https://pastein.ru/t/PrN
Загрузка данных
-------------------------[Generic Sandboxe/VM Detection]-------------------------
[*] Checking if process loaded modules contains: avghookx.dll [ GOOD ]
[*] Checking if process loaded modules contains: avghooka.dll [ GOOD ]
[*] Checking if process loaded modules contains: snxhk.dll [ GOOD ]
[*] Checking if process loaded modules contains: sbiedll.dll [ GOOD ]
[*] Checking if process loaded modules contains: dbghelp.dll [ GOOD ]
[*] Checking if process loaded modules contains: api_log.dll [ GOOD ]
[*] Checking if process loaded modules contains: dir_watch.dll [ GOOD ]
[*] Checking if process loaded modules contains: pstorec.dll [ GOOD ]
[*] Checking if process loaded modules contains: vmcheck.dll [ GOOD ]
[*] Checking if process loaded modules contains: wpespy.dll [ GOOD ]
[*] Checking if process loaded modules contains: cmdvrt64.dll [ GOOD ]
[*] Checking if process loaded modules contains: cmdvrt32.dll [ GOOD ]
[*] Checking if process file name contains: sample.exe [ GOOD ]
[*] Checking if process file name contains: bot.exe [ GOOD ]
[*] Checking if process file name contains: sandbox.exe [ GOOD ]
[*] Checking if process file name contains: malware.exe [ GOOD ]
[*] Checking if process file name contains: test.exe [ GOOD ]
[*] Checking if process file name contains: klavme.exe [ GOOD ]
[*] Checking if process file name contains: myapp.exe [ GOOD ]
[*] Checking if process file name contains: testapp.exe [ GOOD ]
[*] Checking if process file name looks like a hash: al-khaser_x64 [ GOOD ]
[*] Checking if username matches : CurrentUser [ GOOD ]
[*] Checking if username matches : Sandbox [ GOOD ]
[*] Checking if username matches : Emily [ GOOD ]
[*] Checking if username matches : HAPUBWS [ GOOD ]
[*] Checking if username matches : Hong Lee [ GOOD ]
[*] Checking if username matches : IT-ADMIN [ GOOD ]
[*] Checking if username matches : Johnson [ GOOD ]
[*] Checking if username matches : Miller [ GOOD ]
[*] Checking if username matches : milozs [ GOOD ]
[*] Checking if username matches : Peter Wilson [ GOOD ]
[*] Checking if username matches : timmy [ GOOD ]
[*] Checking if username matches : user [ BAD ]
[*] Checking if username matches : sand box [ GOOD ]
[*] Checking if username matches : malware [ GOOD ]
[*] Checking if username matches : maltest [ GOOD ]
[*] Checking if username matches : test user [ GOOD ]
[*] Checking if username matches : virus [ GOOD ]
[*] Checking if username matches : John Doe [ GOOD ]
[*] Checking if hostname matches : SANDBOX [ GOOD ]
[*] Checking if hostname matches : 7SILVIA [ GOOD ]
[*] Checking if hostname matches : HANSPETER-PC [ GOOD ]
[*] Checking if hostname matches : JOHN-PC [ GOOD ]
[*] Checking if hostname matches : MUELLER-PC [ GOOD ]
[*] Checking if hostname matches : WIN7-TRAPS [ GOOD ]
[*] Checking if hostname matches : FORTINET [ GOOD ]
[*] Checking if hostname matches : TEQUILABOOMBOOM [ GOOD ]
[*] Checking whether username is 'Wilber' and NetBIOS name starts with 'SC' or 'SW' [ GOOD ]
[*] Checking whether username is 'admin' and NetBIOS name is 'SystemIT' [ GOOD ]
[*] Checking whether username is 'admin' and DNS hostname is 'KLONE_X64-PC' [ GOOD ]
[*] Checking whether username is 'John' and two sandbox files exist [ GOOD ]
[*] Checking whether four known sandbox 'email' file paths exist [ GOOD ]
[*] Checking whether three known sandbox 'foobar' files exist [ GOOD ]
[*] Checking processes looking-glass-host.exe [ GOOD ]
[*] Checking processes VDDSysTray.exe [ GOOD ]
[*] Checking Number of processors in machine [ BAD ]
[*] Checking Interupt Descriptor Table location [ GOOD ]
[*] Checking Local Descriptor Table location [ GOOD ]
[*] Checking Global Descriptor Table location [ GOOD ]
[*] Checking Store Task Register [ GOOD ]
[*] Checking Number of cores in machine using WMI [ BAD ]
[*] Checking hard disk size using WMI [ BAD ]
[*] Checking hard disk size using DeviceIoControl [ BAD ]
[*] Checking SetupDi_diskdrive [ GOOD ]
[*] Checking mouse movement [ GOOD ]
[*] Checking lack of user input [ BAD ]
[*] Checking memory space using GlobalMemoryStatusEx [ GOOD ]
[*] Checking disk size using GetDiskFreeSpaceEx [ BAD ]
[*] Checking if CPU hypervisor field is set using cpuid(0x1) [ GOOD ]
[*] Checking hypervisor vendor using cpuid(0x40000000) [ GOOD ]
[*] Check if Machine is hosted on Cloud [ BAD ]
[*] Check if time has been accelerated [ GOOD ]
[*] VM Driver Services [ GOOD ]
[*] Checking SerialNumber from BIOS using WMI [ GOOD ]
[*] Checking Model from ComputerSystem using WMI [ GOOD ]
[*] Checking Manufacturer from ComputerSystem using WMI [ GOOD ]
