Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
OneDriveSetup.exe
Resource
win10v2004-20231215-en
Target
OneDriveSetup.exe
Size
29.4MB
MD5
0ea845f896c821e04009c0336d7547ec
SHA1
ce8669d8826c8795115d58c62e726ae53943dce9
SHA256
94273ec2daed031adb6a954e5e49b29e61042d26bfbe074af534ea743f54460c
SHA512
eeca5098d10506eb1d6eee2cbc50fdceda7dea6468ca753a01059f28b407c4123a78230fb312c0dcfbf87b44703a7c2c9d4e04b71d6bfd63323f865e7b977b34
SSDEEP
786432:bwDzDsBnXydqA+UHdl2ui3WOsk9BKeVVe90A2MAS:bwDzIRQqA1HHFiGo9nVeGS
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RtlUnwind
VerSetConditionMask
WerReportSetParameter
WerReportCreate
WerReportSubmit
WerReportCloseHandle
PostQueuedCompletionStatus
GetDiskFreeSpaceExW
MultiByteToWideChar
WideCharToMultiByte
GetComputerNameW
GetUserDefaultLocaleName
IsWow64Process
GetProductInfo
LoadLibraryW
GetUserDefaultLCID
GetProcAddress
GetSystemTimeAsFileTime
WaitForSingleObject
TerminateProcess
CreateMutexW
GetModuleHandleW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileW
OpenProcess
GetVersionExW
WerUnregisterFile
WerRegisterFile
GetModuleFileNameW
GetCurrentProcess
GetCommandLineW
UnlockFileEx
LockFileEx
VerifyVersionInfoW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
DeviceIoControl
GetQueuedCompletionStatus
MoveFileExW
CopyFileW
FreeLibrary
Sleep
CloseHandle
GetTempPathW
SetFileTime
RemoveDirectoryW
GetTempFileNameW
GetFullPathNameW
CreateDirectoryW
GetSystemTime
GetCurrentThreadId
GetCurrentProcessId
SetLastError
WriteFile
FindNextFileW
FindFirstFileW
FindVolumeClose
FindClose
DeleteFileW
CreateFileW
CompareFileTime
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
ReadDirectoryChangesW
CreateIoCompletionPort
OpenFileById
GetFinalPathNameByHandleW
GetLastError
RaiseException
CreateDirectoryA
GetShortPathNameW
RemoveDirectoryA
GetTempFileNameA
CompareStringA
FileTimeToLocalFileTime
CompareStringOrdinal
ReadFile
DecodePointer
LocalFree
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
FileTimeToDosDateTime
SystemTimeToFileTime
GetFileSizeEx
FindNextVolumeW
FindFirstVolumeW
ExpandEnvironmentStringsW
GetExitCodeProcess
CreateProcessW
CompareStringW
GetSystemPowerStatus
FormatMessageA
CreateFileMappingA
UnlockFile
HeapCompact
DeleteFileA
LoadLibraryA
CreateFileA
GetLongPathNameW
GlobalLock
GlobalAlloc
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetComputerNameExW
GetLocalTime
TryEnterCriticalSection
GlobalMemoryStatusEx
GetVolumePathNameW
WaitForMultipleObjects
GetFileAttributesW
GetSystemTimes
QueueUserWorkItem
ReleaseMutex
SetFileAttributesW
GetTickCount64
GetUserDefaultUILanguage
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
GetProcessTimes
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPriorityClass
SetPriorityClass
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
LoadLibraryExA
FlushInstructionCache
InitOnceExecuteOnce
InitializeCriticalSection
AreFileApisANSI
HeapCreate
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
FlushViewOfFile
IsDebuggerPresent
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
GetStringTypeW
FormatMessageW
VirtualFree
DuplicateHandle
SwitchToThread
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceFrequency
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetCPInfo
LCMapStringW
GetLocaleInfoW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetStdHandle
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEndOfFile
WriteConsoleW
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
GetWindow
GetParent
UnregisterClassW
GetMessageW
TranslateMessage
SetWindowLongW
GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
SetWindowTextW
SetForegroundWindow
LoadIconW
SetActiveWindow
GetDlgItem
DialogBoxParamW
CreateDialogParamW
BringWindowToTop
IsWindowVisible
SetWindowPos
DispatchMessageW
GetClassNameW
GetWindowThreadProcessId
PostMessageW
EnumWindows
MonitorFromWindow
GetForegroundWindow
GetMonitorInfoW
PostThreadMessageW
AllowSetForegroundWindow
GetShellWindow
GetSystemMetrics
SendMessageW
AttachThreadInput
PostQuitMessage
IsWindow
DestroyWindow
ShowWindow
