LogSession.dll
v2.1.2.1640
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported functions 16
UTAddToGroup
#1 · 0x2d710
UTAddToSession
#2 · 0x2d600
UTCloseSession
#3 · 0x2d750
UTGetDemographic
#4 · 0x2d8d0
UTGetNonDefaultDemographic
#5 · 0x2d950
UTGetOptIn
#6 · 0x2d790
UTInitialize
#7 · 0x2d560
UTLogEvent
#8 · 0x2d640
UTNewDataGroup
#9 · 0x2d6a0
UTOptInGet
#10 · 0x2d830
UTOptInSet
#11 · 0x2d890
UTSetDemographic
#12 · 0x2d910
UTSetNonDefaultDemographic
#13 · 0x2d990
UTSetOptIn
#14 · 0x2d7f0
UTSetSerializationState
#15 · 0x2d9d0
UTStartSession
#16 · 0x2d5a0
No function matches your filter.
Imported DLLs & functions 274
ADVAPI32.dll
14
CryptAcquireContextA
0x18003f010
CryptCreateHash
0x18003f008
CryptDestroyHash
0x18003f000
CryptGetHashParam
0x18003f020
CryptHashData
0x18003f068
CryptReleaseContext
0x18003f018
RegCloseKey
0x18003f030
RegCreateKeyExW
0x18003f060
RegDeleteKeyW
0x18003f050
RegDeleteValueW
0x18003f048
RegEnumValueW
0x18003f040
RegOpenKeyExW
0x18003f038
RegQueryValueExW
0x18003f058
RegSetValueExW
0x18003f028
KERNEL32.dll
70
CloseHandle
0x18003f088
CompareFileTime
0x18003f0a8
CopyFileW
0x18003f0c0
CreateFileW
0x18003f080
CreateProcessW
0x18003f098
DecodePointer
0x18003f238
DeleteCriticalSection
0x18003f170
DeleteFileW
0x18003f108
EncodePointer
0x18003f2a0
EnterCriticalSection
0x18003f168
ExpandEnvironmentStringsW
0x18003f150
FileTimeToLocalFileTime
0x18003f100
FindClose
0x18003f0d0
FindFirstFileW
0x18003f090
FindNextFileW
0x18003f0e0
FindResourceExW
0x18003f120
FindResourceW
0x18003f228
FreeEnvironmentStringsW
0x18003f0d8
FreeLibrary
0x18003f208
GetCurrentProcess
0x18003f1d8
GetCurrentProcessId
0x18003f210
GetCurrentThreadId
0x18003f1a0
GetDiskFreeSpaceW
0x18003f0c8
GetEnvironmentStringsW
0x18003f0b0
GetExitCodeThread
0x18003f110
GetFileAttributesExW
0x18003f0f0
GetFileTime
0x18003f0e8
GetLastError
0x18003f1f8
GetLocaleInfoA
0x18003f188
GetModuleFileNameW
0x18003f148
GetProcAddress
0x18003f1f0
GetProcessHeap
0x18003f290
GetSystemDirectoryA
0x18003f200
GetSystemInfo
0x18003f198
GetSystemTimeAsFileTime
0x18003f218
GetTickCount
0x18003f1a8
GetVersionExA
0x18003f0f8
GlobalMemoryStatusEx
0x18003f190
HeapAlloc
0x18003f270
HeapDestroy
0x18003f268
HeapFree
0x18003f278
HeapReAlloc
0x18003f280
HeapSize
0x18003f288
InitializeCriticalSection
0x18003f158
InitializeCriticalSectionAndSpinCount
0x18003f230
IsDebuggerPresent
0x18003f258
LeaveCriticalSection
0x18003f160
LoadLibraryA
0x18003f1e8
LoadLibraryW
0x18003f0b8
LoadResource
0x18003f130
LockResource
0x18003f140
lstrlenW
0x18003f178
MoveFileExW
0x18003f0a0
MultiByteToWideChar
0x18003f128
QueryPerformanceCounter
0x18003f1b0
RaiseException
0x18003f220
RtlCaptureContext
0x18003f1b8
RtlLookupFunctionEntry
0x18003f298
RtlVirtualUnwind
0x18003f260
SetUnhandledExceptionFilter
0x18003f1e0
SizeofResource
0x18003f138
Sleep
0x18003f240
SuspendThread
0x18003f118
TerminateProcess
0x18003f248
UnhandledExceptionFilter
0x18003f250
VerLanguageNameW
0x18003f180
VirtualProtect
0x18003f1d0
WideCharToMultiByte
0x18003f1c0
WriteFile
0x18003f078
WriteProcessMemory
0x18003f1c8
MSVCP100.dll
98
?_BADOFF@std@@3_JB
0x18003f588
?_Decref@facet@locale@std@@QEAAPEAV123@XZ
0x18003f3a0
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
0x18003f560
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
0x18003f470
?_Getcat@?$codecvt@DDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x18003f2b8
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
0x18003f550
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
0x18003f568
?_Incref@facet@locale@std@@QEAAXXZ
0x18003f3a8
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
0x18003f2d0
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
0x18003f2f8
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
0x18003f458
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
0x18003f4d0
?_Orphan_all@_Container_base0@std@@QEAAXXZ
0x18003f598
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
0x18003f3c8
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
0x18003f2c8
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
0x18003f3e8
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
0x18003f318
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
0x18003f450
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
0x18003f4c8
?_Xlength_error@std@@YAXPEBD@Z
0x18003f5a0
?_Xout_of_range@std@@YAXPEBD@Z
0x18003f5a8
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
0x18003f360
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
0x18003f3b8
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
0x18003f590
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
0x18003f520
??0_Lockit@std@@QEAA@H@Z
0x18003f578
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
0x18003f3e0
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
0x18003f310
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
0x18003f4e8
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
0x18003f480
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x18003f300
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
0x18003f3d8
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x18003f308
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
0x18003f3d0
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
0x18003f2e8
??1_Lockit@std@@QEAA@XZ
0x18003f580
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
0x18003f410
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x18003f5b0
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
0x18003f4f0
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x18003f490
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x18003f340
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
0x18003f400
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x18003f350
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
0x18003f460
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
0x18003f390
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
0x18003f518
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
0x18003f4f8
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
0x18003f478
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
0x18003f4e0
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
0x18003f4a0
??Bid@locale@std@@QEAA_KXZ
0x18003f3b0
?always_noconv@codecvt_base@std@@QEBA_NXZ
0x18003f398
?classic@locale@std@@SAAEBV12@XZ
0x18003f508
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
0x18003f488
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
0x18003f468
?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
0x18003f4d8
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
0x18003f3f8
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
0x18003f348
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
0x18003f510
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
0x18003f498
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
0x18003f2e0
?id@?$codecvt@DDH@std@@2V0locale@2@A
0x18003f430
?id@?$ctype@D@std@@2V0locale@2@A
0x18003f500
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
0x18003f418
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
0x18003f4a8
?in@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
0x18003f338
?out@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
0x18003f330
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
0x18003f548
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
0x18003f540
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
0x18003f328
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@H@2@_JHH@Z
0x18003f530
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@H@2@V32@H@Z
0x18003f528
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
0x18003f428
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
0x18003f4b8
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
0x18003f2d8
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
0x18003f408
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
0x18003f358
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
0x18003f388
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
0x18003f448
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
0x18003f378
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
0x18003f380
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
0x18003f3f0
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
0x18003f320
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
0x18003f3c0
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
0x18003f2b0
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
0x18003f420
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x18003f4b0
?tolower@?$ctype@D@std@@QEBADD@Z
0x18003f558
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
0x18003f440
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x18003f4c0
?uncaught_exception@std@@YA_NXZ
0x18003f570
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
0x18003f538
?unshift@?$codecvt@DDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z
0x18003f2f0
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
0x18003f2c0
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
0x18003f438
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
0x18003f370
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
0x18003f5b8
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
0x18003f368
MSVCR100.dll
76
__C_specific_handler
0x18003f760
__clean_type_info_names_internal
0x18003f7c8
__CppXcptFilter
0x18003f790
__crt_debugger_hook
0x18003f7b8
__CxxFrameHandler3
0x18003f750
__dllonexit
0x18003f7a0
_amsg_exit
0x18003f788
_beginthreadex
0x18003f6a0
_CxxThrowException
0x18003f818
_encoded_null
0x18003f780
_fseeki64
0x18003f640
_getpid
0x18003f6e8
_gmtime32_s
0x18003f6f8
_initterm
0x18003f770
_initterm_e
0x18003f778
_ismbcspace
0x18003f6b8
_localtime64
0x18003f728
_lock
0x18003f7a8
_lock_file
0x18003f668
_malloc_crt
0x18003f768
_mbsinc
0x18003f6c8
_mbsstr
0x18003f708
_onexit
0x18003f7b0
_purecall
0x18003f678
_stricmp
0x18003f7f8
_time32
0x18003f6d8
_time64
0x18003f698
_unlock
0x18003f798
_unlock_file
0x18003f628
_vscprintf
0x18003f6d0
_vscwprintf
0x18003f730
_wassert
0x18003f718
_wgetenv_s
0x18003f748
_wtoi
0x18003f700
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
0x18003f7c0
??_V@YAXPEAX@Z
0x18003f670
??0bad_cast@std@@QEAA@AEBV01@@Z
0x18003f620
??0bad_cast@std@@QEAA@PEBD@Z
0x18003f618
??0exception@std@@QEAA@AEBQEBD@Z
0x18003f7d0
??0exception@std@@QEAA@AEBV01@@Z
0x18003f820
??1bad_cast@std@@UEAA@XZ
0x18003f610
??1exception@std@@UEAA@XZ
0x18003f7d8
??2@YAPEAX_K@Z
0x18003f600
??3@YAXPEAX@Z
0x18003f7f0
?terminate@@YAXXZ
0x18003f758
?what@exception@std@@UEBAPEBDXZ
0x18003f7e0
fclose
0x18003f5f8
fflush
0x18003f648
fgetc
0x18003f5e8
fgetpos
0x18003f638
fputc
0x18003f608
free
0x18003f5d0
fsetpos
0x18003f658
fwrite
0x18003f688
ispunct
0x18003f720
isspace
0x18003f710
malloc
0x18003f5d8
memchr
0x18003f5e0
memcmp
0x18003f808
memcpy
0x18003f810
memcpy_s
0x18003f680
memmove
0x18003f5c8
memmove_s
0x18003f6a8
memset
0x18003f800
setvbuf
0x18003f660
strftime
0x18003f6f0
strncat
0x18003f7e8
strncpy
0x18003f5f0
strncpy_s
0x18003f690
strnlen
0x18003f6b0
strtok_s
0x18003f6e0
tolower
0x18003f650
ungetc
0x18003f630
vsprintf_s
0x18003f6c0
vswprintf_s
0x18003f740
wcsnlen
0x18003f738
SetupDiEnumDeviceInfo
0x18003f838
SetupDiGetClassDevsA
0x18003f840
SetupDiGetDeviceRegistryPropertyA
0x18003f830
SHCreateDirectoryExW
0x18003f860
SHFileOperationW
0x18003f850
SHGetFolderPathW
0x18003f858
EnumDisplayMonitors
0x18003f890
GetMonitorInfoA
0x18003f898
GetSystemMetrics
0x18003f888
GetFileVersionInfoSizeW
0x18003f8b0
GetFileVersionInfoW
0x18003f8b8
VerQueryValueW
0x18003f8a8
No function matches your filter.