UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
Static task
static1
Behavioral task
behavioral1
Sample
da2a0e3643a4456796717d91a7929c8a070a064ffde1688707e443b5d34c156f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da2a0e3643a4456796717d91a7929c8a070a064ffde1688707e443b5d34c156f.dll
Resource
win10v2004-20220812-en
Target
da2a0e3643a4456796717d91a7929c8a070a064ffde1688707e443b5d34c156f
Size
168KB
MD5
808c22f26f81405f351c41a238706397
SHA1
983520ec6de6e9d9d67edcdd14235884ccb6586d
SHA256
da2a0e3643a4456796717d91a7929c8a070a064ffde1688707e443b5d34c156f
SHA512
fdf60defaf5048f7e8c36a87876f407a8ded6eb919b21663efbcd9e642ce38be2fe73b24f0e375154212b56a0d04ae64a25e1a3a6e439c1b9d2066bd7c9ef5f9
SSDEEP
3072:35SZHI9O8JxvlkOgWKEHCI4nsfIhDtuZg5:K8O8blkOgWJigIRtuZg5
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
UploadLog
GetAgentPath
AgentExists
GetStatus
GetLogDirectory
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
CloseHandle
CreateFileA
WriteFile
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
CreateThread
GetDiskFreeSpaceA
GetLocaleInfoA
LoadResource
GetVersionExA
LockResource
SizeofResource
FindResourceA
GetSystemInfo
FindResourceExA
FormatMessageA
GlobalMemoryStatusEx
FindClose
FindFirstFileA
DeleteFileA
VerLanguageNameA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedCompareExchange
FindNextFileA
HeapDestroy
RaiseException
GetThreadLocale
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnregisterClassA
RegOpenKeyA
RegEnumValueA
RegOpenCurrentUser
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
RegCreateKeyExA
CryptDestroyHash
CryptGetHashParam
RegEnumKeyExA
CryptHashData
CryptCreateHash
RegCloseKey
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
CoInitialize
CoCreateGuid
CoCreateInstance
CoUninitialize
VariantClear
VariantInit
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
PathFileExistsA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
__clean_type_info_names_internal
??3@YAXPAX@Z
sscanf_s
_invalid_parameter_noinfo
memmove_s
malloc
?what@exception@std@@UBEPBDXZ
wcstombs_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
sprintf_s
free
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
rename
strtok_s
_time64
strncpy_s
_ismbcspace
_mbsinc
_mbsstr
memcpy_s
_mbslwr_s
strftime
getenv_s
_gmtime64_s
_vscprintf
vsprintf_s
strnlen
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE