VMRay Analyzer Report
| Creation Time | 2016-10-13 16:42 (UTC+2) |
| VM Analysis Duration Time | 00:02:25 |
| Execution Successful |  |
| Sample Filename | Explorer Pro.exe |
| Command Line Parameters |  |
| Prescript | |
| Number of Processes | 2 |
| Termination Reason | Timeout |
| Download | Function Logfile Generic Logfile PCAP STIX/CybOX |
| Remarks | Control flow obfuscation detected |
VTI Score 91 / 100 | |
| VTI Database Version | 2.2 |
| VTI Rule Match Count | 21 |
| VTI Rule Type | Default (PE, ...) |
| The tags feature is only available in the fully licensed version of VMRay Analyzer. |
| ID | PID | Monitor Reason | Image Name | Command Line | Origin ID |
|---|---|---|---|---|---|
| #1 | 0x514 | Analysis Target | explorer pro.exe | "C:\Users\DSsDPMx042\Desktop\Explorer Pro.exe" | |
| #2 | 0x578 | Child Process | iexplore.exe | "C:\program files\internet explorer\IEXPLORE.EXE" | #1 |
| ID | #625263 |
| MD5 Hash Value | be66787e9a1933b319e3694b4c348e38 |
| SHA1 Hash Value | 05ed9e77fc98cfce1bb9e4acad1b95f4167c5129 |
| SHA256 Hash Value | ce7ddc6318d4e76ef0ad3d9b1a8f8ad90eb77a0bf53ab49e8440a0fb0b67aa39 |
| Filename | Explorer Pro.exe |
| File Size | 3.19 MB (3340288 bytes) |
| File Type | Windows Exe (x86-32) |
| Analyzer Version | 1.11.0 |
| Analyzer Build Date | 2016-09-19 10:58 (UTC+2) |
| VM Name | win7_32_sp1 |
| VM Description | Windows 7 (SP1, 32-bit) |
| VM Architecture | x86 32-bit PAE |
| VM OS | Windows 7 |
| VM Kernel Version | 6.1.7601.17514 (684da42a-30cc-450f-81c5-35b4d18944b1) |
