LogSession.dll
v2.1.2.1640
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported functions 16
UTAddToGroup
#1 · 0x29a30
UTAddToSession
#2 · 0x298f0
UTCloseSession
#3 · 0x29a90
UTGetDemographic
#4 · 0x29c40
UTGetNonDefaultDemographic
#5 · 0x29cf0
UTGetOptIn
#6 · 0x29ae0
UTInitialize
#7 · 0x29820
UTLogEvent
#8 · 0x29950
UTNewDataGroup
#9 · 0x299c0
UTOptInGet
#10 · 0x29b90
UTOptInSet
#11 · 0x29bf0
UTSetDemographic
#12 · 0x29ca0
UTSetNonDefaultDemographic
#13 · 0x29d50
UTSetOptIn
#14 · 0x29b40
UTSetSerializationState
#15 · 0x29db0
UTStartSession
#16 · 0x29880
No function matches your filter.
Imported DLLs & functions 273
ADVAPI32.dll
14
CryptAcquireContextA
0x10039008
CryptCreateHash
0x10039004
CryptDestroyHash
0x10039000
CryptGetHashParam
0x10039010
CryptHashData
0x10039034
CryptReleaseContext
0x1003900c
RegCloseKey
0x10039018
RegCreateKeyExW
0x10039030
RegDeleteKeyW
0x10039028
RegDeleteValueW
0x10039024
RegEnumValueW
0x10039020
RegOpenKeyExW
0x1003901c
RegQueryValueExW
0x1003902c
RegSetValueExW
0x10039014
KERNEL32.dll
69
CloseHandle
0x10039044
CompareFileTime
0x10039054
CopyFileW
0x10039060
CreateFileW
0x10039040
CreateProcessW
0x1003904c
DecodePointer
0x100390dc
DeleteCriticalSection
0x100390b8
DeleteFileW
0x10039084
EncodePointer
0x1003914c
EnterCriticalSection
0x100390b4
ExpandEnvironmentStringsW
0x100390a8
FileTimeToLocalFileTime
0x10039080
FindClose
0x10039068
FindFirstFileW
0x10039048
FindNextFileW
0x10039070
FindResourceExW
0x10039090
FindResourceW
0x10039114
FreeEnvironmentStringsW
0x1003906c
FreeLibrary
0x10039104
GetCurrentProcess
0x100390ec
GetCurrentProcessId
0x10039108
GetCurrentThreadId
0x100390d0
GetDiskFreeSpaceW
0x10039064
GetEnvironmentStringsW
0x10039058
GetExitCodeThread
0x10039088
GetFileAttributesExW
0x10039078
GetFileTime
0x10039074
GetLastError
0x100390fc
GetLocaleInfoA
0x100390c4
GetModuleFileNameW
0x100390a4
GetProcAddress
0x100390f8
GetProcessHeap
0x10039144
GetSystemDirectoryA
0x10039100
GetSystemInfo
0x100390cc
GetSystemTimeAsFileTime
0x1003910c
GetTickCount
0x100390d4
GetVersionExA
0x1003907c
GlobalMemoryStatusEx
0x100390c8
HeapAlloc
0x10039134
HeapDestroy
0x10039130
HeapFree
0x10039138
HeapReAlloc
0x1003913c
HeapSize
0x10039140
InitializeCriticalSection
0x100390ac
InitializeCriticalSectionAndSpinCount
0x10039118
InterlockedCompareExchange
0x10039124
InterlockedExchange
0x1003911c
IsDebuggerPresent
0x10039148
LeaveCriticalSection
0x100390b0
LoadLibraryA
0x100390f4
LoadLibraryW
0x1003905c
LoadResource
0x10039098
LockResource
0x100390a0
lstrlenW
0x100390bc
MoveFileExW
0x10039050
MultiByteToWideChar
0x10039094
QueryPerformanceCounter
0x100390d8
RaiseException
0x10039110
SetUnhandledExceptionFilter
0x100390f0
SizeofResource
0x1003909c
Sleep
0x10039120
SuspendThread
0x1003908c
TerminateProcess
0x10039128
UnhandledExceptionFilter
0x1003912c
VerLanguageNameW
0x100390c0
VirtualProtect
0x100390e8
WideCharToMultiByte
0x100390e0
WriteFile
0x1003903c
WriteProcessMemory
0x100390e4
MSVCP100.dll
99
?_BADOFF@std@@3_JB
0x100392c8
?_Decref@facet@locale@std@@QAEPAV123@XZ
0x100391d0
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
0x10039220
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
0x10039240
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x1003915c
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x100392b0
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x100392b8
?_Incref@facet@locale@std@@QAEXXZ
0x100391d4
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
0x10039168
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
0x1003917c
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
0x10039234
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x10039270
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
0x100391e4
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x10039164
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
0x100391f4
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
0x1003918c
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
0x10039230
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x1003926c
?_Xlength_error@std@@YAXPBD@Z
0x100392d0
?_Xout_of_range@std@@YAXPBD@Z
0x100392d4
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
0x10039154
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
0x100391dc
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
0x100392cc
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x10039298
??0_Lockit@std@@QAE@H@Z
0x100392c0
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
0x100391f0
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
0x10039188
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
0x1003927c
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
0x10039248
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x10039180
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
0x100391ec
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x10039184
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
0x100391e8
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
0x10039174
??1_Lockit@std@@QAE@XZ
0x100392c4
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x10039210
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100392d8
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x10039280
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x10039250
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100391a0
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x10039208
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100391a8
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
0x10039238
