Try VMRay Platform
Malicious
Classifications

Spyware Injector

Threat Names

Mal/Generic-S

Dynamic Analysis Report

Created on 2021-12-28T19:28:00

772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe

Windows Exe (x86-32)
...
Filters:
File Name Category Type Verdict Actions
C:\Users\kEecfMwgj\Desktop\772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe Sample File Binary
malicious
...
»
MIME Type application/vnd.microsoft.portable-executable
File Size 3.45 MB
MD5 110526d2882da3d46aa3d7023b00f41e Copy to Clipboard
SHA1 250a483cead19e65bc11d215d48289dff51241b0 Copy to Clipboard
SHA256 772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444 Copy to Clipboard
SSDeep 98304:4/lpBz0Mi19cNcuurKu0stiPJajebo04XY4OiCKU:4/lEz9cNnuRDOKio04vOiCR Copy to Clipboard
ImpHash c284fa365c4442728ac859c0f9ed4dc5 Copy to Clipboard
File Reputation Information
»
Verdict
malicious
Names Mal/Generic-S
PE Information
»
Image Base 0x400000
Entry Point 0x401000
Size Of Code 0x22000
Size Of Initialized Data 0x2cc00
File Type FileType.executable
Subsystem Subsystem.windows_gui
Machine Type MachineType.i386
Compile Timestamp 2021-12-25 08:57:15+00:00
Packer ASProtect v1.23 RC1
Sections (10)
»
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
- 0x401000 0x22000 0x11200 0x400 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 8.0
- 0x423000 0x47c 0x0 0x0 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 0.0
- 0x424000 0xf000 0x7800 0x11600 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 7.99
- 0x433000 0x2000 0x400 0x18e00 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 7.79
- 0x435000 0x1888fe 0x0 0x0 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 0.0
- 0x5be000 0x32b000 0x2f9c00 0x19200 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 8.0
- 0x8e9000 0x3000 0x1a00 0x312e00 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 7.97
.rsrc 0x8ec000 0x1b000 0x13a00 0x314800 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 8.0
.tZjoKcx 0x907000 0x4b000 0x4b000 0x328200 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 7.92
.adata 0x952000 0x1000 0x0 0x373200 IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE 0.0
Imports (5)
»
kernel32.dll (3)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetProcAddress - 0x907c28 0x507c28 0x328e28 0x0
GetModuleHandleA - 0x907c2c 0x507c2c 0x328e2c 0x0
LoadLibraryA - 0x907c30 0x507c30 0x328e30 0x0
user32.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
SendNotifyMessageA - 0x907d24 0x507d24 0x328f24 0x0
user32.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
GetProcessWindowStation - 0x907d2c 0x507d2c 0x328f2c 0x0
oleaut32.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
VariantChangeTypeEx - 0x907d34 0x507d34 0x328f34 0x0
kernel32.dll (1)
»
API Name Ordinal IAT Address Thunk RVA Thunk Offset Hint
RaiseException - 0x907d3c 0x507d3c 0x328f3c 0x0
Memory Dumps (296)
»
Name Process ID Start VA End VA Dump Reason PE Rebuild Bitness Entry Point YARA Actions
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF First Execution False 32-bit 0x00401000 False
...
buffer 1 0x001B0000 0x0020FFFF Content Changed False 32-bit - False
...
buffer 1 0x00290000 0x002EFFFF First Execution False 32-bit 0x002EE000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00291000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002D4DD8 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00294CB8 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00293518 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00292B38 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00296438 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x0029C310 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x0029AA70 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x0029B05C False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00299D00 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x00297500 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x0029D22C False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002B56A8 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002C3540 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002C4000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002AACA0 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002AD1F0 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002AB000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002B14C0 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002AE0F8 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002C00E4 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002C734C False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002CD2EC False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002D2040 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002A8B24 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002A17A4 False
...
buffer 1 0x03490000 0x03490FFF First Execution False 32-bit 0x03490000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002C9EBC False
...
buffer 1 0x034A0000 0x034A0FFF First Execution False 32-bit 0x034A0000 False
...
buffer 1 0x03450000 0x03450FFF First Execution False 32-bit 0x03450000 False
...
buffer 1 0x034C0000 0x034C0FFF First Execution False 32-bit 0x034C0000 False
...
buffer 1 0x03480000 0x03480FFF First Execution False 32-bit 0x03480000 False
...
buffer 1 0x03470000 0x03470FFF First Execution False 32-bit 0x03470000 False
...
buffer 1 0x034D0000 0x034D0FFF First Execution False 32-bit 0x034D0000 False
...
buffer 1 0x034E0000 0x034E0FFF First Execution False 32-bit 0x034E0000 False
...
buffer 1 0x03330000 0x03330FFF First Execution False 32-bit 0x03330000 False
...
buffer 1 0x03340000 0x03340FFF First Execution False 32-bit 0x03340000 False
...
buffer 1 0x032F0000 0x032F0FFF First Execution False 32-bit 0x032F0000 False
...
buffer 1 0x03360000 0x03360FFF First Execution False 32-bit 0x03360000 False
...
buffer 1 0x03320000 0x03320FFF First Execution False 32-bit 0x03320000 False
...
buffer 1 0x03310000 0x03310FFF First Execution False 32-bit 0x03310000 False
...
buffer 1 0x03380000 0x03380FFF First Execution False 32-bit 0x03380000 False
...
buffer 1 0x03280000 0x03280FFF First Execution False 32-bit 0x03280000 False
...
buffer 1 0x03290000 0x03290FFF First Execution False 32-bit 0x03290000 False
...
buffer 1 0x03240000 0x03240FFF First Execution False 32-bit 0x03240000 False
...
buffer 1 0x032B0000 0x032B0FFF First Execution False 32-bit 0x032B0000 False
...
buffer 1 0x03270000 0x03270FFF First Execution False 32-bit 0x03270000 False
...
buffer 1 0x03260000 0x03260FFF First Execution False 32-bit 0x03260000 False
...
buffer 1 0x032C0000 0x032C0FFF First Execution False 32-bit 0x032C0000 False
...
buffer 1 0x032D0000 0x032D0FFF First Execution False 32-bit 0x032D0000 False
...
buffer 1 0x028E0000 0x028E0FFF First Execution False 32-bit 0x028E0000 False
...
buffer 1 0x028F0000 0x028F0FFF First Execution False 32-bit 0x028F0000 False
...
buffer 1 0x028A0000 0x028A0FFF First Execution False 32-bit 0x028A0000 False
...
buffer 1 0x02910000 0x02910FFF First Execution False 32-bit 0x02910000 False
...
buffer 1 0x028D0000 0x028D0FFF First Execution False 32-bit 0x028D0000 False
...
buffer 1 0x028C0000 0x028C0FFF First Execution False 32-bit 0x028C0000 False
...
buffer 1 0x02930000 0x02930FFF First Execution False 32-bit 0x02930000 False
...
buffer 1 0x02900000 0x02900FFF First Execution False 32-bit 0x02900000 False
...
buffer 1 0x023C0000 0x023C0FFF First Execution False 32-bit 0x023C0000 False
...
buffer 1 0x023D0000 0x023D0FFF First Execution False 32-bit 0x023D0000 False
...
buffer 1 0x02380000 0x02380FFF First Execution False 32-bit 0x02380000 False
...
buffer 1 0x023A0000 0x023A0FFF First Execution False 32-bit 0x023A0000 False
...
buffer 1 0x023F0000 0x023F0FFF First Execution False 32-bit 0x023F0000 False
...
buffer 1 0x02410000 0x02410FFF First Execution False 32-bit 0x02410000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002D6A38 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x00401014 False
...
buffer 1 0x02830000 0x02830FFF First Execution False 32-bit 0x02830000 False
...
buffer 1 0x02840000 0x02840FFF First Execution False 32-bit 0x02840000 False
...
buffer 1 0x027F0000 0x027F0FFF First Execution False 32-bit 0x027F0000 False
...
buffer 1 0x02860000 0x02860FFF First Execution False 32-bit 0x02860000 False
...
buffer 1 0x02820000 0x02820FFF First Execution False 32-bit 0x02820000 False
...
buffer 1 0x02810000 0x02810FFF First Execution False 32-bit 0x02810000 False
...
buffer 1 0x02880000 0x02880FFF First Execution False 32-bit 0x02880000 False
...
buffer 1 0x035C0000 0x035C0FFF First Execution False 32-bit 0x035C0000 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002B24F0 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002B4210 False
...
buffer 1 0x00290000 0x002EFFFF Content Changed False 32-bit 0x002B3F1C False
...
buffer 1 0x03070000 0x03070FFF First Execution False 32-bit 0x03070000 False
...
buffer 1 0x03080000 0x03080FFF First Execution False 32-bit 0x03080000 False
...
buffer 1 0x03030000 0x03030FFF First Execution False 32-bit 0x03030000 False
...
buffer 1 0x030A0000 0x030A0FFF First Execution False 32-bit 0x030A0000 False
...
buffer 1 0x03060000 0x03060FFF First Execution False 32-bit 0x03060000 False
...
buffer 1 0x03050000 0x03050FFF First Execution False 32-bit 0x03050000 False
...
buffer 1 0x030C0000 0x030C0FFF First Execution False 32-bit 0x030C0000 False
...
buffer 1 0x03090000 0x03090FFF First Execution False 32-bit 0x03090000 False
...
buffer 1 0x035C0000 0x035C0FFF First Execution False 32-bit 0x035C0000 False
...
buffer 1 0x035C0000 0x035C0FFF First Execution False 32-bit 0x035C0000 False
...
buffer 1 0x02370000 0x02370FFF First Execution False 32-bit 0x02370000 False
...
buffer 1 0x02990000 0x02990FFF First Execution False 32-bit 0x02990000 False
...
buffer 1 0x029A0000 0x029A0FFF First Execution False 32-bit 0x029A0000 False
...
buffer 1 0x02950000 0x02950FFF First Execution False 32-bit 0x02950000 False
...
buffer 1 0x029C0000 0x029C0FFF First Execution False 32-bit 0x029C0000 False
...
buffer 1 0x02980000 0x02980FFF First Execution False 32-bit 0x02980000 False
...
buffer 1 0x02970000 0x02970FFF First Execution False 32-bit 0x02970000 False
...
buffer 1 0x029E0000 0x029E0FFF First Execution False 32-bit 0x029E0000 False
...
buffer 1 0x029D0000 0x029D0FFF First Execution False 32-bit 0x029D0000 False
...
buffer 1 0x02420000 0x02420FFF First Execution False 32-bit 0x02420000 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x00406AA1 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x00407270 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x00405876 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x0041C0B7 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x0040DF33 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x00402B90 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x004231B0 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x0041F6A7 False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x00421C20 False
...
buffer 1 0x0018F6F4 0x0018FE71 First Execution False 32-bit 0x0018F875 False
...
buffer 1 0x035C0000 0x035DFFFF Content Changed False 32-bit - False
...
772f0c407388e029e98f9d885f57a0e3ef9b0f42099a16fe6367fb321d4e2444.exe 1 0x00400000 0x00952FFF Content Changed False 32-bit 0x004227E7 False
...
buffer 1 0x001B0000 0x001B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x001C0000 0x001C0FFF Marked Executable False 32-bit - False
...
buffer 1 0x001D0000 0x001D0FFF Marked Executable False 32-bit - False
...
buffer 1 0x001E0000 0x001E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x001F0000 0x001F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x00200000 0x00200FFF Marked Executable False 32-bit - False
...
buffer 1 0x003F0000 0x003F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x009D0000 0x009D0FFF Marked Executable False 32-bit - False
...
buffer 1 0x009E0000 0x009E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x009F0000 0x009F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02350000 0x02350FFF Marked Executable False 32-bit - False
...
buffer 1 0x02360000 0x02360FFF Marked Executable False 32-bit - False
...
buffer 1 0x02390000 0x02390FFF Marked Executable False 32-bit - False
...
buffer 1 0x023B0000 0x023B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x023E0000 0x023E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02400000 0x02400FFF Marked Executable False 32-bit - False
...
buffer 1 0x02430000 0x02430FFF Marked Executable False 32-bit - False
...
buffer 1 0x02440000 0x02440FFF Marked Executable False 32-bit - False
...
buffer 1 0x02760000 0x02760FFF Marked Executable False 32-bit - False
...
buffer 1 0x02770000 0x02770FFF Marked Executable False 32-bit - False
...
buffer 1 0x02780000 0x02780FFF Marked Executable False 32-bit - False
...
buffer 1 0x02790000 0x02790FFF Marked Executable False 32-bit - False
...
buffer 1 0x027A0000 0x027A0FFF Marked Executable False 32-bit - False
...
buffer 1 0x027B0000 0x027B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x027C0000 0x027C0FFF Marked Executable False 32-bit - False
...
buffer 1 0x027D0000 0x027D0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02800000 0x02800FFF Marked Executable False 32-bit - False
...
buffer 1 0x02850000 0x02850FFF Marked Executable False 32-bit - False
...
buffer 1 0x02870000 0x02870FFF Marked Executable False 32-bit - False
...
buffer 1 0x028B0000 0x028B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02920000 0x02920FFF Marked Executable False 32-bit - False
...
buffer 1 0x02960000 0x02960FFF Marked Executable False 32-bit - False
...
buffer 1 0x029B0000 0x029B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x029F0000 0x029F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A00000 0x02A00FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A10000 0x02A10FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A20000 0x02A20FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A30000 0x02A30FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A40000 0x02A40FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A50000 0x02A50FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A60000 0x02A60FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A70000 0x02A70FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A80000 0x02A80FFF Marked Executable False 32-bit - False
...
buffer 1 0x02A90000 0x02A90FFF Marked Executable False 32-bit - False
...
