ClearBreakpadPipeEnvironmentVariable
ClearCrashKeyValueImpl
CrashForException
DumpProcess
DumpProcessWithoutCrash
GetHandleVerifier
InjectDumpForHangDebugging
InjectDumpProcessWithoutCrash
IsSandboxedProcess
SetCrashKeyValueImpl
Static task
static1
Behavioral task
behavioral1
Sample
6411a48c431e02efcd672035b04c94fc5a793b9b43cc3aa6e97c29b7d4c6ff9e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6411a48c431e02efcd672035b04c94fc5a793b9b43cc3aa6e97c29b7d4c6ff9e.exe
Resource
win10v2004-20220812-en
Target
6411a48c431e02efcd672035b04c94fc5a793b9b43cc3aa6e97c29b7d4c6ff9e
Size
858KB
MD5
6433390c6a2b50124002a2ea55fdfb80
SHA1
a475e24ad422b015e1c72bf21a9de20fa8dee540
SHA256
6411a48c431e02efcd672035b04c94fc5a793b9b43cc3aa6e97c29b7d4c6ff9e
SHA512
30f7771d5ef43fd3f33f40eafc3cad67996aac8fe8a78410078cffedb5f51bb45acc4cf31af43762cbb547f20f6d768cc1243bfd2d25a1dcae4b5b6426e42445
SSDEEP
12288:oRAVPH+EjSwe4TdimG7k3dECOtG6yVFukF/HKY3kqarRddKkzMYLnG5m7nR1sfcr:oCpHtfrkqCzMEnR74fc1bKl+L8tO3PF
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
CreateFileW
SignalChromeElf
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
timeGetTime
CreateProcessAsUserW
GetUserNameW
GetSecurityInfo
SetEntriesInAclW
LookupPrivilegeValueW
EqualSid
CreateRestrictedToken
CreateWellKnownSid
CopySid
RegDisablePredefinedCache
RevertToSelf
DuplicateTokenEx
DuplicateToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW
SetSecurityInfo
SetTokenInformation
SetKernelObjectSecurity
GetSecurityDescriptorSacl
GetLengthSid
GetKernelObjectSecurity
GetAce
SetThreadToken
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
CreateDesktopW
CloseWindowStation
CloseDesktop
GetThreadDesktop
CreateWindowStationW
SetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
wsprintfW
SendMessageTimeoutW
FindWindowExW
CharUpperW
GetWindowThreadProcessId
AllowSetForegroundWindow
IsWindow
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
WriteConsoleW
ReadConsoleW
OutputDebugStringW
GetDriveTypeW
SetEnvironmentVariableA
RtlCaptureContext
ReleaseSemaphore
SetNamedPipeHandleState
TransactNamedPipe
GetNativeSystemInfo
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
CreateSemaphoreW
GetStartupInfoW
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
ExitProcess
IsProcessorFeaturePresent
EncodePointer
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExA
FormatMessageW
VirtualProtect
CreateRemoteThread
GetComputerNameExW
DebugBreak
SuspendThread
ReadProcessMemory
ProcessIdToSessionId
SearchPathW
CreateNamedPipeW
VirtualFreeEx
SignalObjectAndWait
GetProcessHandleCount
GetFileType
GetThreadContext
CreateJobObjectW
TerminateJobObject
InitializeCriticalSection
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
HeapSetInformation
GetModuleHandleA
GetProcAddress
CreateEventW
WaitForMultipleObjects
WaitForSingleObject
GetProcessId
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
LoadLibraryExW
DecodePointer
RaiseException
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenProcess
GetCurrentProcessId
GetModuleHandleW
DuplicateHandle
GetCurrentProcess
GetExitCodeProcess
LoadResource
LockResource
SizeofResource
FindResourceW
ReadFile
SetFilePointer
GetSystemInfo
VirtualAlloc
VirtualFree
FreeLibrary
LocalFree
CreateMutexW
GetTickCount
FormatMessageA
WriteFile
SetLastError
ReleaseMutex
CloseHandle
WaitNamedPipeW
GetVersionExW
SetHandleInformation
GetHandleInformation
GetCurrentThreadId
TerminateProcess
GetEnvironmentVariableW
SetEnvironmentVariableW
GetUserDefaultLangID
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
ExpandEnvironmentStringsW
SetInformationJobObject
CreateProcessW
AssignProcessToJobObject
GetStdHandle
ResumeThread
GetProcessTimes
LeaveCriticalSection
EnterCriticalSection
MapViewOfFile
UnmapViewOfFile
CreateDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
GetLongPathNameW
CreateFileMappingW
QueryDosDeviceW
lstrlenW
IsDebuggerPresent
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
GetLocaleInfoW
GetUserDefaultUILanguage
Sleep
CreateThread
GetSystemDirectoryW
GetWindowsDirectoryW
RegisterWaitForSingleObject
UnregisterWaitEx
GetModuleHandleExW
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
SetEvent
ResetEvent
LoadLibraryW
VirtualAllocEx
GetProfileType
DestroyEnvironmentBlock
CreateEnvironmentBlock
WTSFreeMemory
WTSQuerySessionInformationW
ClearBreakpadPipeEnvironmentVariable
ClearCrashKeyValueImpl
CrashForException
DumpProcess
DumpProcessWithoutCrash
GetHandleVerifier
InjectDumpForHangDebugging
InjectDumpProcessWithoutCrash
IsSandboxedProcess
SetCrashKeyValueImpl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE