Buster Sandbox Analyzer

Hello hello~ Do you know what the problem I described above is going on?

 

Ok, then for "bsa1" the pipe name will be "BSA100", for "bsa2" will be "BSA200" and for "bsa3" will be "BSA300".

Now you just miss next steps:

1) Run BSA.EXE from "[...]\bsa1" folder and at "Program Options > Change Title" introduce "BSA100".

2) Then go to "Utilities > LOG_API > LOG_API Patcher" and select "logapi64.dll" from "[...] \bsa1" folder.

Repeat the two steps for "bsa2" and "bsa3" using "BSA200" and "BSA300".

That's all.

 

okay, thank you. Let me try

 

Thank you very much for your answer, the modification was successful. But I still get stuck here. After testing multiple bsa before

 

Did you try already what I told you in message #112?

 

This screenshot is strange. You analyzed a document file but seems like the extension (.docx) is not associated to anything in the system. I don't understand why Microsoft Word was not launched.

 

Hello~ I did everything you said

 

When you analyzed the microsoft word document, did your PC open it?

 

My analysis of txt can end normally, but the analysis of docx will get stuck

 

Word not opened

 

bmp and word will stop

 

As soon as possible I'll prepare a special version of BSA that will help me to find the problem. Wait until I have it ready, please.

 

ok

 

How to disable PEID?

 

I found a problem, as long as the file content is empty it will stop

 

There is another problem. If the docx is not empty, it will become a zip when opened with BSA

 

How does peid work with Bsa?

 

Options > Report Options > Information

Disable everything and check if BSA stops.

 

ok Thank you ，How about the special version of BSA

 

First do this:

Options > Report Options > Information

Disable everything

and tell me if BSA stops.

 

I disabled all functions, but it still stops if the analysis is empty.

 

Upload the file somewhere and send me the link,please.

I'll use it to make tests.

 

link：https://pan.baidu.com/s/19FWbM7cwplZnVlsyKI7JHA
password：ov1g

 

I can not download from there. Use something like MEGA, uploaded, 1fichier, ... please.

 

anonfiles.com is really simple