7ea94da4...0712 | Environment
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Dropper, Downloader

7ea94da41974adefe99eeb883523b757cea10becf09185af05b9f464faa70712 (SHA256)

2019 Order File TTYYUGH.doc

Word Document

Created at 2019-02-11 09:17:00

...

Notifications (2/4)

Due to a WHOIS service error, no query could be made to get WHOIS data of any contacted domain.

The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.

Code overwrite was observed during this analysis. Note that the analysis results may be affected by this modification by the sample.

The operating system was rebooted during the analysis.

Virtual Machine Information

Name win7_64_sp1-mso2016
Description -
Architecture x86 64-bit
Operating System Windows 7
Kernel Version 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa)
Network Scheme Name def
Network Config Name def

System Information

Computer Name YKYD69Q
User Domain YKYD69Q
User Name aETAdzjz
User Profile C:\Users\aETAdzjz
Temp Directory C:\Users\aETAdzjz\AppData\Local\Temp
System Root C:\Windows
Sample Directory C:\Users\aETAdzjz\Desktop

Software Information

Adobe Acrobat Reader Version 10.0.0
Microsoft Office 2016
Microsoft Office Version 16.0.8431.2079
Internet Explorer Version 8.0.7601.17514
Chrome Version 59.0.3071.115
Firefox Version 25.0
Flash Version 11.2.202.233
Java Version 7.0.710.14
Microsoft Project Version 16.0.8431.2079
Microsoft Visio Version 16.0.8431.2079

Randomly Created Artifacts

This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.

