Benign windows Download

twg v1.2.8

Clipboard read with change-notification watchAuthenticode chain CN: Atlassian Pty Ltd

SHA-256dd3a0f1930d7c39c63aa6d66c4f6e1507f31f6889ee82158e203938b183f6629

URLhttps://teamwork-graph.atlassian.com/cli/twg-windows-arm64-v1.2.8.exe#/twg.exe

MaleculeK₂(Am₂Li₃)O₄(CoAsDy₂Er)H₁₀(Cm₃₀Cr₁₁Db₈DsF₂₃HfMg₂Os₂₀Po₂₃Ti)Md₆(Bi₈PaPtSi₄)Th

Evidence

uv_tcp_connect function 0x128b940–0x128ba00

⋯3 more rows
0x128b970080140b9090500513f1d007108319f1a[email protected]?..q.1..
0x128b980280800b9fd7b43a9f76342a9f55b41a9(....{C..cB..[A.
0x128b990f353c4a8c0035fd60000000000000000.S...._.........
⋯7 more rows

uv_default_loop function 0x128c700–0x128c7c0

⋯3 more rows
0x128c730e4430091e6031faae7031f2af3030091.C.........*....
0x128c740f4430091e90f00f9e30b00f9e30308aa.C..............
0x128c750fc3c1794e00340b968220091493302f0.<[email protected]"..I3..
⋯7 more rows

uv_read_start function 0x128c940–0x128ca00

⋯3 more rows
0x128c970f50300aa03608d941b000014880240f9.....`........@.
0x128c980e00314aa080940f900013fd61f100071......@...?....q
0x128c99080010054e00d8052e1031faae2031faa...T...R........
⋯7 more rows

uv_write function 0x14dff80–0x14e0100

⋯3 more rows
0x14dffb01f05007140020054c8fdff35a90640f9[email protected]..@.
0x14dffc0e90400b4280540b92a0540f94b0141b2....(.@.*[email protected].
0x14dffd0294140393f011e7269018a9a1f010071)A@9?..ri......q
⋯9 more rows
0x14e0070e2230091e00314aae3031faae4031f2a.#.............*
0x14e0080bbffff17e81740f9c920029029a142f9......@.. ..).B.
0x14e00903f0108ebe1000054fdfb45a9f72b40f9?......T..E..+@.
⋯7 more rows

Poll clipboard change counter 0x57d6100–0x57d63f0

0x57d61002502476574436f6e736f6c654d6f6465%.GetConsoleMode
0x57d611000002902476574436f6e736f6c654f75..).GetConsoleOu
0x57d612074707574435000002b02476574436f6etputCP..+.GetCon
0x57d6130736f6c6553637265656e427566666572soleScreenBuffer
0x57d6140496e666f00002f02476574436f6e736fInfo../.GetConso
0x57d61506c655469746c65570000320247657443leTitleW..2.GetC
0x57d6160757272656e6379466f726d6174457800urrencyFormatEx.
0x57d6170390247657443757272656e74446972659.GetCurrentDire
0x57d618063746f72794100003a02476574437572ctoryA..:.GetCur
0x57d619072656e744469726563746f7279570000rentDirectoryW..
0x57d61a0410247657443757272656e7450726f63A.GetCurrentProc
0x57d61b065737300420247657443757272656e74ess.B.GetCurrent
0x57d61c050726f63657373496400430247657443ProcessId.C.GetC
⋯11 more rows
0x57d6280726976655479706557005d0247657444riveTypeW.].GetD
0x57d6290796e616d696354696d655a6f6e65496eynamicTimeZoneIn
0x57d62a0666f726d6174696f6e00620247657445formation.b.GetE
0x57d62b06e7669726f6e6d656e74537472696e67nvironmentString
0x57d62c0735700006302476574456e7669726f6esW..c.GetEnviron
0x57d62d06d656e745661726961626c6541006402mentVariableA.d.
0x57d62e0476574456e7669726f6e6d656e745661GetEnvironmentVa
0x57d62f0726961626c6557006702476574457869riableW.g.GetExi
0x57d630074436f646550726f6365737300006b02tCodeProcess..k.
0x57d631047657446696c65417474726962757465GetFileAttribute
0x57d6320734100006d0247657446696c65417474sA..m.GetFileAtt
0x57d633072696275746573457857000070024765ributesExW..p.Ge
0x57d63407446696c654174747269627574657357tFileAttributesW
0x57d63500000720247657446696c65496e666f72..r.GetFileInfor
0x57d63606d6174696f6e427948616e646c650000mationByHandle..
0x57d6370730247657446696c65496e666f726d61s.GetFileInforma
0x57d638074696f6e427948616e646c6545780000tionByHandleEx..
0x57d6390770247657446696c6553697a65007802w.GetFileSize.x.
0x57d63a047657446696c6553697a654578007a02GetFileSizeEx.z.
0x57d63b047657446696c6554797065007c024765GetFileType.|.Ge
0x57d63c07446696e616c506174684e616d654279tFinalPathNameBy
0x57d63d048616e646c655700820247657446756cHandleW...GetFul
0x57d63e06c506174684e616d6541000085024765lPathNameA....Ge
0x57d63f07446756c6c506174684e616d65570000tFullPathNameW..