InitializeAcl
GetAce
DeleteAce
CryptDestroyKey
CryptSetHashParam
CryptImportKey
RegNotifyChangeKeyValue
ConvertStringSidToSidW
AddAce
EventUnregister
EventRegister
EventWrite
EventWriteTransfer
CredWriteW
CredReadW
CredEnumerateW
CredDeleteW
CredFree
CreateProcessWithTokenW
RegOverridePredefKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
GetAclInformation
StartServiceW
QueryServiceConfigW
CreateWellKnownSid
ControlService
QueryServiceStatusEx
DeleteService
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
CreateProcessAsUserW
DuplicateTokenEx
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
RegUnLoadKeyW
RegLoadKeyW
RegEnumKeyW
RegCreateKeyTransactedW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
GetSidSubAuthorityCount
EqualSid
RegEnumValueW
CopySid
GetLengthSid
IsValidSid
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
GetUserNameW
RegDeleteValueW
RegDeleteKeyExW
RegDeleteTreeW
RegEnumKeyExW
RegQueryInfoKeyW
RegGetValueW
RegSetKeyValueW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
LookupAccountNameW
SHGetKnownFolderPath
CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHFileOperationW
SHChangeNotify
ShellExecuteExW
SHGetFolderPathAndSubDirW
ord709
SHCreateDirectoryExW
SHLoadNonloadedIconOverlayIdentifiers
ord526
SHGetFolderPathA
CoInitializeEx
CoUninitialize
StringFromCLSID
CoCreateGuid
CoGetObject
CoSetProxyBlanket
StringFromGUID2
CoCreateInstance
CLSIDFromString
CoTaskMemFree
PropVariantClear
CreateStreamOnHGlobal
CoTaskMemAlloc
VariantClear
VariantInit
VariantChangeType
SysFreeString
LoadTypeLi
LoadRegTypeLi
GetRecordInfoFromTypeInfo
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
SysStringByteLen
CreateTransaction
RollbackTransaction
CommitTransaction
RmGetList
RmStartSession
RmEndSession
RmRegisterResources
CertVerifyCertificateChainPolicy
CryptStringToBinaryW
CryptBinaryToStringW
GetModuleFileNameExW
RpcStringBindingComposeW
RpcBindingFree
RpcServerInqCallAttributesW
RpcServerUnregisterIf
RpcBindingSetAuthInfoExW
RpcBindingVectorFree
RpcEpRegisterW
RpcServerInqBindings
RpcServerUseProtseqW
RpcServerRegisterIfEx
RpcBindingFromStringBindingW
UuidToStringW
RpcEpUnregister
RpcStringFreeW
GetUserNameExW
SHGetValueW
PathStripPathW
PathSkipRootW
SHRegGetBoolUSValueW
PathIsPrefixW
PathFindFileNameW
SHCreateStreamOnFileEx
SHSetValueW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
SHCreateStreamOnFileW
StrStrIW
PathFindExtensionW
SHDeleteValueW
SHDeleteKeyW
PathIsRelativeW
SHRegGetPathW
PathFileExistsA
PathFindFileNameA
PathGetDriveNumberA
PathIsDirectoryA
SHCreateStreamOnFileA
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
HttpSendRequestA
InternetSetStatusCallbackA
InternetSetOptionW
InternetQueryDataAvailable
InternetGetConnectedState
HttpOpenRequestA
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
HttpAddRequestHeadersA
bind
WSAStartup
socket
htonl
htons
setsockopt
listen
closesocket
accept
WSAGetLastError
send
CreateEnvironmentBlock
GetDefaultUserProfileDirectoryW
UnloadUserProfile
WinVerifyTrustEx
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
SetDIBColorTable
GetObjectW
CreateDIBSection
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetAdaptersInfo
URLOpenStreamW
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdiplusStartup
GdipDisposeImage
GdipFree
GdipAlloc
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusShutdown
ord345
ord10
ord22
ord20
ord11
ord13
ord14
ord23
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV0123@@Z
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@5@@Z
??0EventProperties@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@5@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@$$QAU0123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@CW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@EW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@FW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@GW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@HW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@IW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@JW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@NW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@PBDW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@UGUID_t@123@W4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@Utime_ticks_t@123@W4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@XZ
