nw_elf.dll
v0.94.0.0
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, CreateRemoteThread, WriteProcessMemory
Exported functions 26
ClearReportsBetween_ExportThunk
#1 · 0x4e40
CrashForException_ExportThunk
#2 · 0x4dc0
DisableHook
#3 · 0x2570
DrainLog
#4 · 0x3160
DumpHungProcessWithPtype_ExportThunk
#5 · 0x4e50
DumpProcessWithoutCrash
#6 · 0x12a0
ElfGetReporterClient
#7 · 0x1220
GetApplyHookResult
#8 · 0x2580
GetBlockedModulesCount
#9 · 0x3b10
GetCrashReports_ExportThunk
#10 · 0x4c60
GetCrashpadDatabasePath_ExportThunk
#11 · 0x4e30
GetHandleVerifier
#12 · 0x7f2b0
GetInstallDetailsPayload
#13 · 0x4af0
GetUniqueBlockedModulesCount
#14 · 0x3b20
GetUserDataDirectoryThunk
#15 · 0x1120
InjectDumpForHungInput_ExportThunk
#16 · 0x4df0
IsBrowserProcess
#17 · 0x12c0
IsExtensionPointDisableSet
#18 · 0x12d0
IsTemporaryUserDataDirectoryCreatedForHeadless
#19 · 0x1210
IsThirdPartyInitialized
#20 · 0x4200
RegisterLogNotification
#21 · 0x3a50
RequestSingleCrashUpload_ExportThunk
#22 · 0x4b10
SetMetricsClientId
#23 · 0x12b0
SetUploadConsent_ExportThunk
#24 · 0x4de0
SignalChromeElf
#25 · 0x1110
SignalInitializeCrashReporting
#26 · 0x1000
No function matches your filter.
Imported DLLs & functions 183
KERNEL32.dll
172
AcquireSRWLockExclusive
0x18012b620
AddVectoredExceptionHandler
0x18012b628
CloseHandle
0x18012b630
CompareStringW
0x18012b638
CreateDirectoryW
0x18012b640
CreateEventW
0x18012b648
CreateFileW
0x18012b650
CreateMutexA
0x18012b658
CreateMutexW
0x18012b660
CreateNamedPipeW
0x18012b668
CreateProcessW
0x18012b670
CreateRemoteThread
0x18012b678
CreateThread
0x18012b680
DeleteCriticalSection
0x18012b688
DeleteFileW
0x18012b690
DuplicateHandle
0x18012b698
EncodePointer
0x18012b6a0
EnterCriticalSection
0x18012b6a8
EnumSystemLocalesW
0x18012b6b0
ExitProcess
0x18012b6b8
ExpandEnvironmentStringsW
0x18012b6c0
FileTimeToSystemTime
0x18012b6c8
FindClose
0x18012b6d0
FindFirstFileExW
0x18012b6d8
FindNextFileW
0x18012b6e0
FlsAlloc
0x18012b6e8
FlsFree
0x18012b6f0
FlsGetValue
0x18012b6f8
FlsSetValue
0x18012b700
FlushFileBuffers
0x18012b708
FormatMessageW
0x18012b710
FreeEnvironmentStringsW
0x18012b718
FreeLibrary
0x18012b720
GetACP
0x18012b728
GetCommandLineA
0x18012b738
GetCommandLineW
0x18012b740
GetComputerNameExW
0x18012b748
GetConsoleMode
0x18012b750
GetConsoleOutputCP
0x18012b758
GetCPInfo
0x18012b730
GetCurrentDirectoryW
0x18012b760
GetCurrentProcess
0x18012b768
GetCurrentProcessId
0x18012b770
GetCurrentThread
0x18012b778
GetCurrentThreadId
0x18012b780
GetDateFormatW
0x18012b788
GetDriveTypeW
0x18012b790
GetEnvironmentStringsW
0x18012b798
GetEnvironmentVariableW
0x18012b7a0
GetFileAttributesW
0x18012b7a8
GetFileInformationByHandle
0x18012b7b0
GetFileSizeEx
0x18012b7b8
GetFileTime
0x18012b7c0
GetFileType
0x18012b7c8
GetFullPathNameW
0x18012b7d0
GetLastError
0x18012b7d8
GetLocaleInfoW
0x18012b7e8
GetLocalTime
0x18012b7e0
GetLogicalProcessorInformation
0x18012b7f0
GetLongPathNameW
0x18012b7f8
GetModuleFileNameW
0x18012b800
GetModuleHandleA
0x18012b808
GetModuleHandleExW
0x18012b810
GetModuleHandleW
0x18012b818
GetNativeSystemInfo
0x18012b820
GetOEMCP
0x18012b828
GetProcAddress
0x18012b830
GetProcessHeap
0x18012b838
GetProcessId
0x18012b840
GetProductInfo
0x18012b848
GetStartupInfoW
0x18012b850
GetStdHandle
0x18012b858
GetStringTypeW
0x18012b860
GetSystemDirectoryW
0x18012b868
GetSystemInfo
0x18012b870
GetSystemTimeAsFileTime
0x18012b878
GetTempPathW
0x18012b880
GetThreadPriority
0x18012b888
GetTickCount
0x18012b890
GetTimeFormatW
0x18012b898
GetTimeZoneInformation
0x18012b8a0
GetUserDefaultLCID
0x18012b8a8
GetVersionExW
0x18012b8b0
GetWindowsDirectoryW
0x18012b8b8
HeapAlloc
0x18012b8c0
HeapFree
0x18012b8c8
HeapReAlloc
0x18012b8d0
HeapSize
0x18012b8d8
InitializeCriticalSection
0x18012b8e8
InitializeCriticalSectionAndSpinCount
0x18012b8f0
InitializeSListHead
0x18012b8f8
InitOnceExecuteOnce
0x18012b8e0
InterlockedFlushSList
0x18012b900
IsDebuggerPresent
0x18012b908
IsProcessorFeaturePresent
0x18012b910
IsValidCodePage
0x18012b918
IsValidLocale
0x18012b920
IsWow64Process
0x18012b928
K32GetMappedFileNameW
0x18012b930
LCMapStringW
0x18012b938
LeaveCriticalSection
0x18012b940
LoadLibraryA
0x18012b948
LoadLibraryExA
0x18012b950
LoadLibraryExW
0x18012b958
LoadLibraryW
0x18012b960
LocalFree
0x18012b968
LockFileEx
0x18012b970
lstrlenW
0x18012bb78
MultiByteToWideChar
0x18012b978
OpenProcess
0x18012b980
OutputDebugStringA
0x18012b988
OutputDebugStringW
0x18012b990
PeekNamedPipe
0x18012b998
QueryPerformanceCounter
0x18012b9a0
QueryPerformanceFrequency
0x18012b9a8
QueryThreadCycleTime
0x18012b9b0
RaiseException
0x18012b9b8
ReadConsoleW
0x18012b9c0
ReadFile
0x18012b9c8
ReadProcessMemory
0x18012b9d0
ReleaseMutex
0x18012b9d8
ReleaseSRWLockExclusive
0x18012b9e0
RemoveDirectoryW
0x18012b9e8
RemoveVectoredExceptionHandler
0x18012b9f0
ResetEvent
0x18012b9f8
RtlCaptureContext
0x18012ba00
RtlCaptureStackBackTrace
0x18012ba08
RtlLookupFunctionEntry
0x18012ba10
RtlPcToFileHeader
0x18012ba18
RtlUnwind
0x18012ba20
RtlUnwindEx
0x18012ba28
RtlVirtualUnwind
0x18012ba30
SetConsoleCtrlHandler
0x18012ba38
SetEndOfFile
0x18012ba40
SetEnvironmentVariableW
0x18012ba48
SetEvent
0x18012ba50
SetFilePointerEx
0x18012ba58
SetLastError
0x18012ba60
SetNamedPipeHandleState
0x18012ba68
SetProcessMitigationPolicy
0x18012ba70
SetStdHandle
0x18012ba78
SetThreadPriority
0x18012ba80
SetUnhandledExceptionFilter
0x18012ba88
Sleep
0x18012ba90
SleepConditionVariableSRW
0x18012ba98
SleepEx
0x18012baa0
SystemTimeToTzSpecificLocalTime
0x18012baa8
TerminateProcess
0x18012bab0
TlsAlloc
0x18012bab8
TlsFree
0x18012bac0
TlsGetValue
0x18012bac8
TlsSetValue
0x18012bad0
TransactNamedPipe
0x18012bad8
TryAcquireSRWLockExclusive
0x18012bae0
UnhandledExceptionFilter
0x18012bae8
UnlockFileEx
0x18012baf0
UnmapViewOfFile
0x18012baf8
VerifyVersionInfoW
0x18012bb08
VerSetConditionMask
0x18012bb00
VirtualAlloc
0x18012bb10
VirtualProtect
0x18012bb18
VirtualProtectEx
0x18012bb20
VirtualQuery
0x18012bb28
WaitForSingleObject
0x18012bb30
WaitForSingleObjectEx
0x18012bb38
WaitNamedPipeW
0x18012bb40
WakeAllConditionVariable
0x18012bb48
WerRegisterRuntimeExceptionModule
0x18012bb50
WideCharToMultiByte
0x18012bb58
WriteConsoleW
0x18012bb60
WriteFile
0x18012bb68
WriteProcessMemory
0x18012bb70
ntdll.dll
11
NtClose
0x18012bb88
NtCreateKey
0x18012bb90
NtDeleteKey
0x18012bb98
NtOpenKeyEx
0x18012bba0
NtQueryValueKey
0x18012bba8
NtSetValueKey
0x18012bbb0
NtWriteFile
0x18012bbb8
RtlFormatCurrentUserKeyPath
0x18012bbc0
RtlFreeUnicodeString
0x18012bbc8
RtlInitUnicodeString
0x18012bbd0
RtlNtStatusToDosError
0x18012bbd8
No function matches your filter.