nw_elf.dll

Description: nwjs

Version: 0.94.0.0

Architecture: 64-bit

Operating System: Windows

SHA256: 2791ab9041ccbd01bed189b6a79ac4b0

File Size: 1.3 MB

Uploaded At: July 9, 2026, 8:02 p.m.

Views: 25

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread, WriteProcessMemory

Exported Functions

ClearReportsBetween_ExportThunk (Ordinal: 1, Address: 0x4e40)
CrashForException_ExportThunk (Ordinal: 2, Address: 0x4dc0)
DisableHook (Ordinal: 3, Address: 0x2570)
DrainLog (Ordinal: 4, Address: 0x3160)
DumpHungProcessWithPtype_ExportThunk (Ordinal: 5, Address: 0x4e50)
DumpProcessWithoutCrash (Ordinal: 6, Address: 0x12a0)
ElfGetReporterClient (Ordinal: 7, Address: 0x1220)
GetApplyHookResult (Ordinal: 8, Address: 0x2580)
GetBlockedModulesCount (Ordinal: 9, Address: 0x3b10)
GetCrashReports_ExportThunk (Ordinal: 10, Address: 0x4c60)
GetCrashpadDatabasePath_ExportThunk (Ordinal: 11, Address: 0x4e30)
GetHandleVerifier (Ordinal: 12, Address: 0x7f2b0)
GetInstallDetailsPayload (Ordinal: 13, Address: 0x4af0)
GetUniqueBlockedModulesCount (Ordinal: 14, Address: 0x3b20)
GetUserDataDirectoryThunk (Ordinal: 15, Address: 0x1120)
InjectDumpForHungInput_ExportThunk (Ordinal: 16, Address: 0x4df0)
IsBrowserProcess (Ordinal: 17, Address: 0x12c0)
IsExtensionPointDisableSet (Ordinal: 18, Address: 0x12d0)
IsTemporaryUserDataDirectoryCreatedForHeadless (Ordinal: 19, Address: 0x1210)
IsThirdPartyInitialized (Ordinal: 20, Address: 0x4200)
RegisterLogNotification (Ordinal: 21, Address: 0x3a50)
RequestSingleCrashUpload_ExportThunk (Ordinal: 22, Address: 0x4b10)
SetMetricsClientId (Ordinal: 23, Address: 0x12b0)
SetUploadConsent_ExportThunk (Ordinal: 24, Address: 0x4de0)
SignalChromeElf (Ordinal: 25, Address: 0x1110)
SignalInitializeCrashReporting (Ordinal: 26, Address: 0x1000)

