Summary. Verdict: Malware DETECTION SECTION CLASSIFICATION HIGH LEVEL BEHAVIOR DISTRIBUTION ACTIVITY OVERVIEW
|
|
|
- Corey Harvey
- 6 years ago
- Views:
Transcription
1 Page 1 Summary File Name: 36d2a05049b9ad710ff050ae6841d b5efa5bc1316e350f3bb1bca567.ex File Type: PE32 executable (GUI) Intel 80386, for MS Windows SHA1: 336c36d486b251098dfd6877ea2e4d3cef6482ec MD5: cb108423f3561fcd4c1e4d2 MALWARE Valkyrie Final Verdict DETECTION SECTION CLASSIFICATION Backdoor(19.36%) Ransomware(0.00%) Bot(23.07%) Worm(2.29%) Trojan Password Stealer(3.74%) 23% 18% 14% 9% 5% Exploit(0.00%) Pua(1.53%) Severity: High Verdict: Malware Rootkit(0.00%) Spyware(0.00%) Trojan Generic(18.96%) Trojan Downloader(10.48%) Remote Trojan Access Dropper(19.14%) Trojan(0.00%) Virus(1.14%) Rogue(0.29%) HIGH LEVEL BEHAVIOR DISTRIBUTION 11.5% 10.7% 33.9% 43.1% Hooking (1) Network (348) Process (323) Misc (1) System (1021) Threading (3) Synchronization (1) Registry (1298) File System (17) ACTIVITY OVERVIEW Malware Analysis System Evasion 3 (30.00%) Hooking and other Techniques for Hiding Protection 2 (20.00%) Persistence and Installation Behavior 2 (20.00%) Information Discovery 1 (10.00%) Networking 1 (10.00%) HIPS/ PFW/ Operating System Protection Evasion 1 (10.00%)
2 Page 2 Activity Details INFORMATION DISCOVERY Repeatedly searches for a not-found process, may want to run with startbrowser=1 option NETWORKING Attempts to connect to a dead IP:Port (1 unique times) Show sources HIPS/ PFW/ OPERATING SYSTEM PROTECTION EVASION Detects Avast Antivirus through the presence of a library HOOKING AND OTHER TECHNIQUES FOR HIDING PROTECTION Creates RWX memory Executed a process and injected code into it, probably while unpacking Show sources PERSISTENCE AND INSTALLATION BEHAVIOR Deletes its original binary from disk Installs itself for autorun at Windows startup Show sources MALWARE ANALYSIS SYSTEM EVASION A process attempted to delay the analysis task. Show sources Detects Sandboxie through the presence of a library Creates a hidden or system file Show sources
3 Page 3 Behaviour Graph 13:25:03 13:28:05 13:31:07 PID :25:03 Create Process The malicious file created a child process as 336c36d486b251098dfd6877ea2e4d3cef6482ec.exe (PPID 2728) 13:25:14 NtAllocateVirtualMemory 13:25:14 13:25:14 Process32NextW [ 9 times ] 13:25:15 13:25:15 LdrGetDllHandle [ 2 times ] 13:25:26 13:25:26 NtSetInformationFile [ 2 times ] 13:25:26 Create Process 13:25:26 NtResumeThread PID :25:27 Create Process The malicious file created a child process as explorer.exe (PPID 1652) 13:25:27 MoveFileWithProgressW 13:25:27 NtSetInformationFile 13:25:27 NtDelayExecution 13:25:49 13:30:23 connect [ 9 times ] 13:30:45 13:30:45 RegSetValueExW [ 2 times ] 13:30:56 13:31:07 connect [ 2 times ]
4 Page 4 Behaviour Summary ACCESSED FILES C:\Windows\System32\tzres.dll C:\Windows\Globalization\Sorting\sortdefault.nls C:\RECYCLER\S \systeez.exe C:\RECYCLER C:\RECYCLER\S \ C:\Users\user\AppData\Local\Temp\336c36d486b251098dfd6877ea2e4d3cef6482ec.exe READ REGISTRY KEYS HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles RESOLVED APIS kernel32.dll.flsalloc kernel32.dll.flsgetvalue kernel32.dll.flssetvalue kernel32.dll.flsfree kernel32.dll.initializecriticalsectionandspincount kernel32.dll.isprocessorfeaturepresent kernel32.dll.virtualalloc kernel32.dll.getlasterror kernel32.dll.loadlibrarya kernel32.dll.getmodulehandlea kernel32.dll.closehandle kernel32.dll.getsystemtime kernel32.dll.getstartupinfoa msvcrt.dll._wcslwr msvcrt.dll._exit msvcrt.dll._xcptfilter msvcrt.dll.exit msvcrt.dll. getmainargs msvcrt.dll._initterm
5 Page 5 msvcrt.dll. setusermatherr msvcrt.dll._adjust_fdiv msvcrt.dll. p commode msvcrt.dll. p fmode msvcrt.dll. set_app_type msvcrt.dll._except_handler3 msvcrt.dll._controlfp msvcrt.dll._acmdln winmm.dll.timekillevent winmm.dll.timegetdevcaps winmm.dll.timeendperiod winmm.dll.timesetevent ntdll.dll.rtladjustprivilege kernel32.dll.exitthread kernel32.dll.createmutexa kernel32.dll.waitforsingleobject kernel32.dll.sleep kernel32.dll.localalloc kernel32.dll.localfree kernel32.dll.deletefilea kernel32.dll.deletefilew kernel32.dll.setfileattributesa kernel32.dll.gettickcount kernel32.dll.createthread kernel32.dll.createfilea kernel32.dll.createfilew kernel32.dll.writefile kernel32.dll.gettemppatha kernel32.dll.createprocessa kernel32.dll.lstrlena kernel32.dll.lstrcata kernel32.dll.loadlibraryw kernel32.dll.movefileexw kernel32.dll.createdirectoryw kernel32.dll.copyfilew
6 Page 6 kernel32.dll.lstrlenw kernel32.dll.lstrcpynw kernel32.dll.getprocaddress kernel32.dll.setfileattributesw user32.dll.messageboxa user32.dll.messageboxw user32.dll.messagebeep user32.dll.wsprintfa ws2_32.dll.wsastartup ws2_32.dll.socket ws2_32.dll.send ws2_32.dll.recv ws2_32.dll.closesocket ws2_32.dll.ioctlsocket ws2_32.dll.connect ws2_32.dll.inet_addr ws2_32.dll.gethostbyname ws2_32.dll.htons ws2_32.dll.select ws2_32.dll.setsockopt ws2_32.dll.wsagetlasterror kernel32.dll.sortgethandle REGISTRY KEYS HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\syseeeaz HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
7 Page 7 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\syseeeaz READ FILES C:\Windows\System32\tzres.dll C:\Windows\Globalization\Sorting\sortdefault.nls C:\RECYCLER\S \systeez.exe MODIFIED REGISTRY KEYS HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\syseeeaz HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\syseeeaz
8 Page 8 Network Behaviour CONTACTED IPS NETWORK PORT DISTRIBUTION 16.7% 16.7% 50.0% 3702 (UDP) 16.67% 5355 (UDP) 50% 138 (UDP) 16.67% 137 (UDP) 16.67% 16.7% Name IP Country ASN ASN Name Trigger Process Type Netherlands WorldStream IPv4.4 Malware Process UDP PACKETS Call Time During Execution(sec) Source IP Dest IP Dest Port Sandbox Sandbox Sandbox Sandbox Sandbox Sandbox
9 Page 9 DETAILED FILE INFO CREATED / DROPPED FILES FILE PATH TYPE AND HASHES STATIC FILE INFO File Name: File Type: SHA1: MD5: 36d2a05049b9ad710ff050ae6841d b5efa5bc1316e350f3bb1bca567.ex PE32 executable (GUI) Intel 80386, for MS Windows 336c36d486b251098dfd6877ea2e4d3cef6482ec cb108423f3561fcd4c1e4d2 First Seen Date: :25: ( 16 days ago ) Number Of Clients Seen: 2 Last Analysis Date: :25: ( 16 days ago ) Human Expert Analysis Result: No human expert analysis verdict given to this sample yet.
10 Page 10 DETAILED FILE INFO ADDITIONAL FILE INFORMATION PE Headers PROPERTY VALUE Number Of Sections 4 Compilation Time Stamp Entry Point Machine Type 0x583B275A [Sun Nov 27 18:35: UTC] 0x40530e (.text) Intel 386 or later - 32Bit File Size Sha256 Mime Type 36d2a05049b9ad710ff050ae6841d b5efa5bc1316e350f3bb1bca567 application/x-dosexec PE Sections NAME VIRTUAL ADDRESS VIRTUAL SIZE RAW SIZE ENTROPY.text 0x1000 0x1543f 0x rdata 0x x1b9e2 0x1ba data 0x x96a8 0x rsrc 0x3d000 0x28c0 0x2a PE Imports KERNEL32.dll lstrlena lstrcpyna lstrcmpia lstrcmpa lstrcata WritePrivateProfileStringA WriteFile WaitForSingleObject Sleep SetFileTime SetFilePointer SetFileAttributesA CopyFileA DeleteFileA FindFirstFileA CloseHandle CompareStringA CreateEventA CreateFileA CreateProcessA CreateThread DeleteCriticalSection EnterCriticalSection EnumCalendarInfoA FindResourceA FormatMessageA FreeLibrary FreeResource GetACP GetCPInfo
11 GetCurrentProcessId GetCurrentThreadId GetDiskFreeSpaceA GetLastError GetLocaleInfoA GetModuleFileNameA GetProcAddress GetStdHandle GetModuleHandleA LocalAlloc TlsGetValue TlsSetValue SizeofResource LCMapStringW LockResource LoadResource FindResourceW GetModuleFileNameW SetCurrentDirectoryW GetSystemDefaultLangID GetUserDefaultLCID ReleaseMutex CreateMutexW FindResourceExW SetFilePointerEx ReadFile EndUpdateResourceW UpdateResourceW BeginUpdateResourceW CreateFileW LoadLibraryW SetEndOfFile MultiByteToWideChar GetFileAttributesW SetFileAttributesW DeleteFileW CopyFileW GetFullPathNameW GetDiskFreeSpaceExW GetCurrentDirectoryW GetTempPathW GetWindowsDirectoryW GetSystemDirectoryW RemoveDirectoryW CreateDirectoryW GetCommandLineW GetEnvironmentVariableW GetSystemDefaultLCID GetLocaleInfoW GetPrivateProfileStringW WritePrivateProfileStringW LoadLibraryExW GetVersionExW GetCurrentProcess SetEvent CreateEventW WideCharToMultiByte GetDriveTypeW GetExitCodeThread SetLastError MulDiv lstrlenw LocalFree FormatMessageW GlobalUnlock GlobalLock GlobalAlloc GlobalFree GetModuleHandleW SetErrorMode GlobalDeleteAtom lstrcmpw EnumResourceLanguagesW GetVersion ConvertDefaultLocale Page 11
12 GetCurrentThread FindClose FindNextFileW FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileW LeaveCriticalSection GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc LocalReAlloc TlsFree GetThreadLocale ResetEvent GetLogicalDriveStringsW MoveFileA GetFileAttributesA CreatePipe GetExitCodeProcess GetDriveTypeA GetCurrentDirectoryA SetEnvironmentVariableW SetEnvironmentVariableA WriteConsoleW GetConsoleOutputCP WriteConsoleA IsValidLocale EnumSystemLocalesA GetStringTypeW GetStringTypeA GetConsoleMode GetConsoleCP GetTimeZoneInformation GetDateFormatA GetTimeFormatA QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy GetStartupInfoA SetHandleCount GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers LCMapStringA IsValidCodePage GetOEMCP VirtualQuery GetSystemInfo VirtualAlloc VirtualProtect HeapSize GetFileType SetStdHandle HeapReAlloc IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess ExitProcess GetSystemTimeAsFileTime GetStartupInfoW GetProcessHeap HeapAlloc HeapFree RtlUnwind RaiseException GetTickCount GlobalFlags GlobalAddAtomW GlobalFindAtomW Page 12
13 Page 13 CompareStringW LoadLibraryA GetVersionExA GetFileTime GetVolumeInformationW DuplicateHandle GetFileSize UnlockFile LockFile InterlockedIncrement InterlockedDecrement PE Resources RT_ICON RT_DIALOG RT_GROUP_ICON RT_MANIFEST CERTIFICATE VALIDATION - Certificate Validation is not Applicable SCREENSHOTS
14 Page 14
Summary. Verdict: Malware CLASSIFICATION DETECTION SECTION HIGH LEVEL BEHAVIOR DISTRIBUTION ACTIVITY OVERVIEW
Page 1 Summary File Name: TealWake.exe File Type: PE32 executable (GUI) Intel 80386, for MS Windows SHA1: 5274ebb1b444f3576699f39b74599783770c36b0 MD5: 3d677e8f6bf82f7fd0a432cd9be89fc1 MALWARE Valkyrie
Summary. Verdict: Malware DETECTION SECTION CLASSIFICATION HIGH LEVEL BEHAVIOR DISTRIBUTION ACTIVITY OVERVIEW
Page 1 Summary File Name: chit_na_batlu.exe File Type: PE32 executable (GUI) Intel 80386, for MS Windows SHA1: 02b1967cfd2fd2b27437cd69ddd679b893edca92 MD5: f7cf8df79a4624253cf6d7804af6b7ab MALWARE Valkyrie
Conclusion: Interesting, old malware. It was good to see this worm running successfully so as to get a better opportunity to view its capabilities.
1.0 Summary Findings and observations: Mass-mailer worm. Similar to the prior sample analyzed, which I believe was derived from this new sample as this sample did not appear to have the execution issues
ID: Sample Name: QhSXTPahQj Cookbook: default.jbs Time: 07:55:34 Date: 20/06/2018 Version:
ID: 434 Sample Name: QhSXTPahQj Cookbook: default.jbs Time: 0:55:34 Date: 20/0/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
Summary. Verdict: Malware CLASSIFICATION DETECTION SECTION HIGH LEVEL BEHAVIOR DISTRIBUTION ACTIVITY OVERVIEW
Page 1 Summary File Name: LMAOBOXPREMIUM.exe File Type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows SHA1: 24b8d0208fdc46b720d6c07b71949f0ebe792442 MD5: deff401baf9df67d9731da2b98407f14
ID: Sample Name: RasTls.exe Cookbook: default.jbs Time: 16:59:10 Date: 27/01/2018 Version:
ID: 44111 Sample Name: RasTls.exe Cookbook: default.jbs Time: 16:5:10 Date: 27/01/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
Summary. Verdict: Malware CLASSIFICATION DETECTION SECTION HIGH LEVEL BEHAVIOR DISTRIBUTION ACTIVITY OVERVIEW
Page 1 Summary File Name: 1705011024.exe File Type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows SHA1: afdb6ba117cf573fdae3bbe184a5a5cfa78fcd91 MD5: 9534643cdc33e1c6b47b9afd40ca8eb0
Summary. Verdict: Malware CLASSIFICATION DETECTION SECTION HIGH LEVEL BEHAVIOR DISTRIBUTION ACTIVITY OVERVIEW
Page 1 Summary File Name: ExternalToolz_0.8.exe File Type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows SHA1: 6c359ec1e0b099abf25c4f86dedb4df7dccaa62a MD5: d01dd75828dcc4ab7be745c15b4a8e35
ID: Sample Name: npzdi.exe Cookbook: default.jbs Time: 21:42:27 Date: 26/09/2017 Version:
ID: 32777 Sample Name: npzdi.exe Cookbook: default.jbs Time: 21:42:27 Date: 26/0/2017 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence Classification
ID: Sample Name: binary(2) Cookbook: default.jbs Time: 15:21:05 Date: 10/01/2018 Version:
ID: 42207 Sample Name: binary(2) Cookbook: default.jbs Time: 15:21:05 Date: 10/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: aa6bcc.exe Cookbook: default.jbs Time: 05:57:48 Date: 15/07/2018 Version:
ID: 68136 Sample Name: aa6bcc.exe Cookbook: default.jbs Time: 05:57:48 Date: 15/07/2018 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: HOcZW2ev9b Cookbook: default.jbs Time: 18:13:52 Date: 22/12/2017 Version:
ID: 40853 Sample Name: HOcZW2evb Cookbook: default.jbs Time: 18::52 Date: 22/12/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: wrar550.exe Cookbook: default.jbs Time: 15:29:39 Date: 29/12/2017 Version:
ID: 41263 Sample Name: wrar550.exe Cookbook: default.jbs Time: 15:29:39 Date: 29/12/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: Uu1hedZCOT Cookbook: default.jbs Time: 14:44:47 Date: 27/01/2018 Version:
ID: 44108 Sample Name: Uu1hedZCOT Cookbook: default.jbs Time: 14:44:47 Date: 27/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview Information Detection Confidence Classification Analysis
ID: Sample Name: jsjdkkz Cookbook: default.jbs Time: 15:12:08 Date: 25/06/2018 Version:
ID: 65437 Sample Name: jsjdkkz Cookbook: default.jbs Time: 15:12:08 Date: 25/06/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: FileOpenInstaller.exe Cookbook: default.jbs Time: 14:35:58 Date: 14/12/2017 Version:
ID: 40081 Sample Name: FileOpenInstaller.exe Cookbook: default.jbs Time: 14:35:58 Date: 14/12/2017 Version: 20.0.0 Table of Contents Analysis Report Overview Information Detection Confidence Classification
ID: Sample Name: jre-8u162- windows-i586_ exe Cookbook: default.jbs Time: 03:20:07 Date: 19/01/2018 Version: 20.0.
ID: 43064 Sample Name: jre-8u162- windows-i586_0510703339.exe Cookbook: default.jbs Time: 03:20:07 Date: 19/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: message.bin Cookbook: default.jbs Time: 01:10:40 Date: 09/11/2017 Version:
ID: 36486 Sample Name: message.bin Cookbook: default.jbs Time: 01:10:40 Date: 0/11/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: FloProDesigner.exe Cookbook: default.jbs Time: 19:52:35 Date: 09/08/2018 Version:
ID: 71847 Sample Name: FloProDesigner.exe Cookbook: default.jbs Time: 1:52:35 Date: 0/08/2018 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
Malware Of The Day What s goin on here???
7-31-2018 What s goin on here??? Hashes O Houlihan 87a28a99697452a37fc229b3aa3afe97 5e4ddd2c5e6133aa409fdc9af0740e0f39341370 - sha1 fa513c65cded25a7992e2b0ab03c5dd5c6d0fc2282cd64a1e11a387a3341ce18 - sha256
ID: Sample Name: calc1 Cookbook: default.jbs Time: 14:46:00 Date: 13/07/2018 Version:
ID: 98 Sample Name: calc1 Cookbook: default.jbs Time: 14:4:00 Date: 13/0/2018 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: setup.exe Cookbook: default.jbs Time: 15:35:49 Date: 18/06/2018 Version:
ID: 64424 Sample Name: setup.exe Cookbook: default.jbs Time: 15:35:49 Date: 1/06/201 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: cerbermore.dll Cookbook: default.jbs Time: 19:00:07 Date: 07/04/2018 Version:
ID: 53634 Sample Name: cerbermore.dll Cookbook: default.jbs Time: 19:00:0 Date: 0/04/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: gt1dbsh09j.exe Cookbook: default.jbs Time: 19:08:18 Date: 31/08/2018 Version:
ID: 4939 Sample Name: gt1dbsh09j.exe Cookbook: default.jbs Time: 19:0:1 Date: 31/0/201 Version: 23.0.0 Table of Contents Analysis Report gt1dbsh09j.exe Overview General Information Detection Confidence
Texas Tech University Spring 2017 Digital Forensics Malware Analysis
/Reverse Engineering Tools and Techniques Background: Setup: Open Remnux inside of Virtual Box. If you do not have the Remnux Virtual Machine setup refer to the environment setup sheets for instructions.