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100391c8
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
0x10039294
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
0x10039284
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
0x10039244
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
0x10039278
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
0x10039258
??Bid@locale@std@@QAEIXZ
0x100391d8
?always_noconv@codecvt_base@std@@QBE_NXZ
0x100391cc
?classic@locale@std@@SAABV12@XZ
0x1003928c
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x1003924c
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
0x1003923c
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
0x10039274
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
0x10039204
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x100391a4
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
0x10039290
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
0x10039254
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
0x10039170
?id@?$codecvt@DDH@std@@2V0locale@2@A
0x100391b0
?id@?$ctype@D@std@@2V0locale@2@A
0x10039288
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
0x10039214
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
0x1003925c
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
0x1003919c
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
0x10039198
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
0x100392ac
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
0x100392a8
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x10039194
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
0x100392a0
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
0x1003929c
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
0x1003921c
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
0x10039264
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
0x100391fc
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
0x1003916c
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
0x100391f8
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
0x1003920c
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x100391ac
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x100391c4
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
0x1003922c
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
0x100391bc
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x100391c0
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
0x10039200
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x10039190
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
0x100391e0
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0x10039158
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
0x10039218
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x10039260
?tolower@?$ctype@D@std@@QBEDD@Z
0x100392b4
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
0x10039228
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x10039268
?uncaught_exception@std@@YA_NXZ
0x100392bc
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x100392a4
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
0x10039178
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
0x10039160
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
0x10039224
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
0x100391b8
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
0x100392dc
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
0x100391b4
MSVCR100.dll
75
__clean_type_info_names_internal
0x100393e4
__CppXcptFilter
0x100393c4
__CxxFrameHandler3
0x100393a8
__dllonexit
0x100393cc
_amsg_exit
0x100393c0
_beginthreadex
0x10039350
_crt_debugger_hook
0x100393d8
_CxxThrowException
0x10039408
_encoded_null
0x100393b4
_except_handler4_common
0x100393dc
_fseeki64
0x10039320
_getpid
0x10039374
_gmtime32_s
0x1003937c
_initterm
0x100393b8
_initterm_e
0x100393bc
_ismbcspace
0x1003935c
_localtime64
0x10039394
_lock
0x100393d0
_lock_file
0x10039334
_malloc_crt
0x100393b0
_mbsinc
0x10039364
_mbsstr
0x10039384
_onexit
0x100393d4
_purecall
0x1003933c
_stricmp
0x100393fc
_time32
0x1003936c
_time64
0x1003934c
_unlock
0x100393c8
_unlock_file
0x10039314
_vscprintf
0x10039368
_vscwprintf
0x10039398
_wassert
0x1003938c
_wgetenv_s
0x100393a4
_wtoi
0x10039380
?_type_info_dtor_internal_method@type_info@@QAEXXZ
0x100393e0
??_V@YAXPAX@Z
0x10039338
??0bad_cast@std@@QAE@ABV01@@Z
0x10039310
??0bad_cast@std@@QAE@PBD@Z
0x1003930c
??0exception@std@@QAE@ABQBD@Z
0x100393e8
??0exception@std@@QAE@ABV01@@Z
0x1003940c
??1bad_cast@std@@UAE@XZ
0x10039308
??1exception@std@@UAE@XZ
0x100393ec
??2@YAPAXI@Z
0x10039300
??3@YAXPAX@Z
0x100393f8
?terminate@@YAXXZ
0x100393ac
?what@exception@std@@UBEPBDXZ
0x100393f0
fclose
0x100392fc
fflush
0x10039324
fgetc
0x100392f4
fgetpos
0x1003931c
fputc
0x10039304
free
0x100392e8
fsetpos
0x1003932c
fwrite
0x10039344
ispunct
0x10039390
isspace
0x10039388
malloc
0x100392ec
memchr
0x100392f0
memcpy
0x10039404
memcpy_s
0x10039340
memmove
0x100392e4
memmove_s
0x10039354
memset
0x10039400
setvbuf
0x10039330
strftime
0x10039378
strncat
0x100393f4
strncpy
0x100392f8
strncpy_s
0x10039348
strnlen
0x10039358
strtok_s
0x10039370
tolower
0x10039328
ungetc
0x10039318
vsprintf_s
0x10039360
vswprintf_s
0x100393a0
wcsnlen
0x1003939c
SetupDiEnumDeviceInfo
0x10039418
SetupDiGetClassDevsA
0x1003941c
SetupDiGetDeviceRegistryPropertyA
0x10039414
SHCreateDirectoryExW
0x1003942c
SHFileOperationW
0x10039424
SHGetFolderPathW
0x10039428
GetFileVersionInfoSizeW
0x10039454
GetFileVersionInfoW
0x10039458
VerQueryValueW
0x10039450
No function matches your filter.