Makes an exact copy of a hash to the point when the duplication is done.
More info on CryptDuplicateHash in Windows Dev CenterExported by
| size | filename | version | |
|---|---|---|---|
| 629248 | coredll.dll | ||
| 640512 | module.284.3eefdd40.76fd0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 640512 | module.600.3f5a5a88.755e0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 878080 | advapi32.dll | 6.1.7601.18247 (win7sp1_gdr.130828-1532) | |
| 610584 | coredll.dll | ||
| 640512 | advapi32.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 78848 | module.560.3ef44a68.74be0000.dll | 6.1.7600.16385 (win7_rtm.090713-1255) | |
| 640512 | advapi32.dll | 6.1.7601.18247 (win7sp1_gdr.130828-1532) | |
| 655360 | advapi32.dl_ | 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) | |
| 640512 | module.1784.3ee63380.755e0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) | |
| 640512 | module.3656.3effe720.755e0000.dll | 6.1.7601.17514 (win7sp1_rtm.101119-1850) |
Imported by
| size | filename | |
|---|---|---|
| 102400 | dump.mem | |
| 94272 | final2.exe | |
| 335872 | 0f232006fef60db8d9561e78c2f9124ed0db1a7ad4065dc5422bc5ab2a641810 | |
| 374272 | A6FDF313F35D2FB58CB57CDDBF313D61.ex | |
| 335872 | e7474d73abba21d2848278bb8d789628deb78e915587798233785f3cbe41f405 | |
| 29294432 | sqlservr.exe | |
| 29023288 | chrome.dll | |
| 88576 | ZeuS_binary_fba855893050cf80d8f4152f74c54448.exe | |
| 102400 | dump.bin |