ID: Sample Name: AlgolPablo.exe Cookbook: default.jbs Time: 12:01:39 Date: 28/11/2017 Version:
ID: 38428 Sample Name: AlgolPablo.exe Cookbook: default.jbs Time: 12:01:39 Date: 28/11/2017 Version: 20.0.0 Table of Contents Analysis Report Overview Information Detection Confidence Classification Analysis
Conclusion: Interesting to see this very old piece of malware, even if it didn t fully run in the test environment.
1.0 Summary Findings and observations: Mass-mailer worm with execution issues. Design flaws reveal functionality and signatures. This sample was first observed 14+ years ago, but doesn t seem to have any
ID: Sample Name: REWjcrauz7 Cookbook: default.jbs Time: 12:14:00 Date: 29/09/2017 Version:
ID: 33037 Sample Name: REWjcrauz7 Cookbook: default.jbs Time: 12:14:00 Date: 29/09/2017 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence Classification
ID: Sample Name: 6ED217vm9Ty Cookbook: default.jbs Time: 10:16:43 Date: 21/11/2017 Version:
ID: 37644 Sample Name: 6ED217vm9Ty Cookbook: default.jbs Time: 10:16:43 Date: 21/11/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: powershell.exe Cookbook: default.jbs Time: 11:15:45 Date: 18/02/2018 Version:
ID: 4932 Sample Name: powershell.exe Cookbook: default.jbs Time: :1:4 Date: 18/02/2018 Version: 21.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: fly.jse Cookbook: default.jbs Time: 18:17:26 Date: 11/11/2017 Version:
ID: 371 Sample Name: fly.jse Cookbook: default.jbs Time: 1:17:2 Date: 11/11/2017 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence Classification
ID: Sample Name: HHemAoXDgV.bin Cookbook: default.jbs Time: 17:20:36 Date: 06/01/2018 Version:
ID: 41790 Sample Name: HHemAoXDgV.bin Cookbook: default.jbs Time: 17:20:36 Date: 06/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: RTSndMgr.cpl Cookbook: default.jbs Time: 00:40:02 Date: 10/05/2018 Version:
ID: 513 Sample Name: RTSndMgr.cpl Cookbook: default.jbs Time: 00:40:02 Date: 10/05/201 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: Sysmon.exe Cookbook: default.jbs Time: 10:53:14 Date: 02/02/2018 Version:
ID: 449 Sample Name: Sysmon.exe Cookbook: default.jbs Time: 10:3:14 Date: 02/02/2018 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: 31FixVir.doc.exe Cookbook: default.jbs Time: 14:03:14 Date: 04/02/2018 Version:
ID: 45009 Sample Name: 31FixVir.doc.exe Cookbook: default.jbs Time: 14:03:14 Date: 04/02/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Cookbook: urldownload.jbs Time: 20:09:25 Date: 13/06/2018 Version:
ID: 3923 Cookbook: urldownload.jbs Time: 20:09:25 Date: 13/0/201 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Sample Name: OfficeTimeline.exe Cookbook: default.jbs Time: 19:14:10 Date: 31/01/2018 Version:
ID: 44374 Sample Name: OfficeTimeline.exe Cookbook: default.jbs Time: 19:14:10 Date: 31/01/2018 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: 11#Ucb#Uae#Uc4#Ube#Ue5#Ubb#UaafNOnOJTVYQ.exe Cookbook: default.jbs Time: 09:47:21 Date: 02/02/2018 Version: 20.0.
ID: 4457 Sample Name: #Ucb#Uae#Uc4#Ube#Ue5#Ubb#UaafNOnOJTVYQ.exe Cookbook: default.jbs Time: 09:47:21 Date: 02/02/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General
ID: Sample Name: asu asus_displaywidget_ exe Cookbook: default.jbs Time: 16:17:29 Date: 23/05/2018 Version:
ID: 605 Sample Name: asu asus_displaywidget_3.1.0.014.exe Cookbook: default.jbs Time: 16:17:29 Date: 23/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information
ID: Sample Name: Antidetect 7_Cracked_by_Blazing_Soul.exe Cookbook: default.jbs Time: 22:04:44 Date: 17/01/2018 Version: 20.0.