Processes (21)
»
Filename PID GUI
C:\Program Files (x86)\Adobe\finished pizza superb.exe #1392 False
C:\Program Files (x86)\Adobe\willing_morocco.exe #2100 True
C:\Program Files (x86)\Common Files\fdshoes.exe #860 False
C:\Program Files (x86)\Common Files\vectorfollowsvalves.exe #1576 False
C:\Program Files (x86)\Mozilla Firefox\advancesdoorsinvolve.exe #1372 False
C:\Program Files (x86)\Reference Assemblies\recruitmentcap.exe #460 False
C:\Program Files (x86)\Uninstall Information\optional licensing undefined.exe #452 False
C:\Program Files (x86)\Windows Mail\linkformationentrepreneur.exe #776 False
C:\Program Files (x86)\Windows Photo Viewer\regards dx specializing.exe #2116 True
C:\Program Files (x86)\Windows Sidebar\rice.exe #2052 False
C:\Program Files\DVD Maker\targets despite.exe #536 False
C:\Program Files\Internet Explorer\scoring.exe #196 False
C:\Program Files\Internet Explorer\tracysearching.exe #848 False
C:\Program Files\MSBuild\pf-printed-awesome.exe #800 False
C:\Program Files\Uninstall Information\brokerworkout.exe #1096 False
C:\Program Files\Windows Defender\businessesarchitecture.exe #868 False
C:\Program Files\Windows Defender\domain.exe #2040 False
C:\Program Files\Windows Media Player\nor.exe #2084 False
C:\Program Files\Windows NT\died.exe #616 False
C:\Program Files\Windows NT\dominant out.exe #2068 False
C:\Program Files\Windows Portable Devices\islamcommands.exe #524 False
Files (266)
»
Filename
C:\Users\aETAdzjz\AppData\Local\Temp\1wh_yW7Kjdo8wLV.png
C:\Users\aETAdzjz\AppData\Local\Temp\3oryF1Q22Cc3DZ.gif
C:\Users\aETAdzjz\AppData\Local\Temp\5EdDg72fyYNVtCf-sSH.mkv
C:\Users\aETAdzjz\AppData\Local\Temp\5vxMJuNEn.wav
C:\Users\aETAdzjz\AppData\Local\Temp\F6--KCX6iEpxeqDhhb.doc
C:\Users\aETAdzjz\AppData\Local\Temp\G3UqOef.mp3
C:\Users\aETAdzjz\AppData\Local\Temp\HJSCpM0q-rkVnl.wav
C:\Users\aETAdzjz\AppData\Local\Temp\IePTYr-gEVcil g4i.bmp
C:\Users\aETAdzjz\AppData\Local\Temp\J9Yh7gmr9oot8v.ods
C:\Users\aETAdzjz\AppData\Local\Temp\JJtR4QDX.mp3
C:\Users\aETAdzjz\AppData\Local\Temp\Joxi2XLUi.wav
C:\Users\aETAdzjz\AppData\Local\Temp\TvPc7PPltyEsq6.docx
C:\Users\aETAdzjz\AppData\Local\Temp\U8nE4t-k-7B9fuwdn.mp3
C:\Users\aETAdzjz\AppData\Local\Temp\UWeCdsmMh5c5O egE9a.flv
C:\Users\aETAdzjz\AppData\Local\Temp\W8E08ZRpb6_YCncJiJ.wav
C:\Users\aETAdzjz\AppData\Local\Temp\WmvT7qFi_-oYdpnvc dt.mp3
C:\Users\aETAdzjz\AppData\Local\Temp\Yk9Akgj_iq8.pps
C:\Users\aETAdzjz\AppData\Local\Temp\a-kGg.png
C:\Users\aETAdzjz\AppData\Local\Temp\dr2Xx_ubluopDaeIFs.wav
C:\Users\aETAdzjz\AppData\Local\Temp\enPbknU.mp4
C:\Users\aETAdzjz\AppData\Local\Temp\febf2c1oyQtB.pdf
C:\Users\aETAdzjz\AppData\Local\Temp\g5JiXtejSwSErOSMgjy.wav
C:\Users\aETAdzjz\AppData\Local\Temp\iEUF0wUXwZKstFgsbO.avi
C:\Users\aETAdzjz\AppData\Local\Temp\ip8NW-1AGzmCX3.ots
C:\Users\aETAdzjz\AppData\Local\Temp\ndsW23I.flv
C:\Users\aETAdzjz\AppData\Local\Temp\zlWLrlBVncBAy5SC.mp3
C:\Users\aETAdzjz\AppData\Roaming\1Rga.jpg
C:\Users\aETAdzjz\AppData\Roaming\4dwmn7w1vSAtDP C.wav
C:\Users\aETAdzjz\AppData\Roaming\7_9FWshH4.flv
C:\Users\aETAdzjz\AppData\Roaming\7tqSM.mp4
