UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
Static task
static1
Behavioral task
behavioral1
Sample
f3bd89e99872f5df477bebb194a1dd9b52ab5fb2c1125e19cb4994add74b6926.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3bd89e99872f5df477bebb194a1dd9b52ab5fb2c1125e19cb4994add74b6926.dll
Resource
win10v2004-20220901-en
Target
f3bd89e99872f5df477bebb194a1dd9b52ab5fb2c1125e19cb4994add74b6926
Size
168KB
MD5
6b161635b01dc8478d6b80f66b5de1d0
SHA1
b79d51542300917736f7c03360dc16a981fbc143
SHA256
f3bd89e99872f5df477bebb194a1dd9b52ab5fb2c1125e19cb4994add74b6926
SHA512
a32e2d42acd471e8644b9150c31b30ab4ac4986424bbd4ce2bdf21f3236e55f82cae32c8926b35f79d96fe076d855b1362b10b298a89da86f0df9ec5ced89ed1
SSDEEP
3072:v5SZHI9O8JxvlkOgWKEHOsLdSrc8fNwoe3QPaSvx:S8O8blkOgWJu+QPgzSvx
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
UploadLog
GetAgentPath
AgentExists
GetStatus
GetLogDirectory
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
CloseHandle
CreateFileA
WriteFile
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
CreateThread
GetDiskFreeSpaceA
GetLocaleInfoA
LoadResource
GetVersionExA
LockResource
SizeofResource
FindResourceA
GetSystemInfo
FindResourceExA
FormatMessageA
GlobalMemoryStatusEx
FindClose
FindFirstFileA
DeleteFileA
VerLanguageNameA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedCompareExchange
FindNextFileA
HeapDestroy
RaiseException
GetThreadLocale
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnregisterClassA
RegOpenKeyA
RegEnumValueA
RegOpenCurrentUser
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
RegCreateKeyExA
CryptDestroyHash
CryptGetHashParam
RegEnumKeyExA
CryptHashData
CryptCreateHash
RegCloseKey
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
CoInitialize
CoCreateGuid
CoCreateInstance
CoUninitialize
VariantClear
VariantInit
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
PathFileExistsA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
__clean_type_info_names_internal
??3@YAXPAX@Z
sscanf_s
_invalid_parameter_noinfo
memmove_s
malloc
?what@exception@std@@UBEPBDXZ
wcstombs_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
sprintf_s
free
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
rename
strtok_s
_time64
strncpy_s
_ismbcspace
_mbsinc
_mbsstr
memcpy_s
_mbslwr_s
strftime
getenv_s
_gmtime64_s
_vscprintf
vsprintf_s
strnlen
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE