Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
OneDriveSetup.exe
Resource
win10v2004-20230703-en
Target
OneDriveSetup.exe.7z
Size
25.1MB
MD5
d1e65aa367c7007dd20ed84495d46cc9
SHA1
705b43d608fb16a2edac7b0c92af6197d4663fab
SHA256
3f41addd4bd8f1aa53e43ed00e5961ce2eb49be3e70218bcd47637b601494537
SHA512
4453922e2b587397acfcded7421e209d388fe7784452e295fee05620e28f48c51bd8ecbd02fdfc6c0cb0a09df012e454b034fc64aefb927c619acef1e8210f14
SSDEEP
786432:E7Yk+nz/vUC9JJ1H+yjqjyv8W0vWko7hN:qYk+nz0uJ1H+NyH0Oko7h
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RtlUnwind
VerSetConditionMask
WerReportSetParameter
WerReportCreate
WerReportSubmit
WerReportCloseHandle
CreateDirectoryA
GetShortPathNameW
RemoveDirectoryA
GetTempFileNameA
CompareStringA
GetUserDefaultLocaleName
IsWow64Process
LoadLibraryW
GetUserDefaultLCID
GetProcAddress
GetSystemTimeAsFileTime
WaitForSingleObject
TerminateProcess
CreateMutexW
GetModuleHandleW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileW
OpenProcess
GetVersionExW
WerUnregisterFile
WerRegisterFile
GetModuleFileNameW
GetCurrentProcess
GetCommandLineW
UnlockFileEx
LockFileEx
VerifyVersionInfoW
UnmapViewOfFile
MapViewOfFile
FileTimeToLocalFileTime
GetFileSize
CompareStringW
OpenFileById
MoveFileExW
CopyFileW
FreeLibrary
Sleep
CloseHandle
GetTempPathW
SetFileTime
RemoveDirectoryW
GetTempFileNameW
GetFullPathNameW
CreateDirectoryW
GetSystemTime
GetCurrentThreadId
GetCurrentProcessId
SetLastError
WriteFile
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateIoCompletionPort
CreateFileW
CompareFileTime
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
GetComputerNameW
ReadFile
GetFileSizeEx
DeviceIoControl
RaiseException
DecodePointer
FindVolumeClose
FindNextVolumeW
FindFirstVolumeW
ExpandEnvironmentStringsW
LocalFree
GetExitCodeProcess
CreateProcessW
GetFileAttributesW
CompareStringOrdinal
CreateFileMappingW
GetFinalPathNameByHandleW
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
ReadDirectoryChangesW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetSystemPowerStatus
FormatMessageA
GetDiskFreeSpaceExW
MultiByteToWideChar
SystemTimeToFileTime
CreateFileMappingA
UnlockFile
HeapCompact
DeleteFileA
LoadLibraryA
CreateFileA
FlushViewOfFile
GetFileAttributesExW
GetLongPathNameW
GlobalLock
GlobalAlloc
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetComputerNameExW
GetLocalTime
GlobalMemoryStatusEx
WaitForMultipleObjects
QueueUserWorkItem
GetExitCodeThread
FileTimeToDosDateTime
ReleaseMutex
SetFileAttributesW
GetTickCount64
GetUserDefaultUILanguage
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualFree
WideCharToMultiByte
GetSystemTimes
GetProcessTimes
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPriorityClass
SetPriorityClass
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
LoadLibraryExA
FlushInstructionCache
InitOnceExecuteOnce
InitializeCriticalSection
AreFileApisANSI
HeapCreate
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
IsDebuggerPresent
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
GetStringTypeW
FormatMessageW
TryEnterCriticalSection
DuplicateHandle
SwitchToThread
GetCurrentThread
GetModuleHandleA
GetNativeSystemInfo
QueryPerformanceFrequency
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetCPInfo
LCMapStringW
GetLocaleInfoW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetStdHandle
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetCurrentDirectoryW
SetStdHandle
GetTimeZoneInformation
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEndOfFile
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetMessageW
TranslateMessage
LoadIconW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
SetWindowTextW
UnregisterClassW
GetForegroundWindow
SetActiveWindow
GetDlgItem
DialogBoxParamW
CreateDialogParamW
BringWindowToTop
DispatchMessageW
GetClassNameW
GetWindowThreadProcessId
PostMessageW
EnumWindows
MonitorFromWindow
SetForegroundWindow
GetMonitorInfoW
PostThreadMessageW
AllowSetForegroundWindow
GetShellWindow
GetSystemMetrics
SendMessageW
AttachThreadInput
PostQuitMessage
IsWindow
DestroyWindow
ShowWindow
SetWindowPos
IsWindowVisible
InitializeAcl
RegNotifyChangeKeyValue
CryptDestroyKey
CryptSetHashParam
CryptImportKey
LookupAccountNameW
AddAce
EventUnregister
EventRegister
EventWrite
EventWriteTransfer
CredWriteW
CredReadW
CredEnumerateW
CredDeleteW
CredFree
CreateProcessWithTokenW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
CreateProcessAsUserW
DuplicateTokenEx
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
RegUnLoadKeyW
RegLoadKeyW
RegEnumKeyW
RegCreateKeyTransactedW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
GetSidSubAuthorityCount
EqualSid
RegEnumValueW
CopySid
GetLengthSid
IsValidSid
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
GetUserNameW
RegDeleteValueW
RegDeleteKeyExW
RegDeleteTreeW
RegEnumKeyExW
RegQueryInfoKeyW
RegGetValueW
RegSetKeyValueW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegOverridePredefKey
FreeSid
SHGetFolderPathA
ord526
SHLoadNonloadedIconOverlayIdentifiers
ShellExecuteExW
SHChangeNotify
SHFileOperationW
SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetKnownFolderPath
SHGetFolderPathW
SHCreateDirectoryExW
ord709
SHGetFolderPathAndSubDirW
CoInitializeEx
CoUninitialize
StringFromCLSID
CoCreateGuid
CLSIDFromString
CoSetProxyBlanket
StringFromGUID2
CoCreateInstance
CoGetObject
CoTaskMemFree
PropVariantClear
CreateStreamOnHGlobal
CoTaskMemAlloc
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VariantInit
VariantClear
SysAllocString
SysFreeString
GetRecordInfoFromTypeInfo
LoadRegTypeLi
VariantChangeType
LoadTypeLi
CreateTransaction
RollbackTransaction
CommitTransaction
RmRegisterResources
RmEndSession
RmGetList
RmStartSession
CertVerifyCertificateChainPolicy
CryptStringToBinaryW
CryptBinaryToStringW
GetModuleFileNameExW
RpcBindingFree
RpcServerInqCallAttributesW
RpcServerUnregisterIf
RpcEpUnregister
RpcBindingFromStringBindingW
RpcEpRegisterW
RpcServerInqBindings
RpcServerUseProtseqW
RpcServerRegisterIfEx
RpcStringBindingComposeW
RpcStringFreeW
UuidToStringW
RpcBindingVectorFree
GetUserNameExW
SHDeleteKeyW
SHDeleteValueW
PathFindExtensionW
SHCreateStreamOnFileW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
SHSetValueW
SHCreateStreamOnFileEx
SHRegGetPathW
PathFindFileNameW
SHGetValueW
PathStripPathW
SHRegGetBoolUSValueW
PathIsPrefixW
PathIsRelativeW
StrStrIW
PathFileExistsA
PathFindFileNameA
PathGetDriveNumberA
PathIsDirectoryA
SHCreateStreamOnFileA
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
HttpSendRequestA
InternetSetStatusCallbackA
InternetGetConnectedState
InternetSetOptionW
InternetQueryDataAvailable
InternetCloseHandle
HttpOpenRequestA
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetReadFile
HttpAddRequestHeadersA
bind
WSAStartup
socket
htonl
htons
setsockopt
listen
closesocket
accept
WSAGetLastError
send
CreateEnvironmentBlock
GetDefaultUserProfileDirectoryW
UnloadUserProfile
WinVerifyTrustEx
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
SelectObject
GetObjectW
SetDIBColorTable
CreateDIBSection
DeleteDC
CreateCompatibleDC
DeleteObject
GetAdaptersInfo
URLOpenStreamW
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipGetImageWidth
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdiplusShutdown
ord345
ord14
ord13
ord11
ord10
ord23
ord22
ord20
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV0123@@Z
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@5@@Z
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@5@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@$$QAU0123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@CW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@EW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@FW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@GW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@HW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@IW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@JW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@NW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@PBDW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@UGUID_t@123@W4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@Utime_ticks_t@123@W4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@XZ
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@_JW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@_KW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@_NW4PiiKind@123@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@HHHABV?$initializer_list@E@std@@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@PBD@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@QBE_N@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@U_GUID@@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@XZ
??0ILogger@Telemetry@Applications@Microsoft@@QAE@$$QAV0123@@Z
??0ILogger@Telemetry@Applications@Microsoft@@QAE@ABV0123@@Z
??0ILogger@Telemetry@Applications@Microsoft@@QAE@XZ
??0LogConfiguration@Telemetry@Applications@Microsoft@@QAE@$$QAU0123@@Z
??0LogConfiguration@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0LogConfiguration@Telemetry@Applications@Microsoft@@QAE@XZ
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@PB_J@Z
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@XZ
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@_K@Z
??1EventProperties@Telemetry@Applications@Microsoft@@UAE@XZ
??1EventProperty@Telemetry@Applications@Microsoft@@UAE@XZ
??1LogConfiguration@Telemetry@Applications@Microsoft@@UAE@XZ
??1LogManager@Telemetry@Applications@Microsoft@@MAE@XZ
??4EventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV0123@@Z
??4EventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@std@@@Z
??4EventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@V?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@std@@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@ABU0123@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@C@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@E@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@F@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@G@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@H@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@I@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@J@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@N@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@PBD@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@UGUID_t@123@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@Utime_ticks_t@123@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@_J@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@_K@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@_N@Z
??4GUID_t@Telemetry@Applications@Microsoft@@QAEAAU0123@ABU0123@@Z
??4ILogger@Telemetry@Applications@Microsoft@@QAEAAV0123@$$QAV0123@@Z
??4ILogger@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV0123@@Z
??4LogConfiguration@Telemetry@Applications@Microsoft@@QAAAAU0123@ABU0123@@Z
??4time_ticks_t@Telemetry@Applications@Microsoft@@QAEAAU0123@ABU0123@@Z
??YEventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@std@@@Z
??_7EventProperties@Telemetry@Applications@Microsoft@@6B@
??_7EventProperty@Telemetry@Applications@Microsoft@@6B@
??_7ILogger@Telemetry@Applications@Microsoft@@6B@
??_7LogConfiguration@Telemetry@Applications@Microsoft@@6B@
??_7LogManager@Telemetry@Applications@Microsoft@@6B@
?AddEventListener@LogManager@Telemetry@Applications@Microsoft@@SAXW4DebugEventType@234@AAVDebugEventListener@234@@Z
?DispatchEvent@LogManager@Telemetry@Applications@Microsoft@@SA_NAAVDebugEvent@234@@Z
?DispatchEvent@LogManager@Telemetry@Applications@Microsoft@@SA_NW4DebugEventType@234@@Z
?Flush@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?FlushAndTeardown@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?GetLogger@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetLogger@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLogger@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@XZ
?GetName@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetPiiProperties@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@Telemetry@Applications@Microsoft@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@Telemetry@Applications@Microsoft@@@2@@std@@@2@@std@@XZ
?GetPolicyBitFlags@EventProperties@Telemetry@Applications@Microsoft@@QBE_KXZ
?GetPriority@EventProperties@Telemetry@Applications@Microsoft@@QBE?AW4EventPriority@234@XZ
?GetProperties@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@std@@XZ
?GetProperties@LogConfiguration@Telemetry@Applications@Microsoft@@QBAXAAV?$map@PBDPBDU?$less@PBD@std@@V?$allocator@U?$pair@QBDPBD@std@@@2@@std@@@Z
?GetProperty@LogConfiguration@Telemetry@Applications@Microsoft@@QBAPBDPBD@Z
?GetSemanticContext@LogManager@Telemetry@Applications@Microsoft@@SAPAVISemanticContext@234@XZ
?GetTimestamp@EventProperties@Telemetry@Applications@Microsoft@@QBE_JXZ
?GetTransmitProfileName@LogManager@Telemetry@Applications@Microsoft@@SAPBDW4TransmitProfile@234@@Z
?GetType@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Initialize@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Initialize@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABULogConfiguration@234@@Z
?LoadTransmitProfiles@LogManager@Telemetry@Applications@Microsoft@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?PauseTransmission@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?RemoveEventListener@LogManager@Telemetry@Applications@Microsoft@@SAXW4DebugEventType@234@AAVDebugEventListener@234@@Z
?ResetTransmitProfiles@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?ResumeTransmission@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UGUID_t@234@W4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Utime_ticks_t@234@W4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4PiiKind@234@@Z
?SetName@EventProperties@Telemetry@Applications@Microsoft@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetPolicyBitFlags@EventProperties@Telemetry@Applications@Microsoft@@QAEX_K@Z
?SetPriority@EventProperties@Telemetry@Applications@Microsoft@@QAEXW4EventPriority@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UGUID_t@234@W4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Utime_ticks_t@234@W4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V56@W4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4PiiKind@234@@Z
?SetProperty@LogConfiguration@Telemetry@Applications@Microsoft@@QAAXPBD0@Z
?SetTimestamp@EventProperties@Telemetry@Applications@Microsoft@@QAEX_J@Z
?SetTransmitProfile@LogManager@Telemetry@Applications@Microsoft@@SAXW4TransmitProfile@234@@Z
?SetTransmitProfile@LogManager@Telemetry@Applications@Microsoft@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetType@EventProperties@Telemetry@Applications@Microsoft@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?UploadNow@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?checkup@LogManager@Telemetry@Applications@Microsoft@@KAXXZ
?clear@EventProperty@Telemetry@Applications@Microsoft@@QAEXXZ
?empty@EventProperty@Telemetry@Applications@Microsoft@@QAE_NXZ
?to_bytes@GUID_t@Telemetry@Applications@Microsoft@@QAEXAAY0BA@E@Z
?to_string@EventProperty@Telemetry@Applications@Microsoft@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?type_name@EventProperty@Telemetry@Applications@Microsoft@@SAPBDI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