Report - IMG001.exe

NSIS Malicious Library UPX VMProtect PE File PE32 PE64 DLL ftp GIF Format Lnk Format ZIP Format
ScreenShot
Created 2024.06.26 10:58 Machine s1_win7_x6401
Filename IMG001.exe
Type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
AI Score
3
Behavior Score
12.8
ZERO API file : malware
VT API (file) 63 detected (AIDetectMalware, malicious, high confidence, score, NSIS, Miner, Wanex, Artemis, Unsafe, GenericKD, CoinMiner, Vvm2, Threats, InArchive, AAVT, multiple detections, edxafr, Tool, BitCoinMiner, PhotoMiner, CLASSIC, DWHS, BtcMine, MALXMR, TIAOODHK, high, Crytes, Bitcoin, ai score=100, TSGeneric, HeurC, KVM007, GenericMC, Malware@#31wl9wj4588tl, Detected, R174018, ZexaF, fGW@aO9jEZp, Msmw, Static AI, Suspicious PE, MxResIcn, confidence, 100%)
md5 d59e32eefe00e9bf9e0f5dafe68903fb
sha256 e06aa8ce984b22dd80a60c1f818b781b05d1c07facc91fec8637b312a728c145
ssdeep 98304:MxtVPnq1y5tQOM33ZNqCtBixHl54Oyjes1bo5:uVPq1yLanrqTr43eSG
imphash 7fa974366048f9c551ef45714595665e
impfuzzy 48:6pBuU2cYZJaOkSv5L8r+tAlt8tz4eObGLlla0Q7XEFpV74dT+/1xyACnBoKQ504h:gBj2cYZJa2J21kpZSV0
  Network IP location

Signature (26cnts)

Level Description
danger Connects to IP addresses that are no longer responding to requests (legitimate services will remain up-and-running usually)
danger File has been identified by 63 AntiVirus engines on VirusTotal as malicious
warning Generates some ICMP traffic
watch Communicates with host for which no DNS query was performed
watch Creates known Napolar files
watch Installs itself for autorun at Windows startup
watch Network activity contains more than one unique useragent
watch Uses Sysinternals tools in order to add additional command line functionality
notice A process created a hidden window
notice Allocates read-write-execute memory (usually to unpack itself)
notice Checks for the Locally Unique Identifier on the system for a suspicious privilege
notice Creates a shortcut to an executable file
notice Creates a suspicious process
notice Creates executable files on the filesystem
notice Drops a binary and executes it
notice Drops an executable to the user AppData folder
notice Executes one or more WMI queries
notice Resolves a suspicious Top Level Domain (TLD)
notice Terminates another process
notice The binary likely contains encrypted or compressed data indicative of a packer
notice Uses Windows utilities for basic Windows functionality
info Checks amount of memory in system
info Checks if process is being debugged by a debugger
info Command line console output was observed
info Queries for the computername
info The executable contains unknown PE section names indicative of a packer (could be a false positive)

Rules (17cnts)

Level Name Description Collection
warning NSIS_Installer Null Soft Installer binaries (download)
warning NSIS_Installer Null Soft Installer binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (download)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch UPX_Zero UPX packed file binaries (download)
watch UPX_Zero UPX packed file binaries (upload)
watch VMProtect_Zero VMProtect packed file binaries (download)
info ftp_command ftp command binaries (download)
info IsDLL (no description) binaries (download)
info IsPE32 (no description) binaries (download)
info IsPE32 (no description) binaries (upload)
info IsPE64 (no description) binaries (download)
info lnk_file_format Microsoft Windows Shortcut File Format binaries (download)
info Lnk_Format_Zero LNK Format binaries (download)
info PE_Header_Zero PE File Signature binaries (download)
info PE_Header_Zero PE File Signature binaries (upload)
info zip_file_format ZIP file format binaries (download)

Network (615cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?
stafftest.ru Unknown mailcious
79.53.216.7 IT Telecom Italia 79.53.216.7 clean
58.133.18.4 CN China Networks Inter-Exchange 58.133.18.4 clean
196.97.217.3 KE SAFARICOM-LIMITED 196.97.217.3 clean
36.253.163.5 NP Ncell Pvt. Ltd. 36.253.163.5 clean
216.172.247.2 US WVUSD 216.172.247.2 clean
52.192.39.0 JP AMAZON-02 52.192.39.0 clean
9.44.144.0 Unknown 9.44.144.0 clean
73.55.58.4 US COMCAST-7922 73.55.58.4 clean
223.200.60.6 TW Data Communication Business Group 223.200.60.6 clean
194.140.101.4 DE Plusnet GmbH 194.140.101.4 clean
102.45.108.7 EG TE-AS 102.45.108.7 clean
116.79.123.3 Unknown 116.79.123.3 clean
2.164.27.1 DE Deutsche Telekom AG 2.164.27.1 clean
125.99.183.1 IN Hathway IP Over Cable Internet 125.99.183.1 clean
151.17.47.2 IT Wind Tre S.p.A. 151.17.47.2 clean
55.172.89.4 US DNIC-ASBLK-01534-01546 55.172.89.4 clean
77.165.118.6 NL KPN B.V. 77.165.118.6 clean
78.145.131.5 GB TalkTalk 78.145.131.5 clean
54.6.184.4 Unknown 54.6.184.4 clean
13.185.59.6 Unknown 13.185.59.6 clean
101.98.205.0 NZ VocusGroup 101.98.205.0 clean
