| CloseClipboard |
x |
0x0012396E |
0x002F002E |
77 (0x004D) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| CopySid |
x |
0x00124210 |
0x00680073 |
133 (0x0085) |
security |
T1134 |
Access Token Manipulation |
implicit |
- |
| CreateProcessA |
x |
0x00124402 |
0x00730068 |
223 (0x00DF) |
execution |
T1106 |
Execution through API |
implicit |
- |
| DeleteFileA |
x |
0x0012444C |
0x002E0000 |
272 (0x0110) |
file |
T1485 |
Data Destruction |
implicit |
- |
| EmptyClipboard |
x |
0x00123AAA |
0x002E002E |
234 (0x00EA) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| EqualSid |
x |
0x0012421A |
0x00720061 |
282 (0x011A) |
security |
- |
implicit |
- |
ADVAPI32.dll |
| FindFirstFileA |
x |
0x0012449C |
0x002E0065 |
375 (0x0177) |
file |
T1083 |
File and Directory Discovery |
implicit |
- |
| FindFirstFileExW |
x |
0x001244AE |
0x00000063 |
377 (0x0179) |
file |
T1083 |
File and Directory Discovery |
implicit |
- |
| FindNextFileA |
x |
0x001244C2 |
0x002E002E |
392 (0x0188) |
file |
T1083 |
File and Directory Discovery |
implicit |
- |
| FindNextFileW |
x |
0x001244D2 |
0x0070002F |
394 (0x018A) |
file |
T1083 |
File and Directory Discovery |
implicit |
- |
| GetClipboardData |
x |
0x00123B44 |
0x0077006F |
310 (0x0136) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| GetClipboardOwner |
x |
0x00123B58 |
0x002F0073 |
313 (0x0139) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| GetCurrentProcess |
x |
0x001245C4 |
0x0064006C |
533 (0x0215) |
execution |
T1057 |
Process Discovery |
implicit |
- |
| GetCurrentProcessId |
x |
0x001245D8 |
0x00610063 |
534 (0x0216) |
reconnaissance |
T1057 |
Process Discovery |
implicit |
- |
| GetCurrentThread |
x |
0x001245EE |
0x00640072 |
537 (0x0219) |
execution |
- |
implicit |
- |
KERNEL32.dll |
| GetCurrentThreadId |
x |
0x00124602 |
0x0063002E |
538 (0x021A) |
execution |
T1057 |
Process Discovery |
implicit |
- |
| GetDesktopWindow |
x |
0x00123B84 |
0x006C0065 |
325 (0x0145) |
windowing |
- |
implicit |
- |
USER32.dll |
| GetEnvironmentStringsW |
x |
0x0012462A |
0x002F002E |
563 (0x0233) |
execution |
- |
implicit |
- |
KERNEL32.dll |
| GetEnvironmentVariableA |
x |
0x00124644 |
0x00730073 |
564 (0x0234) |
reconnaissance |
- |
implicit |
- |
KERNEL32.dll |
| GetForegroundWindow |
x |
0x00123BCE |
0x002E002E |
342 (0x0156) |
windowing |
T1010 |
Window Discovery |
implicit |
- |
| GetKeyboardState |
x |
0x00123BF8 |
0x00680073 |
363 (0x016B) |
input-output |
T1179 |
Hooking |
implicit |
- |
| GetLengthSid |
x |
0x00124226 |
0x00660063 |
331 (0x014B) |
security |
T1134 |
Access Token Manipulation |
implicit |
- |
| GetModuleHandleExW |
x |
0x001246F6 |
0x00630073 |
627 (0x0273) |
dynamic-library |
- |
implicit |
- |
KERNEL32.dll |
| GetOverlappedResult |
x |
0x0012472C |
0x002F002E |
660 (0x0294) |
synchronization |
- |
implicit |
- |
KERNEL32.dll |
| GetQueueStatus |
x |
0x00123C38 |
0x00740075 |
429 (0x01AD) |
windowing |
- |
implicit |
- |
USER32.dll |
| GetThreadTimes |
x |