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@_JW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@_KW4PiiKind@123@@Z
??0EventProperty@Telemetry@Applications@Microsoft@@QAE@_NW4PiiKind@123@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@HHHABV?$initializer_list@E@std@@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@PBD@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@QBE_N@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@U_GUID@@@Z
??0GUID_t@Telemetry@Applications@Microsoft@@QAE@XZ
??0ILogger@Telemetry@Applications@Microsoft@@QAE@$$QAV0123@@Z
??0ILogger@Telemetry@Applications@Microsoft@@QAE@ABV0123@@Z
??0ILogger@Telemetry@Applications@Microsoft@@QAE@XZ
??0LogConfiguration@Telemetry@Applications@Microsoft@@QAE@$$QAU0123@@Z
??0LogConfiguration@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0LogConfiguration@Telemetry@Applications@Microsoft@@QAE@XZ
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@ABU0123@@Z
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@PB_J@Z
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@XZ
??0time_ticks_t@Telemetry@Applications@Microsoft@@QAE@_K@Z
??1EventProperties@Telemetry@Applications@Microsoft@@UAE@XZ
??1EventProperty@Telemetry@Applications@Microsoft@@UAE@XZ
??1LogConfiguration@Telemetry@Applications@Microsoft@@UAE@XZ
??1LogManager@Telemetry@Applications@Microsoft@@MAE@XZ
??4EventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV0123@@Z
??4EventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@std@@@Z
??4EventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@V?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@std@@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@ABU0123@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@C@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@E@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@F@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@G@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@H@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@I@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@J@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@N@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@PBD@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@UGUID_t@123@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@Utime_ticks_t@123@@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@_J@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@_K@Z
??4EventProperty@Telemetry@Applications@Microsoft@@QAEAAU0123@_N@Z
??4GUID_t@Telemetry@Applications@Microsoft@@QAEAAU0123@ABU0123@@Z
??4ILogger@Telemetry@Applications@Microsoft@@QAEAAV0123@$$QAV0123@@Z
??4ILogger@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV0123@@Z
??4LogConfiguration@Telemetry@Applications@Microsoft@@QAAAAU0123@ABU0123@@Z
??4time_ticks_t@Telemetry@Applications@Microsoft@@QAEAAU0123@ABU0123@@Z
??YEventProperties@Telemetry@Applications@Microsoft@@QAEAAV0123@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@std@@@Z
??_7EventProperties@Telemetry@Applications@Microsoft@@6B@
??_7EventProperty@Telemetry@Applications@Microsoft@@6B@
??_7ILogger@Telemetry@Applications@Microsoft@@6B@
??_7LogConfiguration@Telemetry@Applications@Microsoft@@6B@
??_7LogManager@Telemetry@Applications@Microsoft@@6B@
?AddEventListener@LogManager@Telemetry@Applications@Microsoft@@SAXW4DebugEventType@234@AAVDebugEventListener@234@@Z
?DispatchEvent@LogManager@Telemetry@Applications@Microsoft@@SA_NAAVDebugEvent@234@@Z
?DispatchEvent@LogManager@Telemetry@Applications@Microsoft@@SA_NW4DebugEventType@234@@Z
