UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
Static task
static1
Behavioral task
behavioral1
Sample
339e784147b502d6711d8f30738c909ba5eaf50bc780cd2b60ba081364613c81.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
339e784147b502d6711d8f30738c909ba5eaf50bc780cd2b60ba081364613c81.dll
Resource
win10v2004-20220812-en
Target
339e784147b502d6711d8f30738c909ba5eaf50bc780cd2b60ba081364613c81
Size
344KB
MD5
fa64856b2114441d2c3915a687e6ebc5
SHA1
4dbc8970d0a0e7a6133aad3d10553b501a6e1d4c
SHA256
339e784147b502d6711d8f30738c909ba5eaf50bc780cd2b60ba081364613c81
SHA512
88dae189fb92ac26c7a789951783d67e4d98e8f97b31206118fdd98e54aad8f228e5aca6fb83d76e6c6d5628b47fe69d8ece2de01f80a77b892b42b88fb78682
SSDEEP
3072:05SZHI9O8JxvlkOgWKEHUhqnTTHQ+4+lB66EdOuqzsi/I14FI+fbeNUJRbL:j8O8blkOgWJjnb436EdOzsi/ZI+KNGL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
UploadLog
GetAgentPath
AgentExists
GetStatus
GetLogDirectory
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
CloseHandle
CreateFileA
WriteFile
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
CreateThread
GetDiskFreeSpaceA
GetLocaleInfoA
LoadResource
GetVersionExA
LockResource
SizeofResource
FindResourceA
GetSystemInfo
FindResourceExA
FormatMessageA
GlobalMemoryStatusEx
FindClose
FindFirstFileA
DeleteFileA
VerLanguageNameA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedCompareExchange
FindNextFileA
HeapDestroy
RaiseException
GetThreadLocale
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnregisterClassA
RegOpenKeyA
RegEnumValueA
RegOpenCurrentUser
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
RegCreateKeyExA
CryptDestroyHash
CryptGetHashParam
RegEnumKeyExA
CryptHashData
CryptCreateHash
RegCloseKey
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
CoInitialize
CoCreateGuid
CoCreateInstance
CoUninitialize
VariantClear
VariantInit
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
PathFileExistsA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
__clean_type_info_names_internal
??3@YAXPAX@Z
sscanf_s
_invalid_parameter_noinfo
memmove_s
malloc
?what@exception@std@@UBEPBDXZ
wcstombs_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
sprintf_s
free
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
rename
strtok_s
_time64
strncpy_s
_ismbcspace
_mbsinc
_mbsstr
memcpy_s
_mbslwr_s
strftime
getenv_s
_gmtime64_s
_vscprintf
vsprintf_s
strnlen
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetOptIn
UTStartSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE