General

  • Target
    api-ms-win-core-processthreads-l1-1-0.dll
  • Size 20KB
  • Sample261006-2eybfsysdw
  • SHA256 0d22ce9d987efd6886a8de66a6a678c287d29b15963b4373f73d79dde42c9827
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll 20KB

api-ms-win-core-processthreads-l1-1-0.dll

  • SHA256 0d22ce9d987efd6886a8de66a6a678c287d29b15963b4373f73d79dde42c9827
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a3:e7:23:46:4d:b5:6a:9a:04:68:1e:fd:f1:9b:d4:bf:31:8f:97:f3:16:4f:19:5c:0e:ac:d6:22:40:03:0e:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
api-ms-win-core-processthreads-l1-1-0.pdb