AcGenral.dll
v6.3.9600.19388
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, VirtualAllocEx
Exported functions 2
GetHookAPIs
#1 · 0x56a0
NotifyShims
#2 · 0x4bf0
No function matches your filter.
Imported DLLs & functions 521
ADVAPI32.dll
14
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x790b2818
ConvertStringSidToSidW
0x790b283c
GetExplicitEntriesFromAclW
0x790b2840
GetNamedSecurityInfoW
0x790b2814
LookupAccountSidW
0x790b2828
LookupPrivilegeValueW
0x790b2820
LsaAddAccountRights
0x790b2834
LsaClose
0x790b2838
LsaNtStatusToWinError
0x790b2830
LsaOpenPolicy
0x790b282c
OpenProcessToken
0x790b2824
QueryServiceStatus
0x790b2810
SetEntriesInAclW
0x790b2844
SetNamedSecurityInfoW
0x790b281c
RegCloseKey
0x790b21f0
RegCreateKeyExW
0x790b21fc
RegDeleteKeyExW
0x790b220c
RegDeleteValueW
0x790b2210
RegEnumKeyExW
0x790b2228
RegEnumValueW
0x790b2204
RegGetKeySecurity
0x790b21f4
RegGetValueW
0x790b2208
RegLoadKeyW
0x790b2218
RegOpenKeyExA
0x790b2214
RegOpenKeyExW
0x790b21ec
RegQueryInfoKeyW
0x790b2200
RegQueryValueExA
0x790b21e4
RegQueryValueExW
0x790b21e8
RegSetKeySecurity
0x790b21f8
RegSetValueExA
0x790b2220
RegSetValueExW
0x790b2224
RegUnLoadKeyW
0x790b221c
EventWrite
0x790b229c
AddAccessAllowedAce
0x790b2268
AdjustTokenPrivileges
0x790b2264
AllocateAndInitializeSid
0x790b2250
CheckTokenMembership
0x790b225c
CreateWellKnownSid
0x790b2240
EqualSid
0x790b2258
FreeSid
0x790b2254
GetAce
0x790b223c
GetAclInformation
0x790b2244
GetLengthSid
0x790b2248
GetSecurityDescriptorControl
0x790b224c
GetSecurityDescriptorDacl
0x790b2238
GetSecurityDescriptorLength
0x790b226c
InitializeAcl
0x790b2260
InitializeSecurityDescriptor
0x790b2234
SetSecurityDescriptorDacl
0x790b2230
CloseServiceHandle
0x790b227c
CreateServiceW
0x790b2284
OpenSCManagerW
0x790b2280
OpenServiceW
0x790b2288
StartServiceW
0x790b228c
ChangeServiceConfigW
0x790b2294
ControlService
0x790b2274
apphelp.dll
16
SdbFindFirstTag
0x790b2034
SdbFindNextTag
0x790b2038
SdbGetPDBFromGUID
0x790b2028
SdbGetStringTagPtr
0x790b203c
SdbInitDatabase
0x790b2024
SdbOpenLocalDatabase
0x790b2030
SdbResolveDatabase
0x790b202c
SE_CALLBACK_AddHook
0x790b2000
SE_CALLBACK_Lookup
0x790b2018
SE_COM_AddHook
0x790b2020
SE_COM_AddServer
0x790b201c
SE_COM_HookInterface
0x790b200c
SE_COM_HookObject
0x790b2014
SE_COM_Lookup
0x790b2010
SE_GetShimId
0x790b2004
SE_ShimDPF
0x790b2008
DwmIsCompositionEnabled
0x790b2530
GDI32.dll
23
BitBlt
0x790b2424
CombineRgn
0x790b2460
CreateCompatibleDC
0x790b2434
CreateDCW
0x790b2430
CreateDIBSection
0x790b243c
CreatePalette
0x790b2450
CreateRectRgn
0x790b246c
CreateRectRgnIndirect
0x790b2478
DeleteDC
0x790b2428
DeleteObject
0x790b2470
GetClipBox
0x790b2468
GetCurrentObject
0x790b2444
GetDeviceCaps
0x790b2458
GetObjectW
0x790b2438
GetPaletteEntries
0x790b2440
GetRgnBox
0x790b2474
GetStockObject
0x790b247c
RealizePalette
0x790b2448
SelectObject
