor (Address: 0x1007d288)
SetCursorPos (Address: 0x1007d294)
SetProcessDPIAware (Address: 0x1007d30c)
SetWindowPos (Address: 0x1007d2ac)
SetWindowRgn (Address: 0x1007d2d0)
ShowWindow (Address: 0x1007d2e4)
TrackMouseEvent (Address: 0x1007d27c)
TranslateMessage (Address: 0x1007d2f4)
UnregisterClassW (Address: 0x1007d2dc)
UpdateWindow (Address: 0x1007d310)
wsprintfA (Address: 0x1007d2b0)

WINHTTP.dll

WinHttpAddRequestHeaders (Address: 0x1007d330)
WinHttpCloseHandle (Address: 0x1007d328)
WinHttpConnect (Address: 0x1007d31c)
WinHttpOpen (Address: 0x1007d334)
WinHttpOpenRequest (Address: 0x1007d32c)
WinHttpQueryDataAvailable (Address: 0x1007d340)
WinHttpQueryHeaders (Address: 0x1007d338)
WinHttpReadData (Address: 0x1007d33c)
WinHttpReceiveResponse (Address: 0x1007d344)
WinHttpSendRequest (Address: 0x1007d324)
WinHttpSetTimeouts (Address: 0x1007d320)