2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2
Size

340KB
MD5

8e16985dd5a22ec9c896c1af4b674da0
SHA1

0e7a343d01e6794ed25b257a6cf60e9a0e0a2573
SHA256

5aa249db77b3bf3fd97a369a4acedbd016d7007d52d4c646c0350d58e7b8ce6b
SHA512

66f815047d7e63ed376d480fd1025d8c10c8da30a884f056f7e5ad8c3832f1c16b332246de0914ea14da606b139b15966a9ed99651e554a25b86e309af98c0f4
SSDEEP

3072:OU1b+YIok2zPMU/gpiQCJNfr8efa3Cw7kcm+SkdjVCZbrR60df/juoDc1:OC+zoT7MU/gpiQKjg7jHS8qVH3ju7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2

Files

2
.exe windows x86

64065fb99b70ad6a5548d79aa92cb114

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libspp

?SetContent@SCA_DupCommand@@QAEHPAV1@@Z
?SaveFile@SCA_XmlExporter@@QAEHPBD@Z
??0SCA_XmlExporter@@QAE@PAVSPP_Config@@@Z
?AddString@SCA_XmlExporter@@QAAHKPBDZZ
?ThreadFunc@SCA_FileScout@@UAEKXZ
?Pause@SCA_FileScout@@UAEHXZ
?Continue@SCA_FileScout@@UAEHXZ
??1SCA_XmlExporter@@UAE@XZ
?DeleteReport@SCA_SqlManager@@QAEHK@Z
?ImportXml@SCA_DupCommand@@QAEHPAVSPP_Config@@PBD@Z
??0SCA_FileScout@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@@Z
?Init@SCA_FileScout@@QAEHPAV?$SCA_List@K@@PAVSCA_ConfigObj@@@Z
?StartProcess@SCA_FileScout@@UAEHXZ
?StopProcess@SCA_FileScout@@UAEHH@Z
??1SCA_FileScout@@UAE@XZ
??0SCA_DirScout@@QAE@XZ
?Explore@SCA_DirScout@@QAEHPAV?$SCA_List@K@@PAVSPP_ConfigUser@@K@Z
??1SCA_BatchTask@@UAE@XZ
??1SCA_BatchHost@@UAE@XZ
?SPP_GetControlPort@@YAGK@Z
?SPP_GetProductSName@@YAPBDK@Z
?SPP_GetProductName@@YAPBDK@Z
?RegisterOnline@SPP_LicenseManager@@QAEHPBD00HKH@Z
?StopAll@SPP_LicenseManager@@QAEHXZ
?SPP_GetLicenseStatusString@@YAPBDK@Z
??0SCA_BatchCommand@@QAE@XZ
??0SCA_BatchTaskList@@QAE@XZ
?AddHost@SCA_BatchCommand@@QAEHPBDPAPAVSCA_BatchHost@@@Z
?AddShare@SCA_BatchHost@@QAEHPBD@Z
?GetShareCount@SCA_BatchCommand@@QAEKXZ
??1SCA_BatchTaskList@@UAE@XZ
??1SCA_BatchCommand@@UAE@XZ
?AddCommand@SCA_BatchCommand@@QAEHKPBD@Z
?DeleteTask@SCA_BatchTaskList@@QAEHK@Z
?ClearAll@SCA_DupReport@@QAEHXZ
?Save@SCA_DupReport@@QAEHPBDPAVSCA_DupReporter@@@Z
??0SCA_DebugLog@@QAE@K@Z
??1SCA_DebugLog@@UAE@XZ
?Show@SCA_DebugLog@@QAEHXZ
??1SCA_SqlReportInfo@@UAE@XZ
?ThreadFunc@SPP_LicenseManager@@UAEKXZ
??1SCA_CopyBuffer@@UAE@XZ
?ThreadFunc@SCA_DupReporter@@UAEKXZ
??1SCA_DupClassifier@@UAE@XZ
?ThreadFunc@SCA_DupClassifier@@UAEKXZ
??1SCA_ClsCommand@@UAE@XZ
?Serialize@SCA_ClsCommand@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SCA_ClsCommand@@UAEHPAVSCA_ConfigObj@@@Z
??1SCA_DelCommand@@UAE@XZ
?Serialize@SCA_DelCommand@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SCA_DelCommand@@UAEHPAVSCA_ConfigObj@@@Z
??1SCA_CopyCommand@@UAE@XZ
?Serialize@SCA_CopyCommand@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SCA_CopyCommand@@UAEHPAVSCA_ConfigObj@@@Z
??1SCA_ClsModule@@UAE@XZ
?Validate@SCA_ClsModule@@UAEHXZ
??1SCA_ClsClassGroup@@UAE@XZ
??1SCA_ClsClass@@UAE@XZ
??1SCA_ClsResultsModule@@UAE@XZ
??1SCA_ClsResultsGroup@@UAE@XZ
??1SCA_ClsResultsClass@@UAE@XZ
??1SCA_FilePoolEx@@UAE@XZ
??0SCA_DupReport@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@@Z
?Load@SCA_DupReport@@QAEHPBDPAVSCA_DupReporter@@H@Z
?ShowResults@SCA_DupReport@@QAEHXZ
?SPP_GetMaxProcThreads@@YAKK@Z
??0SCA_SqlManager@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@PAVSCA_ConfigObj@@@Z
??1SCA_SqlManager@@UAE@XZ
?Connect@SCA_SqlManager@@UAEHPBD00PADK@Z
?IsReportExists@SCA_SqlManager@@QAEHKPBD00PAK@Z
?VerifyReportCount@SCA_SqlManager@@QAEHKK@Z
?StartProcess@SCA_DupReporter@@QAEHPAVSCA_SqlManager@@PAVSCA_DupReport@@KK@Z
?SPP_BuildReportFileNameEx@@YAHKKPBDPADKPAH@Z
?SPP_IsReportCompressible@@YAHK@Z
??0SCA_DupReporter@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@PAVSCA_ConfigObj@@@Z
?StartExport@SCA_DupReporter@@QAEHPAVSCA_DupReport@@KPBD@Z
??1SCA_DupReporter@@UAE@XZ
?SPP_BuildDateString@@YAHPAUtagSCA_DATE@@KPBDPADK@Z
?SPP_BuildTimeString@@YAHPAUtagSCA_TIME@@PADK@Z
?BuildFullName@SPP_PathHash@@QAEHKPBDPADK@Z
?BuildActionList@SCA_DupReport@@QAEHPAVSCA_MemPool@@PAUtagSCA_DUP_ACTION_LIST@@@Z
?DoProcess@SCA_CmdTool@@IAEHPAVSPP_ProcManager@@@Z
?ShowResults@SCA_CmdTool@@IAEHPAVSCA_ConfigObj@@@Z
?UpdateSelectedCounters@SCA_DupReport@@QAEHXZ
?ShowProcessErrors@SCA_CmdTool@@IAEHPAVSCA_ProcessLog@@@Z
?AddInputDir@SCA_DupCommand@@QAEHPBD@Z
??0SCA_DupCommand@@QAE@PAVSPP_ConfigUser@@@Z
?CopyInputs@SPP_Command@@QAEHPAV?$SCA_List@K@@0@Z
?Init@SPP_Config@@QAEHPBD@Z
?LoadConfig@SPP_Config@@QAEHXZ
??0SPP_LicenseManager@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@@Z
?ValidateLicense@SPP_LicenseManager@@QAEHPAK@Z
?Init@SPP_ConfigUser@@QAEHPAVSPP_Config@@PBD@Z
??1SPP_LicenseManager@@UAE@XZ
??0SCA_CmdTool@@QAE@PBD@Z
??0SPP_Config@@QAE@K@Z
??1SCA_SpaceMonList@@UAE@XZ
??1SCA_SpaceMon@@UAE@XZ
??1SCA_SpaceMonAction@@UAE@XZ
??1SCA_SearchRuleSet@@UAE@XZ
??1SCA_SoundList@@UAE@XZ
?Init@SCA_SoundList@@UAEHPAVSPP_Config@@@Z
??1SCA_Sound@@UAE@XZ
??1SCA_NetShareList@@UAE@XZ
??1SCA_NetShareInfo@@UAE@XZ
??1SCA_PeriodicJobs@@UAE@XZ
??1SCA_PeriodicJob@@UAE@XZ
?CalcTimeLeft@SCA_PeriodicJob@@QAEHPA_K@Z
??1SCA_DupReport@@UAE@XZ
??1SCA_UserList@@UAE@XZ
??1SCA_UserInfo@@UAE@XZ
??0SCA_UserInfo@@QAE@PBD@Z
??1SCA_DirScout@@UAE@XZ
?ThreadFunc@SCA_DirScout@@UAEKXZ
??1SCA_DupSet@@UAE@XZ
??1SCA_DupCommand@@UAE@XZ
?Serialize@SCA_DupCommand@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SCA_DupCommand@@UAEHPAVSCA_ConfigObj@@@Z
??1SCA_DupAction@@UAE@XZ
?Serialize@SCA_DupAction@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SCA_DupAction@@UAEHPAVSCA_ConfigObj@@@Z
??1SPP_ValueTrend@@UAE@XZ
??1SCA_DupFile@@UAE@XZ
??1SPP_PathHash@@UAE@XZ
??1SCA_FileProcessor@@UAE@XZ
??1SCA_FileScanner@@UAE@XZ
??1SCA_ExcludeDirs@@UAE@XZ
??1SCA_CmdTool@@UAE@XZ
?ParseCommandLine@SCA_CmdTool@@MAEHHQAPADPAV?$SCA_List@K@@@Z
?ParseCommandLine@SCA_CmdTool@@MAEHHQAPAD@Z
??1SCA_ProcessLog@@UAE@XZ
??1SCA_ProcessOp@@UAE@XZ
??0SPP_ConfigUser@@QAE@PAVSPP_Config@@@Z
??1SPP_ConfigUser@@UAE@XZ
?SaveConfig@SPP_ConfigUser@@UAEHXZ
?GetCommandByKey@SPP_ConfigUser@@UAEHPBDPAPAVSPP_Command@@@Z
?GetDefaultAdvancedOptions@SPP_ConfigUser@@UAEHKPAUtagSPP_ADVANCED_OPTION@@KPAK@Z
??1SCA_CrashLog@@UAE@XZ
??1SCA_EmailOptions@@UAE@XZ
??1SCA_LogOptions@@UAE@XZ
??1SCA_ClsModuleList@@UAE@XZ
??1SCA_ClsModuleInfo@@UAE@XZ
?Validate@SCA_ClsModuleInfo@@UAEHXZ
??1SPP_Command@@UAE@XZ
?Serialize@SPP_Command@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SPP_Command@@UAEHPAVSCA_ConfigObj@@@Z
??1SCA_SearchRuleList@@UAE@XZ
?BuildDescription@SCA_SearchRuleList@@UAEHPADK@Z
?GetRuleById@SCA_SearchRuleList@@UAEHPBDKPAPAVSCA_SearchRule@@@Z
?Init@SCA_SearchRuleList@@UAEHPAVSPP_Config@@PAVSPP_ConfigUser@@PAVSCA_ConfigObj@@@Z
?Serialize@SCA_SearchRuleList@@UAEHPAVSCA_ConfigObj@@@Z
?ExportXml@SCA_SearchRuleList@@UAEHKPAVSCA_XmlExporter@@@Z
?DoProcess@SCA_SearchRuleList@@UAEHPAVSCA_FileTask@@PAVSCA_Event@@KPAUtagSCA_SEARCH_RESULT@@PAK@Z
?GetFileInfoFlags@SCA_SearchRuleList@@UAEXPAK@Z
?IsValid@SCA_SearchRuleList@@UAEHPADK@Z
?IsForDirsOnly@SCA_SearchRuleList@@UAEHXZ
?ImportXml@SCA_SearchRuleList@@UAEHPAVSCA_XmlElement@@PAVSCA_SearchRuleFactory@@@Z
??1SCA_SearchRuleFactory@@UAE@XZ
??1SCA_SearchRule@@UAE@XZ
?BuildDescription@SCA_SearchRule@@UAEHPADK@Z
?BuildRuleDescriptor@SCA_SearchRule@@UAEHPADK@Z
?BuildFullId@SCA_SearchRule@@UAEHPADKPAK@Z
?GetRuleById@SCA_SearchRule@@UAEHPBDKPAPAV1@@Z
?Init@SCA_SearchRule@@UAEHPAVSPP_Config@@PAVSPP_ConfigUser@@PAVSCA_ConfigObj@@@Z
?Init@SCA_SearchRule@@UAEHPBD@Z
?Serialize@SCA_SearchRule@@UAEHPAVSCA_ConfigObj@@@Z
?Deserialize@SCA_SearchRule@@UAEHPAVSCA_ConfigObj@@@Z
?ImportXml@SCA_SearchRule@@UAEHPAVSCA_XmlElement@@@Z
?ExportXml@SCA_SearchRule@@UAEHKPAVSCA_XmlExporter@@@Z
??1SCA_FileTask@@UAE@XZ
??0SCA_FileTask@@QAE@K@Z
??1SCA_KeyCommand@@UAE@XZ
??1SPP_Config@@UAE@XZ
??1SPP_License@@UAE@XZ

libpal

?SCA_EnumNetworkDrives@@YAHPBDKPAVSCA_ConfigObj@@PAK@Z
?SCA_GetToken3@@YAHPBDPAKPADK0@Z
?SCA_StrCopyToLower@@YAHPBDPADK@Z
?SCA_GetErrorDescr@@YAHKPADK@Z
?SCA_EnumHosts@@YAHPAVSCA_ConfigObj@@PAK@Z
??0SCA_ConfigObj@@QAE@PBDPAV0@@Z
?SCA_BuildShortName@@YAHPBDKPADK@Z
??1SCA_MemPool1@@UAE@XZ
?Init@SCA_MemPool1@@UAEHXZ
??0SCA_MemPool1@@QAE@XZ
?SCA_ConvertAbsTime@@YAH_KPAUtagSCA_DATE@@PAUtagSCA_TIME@@@Z
?SCA_StrToUpper@@YAHPAD@Z
?SCA_GetMemoryStatus@@YAHPA_K0PAK@Z
?SCA_IsFileExists@@YAHPBD@Z
?Reset@SCA_MemPool1@@UAEHXZ
?ClearAll@SCA_MemPool1@@UAEHXZ
?Connect@SCA_SqlInterface@@UAEHPBD00PADK@Z
??1SCA_SqlInterface@@UAE@XZ
?SCA_NormalizePath@@YAHPBDPADKH@Z
??1SCA_Dir@@UAE@XZ
?Parse@SCA_Dir@@QAEHPBD0PAK@Z
??0SCA_Dir@@QAE@XZ
?SCA_GetChar@@YADXZ
?SCA_KbHit@@YAHXZ
?SCA_GetDateTimeStringEx@@YAHPADKPBD1@Z
?Clear@SCA_ConfigObj@@QAEHXZ
?Save@SCA_ConfigObj@@QAEHPBD0@Z
SCA_GetDck
?Load@SCA_ConfigObj@@QAEHPBD0PAK@Z
?AddField@SCA_ConfigObj@@QAEHPBD0H@Z
?GetField@SCA_ConfigObj@@QAEHPBDPAG@Z
??1SCA_NetMessage@@UAE@XZ
??0SCA_NetTransport@@QAE@PAVSCA_NetLink@@@Z
??1SCA_NetTransport@@UAE@XZ
?ThreadFunc@SCA_NetServerAgent@@UAEKXZ
??1SCA_NetServerAgent@@UAE@XZ
?ThreadFunc@SCA_VirtualCmdServer@@UAEKXZ
??1SCA_VirtualCmdServer@@UAE@XZ
?SCA_CalcFileSHA256@@YAHPBDPAKPADK@Z
?SCA_GetFileInfo@@YAHPBDKPAUtagSCA_FILE_INFO@@PAK@Z
?SCA_GetFileName@@YAPBDPBD@Z
?SCA_GetTempDir@@YAHPADKH@Z
?GetField@SCA_ConfigObj@@QAEHPBDPADK@Z
?SCA_GetToken2@@YAHPBDPAKPADKD@Z
?SCA_IsPathExists@@YAHPBD@Z
?GetField@SCA_ConfigObj@@QAEHPBDPAK@Z
?SCA_FormatTime@@YAH_KPADK@Z
?SCA_FormatSize@@YAH_KPADK@Z
??1SCA_StringStor@@UAE@XZ
??1SCA_ThreadObj@@UAE@XZ
??0SCA_ThreadObj@@QAE@H@Z
?Lock@SCA_ThreadObj@@UAEHPAK@Z
?Unlock@SCA_ThreadObj@@UAEHPBD@Z
??1SCA_MemPool@@UAE@XZ
??1SCA_StringList@@UAE@XZ
??1SCA_ConfigObj@@UAE@XZ
??0SCA_ConfigObj@@QAE@AAV0@@Z
??0SCA_ConfigObj@@IAE@PAV0@@Z
SCA_GetReportFunction
??1SCA_File@@UAE@XZ
?ReadString@SCA_File@@UAEHPADKPAK@Z
?WriteString@SCA_File@@UAEHPBD@Z
?WriteStringEx@SCA_File@@UAAHPBDZZ
?SCA_InitSystem@@YAHK@Z
?SCA_Sleep@@YAKK@Z

msvcrt

atol
sprintf
atoi
??2@YAPAXI@Z
strstr
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
exit
??3@YAXPAX@Z
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_purecall
__CxxFrameHandler
__p___initenv
printf

kernel32

HeapFree
HeapAlloc
GetProcessHeap

libdup

?StopWebServer@SCA_DupScoutClient@@UAEHXZ
?GetDiskVolumeList@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?GetDirectory@SCA_DupScoutClient@@UAEHPBD0KKKPAKPAPAVSCA_ConfigObj@@@Z
?GetCommandCount@SCA_DupScoutClient@@UAEHPAK@Z
?GetCommandInfo@SCA_DupScoutClient@@UAEHKPADPAK@Z
?GetCommandStatus@SCA_DupScoutClient@@UAEHPBDPAK1@Z
?GetCommandStatusEx@SCA_DupScoutClient@@UAEHPBDPAK1111@Z
?GetCommandStatusFull@SCA_DupScoutClient@@UAEHPBDPAK11111PAPAVSCA_ConfigObj@@@Z
?GetCommandDebugStatus@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?IsCommandExists@SCA_DupScoutClient@@UAEHPBDPAK1@Z
?CopyCommand@SCA_DupScoutClient@@UAEHPBD0@Z
?RenameCommand@SCA_DupScoutClient@@UAEHPBD0@Z
?GetCommandList@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?GetCommandInfoList@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?GetCommandStatusList@SCA_DupScoutClient@@UAEHPAKPAPAVSCA_ConfigObj@@@Z
?AddCommand@SCA_DupScoutClient@@UAEHPBD@Z
?DeleteCommand@SCA_DupScoutClient@@UAEHPBD@Z
?MoveCommandUp@SCA_DupScoutClient@@UAEHPBD@Z
?MoveCommandDown@SCA_DupScoutClient@@UAEHPBD@Z
?GetCommandObj@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?SetCommandObj@SCA_DupScoutClient@@UAEHPBDPAVSCA_ConfigObj@@@Z
?StartCommand@SCA_DupScoutClient@@UAEHPBDKKPAK@Z
?PauseCommand@SCA_DupScoutClient@@UAEHPBD@Z
?ResumeCommand@SCA_DupScoutClient@@UAEHPBD@Z
?StopCommand@SCA_DupScoutClient@@UAEHPBD@Z
?SetCommandPerfMode@SCA_DupScoutClient@@UAEHPBDK@Z
?GetTaskStatusLabels@SCA_DupScoutClient@@UAEHKPAPAVSCA_ConfigObj@@@Z
?PauseTask@SCA_DupScoutClient@@UAEHK@Z
?ResumeTask@SCA_DupScoutClient@@UAEHK@Z
?StopTask@SCA_DupScoutClient@@UAEHK@Z
?StopAllTasks@SCA_DupScoutClient@@UAEHXZ
?GetCommandResultsObj@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?GetCommandErrorsObj@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?GetCommandReportObj@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?GetReportIndexObj@SCA_DupScoutClient@@UAEHKPAPAVSCA_ConfigObj@@@Z
?GetReportInfoObj@SCA_DupScoutClient@@UAEHKPAPAVSCA_ConfigObj@@@Z
?GetReportObj@SCA_DupScoutClient@@UAEHKKPAPAVSCA_ConfigObj@@@Z
?GetReportFileName@SCA_DupScoutClient@@UAEHKPAD@Z
?GetNextReportFileName@SCA_DupScoutClient@@UAEHPAD@Z
?IsReportExists@SCA_DupScoutClient@@UAEHKPBD0000PAK@Z
?GetReportInfo@SCA_DupScoutClient@@UAEHKKPAKPAD10@Z
?AddReportObj@SCA_DupScoutClient@@UAEHKPAVSCA_ConfigObj@@PAK1@Z
?ImportReport@SCA_DupScoutClient@@UAEHKPBDPAK1@Z
?DeleteReport@SCA_DupScoutClient@@UAEHKK@Z
?AddReportView@SCA_DupScoutClient@@UAEHKKKKPBDPAK@Z
?AnalyzeReports@SCA_DupScoutClient@@UAEHKK@Z
?GetReportViewObj@SCA_DupScoutClient@@UAEHKPAPAVSCA_ConfigObj@@@Z
?DeleteReportView@SCA_DupScoutClient@@UAEHK@Z
?IsPeriodicJobExists@SCA_DupScoutClient@@UAEHPBDPAK@Z
?GetPeriodicJobsObj@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?AddPeriodicJobObj@SCA_DupScoutClient@@UAEHPBDPAVSCA_ConfigObj@@@Z
?GetPeriodicJobObj@SCA_DupScoutClient@@UAEHKPAPAVSCA_ConfigObj@@@Z
?SetPeriodicJobObj@SCA_DupScoutClient@@UAEHKPAVSCA_ConfigObj@@@Z
?DeletePeriodicJob@SCA_DupScoutClient@@UAEHK@Z
?DeleteAllPeriodicJobs@SCA_DupScoutClient@@UAEHXZ
?GetBatchCommandsIndex@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?IsBatchCommandExists@SCA_DupScoutClient@@UAEHPBDPAK@Z
?AddBatchCommandObj@SCA_DupScoutClient@@UAEHPBDPAVSCA_ConfigObj@@@Z
?GetBatchCommandObj@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?SetBatchCommandObj@SCA_DupScoutClient@@UAEHPBDPAVSCA_ConfigObj@@@Z
?StartBatchCommand@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?StopBatchCommand@SCA_DupScoutClient@@UAEHPBD@Z
?GetBatchCommandTasks@SCA_DupScoutClient@@UAEHPBDPAPAVSCA_ConfigObj@@@Z
?GetBatchCommandStatus@SCA_DupScoutClient@@UAEHPBDPAK11111@Z
?DeleteBatchCommand@SCA_DupScoutClient@@UAEHPBD@Z
?DeleteAllBatchCommands@SCA_DupScoutClient@@UAEHXZ
?ConnectNetworkDrive@SCA_DupScoutClient@@UAEHPBD000PAKPAD@Z
?DisconnectNetworkDrive@SCA_DupScoutClient@@UAEHPBDKPAKPAD@Z
?StartWebServer@SCA_DupScoutClient@@UAEHXZ
?GetNetShareList@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?SetNetShareList@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@@Z
?GetSpaceMonitorListObj@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?AddSpaceMonitorObj@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@@Z
?SetSpaceMonitorObj@SCA_DupScoutClient@@UAEHKPAVSCA_ConfigObj@@@Z
?GetSpaceMonitorObj@SCA_DupScoutClient@@UAEHKPAPAVSCA_ConfigObj@@@Z
?MoveSpaceMonitorUp@SCA_DupScoutClient@@UAEHK@Z
?MoveSpaceMonitorDown@SCA_DupScoutClient@@UAEHK@Z
?DeleteSpaceMonitor@SCA_DupScoutClient@@UAEHK@Z
?DeleteAllSpaceMonitors@SCA_DupScoutClient@@UAEHXZ