buffer 1 0x02AA0000 0x02AA0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02AB0000 0x02AB0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02AC0000 0x02AC0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02AD0000 0x02AD0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02AE0000 0x02AE0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02AF0000 0x02AF0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B00000 0x02B00FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B10000 0x02B10FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B20000 0x02B20FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B30000 0x02B30FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B40000 0x02B40FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B50000 0x02B50FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B60000 0x02B60FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B70000 0x02B70FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B80000 0x02B80FFF Marked Executable False 32-bit - False
...
buffer 1 0x02B90000 0x02B90FFF Marked Executable False 32-bit - False
...
buffer 1 0x02BA0000 0x02BA0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02BB0000 0x02BB0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02BC0000 0x02BC0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02BD0000 0x02BD0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02BE0000 0x02BE0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02BF0000 0x02BF0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C00000 0x02C00FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C10000 0x02C10FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C20000 0x02C20FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C30000 0x02C30FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C40000 0x02C40FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C50000 0x02C50FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C60000 0x02C60FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C70000 0x02C70FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C80000 0x02C80FFF Marked Executable False 32-bit - False
...
buffer 1 0x02C90000 0x02C90FFF Marked Executable False 32-bit - False
...
buffer 1 0x02CA0000 0x02CA0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02CB0000 0x02CB0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02CC0000 0x02CC0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02CD0000 0x02CD0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02CE0000 0x02CE0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02CF0000 0x02CF0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D00000 0x02D00FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D10000 0x02D10FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D20000 0x02D20FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D30000 0x02D30FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D40000 0x02D40FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D50000 0x02D50FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D60000 0x02D60FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D70000 0x02D70FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D80000 0x02D80FFF Marked Executable False 32-bit - False
...
buffer 1 0x02D90000 0x02D90FFF Marked Executable False 32-bit - False
...
buffer 1 0x02DA0000 0x02DA0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02DB0000 0x02DB0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02DC0000 0x02DC0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02DD0000 0x02DD0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02DE0000 0x02DE0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02DF0000 0x02DF0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E00000 0x02E00FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E10000 0x02E10FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E20000 0x02E20FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E30000 0x02E30FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E40000 0x02E40FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E50000 0x02E50FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E60000 0x02E60FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E70000 0x02E70FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E80000 0x02E80FFF Marked Executable False 32-bit - False
...
buffer 1 0x02E90000 0x02E90FFF Marked Executable False 32-bit - False
...
buffer 1 0x02EA0000 0x02EA0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02EB0000 0x02EB0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02EC0000 0x02EC0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02ED0000 0x02ED0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02EE0000 0x02EE0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02EF0000 0x02EF0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F00000 0x02F00FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F10000 0x02F10FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F20000 0x02F20FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F30000 0x02F30FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F40000 0x02F40FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F50000 0x02F50FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F60000 0x02F60FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F70000 0x02F70FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F80000 0x02F80FFF Marked Executable False 32-bit - False