0x001247EC |
0x0077002F |
769 (0x0301) |
execution |
- |
implicit |
- |
KERNEL32.dll |
| GetWindowTextA |
x |
0x00123CD8 |
0x00730073 |
492 (0x01EC) |
windowing |
T1010 |
Window Discovery |
implicit |
- |
| GlobalMemoryStatus |
x |
0x0012488C |
0x002E0063 |
821 (0x0335) |
memory |
- |
implicit |
- |
KERNEL32.dll |
| MapViewOfFile |
x |
0x00124A28 |
0x006C007A |
983 (0x03D7) |
file |
- |
implicit |
- |
KERNEL32.dll |
| OpenClipboard |
x |
0x00123E2A |
0x00740073 |
676 (0x02A4) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| OpenProcess |
x |
0x00124A58 |
0x002E0000 |
1030 (0x0406) |
execution |
T1055 |
Process Injection |
implicit |
- |
| OutputDebugStringW |
x |
0x00124A66 |
0x002F002E |
1042 (0x0412) |
diagnostic |
- |
implicit |
- |
KERNEL32.dll |
| RaiseException |
x |
0x00124A96 |
0x00720068 |
1115 (0x045B) |
exception |
- |
implicit |
- |
KERNEL32.dll |
| RegCreateKeyA |
x |
0x00124274 |
0x00690077 |
610 (0x0262) |
registry |
T1112 |
Modify Registry |
implicit |
- |
| RegCreateKeyExA |
x |
0x00124284 |
0x0064006E |
611 (0x0263) |
registry |
T1112 |
Modify Registry |
implicit |
- |
| RegDeleteKeyA |
x |
0x00124296 |
0x0077006F |
616 (0x0268) |
registry |
T1485 |
Data Destruction |
implicit |
- |
| RegDeleteValueA |
x |
0x001242A6 |
0x002F0073 |
626 (0x0272) |
registry |
T1485 |
Data Destruction |
implicit |
- |
| RegEnumKeyA |
x |
0x001242B8 |
0x00690077 |
632 (0x0278) |
registry |
T1012 |
Query Registry |
implicit |
- |
| RegSetValueExA |
x |
0x001242E8 |
0x00650072 |
680 (0x02A8) |
registry |
T1112 |
Modify Registry |
implicit |
- |
| RegisterClipboardFormatA |
x |
0x00123EA0 |
0x00670067 |
741 (0x02E5) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| SetClipboardData |
x |
0x00123F6A |
0x006C0064 |
806 (0x0326) |
data-exchange |
T1115 |
Clipboard Data |
implicit |
- |
| SetCurrentDirectoryA |
x |
0x00124B12 |
0x0063002E |
1280 (0x0500) |
- |
- |
implicit |
- |
KERNEL32.dll |
| SetEnvironmentVariableW |
x |
0x00124B3A |
0x002F002E |
1292 (0x050C) |
execution |
- |
implicit |
- |
KERNEL32.dll |
| SetKeyboardState |
x |
0x00123FBE |
0x006E006F |
829 (0x033D) |
input-output |
- |
implicit |
- |
USER32.dll |
| SetSecurityDescriptorDacl |
x |
0x001242FA |
0x0063002E |
744 (0x02E8) |
security |
T1134 |
Access Token Manipulation |
implicit |
- |
| SetSecurityDescriptorOwner |
x |
0x00124316 |
0x002E0000 |
746 (0x02EA) |
security |
T1134 |
Access Token Manipulation |
implicit |
- |
| ShellExecuteA |
x |
0x00124118 |
0x002E002E |
434 (0x01B2) |
execution |
T1106 |
Execution through API |
implicit |
- |
| SystemParametersInfoA |
x |
0x00124060 |
0x006E0069 |
918 (0x0396) |
- |
- |
implicit |
- |
USER32.dll |
| TerminateProcess |
x |
0x00124BDC |
0x00730073 |
1412 (0x0584) |
execution |
- |
implicit |
- |
KERNEL32.dll |
| UnmapViewOfFile |
x |
0x00124C3E |
0x002F002E |
1448 (0x05A8) |
file |
- |
implicit |
- |
KERNEL32.dll |
| WriteFile |
x |
0x00124C9E |
0x002E0000 |
1546 (0x060A) |
file |
- |
implicit |
- |
KERNEL32.dll |