Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	June 24, 2021, 9:09 a.m.	June 24, 2021, 9:41 a.m.

Size	2.0MB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`c735ab1566d5ef0b24ab014db8852ea8`
SHA256	`a00fa5a6df14735054f3b9700d0a9418be11971365eda296c2d539141f05fc7f`
CRC32	`C6D91699`
ssdeep	`49152:7poqpcFq9lSG3I1fecbpUD+sglZI0dEq969:7poo+clSG3efez+N+0SG2`
Yara	PE_Header_Zero - PE File Signature IsPE32 - (no description)

Protected.exe "C:\Users\test22\AppData\Local\Temp\Protected.exe"
732

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

The file contains an unknown PE resource name possibly indicative of a packer (1 event)

resource name

CUSTOM

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15bd exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5565 exception.address: 0x4015bd registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15be exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5566 exception.address: 0x4015be registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15bf exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5567 exception.address: 0x4015bf registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c0 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5568 exception.address: 0x4015c0 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c1 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5569 exception.address: 0x4015c1 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c2 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5570 exception.address: 0x4015c2 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c3 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5571 exception.address: 0x4015c3 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c4 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5572 exception.address: 0x4015c4 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c5 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5573 exception.address: 0x4015c5 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c6 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5574 exception.address: 0x4015c6 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c7 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5575 exception.address: 0x4015c7 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c8 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5576 exception.address: 0x4015c8 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15c9 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5577 exception.address: 0x4015c9 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15ca exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5578 exception.address: 0x4015ca registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15cb exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5579 exception.address: 0x4015cb registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15cc exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5580 exception.address: 0x4015cc registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15cd exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5581 exception.address: 0x4015cd registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15ce exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5582 exception.address: 0x4015ce registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15cf exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5583 exception.address: 0x4015cf registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d0 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5584 exception.address: 0x4015d0 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d1 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5585 exception.address: 0x4015d1 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d2 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5586 exception.address: 0x4015d2 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d3 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5587 exception.address: 0x4015d3 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d4 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5588 exception.address: 0x4015d4 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d5 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5589 exception.address: 0x4015d5 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d6 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5590 exception.address: 0x4015d6 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d7 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5591 exception.address: 0x4015d7 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d8 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5592 exception.address: 0x4015d8 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15d9 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5593 exception.address: 0x4015d9 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15da exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5594 exception.address: 0x4015da registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15db exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5595 exception.address: 0x4015db registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15dc exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5596 exception.address: 0x4015dc registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15dd exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5597 exception.address: 0x4015dd registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15de exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5598 exception.address: 0x4015de registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15df exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5599 exception.address: 0x4015df registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e0 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5600 exception.address: 0x4015e0 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e1 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5601 exception.address: 0x4015e1 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e2 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5602 exception.address: 0x4015e2 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e3 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5603 exception.address: 0x4015e3 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e4 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5604 exception.address: 0x4015e4 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e5 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5605 exception.address: 0x4015e5 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 exception.symbol: protected+0x15e6 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5606 exception.address: 0x4015e6 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec exception.symbol: protected+0x15e7 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5607 exception.address: 0x4015e7 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ec 00 exception.symbol: protected+0x15e8 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5608 exception.address: 0x4015e8 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 00 ec 00 00 exception.symbol: protected+0x15e9 exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5609 exception.address: 0x4015e9 registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 00 ec 00 00 00 exception.symbol: protected+0x15ea exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5610 exception.address: 0x4015ea registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 00 ec 00 00 00 00 exception.symbol: protected+0x15eb exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5611 exception.address: 0x4015eb registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 00 ec 00 00 00 00 00 exception.symbol: protected+0x15ec exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5612 exception.address: 0x4015ec registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 00 ec 00 00 00 00 00 00 exception.symbol: protected+0x15ed exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5613 exception.address: 0x4015ed registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1
__exception__ June 24, 2021, 9:09 a.m.	stacktrace: protected+0x185213 @ 0x585213 EbLoadRunTime+0x1166 DllFunctionCall-0xb5 msvbvm60+0xa048 @ 0x7294a048 BASIC_CLASS_QueryInterface+0xeca EbLoadRunTime-0x13a4 msvbvm60+0x7b3e @ 0x72947b3e ThunRTMain+0x3dd EbCreateContext-0x2e36 msvbvm60+0x3981 @ 0x72943981 ThunRTMain+0x156 EbCreateContext-0x30bd msvbvm60+0x36fa @ 0x729436fa ThunRTMain+0x5c EbCreateContext-0x31b7 msvbvm60+0x3600 @ 0x72943600 protected+0x20fe @ 0x4020fe RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 00 00 00 00 00 00 00 00 ec 00 00 00 00 00 00 00 exception.symbol: protected+0x15ee exception.instruction: add byte ptr [eax], al exception.module: Protected.exe exception.exception_code: 0xc0000005 exception.offset: 5614 exception.address: 0x4015ee registers.esp: 1637252 registers.edi: 0 registers.eax: 0 registers.ebp: 1637312 registers.edx: 1637284 registers.ebx: 1923194888 registers.esi: 1923210905 registers.ecx: 0	1

One or more potentially interesting buffers were extracted, these generally contain injected code, configuration data, etc.

Allocates read-write-execute memory (usually to unpack itself) (50 out of 54 events)

Time & API	Arguments	Status
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x72d72000 process_handle: 0xffffffff	1
NtAllocateVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x007c0000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x773bf000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a42000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7294a000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a46000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a46000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a46000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a50000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a50000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a50000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a46000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a46000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a53000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00405000 process_handle: 0xffffffff	1
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a4e000 process_handle: 0xffffffff	1

Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory June 24, 2021, 9:09 a.m.	process_identifier: 732 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 24576 protection: 32 (PAGE_EXECUTE_READ) base_address: 0x003c0000 process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x00189000', u'virtual_address': u'0x00001000', u'entropy': 7.978792361823506, u'name': u'.text', u'virtual_size': u'0x00188ca4'}

entropy

7.97879236182

description

A section with a high entropy has been found

entropy

0.767578125

description

Overall entropy of this PE file is high

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ June 24, 2021, 9:09 a.m.	tid: 2232 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 37 AntiVirus engines on VirusTotal as malicious (37 events)

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.12925
MicroWorld-eScan	Gen:Variant.Babar.21351
McAfee	Artemis!C735AB1566D5
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/Injector.60dc7299
Cybereason	malicious.566d5e
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EPJG
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Babar.21351
Paloalto	generic.ml
Tencent	Win32.Trojan.Babar.Sxeb
Ad-Aware	Gen:Variant.Babar.21351
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.vc
FireEye	Generic.mg.c735ab1566d5ef0b
Emsisoft	Gen:Variant.Babar.21351 (B)
GData	Gen:Variant.Babar.21351
eGambit	Unsafe.AI_Score_91%
Avira	HEUR/AGEN.1106768
MAX	malware (ai score=84)
Arcabit	Trojan.Babar.D5367
AegisLab	Trojan.Win32.Babar.4!c
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
Acronis	suspicious
VBA32	BScope.TrojanPSW.Racealer
ALYac	Gen:Variant.Babar.21351
Malwarebytes	Malware.AI.1683986376
Rising	Trojan.Injector!1.C6AF (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
Webroot	W32.Suspicious.Heur
AVG	FileRepMalware

Protected.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All