...
buffer 1 0x02F90000 0x02F90FFF Marked Executable False 32-bit - False
...
buffer 1 0x02FA0000 0x02FA0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02FB0000 0x02FB0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02FC0000 0x02FC0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02FD0000 0x02FD0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02FE0000 0x02FE0FFF Marked Executable False 32-bit - False
...
buffer 1 0x02FF0000 0x02FF0FFF Marked Executable False 32-bit - False
...
buffer 1 0x03000000 0x03000FFF Marked Executable False 32-bit - False
...
buffer 1 0x03010000 0x03010FFF Marked Executable False 32-bit - False
...
buffer 1 0x03020000 0x03020FFF Marked Executable False 32-bit - False
...
buffer 1 0x03040000 0x03040FFF Marked Executable False 32-bit - False
...
buffer 1 0x030B0000 0x030B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x030D0000 0x030D0FFF Marked Executable False 32-bit - False
...
buffer 1 0x030E0000 0x030E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x030F0000 0x030F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x03100000 0x03100FFF Marked Executable False 32-bit - False
...
buffer 1 0x03110000 0x03110FFF Marked Executable False 32-bit - False
...
buffer 1 0x03120000 0x03120FFF Marked Executable False 32-bit - False
...
buffer 1 0x03130000 0x03130FFF Marked Executable False 32-bit - False
...
buffer 1 0x03140000 0x03140FFF Marked Executable False 32-bit - False
...
buffer 1 0x03150000 0x03150FFF Marked Executable False 32-bit - False
...
buffer 1 0x03160000 0x03160FFF Marked Executable False 32-bit - False
...
buffer 1 0x03170000 0x03170FFF Marked Executable False 32-bit - False
...
buffer 1 0x03180000 0x03180FFF Marked Executable False 32-bit - False
...
buffer 1 0x03190000 0x03190FFF Marked Executable False 32-bit - False
...
buffer 1 0x031A0000 0x031A0FFF Marked Executable False 32-bit - False
...
buffer 1 0x031B0000 0x031B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x031C0000 0x031C0FFF Marked Executable False 32-bit - False
...
buffer 1 0x031D0000 0x031D0FFF Marked Executable False 32-bit - False
...
buffer 1 0x031E0000 0x031E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x031F0000 0x031F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x03200000 0x03200FFF Marked Executable False 32-bit - False
...
buffer 1 0x03210000 0x03210FFF Marked Executable False 32-bit - False
...
buffer 1 0x03220000 0x03220FFF Marked Executable False 32-bit - False
...
buffer 1 0x03230000 0x03230FFF Marked Executable False 32-bit - False
...
buffer 1 0x03250000 0x03250FFF Marked Executable False 32-bit - False
...
buffer 1 0x032A0000 0x032A0FFF Marked Executable False 32-bit - False
...
buffer 1 0x032E0000 0x032E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x03300000 0x03300FFF Marked Executable False 32-bit - False
...
buffer 1 0x03350000 0x03350FFF Marked Executable False 32-bit - False
...
buffer 1 0x03370000 0x03370FFF Marked Executable False 32-bit - False
...
buffer 1 0x03390000 0x03390FFF Marked Executable False 32-bit - False
...
buffer 1 0x033A0000 0x033A0FFF Marked Executable False 32-bit - False
...
buffer 1 0x033B0000 0x033B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x033C0000 0x033C0FFF Marked Executable False 32-bit - False
...
buffer 1 0x033D0000 0x033D0FFF Marked Executable False 32-bit - False
...
buffer 1 0x033E0000 0x033E0FFF Marked Executable False 32-bit - False
...
buffer 1 0x033F0000 0x033F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x03400000 0x03400FFF Marked Executable False 32-bit - False
...
buffer 1 0x03410000 0x03410FFF Marked Executable False 32-bit - False
...
buffer 1 0x03420000 0x03420FFF Marked Executable False 32-bit - False
...
buffer 1 0x03430000 0x03430FFF Marked Executable False 32-bit - False
...
buffer 1 0x03440000 0x03440FFF Marked Executable False 32-bit - False
...
buffer 1 0x03460000 0x03460FFF Marked Executable False 32-bit - False
...
buffer 1 0x034B0000 0x034B0FFF Marked Executable False 32-bit - False
...
buffer 1 0x034F0000 0x034F0FFF Marked Executable False 32-bit - False
...
buffer 1 0x03500000 0x03500FFF Marked Executable False 32-bit - False
...
buffer 1 0x03510000 0x03510FFF Marked Executable False 32-bit - False
...
buffer 1 0x03520000 0x03520FFF Marked Executable False 32-bit - False
...
buffer 1 0x03530000 0x03530FFF Marked Executable False 32-bit - False
...
buffer 1 0x03540000 0x03540FFF Marked Executable False 32-bit - False
...
VMRay - Analyzer - www.vmray.com
Legal Note - Privacy Policy
Exit-Icon
WHOIS Domain Information
Domain Name
WHOIS Response 

       		
      

     

    

   

  

  

  

  

   

    
    

     Function Logfile
    

    

     

      Download-Icon
     

    

    

     Exit-Icon
    

   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image