2e2876b8...0dff | VTI
Try VMRay Analyzer
VTI SCORE: 98/100
Dynamic Analysis Report
Classification: Ransomware

2e2876b86c6db28173dbd44c343a9fb1b15c32f4255e72f0d42b1ba7ec7f0dff (SHA256)

BadRansomware.exe

Windows Exe (x86-32)

Created at 2018-07-30 15:46:00

Notifications (2/2)

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

Severity Category Operation Classification
4/5
OS Disables a crucial system tool -
4/5
File System Renames user files Ransomware
  • Renames multiple user files. This is an indicator for an encryption attempt.
3/5
Persistence Modifies startup configuration -
2/5
Anti Analysis Resolves APIs dynamically to possibly evade static detection -
1/5
File System Modifies operating system directory -
  • Creates file "C:\\Windows\inf\.NET CLR Networking 4.0.0.0\5F4E6574776F726B696E6750657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\.NET Memory Cache 4.0\6E65746D656D6F727963616368652E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\ASP.NET\6173706E65745F706572662E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\ASP.NET_4.0.30319\6173706E65745F706572662E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\aspnet_state\6173706E65745F73746174655F706572662E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\MSDTC Bridge 3.0.0.0\5F5472616E73616374696F6E42726964676550657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\MSDTC Bridge 4.0.0.0\5F5472616E73616374696F6E42726964676550657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\ServiceModelEndpoint 3.0.0.0\5F536572766963654D6F64656C456E64706F696E7450657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\ServiceModelOperation 3.0.0.0\5F536572766963654D6F64656C4F7065726174696F6E50657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\ServiceModelService 3.0.0.0\5F536572766963654D6F64656C5365727669636550657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\SMSvcHost 3.0.0.0\5F534D537663486F737450657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\SMSvcHost 4.0.0.0\5F534D537663486F737450657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\Windows Workflow Foundation 3.0.0.0\50657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\Windows Workflow Foundation 4.0.0.0\50657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\inf\WmiApRpl\576D69417052706C2E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\4170706C69636174696F6E436F6E66696775726174696F6E506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\4E617669676174696F6E4261722E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\50617373776F726456616C756554657874426F782E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\50726F766964657273506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\5365637572697479506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\57656241646D696E506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\57697A617264506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\616C6572745F6C72672E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\415350646F744E45545F6C6F676F2E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\617370785F66696C652E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6272616E64696E675F46756C6C322E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6461726B426C75655F475241442E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\646573656C65637465645461625F3178312E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\666F6C6465722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E426C75652E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E57686974652E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\6865616465724752414449454E545F54616C6C2E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\68656C702E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\48656C7049636F6E5F736F6C69642E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\696D616765312E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\696D616765322E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\726571756972656442616E672E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656375726974795F77617465726D61726B2E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656C65637465645461625F3178312E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\73656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\746F70477261645265706561742E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\79656C6C6F77434F524E45522E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C526F6C65732E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\496E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C526F6C65732E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v2.0.50727\556E696E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\53716C50657273697374656E6365536572766963655F4C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\53716C50657273697374656E6365536572766963655F536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\547261636B696E675F4C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\547261636B696E675F536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\4170706C69636174696F6E436F6E66696775726174696F6E506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\4E617669676174696F6E4261722E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\50617373776F726456616C756554657874426F782E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\50726F766964657273506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\5365637572697479506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\57656241646D696E506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\57697A617264506167652E6373.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\616C6572745F6C72672E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\415350646F744E45545F6C6F676F2E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\617370785F66696C652E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6272616E64696E675F46756C6C322E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6461726B426C75655F475241442E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\646573656C65637465645461625F3178312E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\666F6C6465722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E426C75652E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6772616469656E745F6F6E57686974652E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\6865616465724752414449454E545F54616C6C2E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\68656C702E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\48656C7049636F6E5F736F6C69642E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\696D616765312E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\696D616765322E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\726571756972656442616E672E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656375726974795F77617465726D61726B2E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656C65637465645461625F3178312E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\73656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\746F70477261645265706561742E6A7067.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F6C656674436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\756E53656C65637465645461625F7269676874436F726E65722E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\79656C6C6F77434F524E45522E676966.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\6173706E65745F706572662E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\6173706E65745F73746174655F706572662E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\434F52506572664D6F6E53796D626F6C732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C526F6C65732E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\496E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\6E65746D656D6F727963616368652E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\50657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1025\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1028\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1029\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1030\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1031\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1032\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1033\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1035\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1036\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1037\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1038\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1040\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1041\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1042\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1043\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1044\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1045\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1046\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1049\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1053\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\1055\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\2052\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\2070\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\3082\65756C612E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\6865616465722E626D70.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\53706C61736853637265656E2E626D70.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.6.00081\77617465726D61726B2E626D70.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C50657273697374656E636550726F76696465724C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C50657273697374656E636550726F7669646572536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C576F726B666C6F77496E7374616E636553746F72654C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\44726F7053716C576F726B666C6F77496E7374616E636553746F7265536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E636550726F76696465724C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E636550726F7669646572536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E6365536572766963655F4C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C50657273697374656E6365536572766963655F536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C576F726B666C6F77496E7374616E636553746F72654C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C576F726B666C6F77496E7374616E636553746F7265536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\53716C576F726B666C6F77496E7374616E636553746F7265536368656D61557067726164652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\547261636B696E675F4C6F6769632E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\SQL\en\547261636B696E675F536368656D612E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\546869726450617274794E6F74696365732E747874.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C436F6D6D6F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C4D656D626572736869702E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C5065727369737453716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C506572736F6E616C697A6174696F6E2E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C526F6C65732E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C53716C53746174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C53716C537461746554656D706C6174652E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\556E696E7374616C6C5765624576656E7453716C50726F76696465722E73716C.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F446174614F7261636C65436C69656E7450657266436F756E746572735F73686172656431325F6E65757472616C2E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F4461746150657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F6461746170657266636F756E746572735F73686172656431325F6E65757472616C2E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F4E6574776F726B696E6750657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F4E6574776F726B696E6750657266436F756E746572735F76322E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F534D537663486F737450657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Microsoft.NET\Framework\v4.0.30319\5F5472616E73616374696F6E42726964676550657266436F756E746572732E68.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\41674170704C61756E63682E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\416743785F5343342E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\4167476C4661756C74486973746F72792E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\4167476C4667417070486973746F72792E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\4167476C476C6F62616C486973746F72792E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\4167476C5541445F505F532D312D352D32312D333738353431383038352D323537323438353233382D3839353832393333362D313030302E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\4167476C5541445F532D312D352D32312D333738353431383038352D323537323438353233382D3839353832393333362D313030302E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\Prefetch\4167526F627573742E6462.desu" in the OS directory.
  • Creates file "C:\\Windows\SoftwareDistribution\SelfUpdate\77756964656E742E747874.desu" in the OS directory.
  • Creates file "C:\\Windows\System32\catroot2\64626572722E747874.desu" in the OS directory.
  • Creates file "C:\\Windows\System32\6C6963656E73652E727466.desu" in the OS directory.
  • Creates file "C:\\Windows\System32\wbem\Performance\576D69417052706C2E68.desu" in the OS directory.
  • Creates file "C:\\Windows\System32\WindowsPowerShell\v1.0\Examples\70726F66696C652E707331.desu" in the OS directory.
  • Creates file "C:\\Windows\Temp\46585341504944656275674C6F6746696C652E747874.desu" in the OS directory.
  • Creates file "C:\\Windows\Temp\4658535449464644656275674C6F6746696C652E747874.desu" in the OS directory.
1/5
Process Process crashed -
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image