crashpad_handler.exe
Description:
Authors:
Version:
Architecture: 64-bit
Operating System:
SHA256: bb19c2cc83455951e508ac5f106f0937
File Size: 575.0 KB
Uploaded At: Aug. 23, 2026, 1:54 a.m.
Views: 13
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
No exported functions.
Imported DLLs & Functions
ADVAPI32.dll
- BuildExplicitAccessWithNameW (Address: 0x140064008)
- BuildSecurityDescriptorW (Address: 0x140064010)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x140064000)
- ImpersonateNamedPipeClient (Address: 0x140064020)
- RevertToSelf (Address: 0x140064018)
- SystemFunction036 (Address: 0x140064028)
api-ms-win-crt-convert-l1-1-0.dll
- strtoul (Address: 0x1400645e0)
- strtoull (Address: 0x1400645e8)
api-ms-win-crt-environment-l1-1-0.dll
- getenv (Address: 0x1400645f8)
api-ms-win-crt-filesystem-l1-1-0.dll
- _wstat64 (Address: 0x140064608)
api-ms-win-crt-heap-l1-1-0.dll
- _aligned_free (Address: 0x140064620)
- _aligned_malloc (Address: 0x140064630)
- _callnewh (Address: 0x140064638)
- _set_new_mode (Address: 0x140064640)
- free (Address: 0x140064628)
- malloc (Address: 0x140064618)
api-ms-win-crt-locale-l1-1-0.dll
- _configthreadlocale (Address: 0x140064650)
api-ms-win-crt-math-l1-1-0.dll
- __setusermatherr (Address: 0x140064660)
- _dclass (Address: 0x140064668)
api-ms-win-crt-runtime-l1-1-0.dll
- __p___argc (Address: 0x1400646c0)
- __p___wargv (Address: 0x140064708)
- _c_exit (Address: 0x1400646b8)
- _cexit (Address: 0x140064688)
- _configure_wide_argv (Address: 0x1400646b0)
- _crt_atexit (Address: 0x140064710)
- _errno (Address: 0x140064718)
- _exit (Address: 0x140064728)
- _get_wide_winmain_command_line (Address: 0x140064720)
- _initialize_onexit_table (Address: 0x140064678)
- _initialize_wide_environment (Address: 0x140064698)
- _initterm (Address: 0x140064700)
- _initterm_e (Address: 0x1400646f0)
- _invalid_parameter_noinfo_noreturn (Address: 0x1400646a0)
- _invoke_watson (Address: 0x1400646d8)
- _register_onexit_function (Address: 0x140064680)
- _register_thread_local_exe_atexit_callback (Address: 0x1400646e8)
- _seh_filter_exe (Address: 0x1400646d0)
- _set_app_type (Address: 0x1400646c8)
- abort (Address: 0x1400646f8)
- exit (Address: 0x1400646e0)
- signal (Address: 0x140064690)
- terminate (Address: 0x1400646a8)
api-ms-win-crt-stdio-l1-1-0.dll
- __acrt_iob_func (Address: 0x140064768)
- __p__commode (Address: 0x140064748)
- __stdio_common_vfprintf (Address: 0x140064770)
- __stdio_common_vsprintf (Address: 0x140064750)
- __stdio_common_vsprintf_p (Address: 0x140064760)
- __stdio_common_vsscanf (Address: 0x140064738)
- _set_fmode (Address: 0x140064758)
- fflush (Address: 0x140064740)
api-ms-win-crt-string-l1-1-0.dll
- _wcsicmp (Address: 0x1400647a8)
- isspace (Address: 0x1400647b0)
- strncmp (Address: 0x1400647a0)
- strnlen (Address: 0x140064798)
- tolower (Address: 0x140064780)
- wcsncmp (Address: 0x140064790)
- wcsnlen (Address: 0x140064788)
api-ms-win-crt-time-l1-1-0.dll
- _time64 (Address: 0x1400647c0)
KERNEL32.dll
- CloseHandle (Address: 0x140064240)
- ConnectNamedPipe (Address: 0x140064190)
- CreateDirectoryW (Address: 0x1400640e8)
- CreateEventW (Address: 0x1400641c8)
- CreateFileW (Address: 0x140064258)
- CreateIoCompletionPort (Address: 0x1400641a0)
- CreateNamedPipeW (Address: 0x140064270)
- CreateProcessW (Address: 0x140064038)
- CreateSemaphoreW (Address: 0x140064290)
- CreateThread (Address: 0x1400641e0)
- DeleteCriticalSection (Address: 0x1400640c0)
- DeleteFileW (Address: 0x140064058)
- DisconnectNamedPipe (Address: 0x140064198)
- DuplicateHandle (Address: 0x140064180)
- EnterCriticalSection (Address: 0x140064308)
- FindClose (Address: 0x140064238)
- FindFirstFileExW (Address: 0x140064060)
- FindNextFileW (Address: 0x1400640c8)
- FormatMessageA (Address: 0x140064220)
- FormatMessageW (Address: 0x140064300)
- GetCurrentProcess (Address: 0x1400641d0)
- GetCurrentProcessId (Address: 0x1400642e8)
- GetCurrentThreadId (Address: 0x1400642f0)
- GetFileAttributesW (Address: 0x140064050)
- GetFileInformationByHandleEx (Address: 0x140064200)
- GetFileTime (Address: 0x1400640d0)
- GetFileType (Address: 0x1400642a0)
- GetLastError (Address: 0x140064188)
- GetLocalTime (Address: 0x1400642f8)
- GetModuleFileNameW (Address: 0x140064178)
- GetModuleHandleW (Address: 0x140064218)
- GetProcAddress (Address: 0x140064248)
- GetProcessId (Address: 0x140064128)
- GetProcessTimes (Address: 0x140064110)
- GetQueuedCompletionStatus (Address: 0x1400641a8)
- GetStartupInfoW (Address: 0x140064068)
- GetStdHandle (Address: 0x140064298)
- GetSystemDefaultLCID (Address: 0x140064168)
- GetSystemInfo (Address: 0x140064148)
- GetSystemTimeAsFileTime (Address: 0x1400640f0)
- GetThreadContext (Address: 0x140064130)
- GetThreadLocale (Address: 0x140064160)
- GetTimeZoneInformation (Address: 0x140064158)
- GetUserDefaultLCID (Address: 0x140064170)
- GetVersion (Address: 0x140064280)
- GetVersionExW (Address: 0x140064150)
- InitializeCriticalSection (Address: 0x1400640e0)
- InitializeCriticalSectionAndSpinCount (Address: 0x140064318)
- InitializeSListHead (Address: 0x140064078)
- InitOnceExecuteOnce (Address: 0x1400640b8)
- IsDebuggerPresent (Address: 0x140064070)
- IsProcessorFeaturePresent (Address: 0x140064140)
- IsWow64Process (Address: 0x140064210)
- LeaveCriticalSection (Address: 0x140064310)
- LoadLibraryW (Address: 0x140064250)
- LocalFree (Address: 0x1400642d8)
- LockFileEx (Address: 0x1400642a8)
- OpenProcess (Address: 0x1400641e8)
- OutputDebugStringW (Address: 0x1400642e0)
- PostQueuedCompletionStatus (Address: 0x1400641b0)
- QueryPerformanceCounter (Address: 0x140064080)
- ReadFile (Address: 0x1400642b0)
- ReadProcessMemory (Address: 0x140064230)
- RegisterWaitForSingleObject (Address: 0x1400641f8)
- ReleaseSemaphore (Address: 0x140064288)
- RemoveDirectoryW (Address: 0x1400640d8)
- ResetEvent (Address: 0x1400640b0)
- ResumeThread (Address: 0x140064120)
- RtlCaptureContext (Address: 0x1400640a0)
- RtlLookupFunctionEntry (Address: 0x140064098)
- RtlVirtualUnwind (Address: 0x140064090)
- SetConsoleCtrlHandler (Address: 0x140064108)
- SetEndOfFile (Address: 0x1400642b8)
- SetEvent (Address: 0x1400641b8)
- SetFilePointerEx (Address: 0x1400642c0)
- SetLastError (Address: 0x140064208)
- SetNamedPipeHandleState (Address: 0x140064260)
- SetProcessShutdownParameters (Address: 0x140064100)
- SetUnhandledExceptionFilter (Address: 0x1400640f8)
- Sleep (Address: 0x140064040)
- SleepEx (Address: 0x140064048)
- SuspendThread (Address: 0x140064118)
- TerminateProcess (Address: 0x1400641d8)
- TransactNamedPipe (Address: 0x140064268)
- UnhandledExceptionFilter (Address: 0x140064088)
- UnlockFileEx (Address: 0x1400642c8)
- UnregisterWaitEx (Address: 0x1400641f0)
- VirtualQueryEx (Address: 0x140064228)
- WaitForSingleObject (Address: 0x1400641c0)
- WaitForSingleObjectEx (Address: 0x1400640a8)
- WaitNamedPipeW (Address: 0x140064278)
- Wow64GetThreadContext (Address: 0x140064138)
- WriteFile (Address: 0x1400642d0)
MSVCP140.dll
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1400643b8)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x140064398)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ (Address: 0x140064368)
- ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA (Address: 0x140064338)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1400643c0)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x140064448)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x140064340)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x140064428)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x140064380)
- ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x140064388)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x140064348)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x140064370)
- ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x140064390)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x140064350)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z (Address: 0x140064418)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x1400643a0)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z (Address: 0x140064440)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z (Address: 0x140064408)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z (Address: 0x140064410)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z (Address: 0x140064420)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x140064438)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z (Address: 0x140064328)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x140064430)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z (Address: 0x1400643a8)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x1400643b0)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x1400643c8)
- ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z (Address: 0x140064450)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x1400643d0)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x140064378)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x140064330)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1400643d8)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x140064358)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x140064360)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1400643e0)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1400643e8)
- ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z (Address: 0x140064400)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1400643f0)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x1400643f8)
POWRPROF.dll
- CallNtPowerInformation (Address: 0x140064460)
USER32.dll
- CreateWindowExW (Address: 0x140064488)
- DefWindowProcW (Address: 0x140064498)
- DestroyWindow (Address: 0x140064480)
- DispatchMessageW (Address: 0x1400644a8)
- GetMessageW (Address: 0x1400644b8)
- GetWindowLongPtrW (Address: 0x140064478)
- PostMessageW (Address: 0x1400644a0)
- RegisterClassW (Address: 0x1400644c0)
- SetWindowLongPtrW (Address: 0x140064470)
- TranslateMessage (Address: 0x1400644b0)
- UnregisterClassW (Address: 0x140064490)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x140064548)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x140064508)
- __current_exception (Address: 0x1400644f8)
- __current_exception_context (Address: 0x1400644f0)
- __std_exception_copy (Address: 0x1400644d0)
- __std_exception_destroy (Address: 0x1400644d8)
- __std_terminate (Address: 0x140064500)
- _CxxThrowException (Address: 0x1400644e0)
- _purecall (Address: 0x140064518)
- memchr (Address: 0x140064538)
- memcmp (Address: 0x1400644e8)
- memcpy (Address: 0x140064530)
- memmove (Address: 0x140064528)
- memset (Address: 0x140064520)
- strchr (Address: 0x140064510)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x140064568)
- GetFileVersionInfoW (Address: 0x140064558)
- VerQueryValueW (Address: 0x140064560)
WINHTTP.dll
- WinHttpAddRequestHeaders (Address: 0x140064588)
- WinHttpCloseHandle (Address: 0x1400645c0)
- WinHttpConnect (Address: 0x1400645c8)
- WinHttpCrackUrl (Address: 0x1400645b0)
- WinHttpOpen (Address: 0x1400645b8)
- WinHttpOpenRequest (Address: 0x1400645a0)
- WinHttpQueryHeaders (Address: 0x140064578)
- WinHttpReadData (Address: 0x1400645d0)
- WinHttpReceiveResponse (Address: 0x140064580)
- WinHttpSendRequest (Address: 0x140064590)
- WinHttpSetTimeouts (Address: 0x1400645a8)
- WinHttpWriteData (Address: 0x140064598)