Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Jan. 27, 2023, 7:20 p.m.	Jan. 27, 2023, 7:20 p.m.

Size	771.4KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`89bc30347b1d6eb8d04fad715c08551a`
SHA256	`e78c0f2d81015f0c095cc4fbf50d3528b4f9aaaec22345d17feac5b5846f97c1`
CRC32	`9C30DD2D`
ssdeep	`12288:f9Pcv2MVFtLXt+LFfGAPFIxvPUVKm61F0J6wPDOuHwUcnO6x/Nqp8UzOU:f9PFMVP3APifmS26iDOlUcnTxk`
PDB Path	C:\zobihijezizeda89\yajor_wenejexupa.pdb
Yara	Generic_Malware_Zero - Generic Malware IsPE32 - (no description) OS_Processor_Check_Zero - OS Processor Check PE_Header_Zero - PE File Signature Malicious_Library_Zero - Malicious_Library UPX_Zero - UPX packed file

file3.exe "C:\Users\test22\AppData\Local\Temp\file3.exe"
2540

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

This executable has a PDB path (1 event)

pdb_path

C:\zobihijezizeda89\yajor_wenejexupa.pdb

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 65678 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1
__exception__ Jan. 27, 2023, 7:20 p.m.	stacktrace: LocalFlags+0x50 LocalHandle-0xee kernel32+0x831df @ 0x756331df file3+0x9a7fb @ 0x49a7fb file3+0x9b6f8 @ 0x49b6f8 file3+0x2182 @ 0x402182 file3+0x202f @ 0x40202f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x76f77cbf registers.esp: 1631980 registers.edi: 3080192 registers.eax: 4294967288 registers.ebp: 1632032 registers.edx: 998 registers.ebx: 0 registers.esi: 0 registers.ecx: 2544	1

Allocates read-write-execute memory (usually to unpack itself) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory Jan. 27, 2023, 7:20 p.m.	process_identifier: 2540 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 528384 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02490000 process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x000a1400', u'virtual_address': u'0x00001000', u'entropy': 7.88277255360943, u'name': u'.text', u'virtual_size': u'0x000a13c1'}

entropy

7.88277255361

description

A section with a high entropy has been found

entropy

0.842586544742

description

Overall entropy of this PE file is high

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Jan. 27, 2023, 7:20 p.m.	tid: 2544 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 57 AntiVirus engines on VirusTotal as malicious (50 out of 57 events)

Bkav	W32.ZpevJaikIAH.Trojan
Lionic	Trojan.Win32.Generic.lCNY
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Mint.Zard.52
FireEye	Generic.mg.89bc30347b1d6eb8
CAT-QuickHeal	Trojan.AgentRI.S21164639
ALYac	Gen:Heur.Mint.Zard.52
Malwarebytes	Trojan.Crypt
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Azorult.74d18dc1
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Trojan.VIBH-5242
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Kryptik.HLIK
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Raccoon-9871234-0
Kaspersky	HEUR:Trojan.Win32.Zenpak.gen
BitDefender	Gen:Heur.Mint.Zard.52
NANO-Antivirus	Trojan.Win32.Zenpak.ixakhr
Avast	Win32:CrypterX-gen [Trj]
Tencent	Win32.Trojan.Zenpak.Edei
Ad-Aware	Gen:Heur.Mint.Zard.52
Emsisoft	Trojan.Crypt (A)
Zillya	Trojan.Kryptik.Win32.3305657
TrendMicro	TROJ_GEN.R002C0DFG21
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
Sophos	Mal/Generic-R + Troj/Kryptik-TR
SentinelOne	Static AI - Malicious PE
Jiangmin	Trojan.PSW.Racealer.cln
Webroot	W32.Zenpak
Avira	TR/Crypt.Agent.ahkla
Antiy-AVL	Trojan/Generic.ASMalwS.337C827
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Azorult.RM!MTB
Gridinsoft	Trojan.Win32.Agent.ns
GData	Gen:Heur.Mint.Zard.52
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Suspig.R425581
Acronis	suspicious
McAfee	Packed-GDT!89BC30347B1D
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Sabsik.FL
TrendMicro-HouseCall	TROJ_GEN.R002C0DFG21
Rising	Trojan.Kryptik!1.D63F (CLASSIC)
Yandex	Trojan.Kryptik!SHteN1Ucf7M
Ikarus	Trojan.Win32.Glupteba

file3.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All