?Flush@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?FlushAndTeardown@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?GetLogger@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetLogger@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLogger@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@XZ
?GetName@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetPiiProperties@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@Telemetry@Applications@Microsoft@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@Telemetry@Applications@Microsoft@@@2@@std@@@2@@std@@XZ
?GetPolicyBitFlags@EventProperties@Telemetry@Applications@Microsoft@@QBE_KXZ
?GetPriority@EventProperties@Telemetry@Applications@Microsoft@@QBE?AW4EventPriority@234@XZ
?GetProperties@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Telemetry@Applications@Microsoft@@@std@@@2@@std@@XZ
?GetProperties@LogConfiguration@Telemetry@Applications@Microsoft@@QBAXAAV?$map@PBDPBDU?$less@PBD@std@@V?$allocator@U?$pair@QBDPBD@std@@@2@@std@@@Z
?GetProperty@LogConfiguration@Telemetry@Applications@Microsoft@@QBAPBDPBD@Z
?GetSemanticContext@LogManager@Telemetry@Applications@Microsoft@@SAPAVISemanticContext@234@XZ
?GetTimestamp@EventProperties@Telemetry@Applications@Microsoft@@QBE_JXZ
?GetTransmitProfileName@LogManager@Telemetry@Applications@Microsoft@@SAPBDW4TransmitProfile@234@@Z
?GetType@EventProperties@Telemetry@Applications@Microsoft@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Initialize@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Initialize@LogManager@Telemetry@Applications@Microsoft@@SAPAVILogger@234@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABULogConfiguration@234@@Z
?LoadTransmitProfiles@LogManager@Telemetry@Applications@Microsoft@@SA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?PauseTransmission@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?RemoveEventListener@LogManager@Telemetry@Applications@Microsoft@@SAXW4DebugEventType@234@AAVDebugEventListener@234@@Z
?ResetTransmitProfiles@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?ResumeTransmission@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@@Z
?SetContext@ILogger@Telemetry@Applications@Microsoft@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UGUID_t@234@W4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Utime_ticks_t@234@W4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@@Z
?SetContext@LogManager@Telemetry@Applications@Microsoft@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4PiiKind@234@@Z
?SetName@EventProperties@Telemetry@Applications@Microsoft@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetPolicyBitFlags@EventProperties@Telemetry@Applications@Microsoft@@QAEX_K@Z
?SetPriority@EventProperties@Telemetry@Applications@Microsoft@@QAEXW4EventPriority@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UGUID_t@234@W4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Utime_ticks_t@234@W4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V56@W4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@@Z
?SetProperty@EventProperties@Telemetry@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4PiiKind@234@@Z
?SetProperty@LogConfiguration@Telemetry@Applications@Microsoft@@QAAXPBD0@Z
?SetTimestamp@EventProperties@Telemetry@Applications@Microsoft@@QAEX_J@Z
?SetTransmitProfile@LogManager@Telemetry@Applications@Microsoft@@SAXW4TransmitProfile@234@@Z
?SetTransmitProfile@LogManager@Telemetry@Applications@Microsoft@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetType@EventProperties@Telemetry@Applications@Microsoft@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?UploadNow@LogManager@Telemetry@Applications@Microsoft@@SAXXZ
?checkup@LogManager@Telemetry@Applications@Microsoft@@KAXXZ
?clear@EventProperty@Telemetry@Applications@Microsoft@@QAEXXZ
?empty@EventProperty@Telemetry@Applications@Microsoft@@QAE_NXZ
?to_bytes@GUID_t@Telemetry@Applications@Microsoft@@QAEXAAY0BA@E@Z
?to_string@EventProperty@Telemetry@Applications@Microsoft@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?type_name@EventProperty@Telemetry@Applications@Microsoft@@SAPBDI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