UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
Static task
static1
Behavioral task
behavioral1
Sample
da5e73aea39bc78d467e4356becab78079a51deebf37b868e29048fef9691c24.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da5e73aea39bc78d467e4356becab78079a51deebf37b868e29048fef9691c24.dll
Resource
win10v2004-20220901-en
Target
da5e73aea39bc78d467e4356becab78079a51deebf37b868e29048fef9691c24
Size
236KB
MD5
65e87b5f2d8257417783ce7580e7cd16
SHA1
a5aa6ad2cc692ec42603ddd8fd5b5dcd91911399
SHA256
da5e73aea39bc78d467e4356becab78079a51deebf37b868e29048fef9691c24
SHA512
d19ca05225b68406e24b99c4aaf0ded5609acb06f12003f27362f071dd6f0d9e196d8898aecbe26352fb22a0b930e5d7e9a69709b11f3134fadff1ec0e3a189a
SSDEEP
3072:55SZHI9O8JxvlkOgWKEqJiUdWUpHDx4BmUckVlVbtIUdlDmIg:E8O8blkOgWJ4VHDxVrkAUz6Ig
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
UploadLog
GetAgentPath
AgentExists
GetStatus
GetLogDirectory
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
CloseHandle
CreateFileA
WriteFile
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
CreateThread
GetDiskFreeSpaceA
GetLocaleInfoA
LoadResource
GetVersionExA
LockResource
SizeofResource
FindResourceA
GetSystemInfo
FindResourceExA
FormatMessageA
GlobalMemoryStatusEx
FindClose
FindFirstFileA
DeleteFileA
VerLanguageNameA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedCompareExchange
FindNextFileA
HeapDestroy
RaiseException
GetThreadLocale
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnregisterClassA
RegOpenKeyA
RegEnumValueA
RegOpenCurrentUser
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
RegCreateKeyExA
CryptDestroyHash
CryptGetHashParam
RegEnumKeyExA
CryptHashData
CryptCreateHash
RegCloseKey
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
CoInitialize
CoCreateGuid
CoCreateInstance
CoUninitialize
VariantClear
VariantInit
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
PathFileExistsA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
__clean_type_info_names_internal
??3@YAXPAX@Z
sscanf_s
_invalid_parameter_noinfo
memmove_s
malloc
?what@exception@std@@UBEPBDXZ
wcstombs_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
sprintf_s
free
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
rename
strtok_s
_time64
strncpy_s
_ismbcspace
_mbsinc
_mbsstr
memcpy_s
_mbslwr_s
strftime
getenv_s
_gmtime64_s
_vscprintf
vsprintf_s
strnlen
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE