Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	March 11, 2021, 1:42 p.m.	March 11, 2021, 1:42 p.m.

Size	737.5KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`12e66476395f8c1d0c457a7c13ae71df`
SHA256	`9bf5a22089f0b74627320945df991bd1dfa37bf5522f8ecb61e5873bc6093f22`
CRC32	`19E0C484`
ssdeep	`12288:hjuofP8+sNbdGFN4+QbFCQew4Sb8ofuRKEY5oySaJQ5wUiETwY8+pRyO:hio385HmNqFCt+4suWoy7JQYF+C`
PDB Path	C:\jakifayovinavoha-megudabesetolixug-zijare52-bidabufu4.pdbsol.pdb
Yara	IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check HasDebugData - DebugData Check HasRichSignature - Rich Signature Check PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero win_mutex - Create or check mutex win_files_operation - Affect private profile Malicious_Library_Zero - Malicious_Library

dubi.exe "C:\Users\test22\AppData\Local\Temp\dubi.exe"
2208

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

This executable has a PDB path (1 event)

pdb_path

C:\jakifayovinavoha-megudabesetolixug-zijare52-bidabufu4.pdbsol.pdb

The executable contains unknown PE section names indicative of a packer (could be a false positive) (2 events)

section	.jarop
section	.dasavol

The file contains an unknown PE resource name possibly indicative of a packer (2 events)

resource name	VOWAGOTAX
resource name	YOSIBALIBINIBUREWEHO

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 2789691437 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1
__exception__ March 11, 2021, 1:42 p.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _hyppo@4-0x222 dubi+0xa7e0e @ 0x4a7e0e _lifan@8+0x1e41 dubi+0xa9ec1 @ 0x4a9ec1 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1634516 registers.edi: 50528256 registers.eax: 4294967288 registers.ebp: 1634568 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2384	1

Allocates read-write-execute memory (usually to unpack itself) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory March 11, 2021, 1:42 p.m.	process_identifier: 2208 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 593920 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00340000 process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x000a9400', u'virtual_address': u'0x00001000', u'entropy': 7.954043083430169, u'name': u'.text', u'virtual_size': u'0x000a9214'}

entropy

7.95404308343

description

A section with a high entropy has been found

entropy

0.919212491514

description

Overall entropy of this PE file is high

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ March 11, 2021, 1:42 p.m.	tid: 2384 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 56 AntiVirus engines on VirusTotal as malicious (50 out of 56 events)

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.45850055
FireEye	Generic.mg.12e66476395f8c1d
ALYac	Trojan.Ransom.Stop
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00576f791 )
Alibaba	TrojanDownloader:Win32/Kryptik.bcf50b35
K7GW	Trojan ( 00576f791 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Generic.D2BB9DC7
BitDefenderTheta	Gen:NN.ZexaF.34608.UyW@ay6YAIaG
Cyren	W32/Trojan.PFJH-4046
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	Ransom.Win32.STOP.THCOHBA
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Packed.Midie-9839746-0
Kaspersky	HEUR:Trojan-Downloader.Win32.Upatre.gen
BitDefender	Trojan.GenericKD.45850055
NANO-Antivirus	Trojan.Win32.GenKryptik.inxnjh
Paloalto	generic.ml
APEX	Malicious
Tencent	Win32.Trojan-downloader.Upatre.Dzak
Ad-Aware	Trojan.GenericKD.45850055
Emsisoft	Trojan.GenericKD.45850055 (B)
Comodo	Malware@#uji6a7x6z8sk
F-Secure	Trojan.TR/Crypt.ZPACK.gyvjy
DrWeb	Trojan.DownLoader37.16176
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.STOP.THCOHBA
McAfee-GW-Edition	BehavesLike.Win32.MultiPlug.bc
Sophos	Mal/Generic-S
Ikarus	Trojan-Banker.UrSnif
ESET-NOD32	a variant of Win32/Kryptik.HJUV
Webroot	W32.Trojan.Glupteba
Avira	TR/Crypt.ZPACK.gyvjy
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft	Trojan.Win32.Packed.oa
Microsoft	Trojan:Win32/Azorult.RM!MTB
ViRobot	Trojan.Win32.S.Agent.755200.AE
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Upatre.gen
GData	Trojan.GenericKD.45850055
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.ClipBanker.R370568
McAfee	Packed-GDK!12E66476395F
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Glupteba
Malwarebytes	Glupteba.Backdoor.Bruteforce.DDS
Rising	Trojan.Kryptik!1.D250 (CLASSIC)

dubi.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All