31.202.191.4 UA Maxnet Telecom, Ltd 31.202.191.4 clean
150.34.234.3 Unknown 150.34.234.3 clean
195.68.142.4 RU PVimpelCom 195.68.142.4 clean
152.37.21.6 US UMO-AS 152.37.21.6 clean
106.70.168.2 AU Microplex PTY LTD 106.70.168.2 clean
16.243.68.6 Unknown 16.243.68.6 clean
81.185.246.2 FR Societe Francaise du Radiotelephone S.A. 81.185.246.2 clean
108.13.45.0 US FRONTIER-FRTR 108.13.45.0 clean
137.6.100.6 US DNIC-ASBLK-00721-00726 137.6.100.6 clean
150.47.158.1 JP KDDI CORPORATION 150.47.158.1 clean
68.61.74.0 US COMCAST-7922 68.61.74.0 clean
215.172.174.7 Unknown 215.172.174.7 clean
112.214.247.4 KR DLIVE 112.214.247.4 clean
210.148.110.4 JP Internet Initiative Japan Inc. 210.148.110.4 clean
140.77.99.3 FR Renater 140.77.99.3 clean
91.54.98.2 DE Deutsche Telekom AG 91.54.98.2 clean
66.8.244.6 US TWC-20001-PACWEST 66.8.244.6 clean
102.49.154.7 MA Itissalat Al-MAGHRIB 102.49.154.7 clean
40.120.249.3 US MICROSOFT-CORP-MSN-AS-BLOCK 40.120.249.3 clean
210.38.160.5 CN China Education and Research Network Center 210.38.160.5 clean
40.130.40.5 US WINDSTREAM 40.130.40.5 clean
171.244.51.7 VN CHT Compamy Ltd 171.244.51.7 clean
145.157.209.2 NL SURFnet bv 145.157.209.2 clean
36.79.163.5 ID PT Telekomunikasi Indonesia 36.79.163.5 clean
223.15.187.7 CN Chinanet 223.15.187.7 clean
211.203.15.0 KR SK Broadband Co Ltd 211.203.15.0 clean
158.85.177.2 US SOFTLAYER 158.85.177.2 clean
181.202.215.5 CL TELEFONICA CHILE S.A. 181.202.215.5 clean
189.232.197.4 Unknown 189.232.197.4 clean
210.128.101.4 JP Internet Initiative Japan Inc. 210.128.101.4 clean
180.69.46.7 KR SK Broadband Co Ltd 180.69.46.7 clean
173.93.240.4 US TWC-11426-CAROLINAS 173.93.240.4 clean
150.169.42.2 Unknown 150.169.42.2 clean
210.25.42.3 CN China International Electronic Commerce Center 210.25.42.3 clean
103.244.146.1 AF Star Satellite Communications Company - PJSC 103.244.146.1 clean
181.76.181.1 BR TIM S/A 181.76.181.1 clean
90.145.78.4 NL Unet B.V. 90.145.78.4 clean
49.133.25.5 JP KDDI CORPORATION 49.133.25.5 clean
137.148.121.1 US CSUOHIO-AS 137.148.121.1 clean
215.28.41.5 US DNIC-ASBLK-00721-00726 215.28.41.5 clean
41.111.40.2 DZ Telecom Algeria 41.111.40.2 clean
204.10.111.1 US INFOLINK-MIA 204.10.111.1 clean
126.96.238.5 JP Softbank BB Corp. 126.96.238.5 clean
185.21.112.5 FR Graal Network S.a.R.L. 185.21.112.5 clean
37.218.113.7 ES Euskaltel S.A. 37.218.113.7 clean
163.206.85.3 US AS1843-7 163.206.85.3 clean
73.253.76.6 US COMCAST-7922 73.253.76.6 clean
216.99.70.3 Unknown 216.99.70.3 clean
51.211.125.2 Unknown 51.211.125.2 clean
197.202.247.5 DZ Telecom Algeria 197.202.247.5 clean
57.127.153.4 Unknown 57.127.153.4 clean
3.27.20.0 AU AMAZON-02 3.27.20.0 clean
111.223.14.2 CN CHINA UNICOM China169 Backbone 111.223.14.2 clean
74.52.61.5 US SOFTLAYER 74.52.61.5 clean
40.192.53.0 US LILLY-AS 40.192.53.0 clean
104.182.225.7 US ATT-INTERNET4 104.182.225.7 clean
116.203.17.7 DE Hetzner Online GmbH 116.203.17.7 clean
47.72.208.0 NZ Vodafone NZ Ltd. 47.72.208.0 clean
120.27.154.1 CN Hangzhou Alibaba Advertising Co.,Ltd. 120.27.154.1 clean
135.208.216.0 Unknown 135.208.216.0 clean
71.153.118.1 US ATT-INTERNET4 71.153.118.1 clean
9.80.230.6 Unknown 9.80.230.6 clean
152.227.8.3 Unknown 152.227.8.3 clean
100.187.100.2 US T-MOBILE-AS21928 100.187.100.2 clean
216.211.81.2 CA TBAYTEL 216.211.81.2 clean
145.221.150.2 NL ING Bank N.V. 145.221.150.2 clean
132.39.69.7 US DNIC-ASBLK-00721-00726 132.39.69.7 clean
169.167.211.1 Unknown 169.167.211.1 clean
89.113.95.4 RU PVimpelCom 89.113.95.4 clean
84.130.161.4 DE Deutsche Telekom AG 84.130.161.4 clean
156.81.158.7 Unknown 156.81.158.7 clean
156.31.244.6 Unknown 156.31.244.6 clean
15.173.45.7 US INTRIA-HP-CORP 15.173.45.7 clean
219.91.167.3 Unknown 219.91.167.3 clean
124.50.35.5 KR LG POWERCOMM 124.50.35.5 clean
145.120.34.1 NL SURFnet bv 145.120.34.1 clean
85.126.26.3 AT Liberty Global B.V. 85.126.26.3 clean
69.191.103.7 Unknown 69.191.103.7 clean
182.188.85.7 PK Pakistan Telecom Company Limited 182.188.85.7 clean
48.87.231.5 Unknown 48.87.231.5 clean
64.224.251.0 US COGECO-PEER1 64.224.251.0 clean
15.177.51.6 SG AMAZON-02 15.177.51.6 clean
108.40.84.3 US UUNET 108.40.84.3 clean
18.46.212.4 Unknown 18.46.212.4 clean
81.140.110.0 GB British Telecommunications PLC 81.140.110.0 clean
170.176.225.1 US WAVE-RURAL-CONNECT-LLC 170.176.225.1 clean
75.203.25.3 US CELLCO 75.203.25.3 clean
50.166.90.5 US COMCAST-7922 50.166.90.5 clean
184.172.153.7 US SOFTLAYER 184.172.153.7 clean
21.214.246.7 Unknown 21.214.246.7 clean
200.187.112.5 BR NITNET INFORMATICA S/C LTDA. 200.187.112.5 clean
170.196.40.1 Unknown 170.196.40.1 clean
88.21.61.2 ES Telefonica De Espana 88.21.61.2 clean
135.191.15.4 Unknown 135.191.15.4 clean
100.158.111.7 US T-MOBILE-AS21928 100.158.111.7 clean
221.241.66.4 JP ARTERIA Networks Corporation 221.241.66.4 clean
117.31.48.6 CN Chinanet 117.31.48.6 clean
11.70.253.6 Unknown 11.70.253.6 clean
22.194.27.1 Unknown 22.194.27.1 clean
150.87.156.5 JP Internet Initiative Japan Inc. 150.87.156.5 clean
63.178.129.3 Unknown 63.178.129.3 clean
204.104.82.6 Unknown 204.104.82.6 clean
215.55.30.3 US DNIC-ASBLK-00721-00726 215.55.30.3 clean
110.167.84.6 CN Chinanet 110.167.84.6 clean
83.252.113.0 SE Com Hem AB 83.252.113.0 clean
217.212.59.6 SE Telia Company AB 217.212.59.6 clean
171.173.55.4 Unknown 171.173.55.4 clean
73.67.251.7 US COMCAST-7922 73.67.251.7 clean
34.170.22.4 Unknown 34.170.22.4 clean
66.243.13.3 US LEVEL3 66.243.13.3 clean
79.223.168.2 DE Deutsche Telekom AG 79.223.168.2 clean
174.33.85.2 US HNS-DIRECPC 174.33.85.2 clean
9.213.219.4 Unknown 9.213.219.4 clean
104.127.135.1 Unknown 104.127.135.1 clean
185.15.108.3 CZ ISP Alliance a.s. 185.15.108.3 clean
99.106.69.6 US ATT-INTERNET4 99.106.69.6 clean
24.10.226.2 US COMCAST-7922 24.10.226.2 clean
41.254.97.1 LY General Post and Telecommunication Company 41.254.97.1 clean
59.31.179.1 KR Korea Telecom 59.31.179.1 clean
89.119.94.3 IT BT Italia S.p.A. 89.119.94.3 clean
205.148.208.7 Unknown 205.148.208.7 clean
188.181.91.4 DK Tele Danmark 188.181.91.4 clean
200.144.167.0 BR UNIVERSIDADE DE SAO PAULO 200.144.167.0 clean
85.250.69.2 IL Cellcom Fixed Line Communication L.P. 85.250.69.2 clean
219.253.131.3 KR SK Telecom 219.253.131.3 clean
186.22.155.5 AR Telecentro S.A. 186.22.155.5 clean
126.231.111.1 Unknown 126.231.111.1 clean
166.37.126.3 US MCI-ASN 166.37.126.3 clean
29.8.10.5 Unknown 29.8.10.5 clean
157.215.206.5 Unknown 157.215.206.5 clean
70.89.190.5 US COMCAST-7922 70.89.190.5 clean
3.165.47.3 Unknown 3.165.47.3 clean
184.130.205.6 Unknown 184.130.205.6 clean
80.21.83.6 IT Telecom Italia 80.21.83.6 clean
44.163.71.0 US UCSD 44.163.71.0 clean
178.112.45.2 AT Hutchison Drei Austria GmbH 178.112.45.2 clean
53.21.121.7 DE Daimler AG 53.21.121.7 clean
173.144.51.1 US SPCS 173.144.51.1 clean
109.255.202.7 IE Liberty Global B.V. 109.255.202.7 clean
74.175.245.3 US ATT-INTERNET4 74.175.245.3 clean
167.147.129.6 Unknown 167.147.129.6 clean
162.103.195.7 Unknown 162.103.195.7 clean
22.128.65.5 Unknown 22.128.65.5 clean
67.203.26.6 US AS-COLOAM 67.203.26.6 clean
145.71.93.6 Unknown 145.71.93.6 clean
43.7.126.1 Unknown 43.7.126.1 clean
52.9.11.6 US AMAZON-02 52.9.11.6 clean
190.89.23.5 BR RDS TECNOLOGIA-ME 190.89.23.5 clean
17.139.210.4 US APPLE-ENGINEERING 17.139.210.4 clean
20.58.129.7 US MICROSOFT-CORP-MSN-AS-BLOCK 20.58.129.7 clean
40.124.85.0 US MICROSOFT-CORP-MSN-AS-BLOCK 40.124.85.0 clean
146.247.42.3 IE VMware International Ltd. 146.247.42.3 clean
46.120.176.7 IL Partner Communications Ltd. 46.120.176.7 clean
150.174.221.2 US VSU-NET 150.174.221.2 clean
78.173.108.2 TR Turk Telekom 78.173.108.2 clean
15.79.232.1 Unknown 15.79.232.1 clean
194.238.53.4 GB RM Education Ltd 194.238.53.4 clean
140.249.136.7 CN Qingdao, Shandong Province, P.R.China. 140.249.136.7 clean
26.209.94.6 Unknown 26.209.94.6 clean
14.56.20.4 KR Korea Telecom 14.56.20.4 clean
203.206.127.3 AU TPG Telecom Limited 203.206.127.3 clean
167.226.44.3 Unknown 167.226.44.3 clean
8.117.77.6 US LEVEL3 8.117.77.6 clean
46.95.68.6 DE Deutsche Telekom AG 46.95.68.6 clean
76.154.104.4 US COMCAST-7922 76.154.104.4 clean
158.219.127.0 Unknown 158.219.127.0 clean
198.137.71.2 Unknown 198.137.71.2 clean
21.242.14.2 Unknown 21.242.14.2 clean
80.183.13.7 IT Telecom Italia 80.183.13.7 clean
215.120.179.7 US DNIC-ASBLK-00721-00726 215.120.179.7 clean
202.114.1.5 CN China Education and Research Network Center 202.114.1.5 clean
54.44.64.5 Unknown 54.44.64.5 clean
12.209.32.2 US ATT-INTERNET4 12.209.32.2 clean
194.109.201.6 NL Xs4all Internet BV 194.109.201.6 clean
51.162.38.4 Unknown 51.162.38.4 clean
205.248.152.7 Unknown 205.248.152.7 clean
162.151.65.1 US COMCAST-7922 162.151.65.1 clean
220.134.66.2 TW Data Communication Business Group 220.134.66.2 clean
145.106.68.0 Unknown 145.106.68.0 clean
43.54.104.5 Unknown 43.54.104.5 clean
121.226.5.0 CN Chinanet 121.226.5.0 clean
65.98.77.1 US FORTRESSITX 65.98.77.1 clean
40.152.54.0 US LILLY-AS 40.152.54.0 clean
199.133.163.4 US USDA-1 199.133.163.4 clean
61.116.102.2 JP SoftBank Mobile Corp. 61.116.102.2 clean
51.161.32.3 CA OVH SAS 51.161.32.3 clean
217.160.225.4 DE 1&1 Ionos Se 217.160.225.4 clean
26.249.238.4 Unknown 26.249.238.4 clean
192.40.90.1 SE Inter Connects Inc 192.40.90.1 clean
88.42.175.6 IT Telecom Italia 88.42.175.6 clean
97.188.3.7 US CELLCO-PART 97.188.3.7 clean
4.191.68.7 US LEVEL3 4.191.68.7 clean
189.168.240.3 MX Uninet S.A. de C.V. 189.168.240.3 clean
113.14.170.5 CN Chinanet 113.14.170.5 clean
207.84.206.5 Unknown 207.84.206.5 clean
44.202.71.4 US AMAZON-AES 44.202.71.4 clean
7.115.242.5 Unknown 7.115.242.5 clean
132.216.37.0 CA MCGILL-AS 132.216.37.0 clean
9.96.12.0 Unknown 9.96.12.0 clean
14.94.55.3 KR Korea Telecom 14.94.55.3 clean
94.237.243.4 RU T2 Mobile LLC 94.237.243.4 clean
180.112.249.6 CN Chinanet 180.112.249.6 clean
113.113.218.3 CN Chinanet 113.113.218.3 clean
129.143.220.5 DE Universitaet Stuttgart 129.143.220.5 clean
138.18.138.2 Unknown 138.18.138.2 clean
107.8.69.1 US TWC-7843-BB 107.8.69.1 clean
86.154.30.4 GB British Telecommunications PLC 86.154.30.4 clean
175.247.84.5 KR Korea Telecom 175.247.84.5 clean
167.102.223.3 US NETWORKMARYLAND 167.102.223.3 clean
180.31.112.7 JP NTT Communications Corporation 180.31.112.7 clean
118.228.153.1 CN China Broadband Communications (CBCnet) 118.228.153.1 clean
39.77.224.2 CN CHINA UNICOM China169 Backbone 39.77.224.2 clean
215.172.65.2 Unknown 215.172.65.2 clean
175.87.163.1 CN China TieTong Telecommunications Corporation 175.87.163.1 clean
48.25.10.7 Unknown 48.25.10.7 clean
212.241.155.5 GB Daisy Communications Ltd 212.241.155.5 clean
5.23.144.7 BE Telenet BVBA 5.23.144.7 clean
25.225.35.1 Unknown 25.225.35.1 clean
177.232.150.6 MX Mexico Red de Telecomunicaciones, S. de R.L. de C.V. 177.232.150.6 clean
65.44.92.7 US XO-AS15 65.44.92.7 clean
52.186.162.2 US MICROSOFT-CORP-MSN-AS-BLOCK 52.186.162.2 clean
68.125.68.2 US ATT-INTERNET4 68.125.68.2 clean
177.119.12.1 BR TELEFONICA BRASIL S.A 177.119.12.1 clean
167.177.24.2 US ALLINA-HEALTH-SYSTEM-INC 167.177.24.2 clean
114.213.150.1 CN China Education and Research Network Center 114.213.150.1 clean
215.53.151.2 US DNIC-ASBLK-00721-00726 215.53.151.2 clean
171.51.48.0 IN Bharti Airtel Ltd. AS for GPRS Service 171.51.48.0 clean
206.68.42.5 US NTT-COMMUNICATIONS-2914 206.68.42.5 clean
139.127.193.1 US SHSC-1-AS 139.127.193.1 clean
28.86.16.1 Unknown 28.86.16.1 clean
77.249.89.1 NL Liberty Global B.V. 77.249.89.1 clean
111.219.91.1 KR SK Telecom 111.219.91.1 clean
94.138.45.5 IT Irideos S.p.A. 94.138.45.5 clean
213.132.185.4 NL Vodafone Libertel B.V. 213.132.185.4 clean
137.19.153.7 Unknown 137.19.153.7 clean
81.64.137.7 FR SFR SA 81.64.137.7 clean
216.192.82.0 Unknown 216.192.82.0 clean
159.131.6.5 Unknown 159.131.6.5 clean
88.192.237.7 FI Telia Finland Oyj 88.192.237.7 clean
88.67.109.4 DE Vodafone GmbH 88.67.109.4 clean
33.66.3.1 Unknown 33.66.3.1 clean
177.163.61.2 BR TELEFONICA BRASIL S.A 177.163.61.2 clean
112.52.114.2 CN Guangdong Mobile Communication Co.Ltd. 112.52.114.2 clean
216.139.23.3 US SVINET-1 216.139.23.3 clean
48.142.186.7 Unknown 48.142.186.7 clean
146.164.3.6 BR Fundacao Carlos Chagas Filho de Amparo a Pesquisa 146.164.3.6 clean
14.139.238.3 IN NKN Core Network 14.139.238.3 clean
174.11.152.3 Unknown 174.11.152.3 clean
14.59.153.2 KR Korea Telecom 14.59.153.2 clean
131.30.153.2 US AFCONC-BLOCK1-AS 131.30.153.2 clean
58.118.167.5 CN China Networks Inter-Exchange 58.118.167.5 clean
145.105.72.6 Unknown 145.105.72.6 clean
169.213.178.2 Unknown 169.213.178.2 clean
137.27.69.0 US CHARTER-20115 137.27.69.0 clean
143.151.202.1 US DNIC-ASBLK-00721-00726 143.151.202.1 clean
201.229.174.1 DO Compania Dominicana de Telefonos S. A. 201.229.174.1 clean
204.253.19.5 US UUNET 204.253.19.5 clean
104.228.42.4 US TWC-11351-NORTHEAST 104.228.42.4 clean
146.41.228.1 Unknown 146.41.228.1 clean
180.213.185.1 CN ASN for TIANJIN Provincial Net of CT 180.213.185.1 clean
95.75.107.2 IT Telecom Italia 95.75.107.2 clean
162.157.48.0 CA ASN852 162.157.48.0 clean
16.50.247.5 Unknown 16.50.247.5 clean
214.176.33.3 US DNIC-ASBLK-00721-00726 214.176.33.3 clean
57.240.19.4 Unknown 57.240.19.4 clean
16.47.221.2 Unknown 16.47.221.2 clean
65.156.214.3 US CENTURYLINK-US-LEGACY-QWEST 65.156.214.3 clean
59.33.136.7 CN Chinanet 59.33.136.7 clean
57.211.178.7 Unknown 57.211.178.7 clean
75.82.156.6 US TWC-20001-PACWEST 75.82.156.6 clean
69.56.4.6 US PCUC-AS 69.56.4.6 clean
193.124.5.0 Unknown 193.124.5.0 clean
119.120.5.1 CN Chinanet 119.120.5.1 clean
63.20.1.2 US UUNET 63.20.1.2 clean
204.142.151.6 US NTT-COMMUNICATIONS-2914 204.142.151.6 clean
62.232.77.0 GB Daisy Communications Ltd 62.232.77.0 clean
144.118.84.0 US DREXEL-ASN 144.118.84.0 clean
113.219.23.2 CN Chinanet 113.219.23.2 clean
207.144.147.7 US SPIRITTEL-AS 207.144.147.7 clean
97.240.86.6 US CELLCO-PART 97.240.86.6 clean
9.113.123.4 Unknown 9.113.123.4 clean
181.225.220.5 AR NORTECH 181.225.220.5 clean
36.67.217.6 ID PT Telekomunikasi Indonesia 36.67.217.6 clean
137.70.134.5 US HENNEPIN-COUNTY 137.70.134.5 clean
96.27.133.0 US WOW-INTERNET 96.27.133.0 clean
174.219.175.3 US CELLCO 174.219.175.3 clean
194.218.5.5 SE Telia Company AB 194.218.5.5 clean
114.131.124.0 Unknown 114.131.124.0 clean
152.209.124.3 US UUNET 152.209.124.3 clean
63.88.236.6 US UUNET 63.88.236.6 clean
106.21.59.2 Unknown 106.21.59.2 clean
146.154.239.4 US None 146.154.239.4 clean
152.228.98.7 US ILIGHT-NET 152.228.98.7 clean
198.130.230.5 US ESNET-WEST 198.130.230.5 clean