Imported DLLs & Functions

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18012b620)
AddVectoredExceptionHandler (Address: 0x18012b628)
CloseHandle (Address: 0x18012b630)
CompareStringW (Address: 0x18012b638)
CreateDirectoryW (Address: 0x18012b640)
CreateEventW (Address: 0x18012b648)
CreateFileW (Address: 0x18012b650)
CreateMutexA (Address: 0x18012b658)
CreateMutexW (Address: 0x18012b660)
CreateNamedPipeW (Address: 0x18012b668)
CreateProcessW (Address: 0x18012b670)
CreateRemoteThread (Address: 0x18012b678)
CreateThread (Address: 0x18012b680)
DeleteCriticalSection (Address: 0x18012b688)
DeleteFileW (Address: 0x18012b690)
DuplicateHandle (Address: 0x18012b698)
EncodePointer (Address: 0x18012b6a0)
EnterCriticalSection (Address: 0x18012b6a8)
EnumSystemLocalesW (Address: 0x18012b6b0)
ExitProcess (Address: 0x18012b6b8)
ExpandEnvironmentStringsW (Address: 0x18012b6c0)
FileTimeToSystemTime (Address: 0x18012b6c8)
FindClose (Address: 0x18012b6d0)
FindFirstFileExW (Address: 0x18012b6d8)
FindNextFileW (Address: 0x18012b6e0)
FlsAlloc (Address: 0x18012b6e8)
FlsFree (Address: 0x18012b6f0)
FlsGetValue (Address: 0x18012b6f8)
FlsSetValue (Address: 0x18012b700)
FlushFileBuffers (Address: 0x18012b708)
FormatMessageW (Address: 0x18012b710)
FreeEnvironmentStringsW (Address: 0x18012b718)
FreeLibrary (Address: 0x18012b720)
GetACP (Address: 0x18012b728)
GetCommandLineA (Address: 0x18012b738)
GetCommandLineW (Address: 0x18012b740)
GetComputerNameExW (Address: 0x18012b748)
GetConsoleMode (Address: 0x18012b750)
GetConsoleOutputCP (Address: 0x18012b758)
GetCPInfo (Address: 0x18012b730)
GetCurrentDirectoryW (Address: 0x18012b760)
GetCurrentProcess (Address: 0x18012b768)
GetCurrentProcessId (Address: 0x18012b770)
GetCurrentThread (Address: 0x18012b778)
GetCurrentThreadId (Address: 0x18012b780)
GetDateFormatW (Address: 0x18012b788)
GetDriveTypeW (Address: 0x18012b790)
GetEnvironmentStringsW (Address: 0x18012b798)
GetEnvironmentVariableW (Address: 0x18012b7a0)
GetFileAttributesW (Address: 0x18012b7a8)
GetFileInformationByHandle (Address: 0x18012b7b0)
GetFileSizeEx (Address: 0x18012b7b8)
GetFileTime (Address: 0x18012b7c0)
GetFileType (Address: 0x18012b7c8)
GetFullPathNameW (Address: 0x18012b7d0)
GetLastError (Address: 0x18012b7d8)
GetLocaleInfoW (Address: 0x18012b7e8)
GetLocalTime (Address: 0x18012b7e0)
GetLogicalProcessorInformation (Address: 0x18012b7f0)
GetLongPathNameW (Address: 0x18012b7f8)
GetModuleFileNameW (Address: 0x18012b800)
GetModuleHandleA (Address: 0x18012b808)
GetModuleHandleExW (Address: 0x18012b810)
GetModuleHandleW (Address: 0x18012b818)
GetNativeSystemInfo (Address: 0x18012b820)
GetOEMCP (Address: 0x18012b828)
GetProcAddress (Address: 0x18012b830)
GetProcessHeap (Address: 0x18012b838)
GetProcessId (Address: 0x18012b840)
GetProductInfo (Address: 0x18012b848)
GetStartupInfoW (Address: 0x18012b850)
GetStdHandle (Address: 0x18012b858)
GetStringTypeW (Address: 0x18012b860)
GetSystemDirectoryW (Address: 0x18012b868)
GetSystemInfo (Address: 0x18012b870)
GetSystemTimeAsFileTime (Address: 0x18012b878)
GetTempPathW (Address: 0x18012b880)
GetThreadPriority (Address: 0x18012b888)
GetTickCount (Address: 0x18012b890)
GetTimeFormatW (Address: 0x18012b898)
GetTimeZoneInformation (Address: 0x18012b8a0)
GetUserDefaultLCID (Address: 0x18012b8a8)
GetVersionExW (Address: 0x18012b8b0)
GetWindowsDirectoryW (Address: 0x18012b8b8)
HeapAlloc (Address: 0x18012b8c0)
HeapFree (Address: 0x18012b8c8)
HeapReAlloc (Address: 0x18012b8d0)
HeapSize (Address: 0x18012b8d8)
InitializeCriticalSection (Address: 0x18012b8e8)
InitializeCriticalSectionAndSpinCount (Address: 0x18012b8f0)
InitializeSListHead (Address: 0x18012b8f8)
InitOnceExecuteOnce (Address: 0x18012b8e0)
