MalAPI.io
Contribute
FAQ
Other
Living Off Trusted Sites
Filesec.io
Security Blog
Function Name
VirtualQueryEx
Description
VirtualQueryEx is used to retrieve information about a range of pages within the virtual address space of a specified process. This function is commonly used by malware to enumerate an external process.
Library
Kernel32.dll
Associated Attacks
Enumeration
Documentation
https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-getcomputernamew
Created: 2021-10-30
Last Update: 2021-10-30
Credits: mr.d0x