C:\Users\aETAdzjz\AppData\Roaming\G3uwZguAcyNCEsGFbKo.png
C:\Users\aETAdzjz\AppData\Roaming\NYYw1Gkgr.jpg
C:\Users\aETAdzjz\AppData\Roaming\OIcEe7hSVhxbFx_.flv
C:\Users\aETAdzjz\AppData\Roaming\QBYHaLE8n_Y1R2uKh.m4a
C:\Users\aETAdzjz\AppData\Roaming\SSulqo9u6MoTS.gif
C:\Users\aETAdzjz\AppData\Roaming\URrms4sxjI1sndm6bG.mkv
C:\Users\aETAdzjz\AppData\Roaming\Yy8BN7iDxEg0A.gif
C:\Users\aETAdzjz\AppData\Roaming\_jDX2l4Odr5O.png
C:\Users\aETAdzjz\AppData\Roaming\a7XeRUDKZoh.wav
C:\Users\aETAdzjz\AppData\Roaming\eECpM6J4u1L.mp3
C:\Users\aETAdzjz\AppData\Roaming\eLuyGSdcouumx.gif
C:\Users\aETAdzjz\AppData\Roaming\fH64RYZmeKa3E3cXs2H.ppt
C:\Users\aETAdzjz\AppData\Roaming\hTiop.mkv
C:\Users\aETAdzjz\AppData\Roaming\kzI27h-.ppt
C:\Users\aETAdzjz\AppData\Roaming\ln7gd8gbUCkkb1-O.ots
C:\Users\aETAdzjz\AppData\Roaming\mRPQXhGyxI.mp3
C:\Users\aETAdzjz\AppData\Roaming\pANtcQqVUK.m4a
C:\Users\aETAdzjz\AppData\Roaming\sCBUKho.wav
C:\Users\aETAdzjz\AppData\Roaming\vaYP4Fq2uBz XKb4et.m4a
C:\Users\aETAdzjz\AppData\Roaming\yOxSW8imIR4q_2Eq0s.mkv
C:\Users\aETAdzjz\AppData\Roaming\ztpoKpj0GZxsO3LHN.jpg
C:\Users\aETAdzjz\Desktop\-GnJ
C:\Users\aETAdzjz\Desktop\-GnJ\-cYlA3-wh-IJJml.bmp
C:\Users\aETAdzjz\Desktop\-GnJ\DwyvipqF9UK7
C:\Users\aETAdzjz\Desktop\-GnJ\DwyvipqF9UK7\v-XvTpzF5uAumA5nzl7F.flv
C:\Users\aETAdzjz\Desktop\-GnJ\UAZh4wk
C:\Users\aETAdzjz\Desktop\-GnJ\UAZh4wk\-V4 __-e.pptx
C:\Users\aETAdzjz\Desktop\-GnJ\UAZh4wk\i KXqBDueg29yr5oWz.m4a
C:\Users\aETAdzjz\Desktop\-GnJ\UAZh4wk\zIgRXJ_D.jpg
C:\Users\aETAdzjz\Desktop\-GnJ\UiJI8_nG
C:\Users\aETAdzjz\Desktop\-GnJ\UiJI8_nG\Uo2UKRxfaYoM6ECMluW.m4a
C:\Users\aETAdzjz\Desktop\-GnJ\UiJI8_nG\iHR0uiGQwMg_X.mp3
C:\Users\aETAdzjz\Desktop\-GnJ\UiJI8_nG\tL0dVEW.mp4
C:\Users\aETAdzjz\Desktop\-GnJ\UiJI8_nG\vFHHpfSemCGfm2.bmp
C:\Users\aETAdzjz\Desktop\-GnJ\Uu0wMG65LosmHlToVqpr
C:\Users\aETAdzjz\Desktop\-GnJ\Uu0wMG65LosmHlToVqpr\N5W-mGg.flv
C:\Users\aETAdzjz\Desktop\-GnJ\Uu0wMG65LosmHlToVqpr\ZVel79h21bDou.mkv
C:\Users\aETAdzjz\Desktop\-GnJ\Uu0wMG65LosmHlToVqpr\aU 7G.m4a
C:\Users\aETAdzjz\Desktop\-GnJ\Uu0wMG65LosmHlToVqpr\cxTGK1yIF0OtUYs3wBRL.avi
C:\Users\aETAdzjz\Desktop\-GnJ\zC-1jzZlN.odt
C:\Users\aETAdzjz\Desktop\0cWICx1s.png
C:\Users\aETAdzjz\Desktop\3aq1N_SqwLug32dLSJn.png
C:\Users\aETAdzjz\Desktop\4g6 Pdzjo.ods
C:\Users\aETAdzjz\Desktop\6vKb6h.gif
C:\Users\aETAdzjz\Desktop\Bodx.wav
C:\Users\aETAdzjz\Desktop\C0u-NpupAty.swf
C:\Users\aETAdzjz\Desktop\EVVDPIIMPSR.xls
C:\Users\aETAdzjz\Desktop\Fnjmr0aZQqX.swf
C:\Users\aETAdzjz\Desktop\J5_7SuUe.swf
C:\Users\aETAdzjz\Desktop\NPKz4oE.gif
C:\Users\aETAdzjz\Desktop\NhErI2u1.mp3
C:\Users\aETAdzjz\Desktop\UGbLOpQk.rtf
C:\Users\aETAdzjz\Desktop\UYEfCMpJv7.wav
C:\Users\aETAdzjz\Desktop\UrP6pf7qjtve_q42vVK9.pdf
C:\Users\aETAdzjz\Desktop\X4yexVPnzIAP15-s2Tg.wav
C:\Users\aETAdzjz\Desktop\bhaYz-81.swf
C:\Users\aETAdzjz\Desktop\dezmv2jej57yZrkM.mp3
C:\Users\aETAdzjz\Desktop\k6u0.gif
C:\Users\aETAdzjz\Desktop\lgjkBP3f3rWCmW6k.docx
C:\Users\aETAdzjz\Desktop\mFnshvBbo.png
C:\Users\aETAdzjz\Desktop\mmsGl.png
C:\Users\aETAdzjz\Desktop\ollmNkXiD30Qx.odp
C:\Users\aETAdzjz\Desktop\qGkI3wjhJgZY-x_VQ6.bmp
C:\Users\aETAdzjz\Desktop\ssSVTEbeh.bmp
C:\Users\aETAdzjz\Desktop\tabZ1ML.gif
C:\Users\aETAdzjz\Desktop\vnG5XKiydL.wav
C:\Users\aETAdzjz\Documents\1fhvqz.xlsx
C:\Users\aETAdzjz\Documents\5LOlWp80dAEQ.docx
C:\Users\aETAdzjz\Documents\8Ge4xkGyGRt6MsrOzkM.docx
C:\Users\aETAdzjz\Documents\A5SH4-Dxb7NLeVp.pptx
C:\Users\aETAdzjz\Documents\B4cUL i.ppt
C:\Users\aETAdzjz\Documents\Cx6vxhn.docx
C:\Users\aETAdzjz\Documents\FOf6HyB
C:\Users\aETAdzjz\Documents\FOf6HyB\7YH82az.ppt
C:\Users\aETAdzjz\Documents\FOf6HyB\CFOPbz2DtvS CQFO.xls
C:\Users\aETAdzjz\Documents\FOf6HyB\KTPIM2WTwyhAhu2La2.doc
C:\Users\aETAdzjz\Documents\FOf6HyB\VR8XqjYYw9y43IG.ots
C:\Users\aETAdzjz\Documents\FOf6HyB\kF28OSwm1jhnv5.odt
C:\Users\aETAdzjz\Documents\FOf6HyB\mV3lmsq9UXSfIIGlPa.odt
C:\Users\aETAdzjz\Documents\FOf6HyB\mhrbmweKMcXHbd.doc
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\5Oeo jj.ots
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\6OI 2b9r.xls
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\H-FQu.csv
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\RCNFR.ods
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\RyWOn.xls
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\UTJFhjawlMk8Tz.odt
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\ve-PdRHsBsu ojIcINeh.pdf
C:\Users\aETAdzjz\Documents\FOf6HyB\xhisESbTHLR5W4O\ysgRqxkNUzIb6qjF.xlsx
C:\Users\aETAdzjz\Documents\FOf6HyB\z7PGrPfl61ICdHu_8I3.ods
C:\Users\aETAdzjz\Documents\HnoNpzgC.xlsx
C:\Users\aETAdzjz\Documents\IsNpdfJL9.ots
C:\Users\aETAdzjz\Documents\MTyjOadcrz
C:\Users\aETAdzjz\Documents\MTyjOadcrz\4aYe3c2_9Gv9G.ods
C:\Users\aETAdzjz\Documents\MTyjOadcrz\G_4Q.ppt
C:\Users\aETAdzjz\Documents\MTyjOadcrz\Q0seBMfNtqPiXujBkPDZ.ppt
C:\Users\aETAdzjz\Documents\MTyjOadcrz\f7NpyaIeAFKP.pdf
C:\Users\aETAdzjz\Documents\MTyjOadcrz\sXKDlujgY2y67M2P.odp
C:\Users\aETAdzjz\Documents\MTyjOadcrz\sq8L-QxnvBUtwZ84JH_.doc
C:\Users\aETAdzjz\Documents\S085KvVdvsfi.odt
C:\Users\aETAdzjz\Documents\SCMAJyoNihUP.docx
C:\Users\aETAdzjz\Documents\SVlUThPG.xls
C:\Users\aETAdzjz\Documents\SdODJPTn7Rr.xlsx
C:\Users\aETAdzjz\Documents\VImIjE7Qlm-2Az.xlsx
C:\Users\aETAdzjz\Documents\ZshI-crOQQsSZ.pptx
C:\Users\aETAdzjz\Documents\ddG9KST.pptx
C:\Users\aETAdzjz\Documents\f7qC7.pptx
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\1F3hFO6GFwtp6EwG95.ots
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\8Wm3w4TJr0 wY4.ots
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\HAzwkB5CbmE-us9i.odt
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\PJwp0MagCM1vK3MUi.docx
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\RqLP2U4xCsXG.csv
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\rbXkwYlv.pptx
C:\Users\aETAdzjz\Documents\gmZORWvaLVe6Tic08\y-Heg6.xls
C:\Users\aETAdzjz\Documents\hpze2M_gkC7rmxFSl.docx
C:\Users\aETAdzjz\Documents\idM71hWT.xlsx
C:\Users\aETAdzjz\Documents\jJ9HNc6HBgS4Ql.xlsx
C:\Users\aETAdzjz\Documents\ooQY.csv
C:\Users\aETAdzjz\Documents\qE3Z.pptx
C:\Users\aETAdzjz\Documents\qS8QlJapH.xlsx
C:\Users\aETAdzjz\Documents\r7BghwCe1eDbBLB.docx
C:\Users\aETAdzjz\Documents\yGVJGEri1l.xlsx
C:\Users\aETAdzjz\Music\B6c2e.wav
C:\Users\aETAdzjz\Music\XW O6tiqKkOoaz.wav
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\KXHVCjAmedyaXRa.m4a
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\M8YhJ.wav
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\QUVPs2lYKds6Lzk5.mp3
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\Ulw7f-yiP.m4a
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\aYmrqrmtO.mp3
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\alBn3q1xlZGvRR5HXG.wav
C:\Users\aETAdzjz\Music\XniUkpMBZRSXa9TtNWlG\yfTN.mp3
C:\Users\aETAdzjz\Music\kyhT07HhL.mp3
C:\Users\aETAdzjz\Music\nHFF3
C:\Users\aETAdzjz\Music\nHFF3\6KLZp4PFk2vl2Xja6U.wav
C:\Users\aETAdzjz\Music\nHFF3\IYSDGM1GRktmFYIq.m4a
C:\Users\aETAdzjz\Music\nHFF3\JRVrc-.wav
C:\Users\aETAdzjz\Music\nHFF3\MrP0 dRyAQWGQ9oF_E9r
C:\Users\aETAdzjz\Music\nHFF3\MrP0 dRyAQWGQ9oF_E9r\6pNiGJKO94x.wav
C:\Users\aETAdzjz\Music\nHFF3\MrP0 dRyAQWGQ9oF_E9r\7V5uodLKXXCuKDw4c8.m4a
C:\Users\aETAdzjz\Music\nHFF3\MrP0 dRyAQWGQ9oF_E9r\quF81.m4a
C:\Users\aETAdzjz\Music\nHFF3\_oav4Ig1Vw
C:\Users\aETAdzjz\Music\nHFF3\_oav4Ig1Vw\5x-Mrt.m4a
C:\Users\aETAdzjz\Music\nHFF3\_oav4Ig1Vw\6Zy9f.m4a
C:\Users\aETAdzjz\Music\nHFF3\_oav4Ig1Vw\9KfH7s0p3wjmVP.wav
C:\Users\aETAdzjz\Music\nHFF3\_oav4Ig1Vw\dNX3.wav
C:\Users\aETAdzjz\Music\nHFF3\_oav4Ig1Vw\wX49znc_Cj.mp3
C:\Users\aETAdzjz\Music\nHFF3\b06H8yi5sRG7geoYSIMA.m4a
C:\Users\aETAdzjz\Music\nHFF3\raQkDB91kkIltM7.m4a
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\6IkYdF6 vHEM.mp3
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\DrYXmq_-BC.mp3
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\S QbaBf.wav
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\Yss9W.wav
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\iWKpEITWiPug0qWs.wav
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\tzZJ4Ix97LnJEgJ
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\tzZJ4Ix97LnJEgJ\4_dlM6F.mp3
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\tzZJ4Ix97LnJEgJ\RkMS36jBfH2.wav
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\tzZJ4Ix97LnJEgJ\vVKywH_.m4a
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\tzZJ4Ix97LnJEgJ\xAmSN-ln0pE8y.m4a
C:\Users\aETAdzjz\Music\nHFF3\y_4BlgJ9RjJ2\zu_c.m4a
C:\Users\aETAdzjz\Pictures\0DXl51RQmxvFZ.jpg
C:\Users\aETAdzjz\Pictures\1e4edEX.jpg
C:\Users\aETAdzjz\Pictures\1n0ICPZ.gif
C:\Users\aETAdzjz\Pictures\4fF y7ndWBxe86 Sv.jpg
C:\Users\aETAdzjz\Pictures\5w3Z88xx7_1C0bjOHa.png
C:\Users\aETAdzjz\Pictures\76aD7JGJVf-UQItH-P.png
C:\Users\aETAdzjz\Pictures\825Bw.png
C:\Users\aETAdzjz\Pictures\83M3r.gif
C:\Users\aETAdzjz\Pictures\9AtpisXeCM1mnytVDNz.bmp
C:\Users\aETAdzjz\Pictures\BKTtVruFDx.gif
C:\Users\aETAdzjz\Pictures\BpWv eJQGIkUc.png
C:\Users\aETAdzjz\Pictures\Cxevdm0ZSkz9c46H.gif
C:\Users\aETAdzjz\Pictures\DllsUebY1l4vIRr4nBTp.gif
C:\Users\aETAdzjz\Pictures\GBymS0b.gif
C:\Users\aETAdzjz\Pictures\Gl7 vFvfUvJRZU4WfV.png
C:\Users\aETAdzjz\Pictures\IGhpOptiHXkLAbbO.jpg
C:\Users\aETAdzjz\Pictures\NOw9cJrNDDB1xUTc.bmp
C:\Users\aETAdzjz\Pictures\NqF-seCKtacAvpGFp2V.png
