InstallNTDSProvider
NSPStartup
RemoveNTDSProvider
Static task
static1
Behavioral task
behavioral1
Sample
1f1778fa11adef0ace7d9df1157f1d840bb86978547a930e775c4468ace688b0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f1778fa11adef0ace7d9df1157f1d840bb86978547a930e775c4468ace688b0.dll
Resource
win10v2004-20220812-en
Target
1f1778fa11adef0ace7d9df1157f1d840bb86978547a930e775c4468ace688b0
Size
12KB
MD5
64fb5df54fe71ab1d5409287de525820
SHA1
1dabd3af904f9185a292ac4a228ac247df80ba4f
SHA256
1f1778fa11adef0ace7d9df1157f1d840bb86978547a930e775c4468ace688b0
SHA512
2d462143dde2c9657e43af2bce1645ae6be4bb6d98237c31c6948658a6cfab9ecc4462a0729155758e0e9484b70aa968237e8ccc8b1ca9a09dffcd98d435663b
SSDEEP
384:mc1WJElWL0Br9xGOunGHoTYZo4xVJX9EQXvio41liYOx56:xtrCN4zJXOI6o+lmx56
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InstallNTDSProvider
NSPStartup
RemoveNTDSProvider
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE