GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
TraceEvent
TraceMessage
TraceMessageVa
UnregisterTraceGuids
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-eventing-classicprovider-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
api-ms-win-eventing-classicprovider-l1-1-0.dll
Resource
win10v2004-20230220-en
Target
api-ms-win-eventing-classicprovider-l1-1-0.dll
Size
59KB
MD5
f53fbdba869b66eafadeb0de96e9488b
SHA1
c9953ec732f3e482b1b3c8d043f0a2ee0e3dbc45
SHA256
6e1aa5c47b3aee7d826346ec26c79e843441c0fc2d96a8948a9d00c30de6ec62
SHA512
f584a402fe8f89f785c7611b84a20ba552bb1edfed64a1d2d52ee97eeb3b17e0884951751e5fcc1a9256563cf00b9441955313ad9312e58096f711e868c5eaa6
SSDEEP
96:IY4HbbGnEsvVsfzsLIBWfVYbSLYbtUNNOiAZdY+Ey6AXQEthYCSZjZ31Fj99:IY47bGnEsvVYtBWVZjE8ZFFj99
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
DisableThreadLibraryCalls
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
TraceEvent
TraceMessage
TraceMessageVa
UnregisterTraceGuids
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