C:\Users\aETAdzjz\Pictures\PZv1i Ag90xf-.png
C:\Users\aETAdzjz\Pictures\RfqtYNQ7CULcWtDR.jpg
C:\Users\aETAdzjz\Pictures\_LNCY5W6E.gif
C:\Users\aETAdzjz\Pictures\e8O8.bmp
C:\Users\aETAdzjz\Pictures\fWLqDLntNh8TnG.jpg
C:\Users\aETAdzjz\Pictures\goiQ3EV.bmp
C:\Users\aETAdzjz\Pictures\hdpmi9PjFfi3Lpf.gif
C:\Users\aETAdzjz\Pictures\oJviFuQg_uvs.jpg
C:\Users\aETAdzjz\Pictures\oUraAJeI.png
C:\Users\aETAdzjz\Pictures\rfG8CsTCc.png
C:\Users\aETAdzjz\Pictures\uHJ95xVzosYf-.gif
C:\Users\aETAdzjz\Pictures\urCi.png
C:\Users\aETAdzjz\Pictures\us8a.bmp
C:\Users\aETAdzjz\Pictures\wMHSSBblGyqJRSU.jpg
C:\Users\aETAdzjz\Pictures\yENsl9 Rll.gif
C:\Users\aETAdzjz\Pictures\yOfrUOmu0AYKAnl.bmp
C:\Users\aETAdzjz\Pictures\zoW0dBQHifckVevm69Z.bmp
C:\Users\aETAdzjz\Videos\JPeOIbGb83d3.avi
C:\Users\aETAdzjz\Videos\ONJ5dadf_WABhDmmEJRO.mp4
C:\Users\aETAdzjz\Videos\UEpClOjGe.swf
C:\Users\aETAdzjz\Videos\fiwoiIbcny
C:\Users\aETAdzjz\Videos\fiwoiIbcny\4NvBU i.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\6P5oVES5Q.swf
C:\Users\aETAdzjz\Videos\fiwoiIbcny\B-MLPY.mkv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p\4r ZgaLqn.flv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p\5MMJ8.avi
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p\BA5 I4Yad.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p\JtKu1wHwbFao6fFD1g.swf
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p\kHS-V.avi
C:\Users\aETAdzjz\Videos\fiwoiIbcny\JtERssoqp-p\lDoCKwiAk6vmnG.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\TS_5.avi
C:\Users\aETAdzjz\Videos\fiwoiIbcny\Ycor lhUC03sw.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\Z-1BPhspws82fa6.mkv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ZaPL.mkv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\lg3 psB.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\1N6JCit6t.mkv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\7i1U.flv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\H_-QJY.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\L1E-w104EfSmPJSUV.swf
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\Ona8L6IttpnLjT.mkv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\cGjbsLIifhFwTYQDz.flv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\phxisao5Hl7NvoZFXt
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\phxisao5Hl7NvoZFXt\2J Y8WxQ0.mkv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\phxisao5Hl7NvoZFXt\8M9X.avi
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\phxisao5Hl7NvoZFXt\addws-ly5.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\phxisao5Hl7NvoZFXt\i_tEIpRr565.flv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\qVTo-6H9zZIn0zX.flv
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\rzXpSthhKNeWRy.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\ozAgxE\sYtprnL4lmsRqsJ.mp4
C:\Users\aETAdzjz\Videos\fiwoiIbcny\sigBGl7NmZvv1MinGy.avi
C:\Users\aETAdzjz\Videos\fiwoiIbcny\vzwBQsP.mp4
C:\Users\aETAdzjz\Videos\izSo6u-Eoa.mp4
C:\Users\aETAdzjz\Videos\o6orS c.swf
C:\Users\aETAdzjz\Videos\pLhVHqmtIaGjJOqME4w.mp4
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image