恶意软件分析 & URL链接扫描免费在线病毒分析平台

分析任务

分析类型	虚拟机标签	开始时间	结束时间	持续时间
文件 (Windows)	win7-sp1-x64-shaapp03-1	2020-09-25 20:51:37	2020-09-25 20:53:43	126 秒

魔盾分数

10.0

危险的

文件详细信息

文件名	XP.exe
文件大小	203264 字节
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5	9d6754d2d1357d31024affaf81e1eea3
SHA1	f52ad00f106f0d73ce9d0e044d26ec5a163648dd
SHA256	699cbd27ee8aab789823ee073c1d231075c7465f45af7f0c1be5a9905a8b137d
SHA512	3261b5c526eabe537f1b4bb66911870636ae60c7ac498f9e68ea5c28c8441c5f970a75795dd3e8e2914a1b7485b2c0a7171f39afb35db5e0624fabb126949fd2
CRC32	D73F72E7
Ssdeep	6144:ybZWaqUZQtQne3l1D0+TMDWNnzyDVqUrb:cEa1e33HNgq
Yara	登录查看Yara规则
	样本下载提交误报

登录查看威胁特征

运行截图

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

域名	安全评级	响应
acroipm.adobe.com	A 23.198.99.176 CNAME acroipm.adobe.com.edgesuite.net CNAME a1983.dscd.akamai.net A 23.198.99.183

摘要

登录查看详细行为信息

PE 信息

初始地址	0x00400000
入口地址	0x00488350
声明校验值	0x00000000
实际校验值	0x00037fa5
最低操作系统版本要求	4.0
编译时间	2018-04-10 22:00:35
载入哈希	b22c3df0049f8a255e1f7a57de0600db
图标
图标精确哈希值	766e132c6dae7e31968369ccc28f67ca
图标相似性哈希值	61ce2d42baa48670094bd80787dfc156

版本信息

LegalCopyright
InternalName
FileVersion
CompanyName
LegalTrademarks
ProductName
ProductVersion
FileDescription
OriginalFilename
Debugger
Translation

PEiD 规则

[u'UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser']

PE 数据组成

名称	虚拟地址	虚拟大小	原始数据大小	特征	熵(Entropy)
UPX0	0x00001000	0x0005a000	0x00000000	IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE	0.00
UPX1	0x0005b000	0x0002e000	0x0002d600	IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE	7.93
.rsrc	0x00089000	0x00004000	0x00004000	IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE	4.02

资源

名称	偏移量	大小	语言	子语言	熵(Entropy)	文件类型
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_CURSOR	0x0004d8ec	0x00000040	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_BITMAP	0x0004de4c	0x00000144	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_BITMAP	0x0004de4c	0x00000144	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_BITMAP	0x0004de4c	0x00000144	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	0.00	empty
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_ICON	0x0006b088	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_US	7.71	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_MENU	0x0006e8a4	0x0000003c	LANG_SPANISH	SUBLANG_SPANISH_MODERN	5.67	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_DIALOG	0x00075204	0x000000e8	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	6.82	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_STRING	0x000844f8	0x00000042	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	5.74	data
RT_ACCELERATOR	0x0008453c	0x00000088	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.54	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_CURSOR	0x00084748	0x00000014	LANG_CHINESE	SUBLANG_CHINESE_SIMPLIFIED	4.32	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_GROUP_ICON	0x00084a48	0x00000084	LANG_ENGLISH	SUBLANG_ENGLISH_US	6.36	data
RT_VERSION	0x0008c4d0	0x000005ac	LANG_ENGLISH	SUBLANG_ENGLISH_US	3.47	data
RT_MANIFEST	0x0008ca80	0x000001d6	LANG_ENGLISH	SUBLANG_ENGLISH_US	5.05	XML 1.0 document, ASCII text

导入

库: KERNEL32.DLL:

• 0x48cd48 LoadLibraryA

• 0x48cd4c GetProcAddress

• 0x48cd50 ExitProcess

库: ADVAPI32.dll:

• 0x48cd58 RegCloseKey

库: COMCTL32.dll:

• 0x48cd60 None

库: comdlg32.dll:

• 0x48cd68 GetFileTitleA

库: GDI32.dll:

• 0x48cd70 Escape

库: ole32.dll:

• 0x48cd78 OleInitialize

库: OLEAUT32.dll:

• 0x48cd80 SysFreeString

库: oledlg.dll:

• 0x48cd88 None

库: OLEPRO32.DLL:

• 0x48cd90 None

库: USER32.dll:

• 0x48cd98 GetDC

库: WINSPOOL.DRV:

• 0x48cda0 ClosePrinter

.rsrc
+8@<(P
nE{'!@l=B
aDPLAY
5}\vKb\0
?H:mm:ss
k<f>f-
S/f24
i333&
FUjyA
^G/UN
yF_vC
Om:wi5
X&/W$
=x@wly
|p<|uv^
9YV*=!J@

没有防病毒引擎扫描信息!

进程树

XP.exe id: 2312
services.exe id: 432
- Systds.pif id: 2540
  - Systds.pif id: 2628
- mscorsvw.exe id: 3048
- mscorsvw.exe id: 2288
AcroRd32.exe id: 816

XP.exe, PID: 2312, 上一级进程 PID: 2156

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

services.exe, PID: 432, 上一级进程 PID: 344

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

Systds.pif, PID: 2540, 上一级进程 PID: 432

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

Systds.pif, PID: 2628, 上一级进程 PID: 2540

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

AcroRd32.exe, PID: 816, 上一级进程 PID: 304

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

mscorsvw.exe, PID: 3048, 上一级进程 PID: 432

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

mscorsvw.exe, PID: 2288, 上一级进程 PID: 432

缺省注册表文件系统网络进程线程服务设备同步加密浏览器全部

下载PCAP包

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

源地址	源端口	目标地址	目标端口
192.168.122.201	49163	103.42.29.55	9090

UDP

源地址	源端口	目标地址	目标端口
192.168.122.201	59401	192.168.122.1	53

域名解析 (可点击查询WPING实时安全评级)

域名	安全评级	响应
acroipm.adobe.com	A 23.198.99.176 CNAME acroipm.adobe.com.edgesuite.net CNAME a1983.dscd.akamai.net A 23.198.99.183

TCP

源地址	源端口	目标地址	目标端口
192.168.122.201	49163	103.42.29.55	9090

UDP

源地址	源端口	目标地址	目标端口
192.168.122.201	59401	192.168.122.1	53

HTTP 请求

未发现HTTP请求.

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

No TLS

Suricata HTTP

No Suricata HTTP

未发现网络提取文件

抱歉! 没有任何文件投放。

没有发现相似的分析.

HTML 总结报告 (需15-60分钟同步)	下载

Processing ( 15.217 seconds )

10.551 Suricata
1.622 BehaviorAnalysis
1.051 VirusTotal
0.744 NetworkAnalysis
0.693 Static
0.284 peid
0.248 TargetInfo
0.011 AnalysisInfo
0.011 Strings
0.002 Memory

Signatures ( 0.681 seconds )

0.109 api_spamming
0.089 stealth_decoy_document
0.082 stealth_timeout
0.04 antiav_detectreg
0.022 kovter_behavior
0.02 antiemu_wine_func
0.019 infostealer_browser_password
0.018 stealth_file
0.015 injection_createremotethread
0.015 process_interest
0.015 antisandbox_sleep
0.015 infostealer_ftp
0.011 mimics_filetime
0.011 reads_self
0.01 injection_runpe
0.01 md_url_bl
0.009 shifu_behavior
0.009 vawtrak_behavior
0.009 infostealer_im
0.009 md_domain_bl
0.008 bootkit
0.008 virus
0.008 antianalysis_detectreg
0.007 antivm_generic_disk
0.007 antiav_detectfile
0.006 antivm_vbox_libs
0.006 process_needed
0.006 hancitor_behavior
0.005 anomaly_persistence_autorun
0.005 infostealer_bitcoin
0.005 infostealer_mail
0.004 antivm_generic_scsi
0.004 ransomware_extensions
0.004 ransomware_files
0.003 infostealer_browser
0.003 exec_crash
0.003 antivm_parallels_keys
0.003 antivm_vbox_files
0.003 geodo_banking_trojan
0.002 tinba_behavior
0.002 antiav_avast_libs
0.002 antivm_vmware_libs
0.002 antivm_generic_services
0.002 betabot_behavior
0.002 antisandbox_sunbelt_libs
0.002 antisandbox_sboxie_libs
0.002 kibex_behavior
0.002 anormaly_invoke_kills
0.002 antivm_xen_keys
0.002 browser_security
0.002 disables_browser_warn
0.002 network_torgateway
0.001 network_tor
0.001 rat_nanocore
0.001 sets_autoconfig_url
0.001 ipc_namedpipe
0.001 antiav_bitdefender_libs
0.001 cerber_behavior
0.001 antidbg_devices
0.001 antisandbox_productid
0.001 antivm_generic_diskreg
0.001 antivm_xen_keys
0.001 antivm_hyperv_keys
0.001 antivm_vbox_acpi
0.001 bot_drive
0.001 bot_drive2
0.001 browser_addon
0.001 modify_proxy
0.001 darkcomet_regkeys
0.001 maldun_malicious_drop_executable_file_to_temp_folder
0.001 md_bad_drop
0.001 recon_fingerprint

Reporting ( 0.721 seconds )

0.616 ReportHTMLSummary
0.105 Malheur


Task ID	577690
Mongo ID	5f6de8707e769a53cfc2228a
Cuckoo release	1.4-Maldun