56.11.199.3 Unknown 56.11.199.3 clean
34.203.64.3 US AMAZON-AES 34.203.64.3 clean
22.6.251.7 Unknown 22.6.251.7 clean
212.78.5.1 IT Promo.it Srl 212.78.5.1 clean
123.243.226.5 AU TPG Telecom Limited 123.243.226.5 clean
38.11.73.3 US COGENT-174 38.11.73.3 clean
89.16.65.2 IE Ripple Communications Ltd 89.16.65.2 clean
60.14.202.0 CN CHINA UNICOM China169 Backbone 60.14.202.0 clean
211.79.142.7 TW Data Communication Business Group 211.79.142.7 clean
100.203.165.1 US T-MOBILE-AS21928 100.203.165.1 clean
75.168.236.3 US CENTURYLINK-US-LEGACY-QWEST 75.168.236.3 clean
84.211.230.7 NO Telia Norge AS 84.211.230.7 clean
169.151.168.2 US INS-AS 169.151.168.2 clean
7.48.125.6 Unknown 7.48.125.6 clean
55.164.210.7 US DNIC-ASBLK-01534-01546 55.164.210.7 clean
219.16.227.3 JP Softbank BB Corp. 219.16.227.3 clean
60.111.191.4 JP Softbank BB Corp. 60.111.191.4 clean
114.183.161.5 JP NTT Communications Corporation 114.183.161.5 clean
156.175.191.7 EG Etisalat Misr 156.175.191.7 clean
5.196.187.6 FR OVH SAS 5.196.187.6 clean
32.9.31.6 US ATGS-MMD-AS 32.9.31.6 clean
169.182.148.0 Unknown 169.182.148.0 clean
175.203.223.4 KR Korea Telecom 175.203.223.4 clean
219.59.35.2 JP Softbank BB Corp. 219.59.35.2 clean
98.200.236.6 US COMCAST-7922 98.200.236.6 clean
29.231.57.0 Unknown 29.231.57.0 clean
18.97.141.4 Unknown 18.97.141.4 clean
45.226.163.6 BR EASY CONNECT TECNOLOGIA JACI LTDA 45.226.163.6 clean
138.5.28.0 US RFC2270-UUNET-CUSTOMER 138.5.28.0 clean
196.113.219.5 MA ASMedi 196.113.219.5 clean
94.10.130.0 GB Sky UK Limited 94.10.130.0 clean
109.65.245.6 IL Bezeq International 109.65.245.6 clean
64.79.145.6 US SWITCH-LTD 64.79.145.6 clean
200.137.230.6 BR Associacao Rede Nacional de Ensino e Pesquisa 200.137.230.6 clean
190.93.195.5 AR Davitel S.A. 190.93.195.5 clean
178.49.102.5 RU Novotelecom Ltd 178.49.102.5 clean
25.14.214.0 Unknown 25.14.214.0 clean
101.167.207.2 SG Telstra Global 101.167.207.2 clean
173.100.23.4 US SPRINTLINK 173.100.23.4 clean
34.74.38.2 US GOOGLE 34.74.38.2 clean
195.54.200.0 RU Cronyx Plus Ltd. 195.54.200.0 clean
133.17.35.1 JP Research Organization of Information and Systems, National Institute of Informatics 133.17.35.1 clean
220.245.129.7 AU TPG Telecom Limited 220.245.129.7 clean
34.192.45.1 US AMAZON-AES 34.192.45.1 clean
97.61.171.0 US CELLCO-PART 97.61.171.0 clean
184.183.119.3 US ASN-CXA-ALL-CCI-22773-RDC 184.183.119.3 clean
209.196.206.5 Unknown 209.196.206.5 clean
151.194.231.2 Unknown 151.194.231.2 clean
21.107.146.4 Unknown 21.107.146.4 clean
43.147.153.7 Unknown 43.147.153.7 clean
96.234.178.2 US UUNET 96.234.178.2 clean
158.191.118.5 FR Credit Agricole S.A. 158.191.118.5 clean
138.2.219.3 Unknown 138.2.219.3 clean
143.68.195.4 Unknown 143.68.195.4 clean
209.62.194.3 US EATEL 209.62.194.3 clean
48.182.125.6 Unknown 48.182.125.6 clean
15.88.247.3 Unknown 15.88.247.3 clean
104.32.211.6 US TWC-20001-PACWEST 104.32.211.6 clean
157.232.68.7 Unknown 157.232.68.7 clean
131.121.162.7 US DNIC-AS-00668 131.121.162.7 clean
133.198.127.1 Unknown 133.198.127.1 clean
122.119.0.6 CN Travelsky Technology Limited 122.119.0.6 clean
41.40.17.6 EG TE-AS 41.40.17.6 clean
86.34.120.1 RO Telekom Romania Communication S.A 86.34.120.1 clean
185.25.140.5 DK Zitcom A/S 185.25.140.5 clean
77.168.2.3 NL KPN B.V. 77.168.2.3 clean
130.212.184.4 US CSUNET-NW 130.212.184.4 clean
137.184.109.7 Unknown 137.184.109.7 clean
32.228.73.5 US ATGS-MMD-AS 32.228.73.5 clean
153.225.252.0 JP NTT Communications Corporation 153.225.252.0 clean
176.149.246.4 FR Bouygues Telecom SA 176.149.246.4 clean
109.240.241.7 FI Telia Finland Oyj 109.240.241.7 clean
117.113.51.7 CN China Networks Inter-Exchange 117.113.51.7 clean
151.47.145.2 IT Wind Tre S.p.A. 151.47.145.2 clean
150.136.211.5 US ORACLE-BMC-31898 150.136.211.5 clean
177.250.135.6 PY CO.PA.CO. 177.250.135.6 clean
56.231.200.3 Unknown 56.231.200.3 clean
101.140.174.3 JP OPTAGE Inc. 101.140.174.3 clean
12.4.101.5 US ATT-INTERNET4 12.4.101.5 clean
114.155.228.5 JP NTT Communications Corporation 114.155.228.5 clean
191.68.97.6 CO COMCEL S.A. 191.68.97.6 clean
85.148.116.6 NL Euronet Communications B.V. 85.148.116.6 clean
109.98.160.4 RO Telekom Romania Communication S.A 109.98.160.4 clean
153.194.191.4 JP NTT Communications Corporation 153.194.191.4 clean
56.136.159.2 Unknown 56.136.159.2 clean
166.182.145.6 US USCC-MPLS01 166.182.145.6 clean
21.130.90.2 Unknown 21.130.90.2 clean
109.87.170.7 UA Content Delivery Network Ltd 109.87.170.7 clean
83.152.6.0 FR Free SAS 83.152.6.0 clean
4.81.106.0 US LEVEL3 4.81.106.0 clean
61.234.43.5 CN China TieTong Telecommunications Corporation 61.234.43.5 clean
149.0.208.3 TR Vodafone Net Iletisim Hizmetleri Anonim Sirketi 149.0.208.3 clean
148.37.71.6 Unknown 148.37.71.6 clean
39.12.232.2 TW Far EastTone Telecommunication Co., Ltd. 39.12.232.2 clean