InterlockedFlushSList (Address: 0x18012b900)
IsDebuggerPresent (Address: 0x18012b908)
IsProcessorFeaturePresent (Address: 0x18012b910)
IsValidCodePage (Address: 0x18012b918)
IsValidLocale (Address: 0x18012b920)
IsWow64Process (Address: 0x18012b928)
K32GetMappedFileNameW (Address: 0x18012b930)
LCMapStringW (Address: 0x18012b938)
LeaveCriticalSection (Address: 0x18012b940)
LoadLibraryA (Address: 0x18012b948)
LoadLibraryExA (Address: 0x18012b950)
LoadLibraryExW (Address: 0x18012b958)
LoadLibraryW (Address: 0x18012b960)
LocalFree (Address: 0x18012b968)
LockFileEx (Address: 0x18012b970)
lstrlenW (Address: 0x18012bb78)
MultiByteToWideChar (Address: 0x18012b978)
OpenProcess (Address: 0x18012b980)
OutputDebugStringA (Address: 0x18012b988)
OutputDebugStringW (Address: 0x18012b990)
PeekNamedPipe (Address: 0x18012b998)
QueryPerformanceCounter (Address: 0x18012b9a0)
QueryPerformanceFrequency (Address: 0x18012b9a8)
QueryThreadCycleTime (Address: 0x18012b9b0)
RaiseException (Address: 0x18012b9b8)
ReadConsoleW (Address: 0x18012b9c0)
ReadFile (Address: 0x18012b9c8)
ReadProcessMemory (Address: 0x18012b9d0)
ReleaseMutex (Address: 0x18012b9d8)
ReleaseSRWLockExclusive (Address: 0x18012b9e0)
RemoveDirectoryW (Address: 0x18012b9e8)
RemoveVectoredExceptionHandler (Address: 0x18012b9f0)
ResetEvent (Address: 0x18012b9f8)
RtlCaptureContext (Address: 0x18012ba00)
RtlCaptureStackBackTrace (Address: 0x18012ba08)
RtlLookupFunctionEntry (Address: 0x18012ba10)
RtlPcToFileHeader (Address: 0x18012ba18)
RtlUnwind (Address: 0x18012ba20)
RtlUnwindEx (Address: 0x18012ba28)
RtlVirtualUnwind (Address: 0x18012ba30)
SetConsoleCtrlHandler (Address: 0x18012ba38)
SetEndOfFile (Address: 0x18012ba40)
SetEnvironmentVariableW (Address: 0x18012ba48)
SetEvent (Address: 0x18012ba50)
SetFilePointerEx (Address: 0x18012ba58)
SetLastError (Address: 0x18012ba60)
SetNamedPipeHandleState (Address: 0x18012ba68)
SetProcessMitigationPolicy (Address: 0x18012ba70)
SetStdHandle (Address: 0x18012ba78)
SetThreadPriority (Address: 0x18012ba80)
SetUnhandledExceptionFilter (Address: 0x18012ba88)
Sleep (Address: 0x18012ba90)
SleepConditionVariableSRW (Address: 0x18012ba98)
SleepEx (Address: 0x18012baa0)
SystemTimeToTzSpecificLocalTime (Address: 0x18012baa8)
TerminateProcess (Address: 0x18012bab0)
TlsAlloc (Address: 0x18012bab8)
TlsFree (Address: 0x18012bac0)
TlsGetValue (Address: 0x18012bac8)
TlsSetValue (Address: 0x18012bad0)
TransactNamedPipe (Address: 0x18012bad8)
TryAcquireSRWLockExclusive (Address: 0x18012bae0)
UnhandledExceptionFilter (Address: 0x18012bae8)
UnlockFileEx (Address: 0x18012baf0)
UnmapViewOfFile (Address: 0x18012baf8)
VerifyVersionInfoW (Address: 0x18012bb08)
VerSetConditionMask (Address: 0x18012bb00)
VirtualAlloc (Address: 0x18012bb10)
VirtualProtect (Address: 0x18012bb18)
VirtualProtectEx (Address: 0x18012bb20)
VirtualQuery (Address: 0x18012bb28)
WaitForSingleObject (Address: 0x18012bb30)
WaitForSingleObjectEx (Address: 0x18012bb38)
WaitNamedPipeW (Address: 0x18012bb40)
WakeAllConditionVariable (Address: 0x18012bb48)
WerRegisterRuntimeExceptionModule (Address: 0x18012bb50)
WideCharToMultiByte (Address: 0x18012bb58)
WriteConsoleW (Address: 0x18012bb60)
WriteFile (Address: 0x18012bb68)
WriteProcessMemory (Address: 0x18012bb70)

ntdll.dll

NtClose (Address: 0x18012bb88)
NtCreateKey (Address: 0x18012bb90)
NtDeleteKey (Address: 0x18012bb98)
NtOpenKeyEx (Address: 0x18012bba0)
NtQueryValueKey (Address: 0x18012bba8)
NtSetValueKey (Address: 0x18012bbb0)
NtWriteFile (Address: 0x18012bbb8)
RtlFormatCurrentUserKeyPath (Address: 0x18012bbc0)
RtlFreeUnicodeString (Address: 0x18012bbc8)
RtlInitUnicodeString (Address: 0x18012bbd0)
RtlNtStatusToDosError (Address: 0x18012bbd8)