330bf7ae...89d3

Filename	Hash	Operations	Category	Severity
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iexuao.exe	MD5: c0417aa3560733c887d9cc9b1980f6fc SHA1: 9b44fd695962a8b397cc816ab8c68d274064de26 SHA256: 330bf7ae4ba72899b695255c48a68d1017cd127260f6ebac60b95789690889d3 SSDeep: 3072:0McUUUUUUt4NsyUUUUUUUUUUUUUUUUUUVpgu8JeOi8/lEwYUUUUUUUUUULJArRsR:0McUUUUUUt4NsyUUUUUUUUUUUUUUUUUy ImpHash: 4a42195900697ad88f778889fd7f1acf	Access	Sample File	Malicious
C:\Windows\syswow64\USER32.dll	-	Access		Not Available
C:\Windows\syswow64\kernel32.dll	-	Access		Not Available

Filename

Hash

Operations

Category

Severity

C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\iexuao.exe

MD5: c0417aa3560733c887d9cc9b1980f6fc
SHA1: 9b44fd695962a8b397cc816ab8c68d274064de26
SHA256: 330bf7ae4ba72899b695255c48a68d1017cd127260f6ebac60b95789690889d3
SSDeep: 3072:0McUUUUUUt4NsyUUUUUUUUUUUUUUUUUUVpgu8JeOi8/lEwYUUUUUUUUUULJArRsR:0McUUUUUUt4NsyUUUUUUUUUUUUUUUUUy
ImpHash: 4a42195900697ad88f778889fd7f1acf

Access

Sample File

Malicious

C:\Windows\syswow64\USER32.dll

Access

Not Available

C:\Windows\syswow64\kernel32.dll

Access

Not Available

Mutex Name	Operations
Local\71839DCA-3134-54D3-0FBE-288DDB014537	Access

Mutex Name

Operations

Local\71839DCA-3134-54D3-0FBE-288DDB014537

Access

Domain	Sources	Severity
jamesdrywall.xyz	Function Log	Unknown

Domain

Sources

Severity

jamesdrywall.xyz

Function Log

Unknown

URL	Operations	Category	Severity
https://jamesdrywall.xyz/index.htm	POST	Contacted	Unknown

URL

Operations

Category

Severity

https://jamesdrywall.xyz/index.htm

POST

Contacted

Unknown

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Indicators

Before

After