0x790b242c
SelectPalette
0x790b244c
SetRectRgn
0x790b2464
SetSystemPaletteUse
0x790b2454
SetViewportOrgEx
0x790b245c
KERNEL32.dll
179
CheckElevationEnabled
0x790b27c4
CloseHandle
0x790b2600
CompareStringA
0x790b2750
CompareStringEx
0x790b2638
CompareStringW
0x790b2760
CopyFileA
0x790b279c
CopyFileW
0x790b26fc
CreateActCtxW
0x790b27b8
CreateEventW
0x790b26b0
CreateFileA
0x790b275c
CreateFileMappingA
0x790b2544
CreateFileMappingW
0x790b2758
CreateFileW
0x790b2684
CreateMutexW
0x790b27dc
CreateProcessA
0x790b254c
CreateProcessW
0x790b25e8
CreateThread
0x790b26ac
CreateToolhelp32Snapshot
0x790b25b4
DelayLoadFailureHook
0x790b2740
DeleteCriticalSection
0x790b2614
DeleteFileA
0x790b2718
DeleteFileW
0x790b26e0
DeviceIoControl
0x790b2680
DuplicateHandle
0x790b2604
EnterCriticalSection
0x790b2620
ExitProcess
0x790b25f4
ExpandEnvironmentStringsW
0x790b25a8
FindClose
0x790b2708
FindFirstFileExA
0x790b2664
FindFirstFileExW
0x790b2660
FindFirstFileW
0x790b26d8
FindNextFileA
0x790b2548
FindNextFileW
0x790b2654
FindNLSStringEx
0x790b25bc
FindResourceA
0x790b2728
FindResourceW
0x790b25a4
FlushFileBuffers
0x790b25a0
FormatMessageW
0x790b25f8
FreeEnvironmentStringsW
0x790b2650
FreeLibrary
0x790b274c
FreeResource
0x790b2714
GetBinaryTypeW
0x790b26c4
GetCommandLineA
0x790b2550
GetCommandLineW
0x790b25d8
GetCurrentDirectoryW
0x790b268c
GetCurrentProcess
0x790b2610
GetCurrentProcessId
0x790b2700
GetCurrentThread
0x790b26cc
GetCurrentThreadId
0x790b26bc
GetDiskFreeSpaceExA
0x790b26a8
GetDiskFreeSpaceExW
0x790b26a4
GetDriveTypeA
0x790b2608
GetDriveTypeW
0x790b2794
GetEnvironmentStringsW
0x790b264c
GetEnvironmentVariableA
0x790b2770
GetEnvironmentVariableW
0x790b26c8
GetExitCodeProcess
0x790b25dc
GetFileAttributesA
0x790b2774
GetFileAttributesW
0x790b25cc
GetFileSize
0x790b272c
GetFinalPathNameByHandleW
0x790b2668
GetFullPathNameW
0x790b27ec
GetLastError
0x790b25e4
GetLocaleInfoEx
0x790b2630
GetLocaleInfoW
0x790b269c
GetLogicalDrives
0x790b2790
GetLongPathNameW
0x790b27e8
GetModuleFileNameA
0x790b2804
GetModuleFileNameW
0x790b2788
GetModuleHandleA
0x790b26c0
GetModuleHandleW
0x790b26f0
GetPrivateProfileStringW
0x790b2644
GetProcAddress
0x790b2748
GetProcessHeap
0x790b2628
GetShortPathNameA
0x790b2588
GetShortPathNameW
0x790b27e4
GetSystemDirectoryA
0x790b257c
GetSystemDirectoryW
0x790b2764
GetSystemInfo
0x790b2574
GetSystemTime
0x790b27b0
GetSystemTimeAsFileTime
0x790b27b4
GetSystemWindowsDirectoryW
0x790b2798
GetTempFileNameA
0x790b2778
GetTempFileNameW
0x790b27f4
GetTempPathA
0x790b2784
GetTempPathW
0x790b27f0
GetTickCount
0x790b26e8
GetUserDefaultLCID
0x790b2710
GetUserDefaultUILanguage
0x790b25ac
GetVersionExW
0x790b2688
GetVolumeInformationW
0x790b267c
GetWindowsDirectoryW
0x790b25ec
GlobalAlloc
0x790b2800
GlobalFree
0x790b26e4
GlobalMemoryStatusEx
0x790b2598
HeapAlloc
0x790b262c
HeapFree
0x790b25c8
HeapReAlloc
0x790b25c0
HeapSize
0x790b2584
HeapValidate
0x790b2580
InitializeCriticalSection
0x790b2738
InitializeCriticalSectionAndSpinCount
0x790b25fc
IsBadReadPtr
0x790b276c
IsBadStringPtrA
0x790b2590
IsBadStringPtrW
0x790b258c
IsBadWritePtr
0x790b2594
IsDBCSLeadByte
0x790b270c
IsDBCSLeadByteEx
0x790b2694
IsNLSDefinedString
0x790b25b8
IsValidLocale
0x790b26a0
IsWow64Process
0x790b2554
LCIDToLocaleName
0x790b2634
LCMapStringEx
0x790b25c4
LeaveCriticalSection
0x790b2734
LoadLibraryA
0x790b2578
LoadLibraryExW
0x790b2808
LoadLibraryW
0x790b2768
LoadResource
0x790b2724
LocalAlloc
0x790b26f4
LocalFree
0x790b25d0
LockResource
0x790b2720
lstrcmpA
0x790b2678
lstrcmpiW
0x790b27f8
lstrcmpW
0x790b25f0
lstrlenA
0x790b2698
lstrlenW
0x790b25d4
MapViewOfFile
0x790b2754
Module32First
0x790b25b0
MoveFileA
0x790b277c
MoveFileExW
0x790b26f8
MultiByteToWideChar
0x790b2690
OpenMutexW
0x790b27d8
OpenProcess
0x790b2570
OutputDebugStringA
0x790b261c
QueryActCtxSettingsW
0x790b27e0
QueryActCtxW
0x790b27bc
QueryPerformanceCounter
0x790b263c
QueryPerformanceFrequency
0x790b2670
RaiseException
0x790b2730
ReadFile
0x790b2640
ReadProcessMemory
0x790b260c
ReleaseActCtx
0x790b27c0
ResetEvent
0x790b26b8
ResolveDelayLoadedAPI
0x790b2744
ResumeThread
0x790b2564
SearchPathA
0x790b27d4
SearchPathW
0x790b27fc
SetEnvironmentVariableA
0x790b27c8
SetEnvironmentVariableW
0x790b2558
SetErrorMode
0x790b255c
SetEvent
0x790b26b4
SetFileAttributesA
0x790b27a4
SetFileAttributesW
0x790b26dc
SetLastError
0x790b2624
SetProcessAffinityMask
0x790b27d0
SetThreadPriority
0x790b26d0
SetThreadPriorityBoost
0x790b26d4
SetUnhandledExceptionFilter
0x790b2560
SizeofResource
0x790b271c
Sleep
0x790b2704
TerminateProcess
0x790b259c
TlsAlloc
0x790b266c
TlsGetValue
0x790b2658
TlsSetValue
0x790b265c
UnhandledExceptionFilter
0x790b2780
UnmapViewOfFile
0x790b27a8
VirtualAlloc
0x790b2618
VirtualAllocEx
0x790b256c
VirtualFree
0x790b273c
VirtualProtect
0x790b26ec
VirtualQuery
0x790b27cc
WaitForMultipleObjects
0x790b2540
WaitForSingleObject
0x790b25e0
WideCharToMultiByte
0x790b2674
Wow64DisableWow64FsRedirection
0x790b27a0
Wow64RevertWow64FsRedirection
0x790b27ac
WriteFile
0x790b278c
WritePrivateProfileStringW
0x790b2648
WriteProcessMemory
0x790b2568
MPR.dll
1
WNetGetConnectionW
0x790b2864
msvcrt.dll
58
__CxxFrameHandler3
0x790b211c
__dllonexit
0x790b2108
_amsg_exit
0x790b20ec
_CxxThrowException
0x790b2120
_except_handler4_common
0x790b2114
_initterm
0x790b20f8
_lock
0x790b2100
_onexit
0x790b210c
_stricmp
0x790b20c4
_strnicmp
0x790b20a4
_tempnam
0x790b2074
_unlock
0x790b2104
_vscprintf
0x790b2044
_vscwprintf
0x790b206c
_vsnprintf
0x790b2068
_vsnwprintf
0x790b20d0
_wcsicmp
0x790b20e4
_wcslwr
0x790b2088
_wcslwr_s
0x790b20d8
_wcsnicmp
0x790b20cc
_wcsupr
0x790b2048
_wsplitpath_s
0x790b2084
_wtoi
0x790b2078
_XcptFilter
0x790b20e8
??1type_info@@UAE@XZ
0x790b20fc
?terminate@@YAXXZ
0x790b2110
atoi