ID: 42952 Sample Name: Antidetect 7_Cracked_by_Blazing_Soul.exe Cookbook: default.jbs Time: 22:04:44 Date: 17/01/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information
ID: Sample Name: ff2c8cadaa0fd8da6138cce6fce37e001f53a5d9ceccd67945b15ae273f4d751.evaljs.js Cookbook: default.jbs Time: 16:44:00 Date:
ID: 33355 Sample Name: ff2c8cadaa0fd8da138ccefce3e001f53a5dceccd45b15ae23f4d51.evaljs.js Cookbook: default.jbs Time: 1:44:00 Date: 04//201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report
ID: Sample Name: C.exe Cookbook: default.jbs Time: 09:49:18 Date: 14/12/2017 Version:
ID: 40059 Sample Name: C.exe Cookbook: default.jbs Time: 09:49:1 Date: 14/12/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification
About INtime Win32 and real time extension system calls
About INtime Win32 and real time extension system calls Contents Overview How the Win32 API (iwin32) fits in the INtime environment INtime Win32 system calls Porting a Windows application to INtime Overview
ID: Sample Name: UplayInstaller.exe Cookbook: default.jbs Time: 15:40:35 Date: 24/11/2017 Version:
ID: 3074 Sample Name: UplayInstaller.exe Cookbook: default.jbs Time: 15:40:35 Date: 24/11/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: MobaXterm_installer.dat Cookbook: default.jbs Time: 18:29:43 Date: 25/05/2018 Version:
ID: 1259 Sample Name: MobaXterm_installer.dat Cookbook: default.jbs Time: 1:29:43 Date: 25/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: NEW ORDER LIST.jar Cookbook: default.jbs Time: 10:19:47 Date: 19/02/2018 Version:
ID: 47020 Sample Name: NEW ORDER LIST.jar Cookbook: default.jbs Time: :19:47 Date: 19/02/201 Version: 21.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence
ID: Sample Name: amtemu.v painter.exe Cookbook: default.jbs Time: 17:23:37 Date: 27/11/2017 Version:
ID: 38336 Sample Name: amtemu.v0..2- painter.exe Cookbook: default.jbs Time: 17:23:37 Date: 27/11/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: npp installer.x64.exe Cookbook: default.jbs Time: 01:24:53 Date: 01/12/2017 Version:
ID: 313 Sample Name: npp.7.5.2.installer.x64.exe Cookbook: default.jbs Time: 01:24:53 Date: 01/12/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: 21PO jpg...js Cookbook: default.jbs Time: 14:32:06 Date: 21/11/2017 Version:
ID: 371 Sample Name: 21PO201745.jpg...js Cookbook: default.jbs Time: 14:32:0 Date: 21/11/2017 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence
ID: Sample Name: electra-desktopsetup exe.crdownload. Cookbook: default.jbs Time: 20:40:31 Date: 01/05/2018 Version: 22.0.
ID: 5542 Sample Name: electra-desktopsetup-1.0..exe.crdownload Cookbook: default.jbs Time: 20:40:31 Date: 01/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General
Win32 Programming. Jim Fawcett CSE775 Distributed Objects Spring 2012
Win32 Programming Jim Fawcett CSE775 Distributed Objects Spring 2012 References Programming Applications for Microsoft Windows, 4 th Edition, Jeffrey Richter, Microsoft Press, 1999 Unicode, More Unicode
ID: Cookbook: urldownload.jbs Time: 19:58:34 Date: 02/05/2018 Version:
ID: 57706 Cookbook: urldownload.jbs Time: 19:5:34 Date: 02/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: urldownload.jbs Time: 08:25:02 Date: 29/10/2018 Version: Fire Opal
ID: Cookbook: urldownload.jbs Time: 0:25:02 Date: 29//201 Version: 24.0.0 Fire Opal Table of Contents Table of Contents Analysis Report http://15.1..14/neko.sh Overview General Information Detection Confidence
ID: Cookbook: urldownload.jbs Time: 20:47:24 Date: 09/12/2017 Version:
ID: 0 Cookbook: urldownload.jbs Time: 20:4:24 Date: 0/12/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Sample Name: electra-desktopsetup exe. Cookbook: default.jbs Time: 21:15:36 Date: 01/05/2018 Version:
ID: 57550 Sample Name: electra-desktopsetup-1.0..exe Cookbook: default.jbs Time: 21:15:36 Date: 01/05/201 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: image002 Cookbook: default.jbs Time: 18:19:28 Date: 18/05/2018 Version:
ID: 0309 Sample Name: image002 Cookbook: default.jbs Time: 1:19:2 Date: 1/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: quzpecasrh Cookbook: default.jbs Time: 16:55:54 Date: 07/10/2017 Version:
ID: 3393 Sample Name: quzpecasrh Cookbook: default.jbs Time: 1:55:54 Date: 0//201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: Payment_Remittance#.xps Cookbook: defaultwindowsofficecookbook.jbs Time: 01:35:46 Date: 20/09/2018 Version: 23.0.
ID: 25 Sample Name: Payment_Remittance#.xps Cookbook: defaultwindowsofficecookbook.jbs Time: 01:35:4 Date: 20/09/201 Version: 23.0.0 Table of Contents Table of Contents Analysis Report Payment_Remittance#.xps
ID: Sample Name: 11youtube3.com Cookbook: default.jbs Time: 08:17:42 Date: 12/04/2018 Version:
ID: 54295 Sample Name: 11youtube3.com Cookbook: default.jbs Time: 08:1:42 Date: 12/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Cookbook: urldownload.jbs Time: 16:41:45 Date: 23/06/2018 Version:
ID: 52 Cookbook: urldownload.jbs Time: 1:41:45 Date: 23/0/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature
ID: Cookbook: urldownload.jbs Time: 22:46:20 Date: 19/02/2018 Version:
ID: 4706 Cookbook: urldownload.jbs Time: 22:46:20 Date: 1/02/201 Version: 21.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature
ID: Sample Name: text_0.txt Cookbook: default.jbs Time: 16:20:15 Date: 12/01/2018 Version:
ID: 4253 Sample Name: text_0.txt Cookbook: default.jbs Time: 1:20:15 Date: 12/01/2018 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: reader_sl.exe Cookbook: default.jbs Time: 11:17:38 Date: 07/05/2018 Version:
ID: 514 Sample Name: reader_sl.exe Cookbook: default.jbs Time: 11:17:3 Date: 07/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: oq5wdjgk2r.exe Cookbook: default.jbs Time: 20:25:47 Date: 22/11/2017 Version:
ID: 388 Sample Name: oq5wdjgk2r.exe Cookbook: default.jbs Time: 20:25:4 Date: 22/11/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Cookbook: urldownload.jbs Time: 18:48:38 Date: 19/06/2018 Version:
ID: 64646 Cookbook: urldownload.jbs Time: 1:4:3 Date: 19/06/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature
ID: Sample Name: js.jar Cookbook: defaultwindowsfilecookbook.jbs Time: 10:01:15 Date: 26/09/2018 Version:
ID: 80115 Sample Name: js.jar Cookbook: defaultwindowsfilecookbook.jbs Time: 10:01:15 Date: 26/09/2018 Version: 23.0.0 Table of Contents Table of Contents Analysis Report js.jar Overview General Information
ID: Sample Name: owaauth.dll Cookbook: default.jbs Time: 06:38:57 Date: 27/04/2018 Version:
ID: 593 Sample Name: owaauth.dll Cookbook: default.jbs Time: 0:3:5 Date: 2/04/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: 21drfone_transfer_setup_full3414.exe Cookbook: default.jbs Time: 22:05:56 Date: 28/12/2017 Version:
ID: 41203 Sample Name: 21drfone_transfer_setup_full3414.exe Cookbook: default.jbs Time: 22:05:56 Date: 28/12/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: Coss, Daniel.vcf Cookbook: default.jbs Time: 15:16:47 Date: 21/06/2018 Version:
ID: 6467 Sample Name: Coss, Daniel.vcf Cookbook: default.jbs Time: 15:16:47 Date: 21/06/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Cookbook: urldownload.jbs Time: 11:39:45 Date: 07/04/2018 Version:
ID: 53619 Cookbook: urldownload.jbs Time: 11:39:45 Date: 07/04/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
Infosec Binary Analisys. amd6.exe
amd6.exe MalScore: 100 File type: File size: PE32 executable (GUI) Intel 80386, for MS Windows 2507.29 KB (2567464 bytes) Compile time: 2018-05-02 17:08:30 MD5: SHA1: Import hash: c64b759c1022c22eaf2e4825eca431df
Infosec Binary Analisys. amd4.exe
amd4.exe MalScore: 100 File type: File size: PE32 executable (GUI) Intel 80386, for MS Windows 2559.79 KB (2621224 bytes) Compile time: 2018-05-02 17:08:30 MD5: SHA1: Import hash: 25705698d4403963b89432c39ee4eeed
ID: Cookbook: browseurl.jbs Time: 15:48:15 Date: 29/03/2018 Version:
ID: 52376 Cookbook: browseurl.jbs Time: 15:4:15 Date: 29/03/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: urldownload.jbs Time: 20:31:22 Date: 09/08/2018 Version:
ID: 153 Cookbook: urldownload.jbs Time: 20:31:22 Date: 09/0/201 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Cookbook: urldownload.jbs Time: 02:55:04 Date: 01/02/2018 Version:
ID: 4441 Cookbook: urldownload.jbs Time: 02:55:04 Date: 01/02/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature
ID: Sample Name: testfiletestfile.txt Cookbook: default.jbs Time: 15:24:30 Date: 06/07/2018 Version:
ID: 6045 Sample Name: testfiletestfile.txt Cookbook: default.jbs Time: 15:24:30 Date: 06/0/201 Version: 23.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: 29UPDYATHD.exe Cookbook: default.jbs Time: 19:03:31 Date: 06/04/2018 Version:
ID: 5352 Sample Name: 29UPDYATHD.exe Cookbook: default.jbs Time: 19:03:31 Date: 06/04/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: pccfvhbyjn.sample Cookbook: default.jbs Time: 13:15:27 Date: 18/01/2018 Version:
ID: 43006 Sample Name: pccfvhbyjn.sample Cookbook: default.jbs Time: 13::27 Date: 1/01/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence
ID: Sample Name: PacketAnalyzerPlus_11.4.0_Setup.exe.txt Cookbook: default.jbs Time: 12:17:34 Date: 26/07/2018 Version: 23.0.
ID: 69699 Sample Name: PacketAnalyzerPlus_11.4.0_Setup.exe.txt Cookbook: default.jbs Time: 12:17:34 Date: 26/07/201 Version: 23.0.0 Table of Contents Analysis Report Overview Information Detection Confidence
ID: Sample Name: SNC3SAgentSetup_v3.3.1_Build2_Released.exe Cookbook: default.jbs Time: 21:44:31 Date: 19/06/2018 Version: 22.0.
ID: 64672 Sample Name: SNC3SAgentSetup_v3.3.1_Build2_Released.exe Cookbook: default.jbs Time: 21:44:31 Date: 19/06/2018 Version: 22.0.0 Table of Contents Analysis Report Overview Information Detection
ID: Sample Name: wtf.bat Cookbook: default.jbs Time: 18:32:35 Date: 19/05/2018 Version:
ID: 6036 Sample Name: wtf.bat Cookbook: default.jbs Time: 1:32:35 Date: 19/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification
ID: Sample Name: 17Order List.pdf.exe Cookbook: default.jbs Time: 13:48:26 Date: 19/10/2017 Version:
ID: 34641 Sample Name: 17Order List.pdf.exe Cookbook: default.jbs Time: 13:48:26 Date: 1/10/2017 Version: 20.0.0 Table of Contents Analysis Report Overview Information Detection Confidence Classification
ID: Sample Name: Swift details.xls Cookbook: defaultwindowsofficecookbook.jbs Time: 17:14:48 Date: 21/06/2018 Version: 22.0.
ID: 64992 Sample Name: Swift details.xls Cookbook: defaultwindowsofficecookbook.jbs Time: 17::48 Date: 21/06/2018 Version: 22.0.0 Table of Contents Analysis Report Overview Information Detection Confidence
ID: Sample Name: French.exe Cookbook: default.jbs Time: 15:57:57 Date: 24/03/2018 Version:
ID: 51652 Sample Name: French.exe Cookbook: default.jbs Time: 15:57:57 Date: 24/03/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: ikeyhelper.exe Cookbook: default.jbs Time: 16:40:36 Date: 28/12/2017 Version:
ID: 41186 Sample Name: ikeyhelper.exe Cookbook: default.jbs Time: 16:40:36 Date: 28/12/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview Information Detection Confidence
ID: Cookbook: urldownload.jbs Time: 21:28:55 Date: 28/06/2018 Version:
ID: 6600 Cookbook: urldownload.jbs Time: 21:2:55 Date: 2/06/201 Version: 23.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature Overview Networking:
ID: Cookbook: urldownload.jbs Time: 19:53:36 Date: 07/03/2018 Version:
ID: 49 Cookbook: urldownload.jbs Time: 19:: Date: 0/0/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice
ID: Cookbook: urldownload.jbs Time: 22:26:00 Date: 30/12/2017 Version:
ID: 41304 Cookbook: urldownload.jbs Time: 22:26:00 Date: 30/12/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature Overview
ID: Sample Name: INDUSTRIAL.doc Cookbook: defaultwindowsofficecookbook.jbs Time: 02:35:30 Date: 25/04/2018 Version: 22.0.
ID: 56519 Sample Name: 20180542 INDUSTRIAL.doc Cookbook: defaultwindowsofficecookbook.jbs Time: 02:35:30 Date: 25/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview Information
ID: Sample Name: test.txt Cookbook: default.jbs Time: 13:18:36 Date: 31/03/2018 Version:
ID: 5250 Sample Name: test.txt Cookbook: default.jbs Time: 13:18:3 Date: 31/03/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: Updater.exe Cookbook: default.jbs Time: 21:09:59 Date: 18/05/2018 Version:
ID: 6032 Sample Name: Updater.exe Cookbook: default.jbs Time: 21:09:59 Date: 1/05/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Sample Name: Serial.txt Cookbook: default.jbs Time: 02:59:20 Date: 07/05/2018 Version:
ID: 58133 Sample Name: Serial.txt Cookbook: default.jbs Time: 02:5:20 Date: 0/05/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Cookbook: browseurl.jbs Time: 12:58:02 Date: 02/04/2018 Version:
ID: 5253 Cookbook: browseurl.jbs Time: 12:5:02 Date: 02/04/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
ID: Cookbook: browseurl.jbs Time: 20:27:59 Date: 16/03/2018 Version:
ID: 50646 Cookbook: browseurl.jbs Time: 20:27:59 Date: 16/03/201 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis
Infosec Binary Analisys. dew.fgh
dew.fgh MalFamily: Malicious MalScore: 100 File type: File size: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive 344.03 KB (352285 bytes) Compile time: 2014-10-07
ID: Sample Name: paint.net install.exe Cookbook: default.jbs Time: 00:46:01 Date: 01/12/2017 Version:
ID: 38812 Sample Name: paint.net.4.0.19.install.exe Cookbook: default.jbs Time: 00:46:01 Date: 01/12/2017 Version: 20.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence
ID: Cookbook: browseurl.jbs Time: 15:26:33 Date: 16/03/2018 Version:
ID: 50608 Cookbook: browseurl.jbs Time: 15:26:33 Date: 16/03/2018 Version: 22.0.0 Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis Advice Signature
ID: Sample Name: E DA5e8a0c01b.txt Cookbook: default.jbs Time: 15:35:01 Date: 18/04/2018 Version:
ID: 55401 Sample Name: E203182DA5e8a0c01b.txt Cookbook: default.jbs Time: 15:35:01 Date: 18/04/2018 Version: 22.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection
ID: Sample Name: OnAccessScanLog.txt Cookbook: default.jbs Time: 09:25:52 Date: 25/01/2018 Version:
ID: 439 Sample Name: OnAccessScanLog.txt Cookbook: default.jbs Time: 09:25:52 Date: 25/01/2018 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection
ID: Cookbook: browseurl.jbs Time: 16:56:06 Date: 13/02/2018 Version:
ID: 46296 Cookbook: browseurl.jbs Time: 16:56:06 Date: 13/02/2018 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Analysis