DllMain
InitializeCollector
Static task
static1
Behavioral task
behavioral1
Sample
LicensingDiagSpp.dll
Resource
win10v2004-20230220-en
Target
LicensingDiagSpp.dll
Size
6.9MB
MD5
052089e63a99bf584b96a8f8d9975d0b
SHA1
1aca8f3b86e0b10f25bbbaf4865dadc8d577042e
SHA256
d17461a33c6da655b7820d968fb636a2270afe0cf4bc8443b31e2d029e0c5ddf
SHA512
1e13bce654f6ca4e8ad1cc735021e993c4f2af7f810d581c96fdd20b5a4f0e919dbf7a586c6869a69bf2b381d471f7aa985a054a594b7b385f154ccf7a9f8bc3
SSDEEP
196608:I+aULw1FU+RWpSizm5+jQwLEO0cm3n3k8CvlxlO:Taw8U+RWtq8Z0cm3njy
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwindEx
RtlVirtualUnwind
VirtualQuery
AcquireSRWLockExclusive
AcquireSRWLockShared
CloseHandle
CreateFileMappingA
CreateFileW
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
DuplicateHandle
FormatMessageW
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFullPathNameW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
HeapReAlloc
LoadLibraryA
MapViewOfFile
Module32FirstW
Module32NextW
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WriteConsoleW
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf
DllMain
InitializeCollector
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