0x790b20a8
atol
0x790b2094
free
0x790b20f0
iswctype
0x790b2060
iswspace
0x790b2080
malloc
0x790b20f4
memcmp
0x790b2118
memcpy
0x790b2128
memmove
0x790b20e0
memset
0x790b2124
qsort
0x790b208c
strchr
0x790b20a0
strncmp
0x790b2098
strrchr
0x790b20c0
strstr
0x790b20b4
strtok
0x790b2070
strtoul
0x790b209c
swscanf_s
0x790b207c
toupper
0x790b2090
towlower
0x790b205c
towupper
0x790b2058
wcscat_s
0x790b20b0
wcschr
0x790b2050
wcscpy_s
0x790b2054
wcsncmp
0x790b20c8
wcspbrk
0x790b204c
wcsrchr
0x790b20bc
wcsspn
0x790b2064
wcsstr
0x790b20d4
wcstol
0x790b20b8
wcstoul
0x790b20ac
wprintf
0x790b20dc
ntdll.dll
44
NtClose
0x790b21b0
NtConnectPort
0x790b21a0
NtCreateKey
0x790b2170
NtOpenFile
0x790b2188
NtOpenKey
0x790b2178
NtOpenProcessToken
0x790b21a4
NtOpenThreadToken
0x790b2130
NtProtectVirtualMemory
0x790b2158
NtQueryInformationProcess
0x790b21ac
NtQueryInformationThread
0x790b21bc
NtQueryInformationToken
0x790b2198
NtQueryObject
0x790b2164
NtQuerySecurityObject
0x790b2184
NtQueryValueKey
0x790b2174
NtQueryVirtualMemory
0x790b2154
NtQueryVolumeInformationFile
0x790b215c
NtRequestWaitReplyPort
0x790b21d8
NtSetInformationProcess
0x790b2150
NtSetValueKey
0x790b216c
RtlAllocateHeap
0x790b21dc
RtlAnsiStringToUnicodeString
0x790b213c
RtlCreateServiceSid
0x790b2190
RtlDosPathNameToNtPathName_U
0x790b218c
RtlEqualSid
0x790b217c
RtlFormatCurrentUserKeyPath
0x790b2168
RtlFreeHeap
0x790b2134
RtlFreeUnicodeString
0x790b21b4
RtlGetDaclSecurityDescriptor
0x790b21cc
RtlGetOwnerSecurityDescriptor
0x790b2180
RtlGUIDFromString
0x790b2148
RtlIdentifierAuthoritySid
0x790b21c8
RtlImageNtHeader
0x790b214c
RtlInitAnsiString
0x790b2138
RtlInitializeCriticalSection
0x790b2160
RtlInitializeSid
0x790b219c
RtlInitUnicodeString
0x790b2144
RtlIsDosDeviceName_U
0x790b21c4
RtlLengthRequiredSid
0x790b21a8
RtlNtStatusToDosError
0x790b21c0
RtlOemStringToUnicodeString
0x790b21b8
RtlReAllocateHeap
0x790b2194
RtlSubAuthorityCountSid
0x790b21d4
RtlSubAuthoritySid
0x790b21d0
RtlUnicodeStringToInteger
0x790b2140
CoCreateInstance
0x790b24a0
CoGetObject
0x790b24b4
CoInitialize
0x790b249c
CoInitializeEx
0x790b2498
CoTaskMemFree
0x790b24ac
CoUninitialize
0x790b24a4
StringFromCLSID
0x790b24a8
StringFromGUID2
0x790b24b0
RPCRT4.dll
10
I_RpcExceptionFilter
0x790b2884
NdrAsyncClientCall
0x790b288c
RpcAsyncCancelCall
0x790b2870
RpcAsyncCompleteCall
0x790b2874
RpcAsyncInitializeHandle
0x790b2888
RpcBindingFree
0x790b287c
RpcBindingFromStringBindingW
0x790b2890
RpcBindingSetAuthInfoExW
0x790b2878
RpcStringBindingComposeW
0x790b286c
RpcStringFreeW
0x790b2880
SHELL32.dll
12
0x790b2504
SHChangeNotify
0x790b24f8
SHCreateDirectoryExW
0x790b2514
SHCreateItemFromParsingName
0x790b24f0
ShellExecuteExA
0x790b24ec
ShellExecuteExW
0x790b24fc
SHGetFolderPathEx
0x790b2518
SHGetFolderPathW
0x790b2508
SHGetKnownFolderPath
0x790b24f4
SHGetMalloc
0x790b2510
SHGetSpecialFolderPathA
