EnumProcessModules

EnumProcessModules is used to enumerate the loaded modules (executables and DLLs) for a given process. Malware enumerates through modules when doing injection.

Kernel32.dll

Enumeration

https://docs.microsoft.com/en-us/windows/win32/api/psapi/nf-psapi-enumprocessmodules