popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

aaciedyh.rar

  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 March 25, 2021, 9:12 a.m. March 25, 2021, 9:20 a.m.
Size 876.0KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 996ab01d557e9b2d355624ab128f2c49
SHA256 ed5fb363f765e5ebf27d230bbe96cdb77be2a424ff7b7008a70ab3f2a56c25e4
CRC32 D390C904
ssdeep 12288:5J1u+Uyy8L/SVTjxVAhaYY/wKgZK5PQ/PDO/5lO2MskpNhpIObibzS1pZUf/9xEH:52+I8Oh1/+IQ/q/+2a7IObNPUn9g
PDB Path c:\Practic_Pass\GlassLeft\righthit\32334244l\They.pdb
Yara
  • Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen
  • PE_Header_Zero - PE File Signature Zero
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • win_files_operation - Affect private profile
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • IsWindowsGUI - (no description)
  • HasDebugData - DebugData Check
  • HasRichSignature - Rich Signature Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path c:\Practic_Pass\GlassLeft\righthit\32334244l\They.pdb
Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814996
        

      
        registers.edi:
        6695656
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        2000552521
        

      
        registers.edx:
        129161
        

      
        registers.ebx:
        2704346981
        

      
        registers.esi:
        1970405376
        

      
        registers.ecx:
        66040
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        16
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32638928
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        15
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32638944
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        14
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32638960
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        13
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32638976
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        12
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32638992
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        11
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639008
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        10
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639024
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        9
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639040
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        8
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639056
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        7
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639072
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639088
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        5
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639104
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        4
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639120
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        3
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639136
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        2
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639152
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814972
        

      
        registers.edi:
        1
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        32639168
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        64
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          
DllRegisterServer+0xcbc7 aaciedyh+0x16937 @ 0x4c6937

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2814168
        

      
        registers.edi:
        12
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        2815240
        

      
        registers.edx:
        23
        

      
        registers.ebx:
        2815256
        

      
        registers.esi:
        23
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815224
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        96784
        

      
        registers.edx:
        827898
        

      
        registers.ebx:
        0
        

      
        registers.esi:
        282
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        16
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642408
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        15
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642432
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        14
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642456
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        13
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642480
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        12
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642504
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        11
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642528
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        10
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642552
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        9
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642576
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        8
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642600
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        7
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642624
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        6
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642648
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        5
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642672
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        4
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642696
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        3
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642720
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        2
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642744
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
__exception__

  
  
    
      
    
  


  
    
      stacktrace:
      
        
          

        
      
      
      

    
  
    
      
        exception.instruction_r:
        cc c3 5d c3 33 c0 5d c3 68 e0 7d b6 c0 68 ea b3
        

      
        exception.instruction:
        int3
        

      
        exception.exception_code:
        0x80000003
        

      
        exception.symbol:
        DllRegisterServer+0x72ec aaciedyh+0x1105c
        

      
        exception.address:
        0x4c105c
        

      
    
  
    
      
        registers.esp:
        2815200
        

      
        registers.edi:
        6
        

      
        registers.eax:
        2000478246
        

      
        registers.ebp:
        1
        

      
        registers.edx:
        0
        

      
        registers.ebx:
        64
        

      
        registers.esi:
        32642768
        

      
        registers.ecx:
        0
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    

                                    
                                        

                                            Time & API
                                            Arguments
                                            Status
                                            Return
                                            Repeated
                                        

                                    

                                

                                

                                    

  
NtProtectVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          204
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      length:
      
        
          4096
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x0053d000
        
      
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
NtProtectVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          204
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      length:
      
        
          20480
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x00585000
        
      
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
NtAllocateVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          204
        
      
      
      

    
  
    
      region_size:
      
        
          4096
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x00310000
        
      
      
      

    
  
    
      allocation_type:
      
        
          12288
        
      
      
        (MEM_COMMIT|MEM_RESERVE)
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
NtAllocateVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          204
        
      
      
      

    
  
    
      region_size:
      
        
          4096
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x00360000
        
      
      
      

    
  
    
      allocation_type:
      
        
          12288
        
      
      
        (MEM_COMMIT|MEM_RESERVE)
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                            

                                

                                

                                    

  
NtAllocateVirtualMemory

  
  
    
      
    
  


  
    
      process_identifier:
      
        
          204
        
      
      
      

    
  
    
      region_size:
      
        
          577536
        
      
      
      

    
  
    
      stack_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      stack_pivoted:
      
        
          0
        
      
      
      

    
  
    
      heap_dep_bypass:
      
        
          0
        
      
      
      

    
  
    
      protection:
      
        
          64
        
      
      
        (PAGE_EXECUTE_READWRITE)
      
      

    
  
    
      base_address:
      
        
          0x01e50000
        
      
      
      

    
  
    
      allocation_type:
      
        
          12288
        
      
      
        (MEM_COMMIT|MEM_RESERVE)
      
      

    
  
    
      process_handle:
      
        
          0xffffffff
        
      
      
      

    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    Cylance
                                    Unsafe
                                    
                                


                            

                        

                            

                                

                                    Sangfor
                                    Trojan.Win32.Save.a
                                    
                                


                            

                        

                            

                                

                                    APEX
                                    Malicious
                                    
                                


                            

                        

                            

                                

                                    McAfee-GW-Edition
                                    Artemis!Trojan
                                    
                                


                            

                        

                            

                                

                                    ZoneAlarm
                                    UDS:DangerousObject.Multi.Generic
                                    
                                


                            

                        

                            

                                

                                    Microsoft
                                    Program:Win32/Wacapew.C!ml
                                    
                                


                            

                        

                            

                                

                                    Cynet
                                    Malicious (score: 100)