0x790b2500
SHGetSpecialFolderPathW
0x790b250c
0x790b22ac
0x790b22b8
SHDeleteKeyW
0x790b22c0
SHGetValueW
0x790b22b0
SHQueryValueExW
0x790b22b4
SHStrDupW
0x790b22bc
GetUserNameExW
0x790b22a4
CoInternetSetFeatureEnabled
0x790b2538
USER32.dll
83
AllowSetForegroundWindow
0x790b23cc
CallNextHookEx
0x790b2400
CallWindowProcA
0x790b2368
ChangeDisplaySettingsA
0x790b2320
ChangeWindowMessageFilterEx
0x790b23ac
CharNextA
0x790b23a4
CharUpperW
0x790b2304
CloseDesktop
0x790b2348
CopyIcon
0x790b2338
CreateIconIndirect
0x790b22e8
DefWindowProcA
0x790b2300
DestroyCursor
0x790b2334
DestroyIcon
0x790b22e4
DispatchMessageW
0x790b240c
EmptyClipboard
0x790b230c
EnableWindow
0x790b23c4
EnumDesktopWindows
0x790b2354
EnumDisplayDevicesW
0x790b2388
EnumDisplaySettingsA
0x790b22d4
EnumDisplaySettingsW
0x790b241c
GetActiveWindow
0x790b22f8
GetAncestor
0x790b23b4
GetClassNameW
0x790b23b8
GetClientRect
0x790b234c
GetDC
0x790b22fc
GetDesktopWindow
0x790b23fc
GetForegroundWindow
0x790b2370
GetGUIThreadInfo
0x790b2398
GetIconInfo
0x790b22ec
GetKeyState
0x790b2404
GetMessageW
0x790b2414
GetMonitorInfoW
0x790b23f4
GetParent
0x790b2418
GetProcessWindowStation
0x790b23d4
GetPropW
0x790b22e0
GetShellWindow
0x790b2390
GetSystemMetrics
0x790b2308
GetThreadDesktop
0x790b23dc
GetUpdateRgn
0x790b232c
GetUserObjectInformationW
0x790b23c8
GetWindow
0x790b231c
GetWindowInfo
0x790b2314
GetWindowLongA
0x790b238c
GetWindowLongW
0x790b236c
GetWindowRect
0x790b237c
GetWindowTextA
0x790b2358
GetWindowTextLengthA
0x790b235c
GetWindowThreadProcessId
0x790b2360
InvalidateRect
0x790b2380
IsCharAlphaA
0x790b23a8
IsCharAlphaW
0x790b2344
IsChild
0x790b23bc
IsWindow
0x790b239c
IsWindowVisible
0x790b2318
LoadCursorW
0x790b233c
MonitorFromRect
0x790b23f8
mouse_event
0x790b2374
MsgWaitForMultipleObjects
0x790b23d8
OpenInputDesktop
0x790b23ec
PeekMessageW
0x790b23d0
PostMessageW
0x790b2384
PostQuitMessage
0x790b23e0
RegisterSuspendResumeNotification
0x790b2340
RegisterWindowMessageA
0x790b23b0
ReleaseDC
0x790b22f4
RemovePropW
0x790b22dc
ScreenToClient
0x790b2310
SendMessageW
0x790b2364
SetCursor
0x790b23e4
SetDlgItemTextA
0x790b23a0
SetForegroundWindow
0x790b2378
SetPropW
0x790b22d8
SetRect
0x790b23c0
SetSystemCursor
0x790b2324
SetThreadDesktop
0x790b23e8
SetWindowPos
0x790b23f0
SetWindowsHookExA
0x790b2408
ShowCursor
0x790b22f0
SystemParametersInfoA
0x790b2330
SystemParametersInfoW
0x790b2350
TranslateMessage
0x790b2410
WindowFromDC
0x790b2328
wvsprintfA
0x790b2394
GetAllUsersProfileDirectoryW
0x790b2524
GetUserProfileDirectoryA
0x790b2528
GetUserProfileDirectoryW
0x790b2520
GetFileVersionInfoExW
0x790b24e4
GetFileVersionInfoSizeW
0x790b24e0
GetFileVersionInfoW
0x790b24dc
VerQueryValueW
0x790b24d8
mciSendCommandA
0x790b2484
0x790b2854
ClosePrinter
0x790b2850
EnumPrintersA
0x790b284c
GetPrinterA
0x790b285c
OpenPrinterA
0x790b2858
No function matches your filter.