CloseTrace
OpenTraceW
ProcessTrace
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-eventing-consumer-l1-1-0.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
api-ms-win-eventing-consumer-l1-1-0.dll
Resource
win10v2004-20230221-en
Target
api-ms-win-eventing-consumer-l1-1-0.dll
Size
59KB
MD5
85f7695c4577bbdef9991daeadee7408
SHA1
0afd6d40dbbd21cd447ee2b0c64db4a9ec10a56b
SHA256
33a1cc40ba0baccaad35bb348b149cae7415dd69d09550810300b63a050c6188
SHA512
5967bd45c3af5e9d5a4e5e8a2a0ae9101094701977a41459334dc68b195e11ac13d56dec808185a70044c1e59ac1aa105a310f7761f8150daa5d9d4bad0ea31f
SSDEEP
96:Iv4HYHUIexHW6LMrzsDcBYI4zVYbSLYbtPYjJNOWAZdY+Ey6AXQEthYCSZjZ31FD:Iv4oUIexHW6gpBiVBTE8ZFFj99
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
DisableThreadLibraryCalls
CloseTrace
OpenTraceW
ProcessTrace
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