KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Static task
static1
Behavioral task
behavioral1
Sample
ecff5968d0d61c661b02207f8c28e7bcb227de6c82c4de21941f3c00b5a7e582.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecff5968d0d61c661b02207f8c28e7bcb227de6c82c4de21941f3c00b5a7e582.dll
Resource
win10v2004-20221111-en
Target
ecff5968d0d61c661b02207f8c28e7bcb227de6c82c4de21941f3c00b5a7e582
Size
4KB
MD5
79b5af457bf0a461fc93b6414d34f717
SHA1
d187472efa3c943cedda4aefa7b0c01d1091a948
SHA256
ecff5968d0d61c661b02207f8c28e7bcb227de6c82c4de21941f3c00b5a7e582
SHA512
a2a34eb8c7fc12aad6ee408a87ebe88c11f32d987dabc270768c689534e12f8fe6783f1078b6a13ea071ff53cbf2d30b305a7252a64a4c16b4528becd6ee56ad
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
NtCreateFile
RtlNtStatusToDosError
GetProcessHeap
HeapAlloc
HeapFree
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