[*] Checking Current Temperature using WMI [ GOOD ]
[*] Checking ProcessId using WMI [ GOOD ]
[*] Checking power capabilities [ GOOD ]
[*] Checking CPU fan using WMI [ GOOD ]
[*] Checking NtQueryLicenseValue with Kernel-VMDetection-Private [ GOOD ]
[*] Checking Win32_CacheMemory with WMI [ GOOD ]
[*] Checking Win32_PhysicalMemory with WMI [ GOOD ]
[*] Checking Win32_MemoryDevice with WMI [ GOOD ]
[*] Checking Win32_MemoryArray with WMI [ GOOD ]
[*] Checking Win32_VoltageProbe with WMI [ GOOD ]
[*] Checking Win32_PortConnector with WMI [ BAD ]
[*] Checking Win32_SMBIOSMemory with WMI [ GOOD ]
[*] Checking ThermalZoneInfo performance counters with WMI [ GOOD ]
[*] Checking CIM_Memory with WMI [ GOOD ]
[*] Checking CIM_Sensor with WMI [ GOOD ]
[*] Checking CIM_NumericSensor with WMI [ GOOD ]
[*] Checking CIM_TemperatureSensor with WMI [ GOOD ]
[*] Checking CIM_VoltageSensor with WMI [ GOOD ]
[*] Checking CIM_PhysicalConnector with WMI [ BAD ]
[*] Checking CIM_Slot with WMI [ BAD ]
[*] Checking if Windows is Genuine [ GOOD ]
[*] Checking Services\Disk\Enum entries for VM strings [ GOOD ]
[*] Checking Enum\IDE and Enum\SCSI entries for VM strings [ GOOD ]
[*] Checking SMBIOS tables [ BAD ]
[*] Checking ACPI table strings [ BAD ]
-------------------------[VirtualBox Detection]-------------------------
[*] Checking reg key HARDWARE\Description\System - Identifier is set to VBOX [ GOOD ]
[*] Checking reg key HARDWARE\Description\System - SystemBiosVersion is set to VBOX [ GOOD ]
[*] Checking reg key HARDWARE\Description\System - VideoBiosVersion is set to VIRTUALBOX [ GOOD ]
[*] Checking reg key HARDWARE\Description\System - SystemBiosDate is set to 06/23/99 [ GOOD ]
[*] Checking VirtualBox Guest Additions directory [ GOOD ]
[*] Checking file C:\Windows\System32\drivers\VBoxMouse.sys [ GOOD ]
[*] Checking file C:\Windows\System32\drivers\VBoxGuest.sys [ GOOD ]
[*] Checking file C:\Windows\System32\drivers\VBoxSF.sys [ GOOD ]
[*] Checking file C:\Windows\System32\drivers\VBoxVideo.sys [ GOOD ]
[*] Checking file C:\Windows\System32\vboxdisp.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxhook.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxmrxnp.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxogl.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxoglarrayspu.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxoglcrutil.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxoglerrorspu.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxoglfeedbackspu.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxoglpackspu.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxoglpassthroughspu.dll [ GOOD ]
[*] Checking file C:\Windows\System32\vboxservice.exe [ GOOD ]
[*] Checking file C:\Windows\System32\vboxtray.exe [ GOOD ]
[*] Checking file C:\Windows\System32\VBoxControl.exe [ GOOD ]
[*] Checking reg key HARDWARE\ACPI\DSDT\VBOX__ [ GOOD ]
[*] Checking reg key HARDWARE\ACPI\FADT\VBOX__ [ GOOD ]
[*] Checking reg key HARDWARE\ACPI\RSDT\VBOX__ [ GOOD ]
[*] Checking reg key SOFTWARE\Oracle\VirtualBox Guest Additions [ GOOD ]
[*] Checking reg key SYSTEM\ControlSet001\Services\VBoxGuest [ GOOD ]
[*] Checking reg key SYSTEM\ControlSet001\Services\VBoxMouse [ GOOD ]
[*] Checking reg key SYSTEM\ControlSet001\Services\VBoxService [ GOOD ]
[*] Checking reg key SYSTEM\ControlSet001\Services\VBoxSF [ GOOD ]
[*] Checking reg key SYSTEM\ControlSet001\Services\VBoxVideo [ GOOD ]
[*] Checking reg key SYSTEM\CurrentControlSet\Enum\PCI\VEN_5333* [ GOOD ]
[*] Checking Mac Address start with 08:00:27 [ GOOD ]
[*] Checking MAC address (Hybrid Analysis) [ GOOD ]
[*] Checking device \\.\VBoxMiniRdrDN [ GOOD ]
[*] Checking device \\.\VBoxGuest [ GOOD ]
[*] Checking device \\.\pipe\VBoxMiniRdDN [ GOOD ]
[*] Checking device \\.\VBoxTrayIPC [ GOOD ]
[*] Checking device \\.\pipe\VBoxTrayIPC [ GOOD ]
[*] Checking VBoxTrayToolWndClass / VBoxTrayToolWnd [ GOOD ]
[*] Checking VirtualBox Shared Folders network provider [ GOOD ]
[*] Checking VirtualBox process vboxservice.exe [ GOOD ]
[*] Checking VirtualBox process vboxtray.exe [ GOOD ]
[*] Checking Win32_PnPDevice DeviceId from WMI for VBox PCI device [ GOOD ]
[*] Checking Win32_PnPDevice Name from WMI for VBox controller hardware [ GOOD ]
[*] Checking Win32_PnPDevice Name from WMI for VBOX names [ GOOD ]
[*] Checking Win32_Bus from WMI [ GOOD ]
[*] Checking Win32_BaseBoard from WMI [ GOOD ]
[*] Checking MAC address from WMI [ GOOD ]
[*] Checking NTEventLog from WMI [ GOOD ]
[*] Checking SMBIOS firmware [ GOOD ]
[*] Checking ACPI tables [ GOOD ]