Running Programs

analyzer.exe C:\path\to\program.exe

analyzer.exe C:\myapp.exe arg1 arg2 "argument with spaces"

# Silent mode - minimal output
analyzer.exe -s myapp.exe

# Verbose logging - detailed execution information
analyzer.exe -v myapp.exe

# Concise logging - reduced log volume
analyzer.exe -c myapp.exe

# Track single module
analyzer.exe -m kernel32.dll myapp.exe

# Track multiple modules
analyzer.exe -m kernel32.dll -m ntdll.dll myapp.exe

# Log read/write access to executable memory sections
analyzer.exe -x myapp.exe

# Log read access to foreign module memory
analyzer.exe -f myapp.exe

# Buffer stdout for batch processing
analyzer.exe -b myapp.exe

# Print instruction summary for analyzed modules
analyzer.exe -is myapp.exe

# Skip regular syscall logging
analyzer.exe -ss myapp.exe

analyzer.exe -a path/to/snapshot.dump

analyzer.exe --minidump path/to/crash.dmp

analyzer.exe -t myapp.exe

analyzer.exe -rep myapp.exe

analyzer.exe -i "NtQuerySystemInformation,NtQueryInformationProcess" myapp.exe

analyzer.exe \
  -e ./emulation-root \
  -r ./registry \
  -v \
  -m malware.exe \
  -x \
  -f \
  -p "c:/config.ini" "./configs/sample-config.ini" \
  c:/malware.exe --server 192.168.1.1