??0SCA_DupScoutInterface@@QAE@XZ
?Connect@SCA_DupScoutClient@@QAEHPBDGKPAK@Z
?Login@SCA_DupScoutInterface@@QAEHPBD0PAK1PADK@Z
?SetProductConfig@SCA_DupScoutInterface@@QAEHPAVSPP_Config@@@Z
?Deserialize@SCA_DupConfigUser@@QAEHPAVSPP_Config@@PAVSCA_ConfigObj@@K@Z
?SetUserConfig@SCA_DupScoutInterface@@QAEHPAVSCA_DupConfigUser@@K@Z
?GetProductConfig@SCA_DupScoutInterface@@QAEHPAVSPP_Config@@@Z
?GetUserConfig@SCA_DupScoutInterface@@QAEHPAVSPP_Config@@PAVSCA_DupConfigUser@@@Z
?Serialize@SCA_DupConfigUser@@QAEHPAVSCA_ConfigObj@@@Z
??0SCA_DupReportInfo@@QAE@XZ
??1SCA_DupReportInfo@@UAE@XZ
?AddBatchCommand@SCA_DupScoutInterface@@QAEHPBDPAVSCA_BatchCommand@@@Z
?StartBatchCommand@SCA_DupScoutInterface@@QAEHPBDPAVSCA_BatchTaskList@@@Z
?GetBatchCommandTasks@SCA_DupScoutInterface@@QAEHPBDPAVSCA_BatchTaskList@@@Z
?GetReportInfoObj@SCA_DupScoutInterface@@QAEHKPAVSCA_DupReportInfo@@@Z
?ShowUsers@SCA_DupReportView@@QAEHXZ
?SaveUsersReport@SCA_DupReportView@@QAEHPAVSPP_Config@@PBD@Z
??0SCA_DupReportView@@QAE@PAVSCA_DupReportManager@@K@Z
?GetReportView@SCA_DupScoutInterface@@QAEHKPAVSCA_DupReportView@@@Z
??1SCA_DupReportView@@UAE@XZ
?ShowHosts@SCA_DupReportView@@QAEHXZ
?SaveHostsReport@SCA_DupReportView@@QAEHPAVSPP_Config@@PBD@Z
?AddReport@SCA_DupScoutInterface@@QAEHKPAVSCA_DupReport@@PAK1@Z
??0SCA_DupReportIndex@@QAE@PAVSPP_Config@@PAVSCA_DupConfigUser@@PAVSCA_ConfigObj@@@Z
?GetReportIndex@SCA_DupScoutInterface@@QAEHKPAVSCA_DupReportIndex@@@Z
?GetReport@SCA_DupScoutInterface@@QAEHKKPAVSCA_DupReport@@@Z
??1SCA_DupReportIndex@@UAE@XZ
?GetCommandResults@SCA_DupScoutInterface@@QAEHPBDPAVSCA_ConfigObj@@@Z
?GetCommandReport@SCA_DupScoutInterface@@QAEHPBDPAVSCA_DupReport@@@Z
?GetCommand@SCA_DupScoutInterface@@QAEHPBDPAVSCA_DupCommand@@@Z
?SetCommand@SCA_DupScoutInterface@@QAEHPBDPAVSCA_DupCommand@@@Z
?GetDebugLog@SCA_DupScoutInterface@@QAEHKKPAKPAVSCA_DebugLog@@@Z
?ThreadFunc@SCA_DupActionProc@@UAEKXZ
?Pause@SCA_DupActionProc@@UAEHXZ
?Continue@SCA_DupActionProc@@UAEHXZ
?StopProcess@SCA_DupActionProc@@UAEHH@Z
??0SCA_DupActionProc@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@@Z
?Init@SCA_DupActionProc@@QAEHPAVSCA_DupReport@@PAVSCA_ConfigObj@@K@Z
?StartProcess@SCA_DupActionProc@@UAEHXZ
??1SCA_DupActionProc@@UAE@XZ
??0SCA_DupActionManager@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@PAVSCA_ConfigObj@@@Z
?AnalyzeDuplicates@SCA_DupActionManager@@QAEHPAVSCA_DupCommand@@PAVSCA_DupReport@@@Z
??1SCA_DupActionManager@@UAE@XZ
?Init@SCA_DupManager@@QAEHPAVSCA_DupCommand@@@Z
?LoadConfig@SCA_DupConfigUser@@QAEHPAVSPP_Config@@@Z
??0SCA_DupConfigUser@@QAE@PAVSPP_Config@@@Z
??0SCA_DupManager@@QAE@PAVSPP_Config@@PAVSPP_ConfigUser@@PAVSCA_ConfigObj@@@Z
??1SCA_DupConfigUser@@UAE@XZ
?SaveConfig@SCA_DupConfigUser@@UAEHXZ
?InitDefConfig@SCA_DupConfigUser@@UAEHPAVSPP_Config@@@Z
?ValidateShortcuts@SCA_DupConfigUser@@UAEHKH@Z
?GetDefaultAdvancedOptions@SCA_DupConfigUser@@UAEHKPAUtagSPP_ADVANCED_OPTION@@KPAK@Z
??1SCA_DupCommandList@@UAE@XZ
??1SCA_DupManager@@UAE@XZ
?ThreadFunc@SCA_DupManager@@UAEKXZ
?StartProcess@SCA_DupManager@@UAEHXZ
?Pause@SCA_DupManager@@UAEHXZ
?Continue@SCA_DupManager@@UAEHXZ
?StopProcess@SCA_DupManager@@UAEHH@Z
?Suspend@SCA_DupScoutClient@@UAEHXZ
?RestartServer@SCA_DupScoutClient@@UAEHXZ
?StopServer@SCA_DupScoutClient@@UAEHXZ
?TestSmtpServer@SCA_DupScoutClient@@UAEHPAK@Z
?GetSmtpServerSetup@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?SetupSmtpServer@SCA_DupScoutClient@@UAEHPBD000KKKKKPAK@Z
?SetCustomRulesObj@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@@Z
?GetCustomRulesObj@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?SetUserConfig@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@K@Z
?GetUserConfig@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?SetProductConfig@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@@Z
?GetProductConfig@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?GetServiceInfo@SCA_DupScoutClient@@UAEHPAD0@Z
?GetServerCounters@SCA_DupScoutClient@@UAEHPAK0PA_K@Z
?GetServerInfoEx@SCA_DupScoutClient@@UAEHPAK0PAD1100@Z
?GetServerInfo@SCA_DupScoutClient@@UAEHPAK0PAD11@Z
?GetStatusEx@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@00@Z
?GetStatusObj@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?GetStatus@SCA_DupScoutClient@@UAEHPAK@Z
?LoginEx2@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@PAPAV2@@Z
?ClearDebugLog@SCA_DupScoutClient@@UAEHXZ
?GetDebugLog@SCA_DupScoutClient@@UAEHKKPAKPAPAVSCA_ConfigObj@@@Z
?RegisterProduct@SCA_DupScoutClient@@UAEHPAVSCA_ConfigObj@@PAK@Z
?GetProductId@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z
?GetLicenseStatus@SCA_DupScoutClient@@UAEHPAKPAD@Z
?GetLicenseInfo@SCA_DupScoutClient@@UAEHPAKPAD1PAPAVSCA_ConfigObj@@@Z
??1SCA_DupScoutClient@@UAE@XZ
??1SCA_DupScoutInterface@@UAE@XZ
?GetAvailableDiskLetters@SCA_DupScoutClient@@UAEHPAPAVSCA_ConfigObj@@@Z

Exports

Exports

??0SCA_BatchCommand@@QAE@ABV0@@Z
??0SCA_BatchHost@@QAE@ABV0@@Z
??0SCA_BatchTask@@QAE@ABV0@@Z
??0SCA_BatchTaskList@@QAE@ABV0@@Z
??0SCA_ClsClass@@QAE@ABV0@@Z
??0SCA_ClsClassGroup@@QAE@ABV0@@Z
??0SCA_ClsCommand@@QAE@AAV0@@Z
??0SCA_ClsModule@@QAE@ABV0@@Z
??0SCA_ClsModuleInfo@@QAE@ABV0@@Z
??0SCA_ClsModuleList@@QAE@ABV0@@Z
??0SCA_ClsResultsClass@@QAE@ABV0@@Z
??0SCA_ClsResultsGroup@@QAE@ABV0@@Z
??0SCA_ClsResultsModule@@QAE@ABV0@@Z
??0SCA_CmdTool@@QAE@AAV0@@Z
??0SCA_CopyBuffer@@QAE@ABV0@@Z
??0SCA_CopyCommand@@QAE@AAV0@@Z
??0SCA_CrashLog@@QAE@ABV0@@Z
??0SCA_DebugLog@@QAE@ABV0@@Z
??0SCA_DelCommand@@QAE@AAV0@@Z
??0SCA_Dir@@QAE@ABV0@@Z
??0SCA_DirScout@@QAE@AAV0@@Z
??0SCA_DupAction@@QAE@ABV0@@Z
??0SCA_DupActionManager@@QAE@ABV0@@Z
??0SCA_DupActionProc@@QAE@AAV0@@Z
??0SCA_DupClassifier@@QAE@AAV0@@Z
??0SCA_DupCommand@@QAE@AAV0@@Z
??0SCA_DupCommandList@@QAE@ABV0@@Z
??0SCA_DupConfigUser@@QAE@AAV0@@Z
??0SCA_DupFile@@QAE@ABV0@@Z
??0SCA_DupManager@@QAE@AAV0@@Z
??0SCA_DupReport@@QAE@AAV0@@Z
??0SCA_DupReportIndex@@QAE@ABV0@@Z
??0SCA_DupReportInfo@@QAE@ABV0@@Z
??0SCA_DupReportView@@QAE@ABV0@@Z
??0SCA_DupReporter@@QAE@ABV0@@Z
??0SCA_DupScoutClient@@QAE@AAV0@@Z
??0SCA_DupScoutInterface@@QAE@AAV0@@Z
??0SCA_DupSet@@QAE@ABV0@@Z
??0SCA_EmailOptions@@QAE@ABV0@@Z
??0SCA_ExcludeDirs@@QAE@ABV0@@Z
??0SCA_FieldList@@QAE@ABV0@@Z
??0SCA_FieldList@@QAE@XZ
??0SCA_File@@QAE@ABV0@@Z
??0SCA_FilePoolEx@@QAE@ABV0@@Z
??0SCA_FileProcessor@@QAE@ABV0@@Z
??0SCA_FileScanner@@QAE@ABV0@@Z
??0SCA_FileScout@@QAE@ABV0@@Z
??0SCA_FileTask@@QAE@ABV0@@Z
??0SCA_KeyCommand@@QAE@ABV0@@Z
??0SCA_LogOptions@@QAE@ABV0@@Z
??0SCA_MemPool1@@QAE@ABV0@@Z
??0SCA_MemPool@@QAE@ABV0@@Z
??0SCA_NetMessage@@QAE@AAV0@@Z
??0SCA_NetServerAgent@@QAE@ABV0@@Z
??0SCA_NetShareInfo@@QAE@ABV0@@Z
??0SCA_NetShareList@@QAE@ABV0@@Z
??0SCA_NetTransport@@QAE@ABV0@@Z
??0SCA_PeriodicJob@@QAE@ABV0@@Z
??0SCA_PeriodicJobs@@QAE@ABV0@@Z
??0SCA_ProcessLog@@QAE@ABV0@@Z
??0SCA_ProcessOp@@QAE@ABV0@@Z
??0SCA_SearchRule@@QAE@ABV0@@Z
??0SCA_SearchRuleFactory@@QAE@ABV0@@Z
??0SCA_SearchRuleList@@QAE@ABV0@@Z
??0SCA_SearchRuleSet@@QAE@ABV0@@Z
??0SCA_Sound@@QAE@ABV0@@Z
??0SCA_SoundList@@QAE@ABV0@@Z
??0SCA_SpaceMon@@QAE@ABV0@@Z
??0SCA_SpaceMonAction@@QAE@ABV0@@Z
??0SCA_SpaceMonList@@QAE@ABV0@@Z
??0SCA_SqlInterface@@QAE@ABV0@@Z
??0SCA_SqlManager@@QAE@AAV0@@Z
??0SCA_SqlReportInfo@@QAE@ABV0@@Z
??0SCA_StringList@@QAE@ABV0@@Z
??0SCA_StringStor@@QAE@ABV0@@Z
??0SCA_ThreadObj@@QAE@ABV0@@Z
??0SCA_UserInfo@@QAE@ABV0@@Z
??0SCA_UserList@@QAE@ABV0@@Z
??0SCA_VirtualCmdServer@@QAE@ABV0@@Z
??0SCA_XmlExporter@@QAE@ABV0@@Z
??0SPP_Command@@QAE@AAV0@@Z
??0SPP_Config@@QAE@ABV0@@Z
??0SPP_ConfigUser@@QAE@AAV0@@Z
??0SPP_License@@QAE@ABV0@@Z
??0SPP_LicenseManager@@QAE@ABV0@@Z
??0SPP_MgmConfigUser@@QAE@AAV0@@Z
??0SPP_MgmConfigUser@@QAE@PAVSPP_Config@@@Z
??0SPP_PathHash@@QAE@ABV0@@Z
??0SPP_ValueTrend@@QAE@ABV0@@Z
??1SCA_FieldList@@UAE@XZ
??1SPP_MgmConfigUser@@UAE@XZ
??4SCA_BatchCommand@@QAEAAV0@ABV0@@Z
??4SCA_BatchHost@@QAEAAV0@ABV0@@Z
??4SCA_BatchTask@@QAEAAV0@ABV0@@Z
??4SCA_BatchTaskList@@QAEAAV0@ABV0@@Z
??4SCA_ClsClass@@QAEAAV0@ABV0@@Z
??4SCA_ClsClassGroup@@QAEAAV0@ABV0@@Z
??4SCA_ClsCommand@@QAEAAV0@ABV0@@Z
??4SCA_ClsModule@@QAEAAV0@ABV0@@Z
??4SCA_ClsModuleInfo@@QAEAAV0@ABV0@@Z
??4SCA_ClsModuleList@@QAEAAV0@ABV0@@Z
??4SCA_ClsResultsClass@@QAEAAV0@ABV0@@Z
??4SCA_ClsResultsGroup@@QAEAAV0@ABV0@@Z
??4SCA_ClsResultsModule@@QAEAAV0@ABV0@@Z
??4SCA_CmdTool@@QAEAAV0@ABV0@@Z
??4SCA_ConfigObj@@QAEAAV0@ABV0@@Z
??4SCA_CopyBuffer@@QAEAAV0@ABV0@@Z
??4SCA_CopyCommand@@QAEAAV0@ABV0@@Z
??4SCA_CrashLog@@QAEAAV0@ABV0@@Z
??4SCA_DebugLog@@QAEAAV0@ABV0@@Z
??4SCA_DelCommand@@QAEAAV0@ABV0@@Z
??4SCA_Dir@@QAEAAV0@ABV0@@Z
??4SCA_DirScout@@QAEAAV0@ABV0@@Z
??4SCA_DupAction@@QAEAAV0@ABV0@@Z
??4SCA_DupActionManager@@QAEAAV0@ABV0@@Z
??4SCA_DupActionProc@@QAEAAV0@ABV0@@Z
??4SCA_DupClassifier@@QAEAAV0@ABV0@@Z
??4SCA_DupCommand@@QAEAAV0@ABV0@@Z
??4SCA_DupCommandList@@QAEAAV0@ABV0@@Z
??4SCA_DupConfigUser@@QAEAAV0@ABV0@@Z
??4SCA_DupFile@@QAEAAV0@ABV0@@Z
??4SCA_DupManager@@QAEAAV0@ABV0@@Z
??4SCA_DupReport@@QAEAAV0@ABV0@@Z
??4SCA_DupReportIndex@@QAEAAV0@ABV0@@Z
??4SCA_DupReportInfo@@QAEAAV0@ABV0@@Z
??4SCA_DupReportView@@QAEAAV0@ABV0@@Z
??4SCA_DupReporter@@QAEAAV0@ABV0@@Z
??4SCA_DupScoutClient@@QAEAAV0@ABV0@@Z
??4SCA_DupScoutInterface@@QAEAAV0@ABV0@@Z
??4SCA_DupSet@@QAEAAV0@ABV0@@Z
??4SCA_EmailOptions@@QAEAAV0@ABV0@@Z
??4SCA_ExcludeDirs@@QAEAAV0@ABV0@@Z
??4SCA_FieldList@@QAEAAV0@ABV0@@Z
??4SCA_File@@QAEAAV0@ABV0@@Z
??4SCA_FilePoolEx@@QAEAAV0@ABV0@@Z
??4SCA_FileProcessor@@QAEAAV0@ABV0@@Z
??4SCA_FileScanner@@QAEAAV0@ABV0@@Z
??4SCA_FileScout@@QAEAAV0@ABV0@@Z
??4SCA_FileTask@@QAEAAV0@ABV0@@Z
??4SCA_KeyCommand@@QAEAAV0@ABV0@@Z
??4SCA_LogOptions@@QAEAAV0@ABV0@@Z
??4SCA_MemPool1@@QAEAAV0@ABV0@@Z
??4SCA_MemPool@@QAEAAV0@ABV0@@Z
??4SCA_NetMessage@@QAEAAV0@ABV0@@Z
??4SCA_NetServerAgent@@QAEAAV0@ABV0@@Z
??4SCA_NetShareInfo@@QAEAAV0@ABV0@@Z
??4SCA_NetShareList@@QAEAAV0@ABV0@@Z
??4SCA_NetTransport@@QAEAAV0@ABV0@@Z
??4SCA_PeriodicJob@@QAEAAV0@ABV0@@Z
??4SCA_PeriodicJobs@@QAEAAV0@ABV0@@Z
??4SCA_ProcessLog@@QAEAAV0@ABV0@@Z
??4SCA_ProcessOp@@QAEAAV0@ABV0@@Z
??4SCA_SearchRule@@QAEAAV0@ABV0@@Z
??4SCA_SearchRuleFactory@@QAEAAV0@ABV0@@Z
??4SCA_SearchRuleList@@QAEAAV0@ABV0@@Z
??4SCA_SearchRuleSet@@QAEAAV0@ABV0@@Z
??4SCA_Sound@@QAEAAV0@ABV0@@Z
??4SCA_SoundList@@QAEAAV0@ABV0@@Z
??4SCA_SpaceMon@@QAEAAV0@ABV0@@Z
??4SCA_SpaceMonAction@@QAEAAV0@ABV0@@Z
??4SCA_SpaceMonList@@QAEAAV0@ABV0@@Z
??4SCA_SqlInterface@@QAEAAV0@ABV0@@Z
??4SCA_SqlManager@@QAEAAV0@ABV0@@Z
??4SCA_SqlReportInfo@@QAEAAV0@ABV0@@Z
??4SCA_StringList@@QAEAAV0@ABV0@@Z
??4SCA_StringStor@@QAEAAV0@ABV0@@Z
??4SCA_ThreadObj@@QAEAAV0@ABV0@@Z
??4SCA_UserInfo@@QAEAAV0@ABV0@@Z
??4SCA_UserList@@QAEAAV0@ABV0@@Z
??4SCA_VirtualCmdServer@@QAEAAV0@ABV0@@Z
??4SCA_XmlExporter@@QAEAAV0@ABV0@@Z
??4SPP_Command@@QAEAAV0@ABV0@@Z
??4SPP_Config@@QAEAAV0@ABV0@@Z
??4SPP_ConfigUser@@QAEAAV0@ABV0@@Z
??4SPP_License@@QAEAAV0@ABV0@@Z
??4SPP_LicenseManager@@QAEAAV0@ABV0@@Z
??4SPP_MgmConfigUser@@QAEAAV0@ABV0@@Z
??4SPP_PathHash@@QAEAAV0@ABV0@@Z
??4SPP_ValueTrend@@QAEAAV0@ABV0@@Z
??_7SCA_BatchCommand@@6B@
??_7SCA_BatchHost@@6B@
??_7SCA_BatchTask@@6B@
??_7SCA_BatchTaskList@@6B@
??_7SCA_ClsClass@@6B@
??_7SCA_ClsClassGroup@@6B@
??_7SCA_ClsCommand@@6B@
??_7SCA_ClsModule@@6B@
??_7SCA_ClsModuleInfo@@6B@
??_7SCA_ClsModuleList@@6B@
??_7SCA_ClsResultsClass@@6B@
??_7SCA_ClsResultsGroup@@6B@
??_7SCA_ClsResultsModule@@6B@
??_7SCA_CmdTool@@6B@
??_7SCA_CopyBuffer@@6B@
??_7SCA_CopyCommand@@6B@
??_7SCA_CrashLog@@6B@
??_7SCA_DebugLog@@6B@
??_7SCA_DelCommand@@6B@
??_7SCA_Dir@@6B@
??_7SCA_DirScout@@6B@
??_7SCA_DupAction@@6B@
??_7SCA_DupActionManager@@6B@
??_7SCA_DupActionProc@@6BSCA_ThreadObj@@@
??_7SCA_DupActionProc@@6BSPP_ProcManager@@@
??_7SCA_DupClassifier@@6BSCA_ThreadObj@@@
??_7SCA_DupClassifier@@6BSCA_ViewClassifier@@@
??_7SCA_DupCommand@@6B@
??_7SCA_DupCommandList@@6B@
??_7SCA_DupConfigUser@@6B@
??_7SCA_DupFile@@6B@
??_7SCA_DupManager@@6BSCA_ThreadObj@@@
??_7SCA_DupManager@@6BSPP_ProcManager@@@
??_7SCA_DupReport@@6B@
??_7SCA_DupReportIndex@@6B@
??_7SCA_DupReportInfo@@6B@
??_7SCA_DupReportView@@6B@
??_7SCA_DupReporter@@6BSCA_ProgressObj@@@
??_7SCA_DupReporter@@6BSCA_ThreadObj@@@
??_7SCA_DupScoutClient@@6B@
??_7SCA_DupScoutInterface@@6B@
??_7SCA_DupSet@@6B@
??_7SCA_EmailOptions@@6B@
??_7SCA_ExcludeDirs@@6B@
??_7SCA_FieldList@@6B@
??_7SCA_File@@6B@
??_7SCA_FilePoolEx@@6B@
??_7SCA_FileProcessor@@6B@
??_7SCA_FileScanner@@6B@
??_7SCA_FileScout@@6BSCA_ThreadObj@@@
??_7SCA_FileScout@@6BSPP_ProcManager@@@
??_7SCA_FileTask@@6B@
??_7SCA_KeyCommand@@6B@
??_7SCA_LogOptions@@6B@
??_7SCA_MemPool1@@6B@
??_7SCA_MemPool@@6B@
??_7SCA_NetMessage@@6B@
??_7SCA_NetServerAgent@@6B@
??_7SCA_NetShareInfo@@6B@
??_7SCA_NetShareList@@6B@
??_7SCA_NetTransport@@6B@
??_7SCA_PeriodicJob@@6B@
??_7SCA_PeriodicJobs@@6B@
??_7SCA_ProcessLog@@6B@
??_7SCA_ProcessOp@@6B@
??_7SCA_SearchRule@@6B@
??_7SCA_SearchRuleFactory@@6B@
??_7SCA_SearchRuleList@@6B@
??_7SCA_SearchRuleSet@@6B@
??_7SCA_Sound@@6B@
??_7SCA_SoundList@@6B@
??_7SCA_SpaceMon@@6B@
??_7SCA_SpaceMonAction@@6B@
??_7SCA_SpaceMonList@@6B@
??_7SCA_SqlInterface@@6B@
??_7SCA_SqlManager@@6B@
??_7SCA_SqlReportInfo@@6B@
??_7SCA_StringList@@6B@
??_7SCA_StringStor@@6B@
??_7SCA_ThreadObj@@6B@
??_7SCA_UserInfo@@6B@
??_7SCA_UserList@@6B@
??_7SCA_VirtualCmdServer@@6B@
??_7SCA_XmlExporter@@6B@
??_7SPP_Command@@6B@
??_7SPP_Config@@6B@
??_7SPP_ConfigUser@@6B@
??_7SPP_License@@6B@
??_7SPP_LicenseManager@@6B@
??_7SPP_MgmConfigUser@@6B@
??_7SPP_PathHash@@6B@
??_7SPP_ValueTrend@@6B@
??_C@_01KBOJ@s?$AA@
??_C@_01PLJA@0?$AA@
??_C@_02CHDK@OR?$AA@
??_C@_02DCHH@NC?$AA@
??_C@_02DDOB@NI?$AA@
??_C@_02EAIC@EQ?$AA@
??_C@_02GCFD@CS?$AA@
??_C@_02GHFJ@NA?$AA@
??_C@_02GNBM@GT?$AA@
??_C@_02GOPL@GE?$AA@
??_C@_02HFB@IN?$AA@
??_C@_02JIOA@NB?$AA@
??_C@_02JLAH@NS?$AA@
??_C@_02LPPA@EW?$AA@
??_C@_02MNAF@NE?$AA@
??_C@_02NOKF@BW?$AA@
??_C@_02OAFA@LE?$AA@
??_C@_02ODLH@LT?$AA@
??_C@_03CLCB@ERR?$AA@
??_C@_03DMKA@XML?$AA@
??_C@_03EAH@MD5?$AA@
??_C@_03HFBI@FLR?$AA@
??_C@_03HKLE@LOW?$AA@
??_C@_03HLKA@CSV?$AA@
??_C@_03JFLD@ZIP?$AA@
??_C@_03JNDF@DIR?$AA@
??_C@_03KLIF@SIG?$AA@
??_C@_03LACO@AND?$AA@
??_C@_03LOMH@csv?$AA@
??_C@_03MELB@CRC?$AA@
??_C@_03MJMD@ALL?$AA@
??_C@_03MLBK@pdf?$AA@
??_C@_03NMMF@INV?$AA@
??_C@_03NPHJ@SQL?$AA@
??_C@_03OHN@PDF?$AA@
??_C@_03PJMH@xml?$AA@
??_C@_03PKEJ@txt?$AA@
??_C@_04BJIF@UNIX?$AA@
??_C@_04CGLB@VIEW?$AA@
??_C@_04CLJK@FULL?$AA@
??_C@_04COF@None?$AA@
??_C@_04HEBB@YEAR?$AA@
??_C@_04HHIJ@MOVE?$AA@
??_C@_04HPFN@EXIT?$AA@
??_C@_04IGNI@EDIT?$AA@
??_C@_04IMJI@WEEK?$AA@
??_C@_04JGEF@SHA1?$AA@
??_C@_04JKFK@HTML?$AA@
??_C@_04KCJO@COPY?$AA@
??_C@_04KIBI@HELP?$AA@
??_C@_04KLBG@SAVE?$AA@
??_C@_04KPMG@SCAN?$AA@
??_C@_04MKJL@LINK?$AA@
??_C@_04NILO@TEXT?$AA@
??_C@_04PANM@STOP?$AA@
??_C@_04PDLA@LOAD?$AA@
??_C@_04PFHP@html?$AA@
??_C@_05BFNN@Ready?$AA@
??_C@_05CKBG@Error?$AA@
??_C@_05CKLC@REGEX?$AA@
??_C@_05CLBC@EMPTY?$AA@
??_C@_05DGMO@ABOUT?$AA@
??_C@_05DOND@MONTH?$AA@
??_C@_05EEDH@Empty?$AA@
??_C@_05IMFP@TODAY?$AA@
??_C@_05JAMF@RegEx?$AA@
??_C@_05JKKC@PAUSE?$AA@
??_C@_05NNB@MTIME?$AA@
??_C@_05ODHK@Today?$AA@
??_C@_05ODIL@START?$AA@
??_C@_06BAHB@CANCEL?$AA@
??_C@_06BOEM@ERRORS?$AA@
??_C@_06DHPE@Delete?$AA@
??_C@_06FHAH@MANUAL?$AA@
??_C@_06FMEK@FUTURE?$AA@
??_C@_06FMHL@DELETE?$AA@
??_C@_06HFMD@Errors?$AA@
??_C@_06KGLH@OLDEST?$AA@
??_C@_06KIMP@NEWEST?$AA@
??_C@_06LABA@RENAME?$AA@
??_C@_06LFAB@LAYOUT?$AA@
??_C@_06LLNC@Equals?$AA@
??_C@_06LOAA@Active?$AA@
??_C@_06MFMJ@SHA256?$AA@
??_C@_06MGAC@CHARTS?$AA@
??_C@_06NELH@MEDIUM?$AA@
??_C@_06OGAC@SELECT?$AA@
??_C@_06PKIJ@Paused?$AA@
??_C@_07BGGD@CONSOLE?$AA@
??_C@_07CFDA@WINDOWS?$AA@
??_C@_07CNBI@BLAKE2S?$AA@
??_C@_07COPP@BLAKE2B?$AA@
??_C@_07DNBH@EXECUTE?$AA@
??_C@_07FMNI@REPORTS?$AA@
??_C@_07KFPJ@NETWORK?$AA@
??_C@_07LBDI@MOVE?9TO?$AA@
??_C@_07MKIM@OPTIONS?$AA@
??_C@_07PCHH@Unknown?$AA@
??_C@_08BCJA@ZIP?9COPY?$AA@
??_C@_08BHPB@Compress?$AA@
??_C@_08CGHL@Shortcut?$AA@
??_C@_08CLEE@SHORTCUT?$AA@
??_C@_08CPI@Category?$AA@
??_C@_08FIEB@Contains?$AA@
??_C@_08HDIP@CONTINUE?$AA@
??_C@_08JANN@In?5Range?$AA@
??_C@_08JHKJ@Wildcard?$AA@
??_C@_08JKJG@WILDCARD?$AA@
??_C@_08KIBM@CLASSIFY?$AA@
??_C@_08KNIC@NOTEMPTY?$AA@
??_C@_08MHIH@ZIP?9MOVE?$AA@
??_C@_08PKHN@DATABASE?$AA@
??_C@_09BBHE@Not?5Equal?$AA@
??_C@_09BDNJ@AUTO?9USER?$AA@
??_C@_09DPK@HARD?9LINK?$AA@
??_C@_09EFOC@Ends?5With?$AA@
??_C@_09FIJH@In?5Future?$AA@
??_C@_09GOND@Not?5Empty?$AA@
??_C@_09IEGF@Hard?5Link?$AA@
??_C@_09KLAM@File?5Size?$AA@
??_C@_09MIGF@Less?5Than?$AA@
??_C@_09OCGG@Directory?$AA@
??_C@_09OINJ@File?5Type?$AA@
??_C@_0BA@EJJK@folder_16px?4png?$AA@
??_C@_0BA@GEOJ@Duplicate?5Files?$AA@
??_C@_0BA@NDHD@dupsct_16px?4png?$AA@
??_C@_0BB@BFNF@During?5This?5Year?$AA@
??_C@_0BB@BMCC@Last?5Access?5Days?$AA@
??_C@_0BB@JLLD@Greater?5or?5Equal?$AA@
??_C@_0BB@LDHE@Last?5Access?5Date?$AA@
??_C@_0BB@LEMP@Open?5Online?5Help?$AA@
??_C@_0BB@LPLH@Last?5Access?5Time?$AA@
??_C@_0BB@ONFM@During?5This?5Week?$AA@
??_C@_0BB@OOLJ@Last?5Access?5Year?$AA@
??_C@_0BC@GNK@Switch?5GUI?5Layout?$AA@
??_C@_0BC@KFOM@Modification?5Date?$AA@
??_C@_0BC@KJCP@Modification?5Time?$AA@
??_C@_0BC@KLK@Modification?5Days?$AA@
??_C@_0BC@LNFC@During?5This?5Month?$AA@
??_C@_0BC@PICB@Modification?5Year?$AA@
??_C@_0BD@BPLC@Shortcut?5To?3?5?$CFs?2?$CFs?$AA@
??_C@_0BD@CEKF@hard_disk_16px?4png?$AA@
??_C@_0BD@JMNJ@dup_files_16px?4png?$AA@
??_C@_0BD@KFBP@file_attr_16px?4png?$AA@
??_C@_0BE@IBKM@Disk?5Change?5Monitor?$AA@
??_C@_0BE@IKPG@Hard?5Link?5To?3?5?$CFs?2?$CFs?$AA@
??_C@_0BE@KNC@Disk?5Space?5Analysis?$AA@
??_C@_0BE@LOEO@Invalid?5Report?5Type?$AA@
??_C@_0BE@MDHO@File?5Classification?$AA@
??_C@_0BE@NBM@Freed?3?5?$CFld?5File?$CFs?0?5?$AA@
??_C@_0BE@NJFI@Edit?5Search?5Command?$AA@
??_C@_0BE@NMOP@Open?5Options?5Dialog?$AA@
??_C@_0BE@PDHH@Copy?5Search?5Command?$AA@
??_C@_0BF@HAOK@performance_16px?4png?$AA@
??_C@_0BF@MGDN@file_action_16px?4png?$AA@
??_C@_0BG@EEIN@Stop?5Search?5Operation?$AA@
??_C@_0BG@GHEF@Delete?5Search?5Command?$AA@
??_C@_0BG@JHLO@?3?1images?1ask_16px?4png?$AA@
??_C@_0BG@LODK@Rename?5Search?5Command?$AA@
??_C@_0BG@NCLF@Total?3?5?$CFs?0?5Files?3?5?$CFld?$AA@
??_C@_0BH@JIGI@?3?1images?1link_16px?4png?$AA@
??_C@_0BH@NCGB@Pause?5Search?5Operation?$AA@
??_C@_0BH@OMBI@Start?5Search?5Operation?$AA@
??_C@_0BJ@KAKA@Compress?5and?5Move?5To?3?5?$CFs?$AA@
??_C@_0BJ@OLE@Duplicates?3?5?$CFld?5File?$CFs?0?5?$AA@
??_C@_0BK@BCOK@Open?5Search?5Errors?5Dialog?$AA@
??_C@_0BK@DAMN@Cannot?5create?5SCA_DupSize?$AA@
??_C@_0BK@EPGJ@Duplicate?5field?5name?5?9?5?$CFs?$AA@
??_C@_0BK@JLJC@Continue?5Search?5Operation?$AA@
??_C@_0BL@CEKA@Open?5Debug?5Messages?5Dialog?$AA@
??_C@_0BL@ECAI@?4?4?2libdup?2SCA_DupManager?4h?$AA@
??_C@_0BL@GNKF@Open?5Network?5Search?5Dialog?$AA@
??_C@_0BM@FGLH@?3?1images?1gzip_file_16px?4png?$AA@
??_C@_0BM@FOFI@Save?5Duplicate?5Files?5Report?$AA@
??_C@_0BM@GEOK@?3?1images?1file_move_16px?4png?$AA@
??_C@_0BM@GLIM@?3?1images?1gzip_move_16px?4png?$AA@
??_C@_0BM@JLDB@View?5File?5Categories?5Charts?$AA@
??_C@_0BM@JNGC@?3?1images?1hard_link_16px?4png?$AA@
??_C@_0BM@OKFH@Load?5Duplicate?5Files?5Report?$AA@
??_C@_0BN@BMM@Open?5Database?5Reports?5Dialog?$AA@
??_C@_0BN@ENOC@Invalid?5signature?5type?5?9?5?$CFld?$AA@
??_C@_0BO@LBCJ@?3?1images?1file_delete_16px?4png?$AA@
??_C@_0BO@PKOF@Schedule?5Periodic?5Search?5Jobs?$AA@
??_C@_0CA@MNHG@Files?3?5?$CFld?0?5Duplicates?3?5?$CFld?0?5?$CFs?$AA@
??_C@_0CB@JCOC@Cannot?5alloc?5?$CFld?5bytes?5of?5memory@
??_C@_0CC@EMEP@Invaid?5SQL?5table?5schema?5name?5?9?5?$CF@
??_C@_0CE@MAJE@?4?4?2?4?4?2platform?2libspp?2SCA_DupFil@
??_C@_0CF@DI@?4?4?2?4?4?2platform?2libspp?2SCA_ClsCla@
??_C@_0CF@GLFH@?4?4?2?4?4?2platform?2libspp?2SPP_PathHa@
??_C@_0CF@KBLJ@?4?4?2?4?4?2platform?2libpal?2SCA_MemPoo@
??_C@_0CG@IPLE@?4?4?2?4?4?2platform?2libpal?2SCA_Config@
??_C@_0CG@JLOH@?4?4?2?4?4?2platform?2libspp?2SCA_Proces@
??_C@_0CH@KKBM@?4?4?2?4?4?2platform?2libspp?2SCA_SqlMan@
??_C@_0CH@PEEI@Cannot?5alloc?5?$CFld?5bytes?5of?5memory@
??_C@_0CK@NMNO@?4?4?2?4?4?2platform?2libspp?2SCA_FilePr@
??_C@_0CM@CFON@?4?4?2?4?4?2platform?2libspp?2SCA_ClsRes@
??_C@_0CO@IMCF@SCA_MemPool1?3?5Unsupported?5buffer@
??_C@_0CP@EKPF@Invalid?5SCA_FileProcessor?5proces@
??_C@_0DD@NIAP@SPP_PathHash?3?3AddPath?3?5cannot?5ad@
??_C@_0DG@PJGP@SPP_PathHash?3?3AddPath?3?5cannot?5ad@
??_C@_0DH@NDAH@Total?5Files?3?5?$CFld?0?5Processed?3?5?$CFld@
??_C@_0EE@CKPL@SCA_ClsResultsClass?3?3SetClassNam@
??_C@_0L@CADP@Duplicates?$AA@
??_C@_0L@DCLI@Disk?5Space?$AA@
??_C@_0L@DOLA@Total?5Dirs?$AA@
??_C@_0L@FJFC@File?5Owner?$AA@
??_C@_0L@GIFN@AUTO?9MDATE?$AA@
??_C@_0L@KJKI@AUTO?9CDATE?$AA@
??_C@_0L@OJOC@AUTO?9ADATE?$AA@
??_C@_0M@EFEP@Move?5To?3?5?$CFs?$AA@
??_C@_0M@FOKC@Freed?5Space?$AA@
??_C@_0M@HAGD@Total?5Files?$AA@
??_C@_0M@IOHL@File?5Search?$AA@
??_C@_0M@JHMH@Begins?5With?$AA@
??_C@_0M@KDGB@Total?5Space?$AA@
??_C@_0M@KMD@Not?5Contain?$AA@
??_C@_0M@OOOJ@Performance?$AA@
??_C@_0N@DIFG@Process?5Time?$AA@
??_C@_0N@EFME@Greater?5Than?$AA@
??_C@_0N@FIHP@Not?5In?5Range?$AA@
??_C@_0N@NDBC@Not?5End?5With?$AA@
??_C@_0O@CPHB@Creation?5Days?$AA@
??_C@_0O@DLDL@Less?5or?5Equal?$AA@
??_C@_0O@GILO@time_16px?4png?$AA@
??_C@_0O@IACH@Creation?5Date?$AA@
??_C@_0O@IMOE@Creation?5Time?$AA@
??_C@_0O@LB@IDENTITY?$CI1?01?$CJ?$AA@
??_C@_0O@NAOF@MOVE?9AND?9LINK?$AA@
??_C@_0O@NNOK@Creation?5Year?$AA@

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

64065fb99b70ad6a5548d79aa92cb114

Headers

File Characteristics

Imports

libspp

libpal

msvcrt

kernel32

libdup

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 169KB

.rdata Size: 140KB - Virtual size: 136KB

.data Size: 24KB - Virtual size: 21KB

.text
Size: 172KB - Virtual size: 169KB

.rdata
Size: 140KB - Virtual size: 136KB

.data
Size: 24KB - Virtual size: 21KB