dwmghost.dll
v10.0.19041.6216
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DWMGhostCleanup
#1 · 0xb710
DWMGhostHandleGhostMsg
#2 · 0xe1c0
DWMGhostInitialize
#3 · 0xb6f0
DWMGhostSetInShutdown
#4 · 0xb700
No function matches your filter.
Imported DLLs & functions 158
ApiSetQueryApiSetPresence
0x180011538
DebugBreak
0x180011550
IsDebuggerPresent
0x180011558
OutputDebugStringW
0x180011548
DelayLoadFailureHook
0x180011568
ResolveDelayLoadedAPI
0x180011578
GetLastError
0x180011590
SetLastError
0x1800115a0
SetUnhandledExceptionFilter
0x180011598
UnhandledExceptionFilter
0x180011588
GetProcessHeap
0x1800115d8
HeapAlloc
0x1800115e0
HeapFree
0x1800115d0
HeapReAlloc
0x1800115c8
FreeLibrary
0x1800115f0
GetModuleFileNameA
0x180011610
GetModuleHandleExW
0x180011620
GetModuleHandleW
0x180011618
GetProcAddress
0x180011608
LoadLibraryExW
0x1800115f8
LoadStringW
0x180011600
FormatMessageW
0x180011630
CreateThread
0x180011660
GetCurrentProcess
0x180011648
GetCurrentProcessId
0x180011678
GetCurrentThreadId
0x180011640
GetExitCodeThread
0x180011670
ResumeThread
0x180011668
SetThreadPriority
0x180011658
TerminateProcess
0x180011650
OpenProcess
0x180011688
QueryPerformanceCounter
0x180011698
QueryFullProcessImageNameW
0x1800116a8
PathFindFileNameW
0x1800116b8
lstrcmpiW
0x1800116c8
AcquireSRWLockExclusive
0x1800116f0
AcquireSRWLockShared
0x1800116e8
CreateEventW
0x180011728
CreateMutexExW
0x1800116d8
CreateSemaphoreExW
0x1800116f8
DeleteCriticalSection
0x180011708
EnterCriticalSection
0x180011720
InitializeCriticalSection
0x180011738
InitializeCriticalSectionEx
0x180011710
LeaveCriticalSection
0x180011718
OpenSemaphoreW
0x180011748
ReleaseMutex
0x180011760
ReleaseSemaphore
0x180011758
ReleaseSRWLockExclusive
0x180011700
ReleaseSRWLockShared
0x1800116e0
SetEvent
0x180011730
WaitForMultipleObjectsEx
0x180011768
WaitForSingleObject
0x180011740
WaitForSingleObjectEx
0x180011750
Sleep
0x180011778
CloseThreadpoolTimer
0x1800117a8
CreateThreadpoolTimer
0x1800117b0
SetThreadpoolTimer
0x1800117b8
WaitForThreadpoolTimerCallbacks
0x1800117a0
QueueUserWorkItem
0x1800117c8
EventWriteTransfer
0x1800117d8
0x1800117f8
DwmIsCompositionEnabled
0x1800117e8
DwmUpdateThumbnailProperties
0x1800117f0
GDI32.dll
16
BitBlt
0x1800113e8
CombineRgn
0x1800113a0
CreateCompatibleBitmap
0x1800113d0
CreateCompatibleDC
0x180011408
CreateDIBSection
0x1800113d8
CreateRectRgn
0x1800113c8
DeleteDC
0x1800113c0
DeleteObject
0x1800113b0
GdiAlphaBlend
0x180011398
GetDIBits
0x1800113e0
GetRandomRgn
0x1800113a8
GetRgnBox
0x180011410
GetStockObject
0x180011400
OffsetRgn
0x1800113f8
SelectClipRgn
0x1800113b8
SelectObject
0x1800113f0
msvcrt.dll
18
__C_specific_handler
0x180011818
__dllonexit
0x180011810
_amsg_exit
0x180011828
_initterm
0x180011838
_lock
0x180011848
_onexit
0x180011830
_purecall
0x180011858
_unlock
0x180011808
_vsnwprintf
0x180011878
_XcptFilter
0x180011870
free
0x180011860
malloc
0x180011820
memcmp
0x180011868
memcpy
0x180011888
memcpy_s
0x180011880
memmove
0x180011840
memmove_s
0x180011850
memset
0x180011890
ntdll.dll
22
EtwEventWriteNoRegistration
0x1800118a8
NtAlpcConnectPort
0x180011910
NtAlpcSendWaitReceivePort
0x1800118e0
NtClose
0x180011908
NtOpenEvent
0x1800118b8
NtOpenProcess
0x1800118f8
NtQuerySystemInformation
0x1800118b0
NtWaitForSingleObject
0x1800118c0
PssNtCaptureSnapshot
0x180011900
PssNtFreeSnapshot
0x180011948
RtlAllocateAndInitializeSid
0x1800118c8
RtlCaptureContext
0x180011928
RtlCompareMemory
0x180011940
RtlFreeSid
0x1800118e8
RtlInitUnicodeString
0x1800118d0
RtlLookupFunctionEntry
0x180011920
RtlQueryResourcePolicy
0x1800118f0
RtlVirtualUnwind
0x180011918
WinSqmAddToStream
0x180011938
WinSqmIsOptedIn
0x180011930
ZwQueryWnfStateNameInformation
0x1800118d8
ZwUpdateWnfStateData
0x1800118a0
USER32.dll
34
BeginPaint
0x180011460
CreateDialogParamW
0x180011480
CreateWindowInBand
0x180011420
EndPaint
0x180011468
EndTask
0x1800114e0
FlashWindowEx
0x180011510
GetCaretBlinkTime
0x180011518
GetClassNameW
0x1800114b8
GetDC
0x1800114a8
GetDCEx
0x180011450
GetMonitorInfoW
0x180011508
GetSystemMetrics
0x1800114f8
GetUpdateRgn
0x180011428
GetWindowBand
0x180011498
GetWindowLongPtrW
0x1800114d8
GetWindowLongW
0x1800114c0
InternalGetWindowIcon
0x180011440
InternalGetWindowText
0x180011478
InvalidateRect
0x180011448
IsDialogMessageW
0x1800114d0
MessageBeep
0x180011500
MonitorFromPoint
0x1800114e8
MonitorFromWindow
0x1800114f0
MsgWaitForMultipleObjectsEx
0x1800114c8
OffsetRect
0x1800114a0
OpenThreadDesktop
0x180011490
RegisterFrostWindow
0x180011470
RegisterGhostWindow
0x180011430
ReleaseDC
0x180011458
SetClassLongPtrW
0x1800114b0
SetThreadDpiAwarenessContext
0x180011438
SetWindowLongPtrW
0x180011528
SystemParametersInfoW
0x180011520
UpdateWindow
0x180011488
No function matches your filter.