metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2017-08-29 11:51:40.614861 2017-08-29 11:54:02.562049 141 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo2 win7 Clone 2 VirtualBox 2017-08-29 11:51:40 2017-08-29 11:54:01


File Details

File name Scan_008_8488372916.zip
File size 7042 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 6C922ECB
MD5 4ec23e8b0d497006edc627b4dadfd27c
SHA1 57e08e6d2f969ac847ba2fe6400fd98c8aa50b0f
SHA256 7e9b34909329c6ad69a7f3d736a88b82a06f45afb3134722a7977b5af3e5cf8a
SHA512 b9b7778cdca6e4381caa1db0f1174f33459316ccbcb6e4cfc06be19c2999022f7a39c50597e6cd0824402e013a415fb1243130f545fdbc8a0a1dd23a44f3e2c6
Ssdeep None
PEiD None matched
Yara None matched
VirusTotal Permalink
VirusTotal Scan Date: 2017-07-30 14:22:04
Detection Rate: 37/60 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1504022087]=100): Snort Events=0, AV Events=0
Total Score=125


network_http details
antivirus_virustotal details


No screenshots available.

Static Analysis

Nothing to display.

Dropped Files


Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary


registry filesystem process services network synchronization

C:\Windows\system32\lsass.exe PID: 460, Parent PID: 364


Nothing to display.