135.197.181.0 US ATT-RESEARCH 135.197.181.0 clean
162.251.243.7 US COGENT-174 162.251.243.7 clean
139.18.150.5 DE Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. 139.18.150.5 clean
50.80.142.1 US MEDIACOM-ENTERPRISE-BUSINESS 50.80.142.1 clean
82.211.253.1 DK Dansk Kabel Tv A/s 82.211.253.1 clean
33.78.204.0 Unknown 33.78.204.0 clean
3.16.116.2 US AMAZON-02 3.16.116.2 clean
222.232.100.2 KR SK Broadband Co Ltd 222.232.100.2 clean
119.93.148.0 PH Philippine Long Distance Telephone Company 119.93.148.0 clean
45.216.149.5 MA ASMedi 45.216.149.5 clean
147.74.98.1 US AFCONC-BLOCK1-AS 147.74.98.1 clean
85.209.93.1 DE HostRoyale Technologies Pvt Ltd 85.209.93.1 clean
141.148.60.6 Unknown 141.148.60.6 clean
61.10.64.5 HK HK Cable TV Ltd 61.10.64.5 clean
110.57.169.4 CN China TieTong Telecommunications Corporation 110.57.169.4 clean
65.190.30.3 US TWC-11426-CAROLINAS 65.190.30.3 clean
218.248.202.7 IN National Internet Backbone 218.248.202.7 clean
97.84.139.0 US CHARTER-20115 97.84.139.0 clean
9.145.149.1 Unknown 9.145.149.1 clean
75.207.225.0 US CELLCO 75.207.225.0 clean
197.106.116.5 ZA CELL-C 197.106.116.5 clean
78.199.25.0 FR Free SAS 78.199.25.0 clean
46.201.141.3 UA PJSC Ukrtelecom 46.201.141.3 clean
199.75.140.3 US LEVEL3 199.75.140.3 clean
139.190.37.1 PK WITRIBE PAKISTAN LIMITED 139.190.37.1 clean
128.224.196.4 Unknown 128.224.196.4 clean
70.90.21.3 US COMCAST-7922 70.90.21.3 clean
84.116.249.6 NL Liberty Global B.V. 84.116.249.6 clean
209.31.187.4 US XO-AS15 209.31.187.4 clean
101.65.120.0 CN CHINA UNICOM China169 Backbone 101.65.120.0 clean
129.203.48.4 Unknown 129.203.48.4 clean
206.254.103.1 US THENET-AS-3354 206.254.103.1 clean
40.193.229.5 US LILLY-AS 40.193.229.5 clean
76.255.123.0 Unknown 76.255.123.0 clean
134.31.13.4 Unknown 134.31.13.4 clean
164.88.250.0 US Clayer Limited 164.88.250.0 clean
73.151.228.6 US COMCAST-7922 73.151.228.6 clean
214.251.23.7 US DNIC-ASBLK-00721-00726 214.251.23.7 clean
196.141.69.7 EG Vodafone-EG 196.141.69.7 clean
71.29.183.7 US WINDSTREAM 71.29.183.7 clean
92.35.213.0 SE Telenor Norge AS 92.35.213.0 clean
129.71.55.3 US WVNET 129.71.55.3 clean
6.51.184.6 Unknown 6.51.184.6 clean
114.213.212.0 CN China Education and Research Network Center 114.213.212.0 clean
121.186.69.3 KR Korea Telecom 121.186.69.3 clean
8.197.30.3 US LEVEL3 8.197.30.3 clean
109.186.209.1 IL Cellcom Fixed Line Communication L.P. 109.186.209.1 clean
185.91.19.2 IQ TISHK NET Company for WIMAX technology and Internet Service Limited 185.91.19.2 clean
17.109.8.6 US APPLE-ENGINEERING 17.109.8.6 clean
53.160.52.2 DE Daimler AG 53.160.52.2 clean
49.0.212.5 MN YOKOZUNANET LLC 49.0.212.5 clean
18.146.186.3 Unknown 18.146.186.3 clean
25.128.41.5 Unknown 25.128.41.5 clean
202.59.35.4 AU 5G NETWORK OPERATIONS PTY LTD 202.59.35.4 clean
75.242.104.3 US CELLCO 75.242.104.3 clean
201.245.94.1 CO Colombia 201.245.94.1 clean
154.226.148.7 UG ZAINUGAS 154.226.148.7 clean
110.64.184.1 CN China Education and Research Network Center 110.64.184.1 clean
81.200.217.2 RU Region Svyaz Konsalt LLC 81.200.217.2 clean
13.168.3.0 Unknown 13.168.3.0 clean
185.197.149.6 Unknown 185.197.149.6 clean
1.235.75.4 KR SK Broadband Co Ltd 1.235.75.4 clean
189.52.3.7 BR CLARO S.A. 189.52.3.7 clean
139.142.159.7 CA GT-BELL 139.142.159.7 clean
114.125.254.6 ID PT. Telekomunikasi Selular 114.125.254.6 clean
17.182.117.1 US APPLE-ENGINEERING 17.182.117.1 clean
180.248.6.2 ID PT Telekomunikasi Indonesia 180.248.6.2 clean
78.133.232.4 PL T-Mobile Czech Republic a.s. 78.133.232.4 clean
172.161.221.6 Unknown 172.161.221.6 clean
144.92.227.0 US WISC-MADISON-AS 144.92.227.0 clean
208.253.169.4 US UUNET 208.253.169.4 clean
106.136.223.4 JP KDDI CORPORATION 106.136.223.4 clean
169.115.110.2 Unknown 169.115.110.2 clean
23.55.106.6 US BHARTI Airtel Ltd. 23.55.106.6 clean
121.112.234.2 JP NTT Communications Corporation 121.112.234.2 clean
95.2.116.5 TR Turk Telekom 95.2.116.5 clean
185.97.187.2 FR M6 Digital Services 185.97.187.2 clean
93.14.25.3 FR SFR SA 93.14.25.3 clean
216.127.98.7 US BRICKSTORES 216.127.98.7 clean
173.232.201.6 US EONIX-COMMUNICATIONS-ASBLOCK-62904 173.232.201.6 clean
57.104.168.1 Unknown 57.104.168.1 clean
33.119.36.2 Unknown 33.119.36.2 clean
153.193.41.0 JP NTT Communications Corporation 153.193.41.0 clean
67.174.34.2 US COMCAST-7922 67.174.34.2 clean
43.159.223.2 Unknown 43.159.223.2 clean
38.181.18.5 US COGENT-174 38.181.18.5 clean
166.220.31.2 US ATT-MOBILITY-LLC-AS20057 166.220.31.2 clean
171.209.1.7 CN Chinanet 171.209.1.7 clean
202.113.42.4 CN China Education and Research Network Center 202.113.42.4 clean
187.108.49.3 BR Companhia Itabirana Telecomunicacoes Ltda 187.108.49.3 clean
101.178.251.3 AU Telstra Corporation Ltd 101.178.251.3 clean
128.109.131.4 US NCREN 128.109.131.4 clean
59.87.121.1 JP ARTERIA Networks Corporation 59.87.121.1 clean
140.185.140.4 US DNIC-ASBLK-00306-00371 140.185.140.4 clean
64.51.26.0 US MEGAPATH2 64.51.26.0 clean
19.209.196.2 Unknown 19.209.196.2 clean
207.117.43.7 US British Telecommunications PLC 207.117.43.7 clean
93.146.72.1 IT Vodafone Italia S.p.A. 93.146.72.1 clean
168.42.29.6 US TDIR-CAPNET 168.42.29.6 clean
207.179.116.0 US ACDNET-ASN1 207.179.116.0 clean
223.69.210.1 CN China Mobile Communicaitons Corporation 223.69.210.1 clean
49.20.107.3 KR Korea Telecom 49.20.107.3 clean
183.189.137.5 CN CHINA UNICOM China169 Backbone 183.189.137.5 clean
37.49.234.7 FR France IX Services SASU 37.49.234.7 clean
55.178.230.0 US DNIC-ASBLK-01534-01546 55.178.230.0 clean
218.206.174.1 CN Guangdong Mobile Communication Co.Ltd. 218.206.174.1 clean
186.203.37.6 BR TIM S/A 186.203.37.6 clean
6.20.34.4 Unknown 6.20.34.4 clean
33.54.151.3 Unknown 33.54.151.3 clean
13.115.48.6 JP AMAZON-02 13.115.48.6 clean
32.8.245.7 US ATGS-MMD-AS 32.8.245.7 clean
73.197.191.2 US COMCAST-7922 73.197.191.2 clean
78.247.252.3 FR Free SAS 78.247.252.3 clean
102.227.222.6 Unknown 102.227.222.6 clean
52.118.120.7 Unknown 52.118.120.7 clean
190.27.64.4 CO Colombia 190.27.64.4 clean
161.134.141.7 DE LVLT-3549 161.134.141.7 clean
173.5.217.6 US SPCS 173.5.217.6 clean
67.214.97.4 US TCIS 67.214.97.4 clean
183.192.41.0 CN Shanghai Mobile Communications Co.,Ltd. 183.192.41.0 clean
213.230.228.1 GB Netcalibre Ltd 213.230.228.1 clean
64.90.149.0 US PLATEAU 64.90.149.0 clean
135.38.78.5 Unknown 135.38.78.5 clean
51.123.82.0 Unknown 51.123.82.0 clean
94.60.195.3 PT Vodafone Portugal - Communicacoes Pessoais S.A. 94.60.195.3 clean
200.110.149.4 AR IFX18747 200.110.149.4 clean
87.161.73.5 DE Deutsche Telekom AG 87.161.73.5 clean
35.51.45.2 US MERIT-AS-14 35.51.45.2 clean
194.142.212.6 FI Telia Finland Oyj 194.142.212.6 clean
199.167.240.3 US GETWIRELESS 199.167.240.3 clean
27.4.181.2 IN Hathway IP Over Cable Internet 27.4.181.2 clean
2.251.198.4 SE Telia Company AB 2.251.198.4 clean
4.215.46.4 US LEVEL3 4.215.46.4 clean
142.63.234.5 Unknown 142.63.234.5 clean
87.222.118.7 ES Orange Espagne SA 87.222.118.7 clean
56.54.184.4 Unknown 56.54.184.4 clean
194.170.76.7 AE Emirates Telecommunications Corporation 194.170.76.7 clean
12.243.176.0 US ATT-INTERNET4 12.243.176.0 clean
73.129.33.1 US COMCAST-7922 73.129.33.1 clean
123.174.249.7 CN Chinanet 123.174.249.7 clean
40.119.209.6 SG MICROSOFT-CORP-MSN-AS-BLOCK 40.119.209.6 clean
128.244.87.1 US JHUAPL-AS 128.244.87.1 clean
216.32.181.0 US MICROSOFT-CORP-MSN-AS-BLOCK 216.32.181.0 clean
110.90.74.2 CN Chinanet 110.90.74.2 clean
65.187.123.7 US TWC-11426-CAROLINAS 65.187.123.7 clean
13.38.143.1 Unknown 13.38.143.1 clean
81.66.137.5 FR SFR SA 81.66.137.5 clean
202.194.33.0 CN China Education and Research Network Center 202.194.33.0 clean
183.246.186.0 CN China Mobile communications corporation 183.246.186.0 clean
48.51.29.1 Unknown 48.51.29.1 clean
81.18.82.4 RO RCS & RDS 81.18.82.4 clean
206.77.241.5 US THENET-AS-3354 206.77.241.5 clean
165.158.187.0 US LEVEL3 165.158.187.0 clean
124.230.76.1 CN Chinanet 124.230.76.1 clean
220.242.99.1 Unknown 220.242.99.1 clean
221.119.80.2 JP KDDI CORPORATION 221.119.80.2 clean
87.6.225.4 IT Telecom Italia 87.6.225.4 clean
192.10.113.1 Unknown 192.10.113.1 clean
32.73.213.2 US ATGS-MMD-AS 32.73.213.2 clean
88.137.104.0 FR SFR SA 88.137.104.0 clean
158.248.239.4 DK Altibox AS 158.248.239.4 clean
200.81.217.3 AR ERTACH S.A. 200.81.217.3 clean
13.202.40.0 Unknown 13.202.40.0 clean
106.239.186.3 Unknown 106.239.186.3 clean
165.232.202.3 US ALLEGHENYHEALTHNETWORK 165.232.202.3 clean
97.139.222.0 US CELLCO-PART 97.139.222.0 clean
119.96.84.1 CN CHINANET Hubei province network 119.96.84.1 clean
27.13.30.1 CN CHINA UNICOM China169 Backbone 27.13.30.1 clean
44.48.220.3 US UCSD 44.48.220.3 clean
137.226.200.7 DE RWTH Aachen University 137.226.200.7 clean
57.86.146.1 SE ORANGE BUSINESS SERVICES U.S. Inc. 57.86.146.1 clean
178.98.40.6 GB EE Limited 178.98.40.6 clean
105.55.141.0 KE SAFARICOM-LIMITED 105.55.141.0 clean
48.77.253.2 Unknown 48.77.253.2 clean
212.73.146.6 BG Neterra Ltd. 212.73.146.6 clean
126.150.49.3 JP Softbank BB Corp. 126.150.49.3 clean
158.92.83.1 Unknown 158.92.83.1 clean
82.95.187.4 NL Xs4all Internet BV 82.95.187.4 clean
89.75.216.1 PL Liberty Global B.V. 89.75.216.1 clean
170.188.69.7 US SCLHS-47090 170.188.69.7 clean
146.42.149.7 Unknown 146.42.149.7 clean
114.140.131.1 TW Far EastTone Telecommunication Co., Ltd. 114.140.131.1 clean
75.232.121.4 US CELLCO 75.232.121.4 clean
80.153.39.7 DE Deutsche Telekom AG 80.153.39.7 clean
72.15.230.1 US ASN-VINS 72.15.230.1 clean
96.159.186.1 US COMCAST-7922 96.159.186.1 clean
30.183.23.0 Unknown 30.183.23.0 clean
189.197.61.0 Unknown 189.197.61.0 clean
204.20.227.7 Unknown 204.20.227.7 clean
204.222.28.7 US DNIC-ASBLK-00721-00726 204.222.28.7 clean
218.245.253.2 Unknown 218.245.253.2 clean
109.139.133.0 BE Proximus NV 109.139.133.0 clean
23.221.228.5 US AKAMAI-AS 23.221.228.5 clean
91.191.166.0 TR Netdirekt A.S. 91.191.166.0 clean
180.141.42.6 CN Chinanet 180.141.42.6 clean
57.103.211.5 Unknown 57.103.211.5 clean
53.197.74.5 DE Daimler AG 53.197.74.5 clean
84.156.62.1 DE Deutsche Telekom AG 84.156.62.1 clean
131.90.97.2 US PACIFIC-GAS 131.90.97.2 clean
48.176.108.3 Unknown 48.176.108.3 clean
75.204.81.6 US CELLCO 75.204.81.6 clean
78.187.80.6 TR Turk Telekom 78.187.80.6 clean
158.55.212.6 Unknown 158.55.212.6 clean
45.199.114.5 US DXTL Tseung Kwan O Service 45.199.114.5 clean
151.40.43.2 IT Wind Tre S.p.A. 151.40.43.2 clean

Suricata ids

PE API

IAT(Import Address Table) Library

KERNEL32.dll
 0x407060 CompareFileTime
 0x407064 SearchPathA
 0x407068 GetShortPathNameA
 0x40706c GetFullPathNameA
 0x407070 MoveFileA
 0x407074 SetCurrentDirectoryA
 0x407078 GetFileAttributesA
 0x40707c GetLastError
 0x407080 CreateDirectoryA
 0x407084 SetFileAttributesA
 0x407088 Sleep
 0x40708c GetTickCount
 0x407090 GetFileSize
 0x407094 GetModuleFileNameA
 0x407098 GetCurrentProcess
 0x40709c CopyFileA
 0x4070a0 ExitProcess
 0x4070a4 GetWindowsDirectoryA
 0x4070a8 SetFileTime
 0x4070ac GetCommandLineA
 0x4070b0 SetErrorMode
 0x4070b4 LoadLibraryA
 0x4070b8 lstrcpynA
 0x4070bc GetDiskFreeSpaceA
 0x4070c0 GlobalUnlock
 0x4070c4 GlobalLock
 0x4070c8 CreateThread
 0x4070cc CreateProcessA
 0x4070d0 RemoveDirectoryA
 0x4070d4 CreateFileA
 0x4070d8 GetTempFileNameA
 0x4070dc lstrlenA
 0x4070e0 lstrcatA
 0x4070e4 GetSystemDirectoryA
 0x4070e8 GetVersion
 0x4070ec CloseHandle
 0x4070f0 lstrcmpiA
 0x4070f4 lstrcmpA
 0x4070f8 ExpandEnvironmentStringsA
 0x4070fc GlobalFree
 0x407100 GlobalAlloc
 0x407104 WaitForSingleObject
 0x407108 GetExitCodeProcess
 0x40710c GetModuleHandleA
 0x407110 LoadLibraryExA
 0x407114 GetProcAddress
 0x407118 FreeLibrary
 0x40711c MultiByteToWideChar
 0x407120 WritePrivateProfileStringA
 0x407124 GetPrivateProfileStringA
 0x407128 WriteFile
 0x40712c ReadFile
 0x407130 MulDiv
 0x407134 SetFilePointer
 0x407138 FindClose
 0x40713c FindNextFileA
 0x407140 FindFirstFileA
 0x407144 DeleteFileA
 0x407148 GetTempPathA
USER32.dll
 0x40716c EndDialog
 0x407170 ScreenToClient
 0x407174 GetWindowRect
 0x407178 EnableMenuItem
 0x40717c GetSystemMenu
 0x407180 SetClassLongA
 0x407184 IsWindowEnabled
 0x407188 SetWindowPos
 0x40718c GetSysColor
 0x407190 GetWindowLongA
 0x407194 SetCursor
 0x407198 LoadCursorA
 0x40719c CheckDlgButton
 0x4071a0 GetMessagePos
 0x4071a4 LoadBitmapA
 0x4071a8 CallWindowProcA
 0x4071ac IsWindowVisible
 0x4071b0 CloseClipboard
 0x4071b4 SetClipboardData
 0x4071b8 EmptyClipboard
 0x4071bc RegisterClassA
 0x4071c0 TrackPopupMenu
 0x4071c4 AppendMenuA
 0x4071c8 CreatePopupMenu
 0x4071cc GetSystemMetrics
 0x4071d0 SetDlgItemTextA
 0x4071d4 GetDlgItemTextA
 0x4071d8 MessageBoxIndirectA
 0x4071dc CharPrevA
 0x4071e0 DispatchMessageA
 0x4071e4 PeekMessageA
 0x4071e8 DestroyWindow
 0x4071ec CreateDialogParamA
 0x4071f0 SetTimer
 0x4071f4 SetWindowTextA
 0x4071f8 PostQuitMessage
 0x4071fc SetForegroundWindow
 0x407200 wsprintfA
 0x407204 SendMessageTimeoutA
 0x407208 FindWindowExA
 0x40720c SystemParametersInfoA
 0x407210 CreateWindowExA
 0x407214 GetClassInfoA
 0x407218 DialogBoxParamA
 0x40721c CharNextA
 0x407220 OpenClipboard
 0x407224 ExitWindowsEx
 0x407228 IsWindow
 0x40722c GetDlgItem
 0x407230 SetWindowLongA
 0x407234 LoadImageA
 0x407238 GetDC
 0x40723c EnableWindow
 0x407240 InvalidateRect
 0x407244 SendMessageA
 0x407248 DefWindowProcA
 0x40724c BeginPaint
 0x407250 GetClientRect
 0x407254 FillRect
 0x407258 DrawTextA
 0x40725c EndPaint
 0x407260 ShowWindow
GDI32.dll
 0x40703c SetBkColor
 0x407040 GetDeviceCaps
 0x407044 DeleteObject
 0x407048 CreateBrushIndirect
 0x40704c CreateFontIndirectA
 0x407050 SetBkMode
 0x407054 SetTextColor
 0x407058 SelectObject
SHELL32.dll
 0x407150 SHGetPathFromIDListA
 0x407154 SHBrowseForFolderA
 0x407158 SHGetFileInfoA
 0x40715c ShellExecuteA
 0x407160 SHFileOperationA
 0x407164 SHGetSpecialFolderLocation
ADVAPI32.dll
 0x407000 RegQueryValueExA
 0x407004 RegSetValueExA
 0x407008 RegEnumKeyA
 0x40700c RegEnumValueA
 0x407010 RegOpenKeyExA
 0x407014 RegDeleteKeyA
 0x407018 RegDeleteValueA
 0x40701c RegCloseKey
 0x407020 RegCreateKeyExA
COMCTL32.dll
 0x407028 ImageList_AddMasked
 0x40702c ImageList_Destroy
 0x407030 None
 0x407034 ImageList_Create
ole32.dll
 0x407278 CoTaskMemFree
 0x40727c OleInitialize
 0x407280 OleUninitialize
 0x407284 CoCreateInstance
VERSION.dll
 0x407268 GetFileVersionInfoSizeA
 0x40726c GetFileVersionInfoA
 0x407270 VerQueryValueA

EAT(Export Address Table) is none



Similarity measure (PE file only) - Checking for service failure