CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
Process32FirstW
Process32NextW
Thread32First
Thread32Next
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-toolhelp-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
api-ms-win-core-toolhelp-l1-1-0.dll
Resource
win10v2004-20230220-en
Target
api-ms-win-core-toolhelp-l1-1-0.dll
Size
59KB
MD5
fbc2890890e33c455b83d97cf05f0f07
SHA1
58bad0b2b1ab38e5fc44a51a0ed52e10e1e2a8d3
SHA256
2fef1ed7d28251216f39dfb5e16f19bf23536c82ad3a1f0af43414b6795eda71
SHA512
10546c2415f475c94bfebd5dbd54ad22fe7db9d5ac69692fd695c2f0b1493e3626cbd36b29432181a6343156037c032928e90e7ddb49329abbaac20118976136
SSDEEP
96:IE4HFNB6vJ6gM0zs85BoMVYbSLYbtVENODAZdY+Ey6AXQEthYCSZjZ31Fj99:IE4k6gXxBtVRKE8ZFFj99
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
DisableThreadLibraryCalls
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
Process32FirstW
Process32NextW
Thread32First
Thread32Next
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