URL:

http://download.proctorcam.com/production/pearson_vue/PVproctor-2.22.2.exe

Full analysis: https://app.any.run/tasks/0e5a3955-91a1-4c7f-a855-bf55320aa76d
Verdict: Malicious activity
Threats:

A loader is malicious software that infiltrates devices to deliver malicious payloads. This malware is capable of infecting victims’ computers, analyzing their system information, and installing other types of threats, such as trojans or stealers. Criminals usually deliver loaders through phishing emails and links by relying on social engineering to trick users into downloading and running their executables. Loaders employ advanced evasion and persistence tactics to avoid detection.

Malware Trends Tracker     >>>
Analysis date: July 03, 2019, 11:55:43
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:
loader
Indicators:
MD5:

DFD15A902406207A2CCE840827C77EBD

SHA1:

CDF820F2378DE727E75F5A881E8E9D1A59CAB85F

SHA256:

06C6D8F400ACE5ABD43315F1A52BA03885D01F189FBBC0FCB1BEE07CA6EA5D02

SSDEEP:

3:N1KaKEl1MI9aQGRMf/XETgjKVwXbZn:Ca510RMffE4tZn

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Downloads executable files from the Internet

      • chrome.exe (PID: 2760)

    • Application was dropped or rewritten from another process

      • PVproctor-2.22.2.exe (PID: 2996)
      • Adobe AIR Installer.exe (PID: 2360)
      • Install PVproctor.exe (PID: 2984)
      • Adobe AIR Application Installer.exe (PID: 3892)
      • AIRRuntimeInstaller.exe (PID: 2844)
      • Adobe AIR Application Installer.exe (PID: 3404)
      • PVproctor.exe (PID: 2636)
      • PVproctor.exe (PID: 4064)
      • PVproctor.exe (PID: 4076)

    • Loads dropped or rewritten executable

      • Adobe AIR Installer.exe (PID: 2360)
      • Adobe AIR Application Installer.exe (PID: 3892)
      • Adobe AIR Application Installer.exe (PID: 3404)
      • PVproctor.exe (PID: 2636)
      • PVproctor.exe (PID: 4064)
      • PVproctor.exe (PID: 4076)

    • Changes settings of System certificates

      • msiexec.exe (PID: 3040)

  • SUSPICIOUS

    • Reads the cookies of Google Chrome

      • chrome.exe (PID: 2760)

    • Application launched itself

      • chrome.exe (PID: 2944)
      • Adobe AIR Application Installer.exe (PID: 3892)

    • Executable content was dropped or overwritten

      • chrome.exe (PID: 2944)
      • chrome.exe (PID: 2760)
      • PVproctor-2.22.2.exe (PID: 2996)
      • Install PVproctor.exe (PID: 2984)
      • AIRRuntimeInstaller.exe (PID: 2844)
      • msiexec.exe (PID: 3040)
      • Adobe AIR Application Installer.exe (PID: 3892)
      • Adobe AIR Application Installer.exe (PID: 3404)

    • Executed as Windows Service

      • WmiApSrv.exe (PID: 3076)

    • Reads Internet Cache Settings

      • chrome.exe (PID: 2944)
      • Adobe AIR Application Installer.exe (PID: 3892)
      • PVproctor.exe (PID: 4064)
      • PVproctor.exe (PID: 4076)

    • Creates files in the user directory

      • Adobe AIR Application Installer.exe (PID: 3892)

    • Creates files in the program directory

      • Adobe AIR Application Installer.exe (PID: 3404)

    • Adds / modifies Windows certificates

      • msiexec.exe (PID: 3040)

    • Modifies the open verb of a shell class

      • msiexec.exe (PID: 3040)

  • INFO

    • Reads settings of System Certificates

      • chrome.exe (PID: 2760)
      • Adobe AIR Application Installer.exe (PID: 3404)

    • Manual execution by user

      • PVproctor-2.22.2.exe (PID: 2996)
      • PVproctor.exe (PID: 2636)
      • PVproctor.exe (PID: 4076)

    • Creates files in the program directory

      • msiexec.exe (PID: 3040)

    • Creates a software uninstall entry

      • msiexec.exe (PID: 3040)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
64
Monitored processes
24
Malicious processes
8
Suspicious processes
4

Behavior graph

Click at the process to see the details
start drop and start drop and start drop and start chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs wmiapsrv.exe no specs pvproctor-2.22.2.exe install pvproctor.exe chrome.exe no specs airruntimeinstaller.exe adobe air installer.exe no specs adobe air application installer.exe adobe air application installer.exe msiexec.exe chrome.exe no specs pvproctor.exe pvproctor.exe no specs chrome.exe no specs pvproctor.exe

Process information

PID
CMD
Path
Indicators
Parent process
1528"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --disable-gpu-compositing --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=18377138103257224075 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2356"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --gpu-preferences=KAAAAAAAAADgAAAgAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=9456803853752436642 --mojo-platform-channel-handle=1020 --ignored=" --type=renderer " /prefetch:2C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2360"C:\Users\admin\AppData\Local\Temp\AIRB98A.tmp\Adobe AIR Installer.exe" -x1 "C:\Users\admin\AppData\Local\Temp\AIR946E.tmp\PVproctor"C:\Users\admin\AppData\Local\Temp\AIRB98A.tmp\Adobe AIR Installer.exe—AIRRuntimeInstaller.exe
User:
admin
Company:
Adobe
Integrity Level:
MEDIUM
Description:
Adobe AIR Installer
Exit code:
0
Version:
32.0.0.125
Modules
Images
c:\users\admin\appdata\local\temp\airb98a.tmp\adobe air installer.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
2404"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --disable-gpu-sandbox --use-gl=disabled --gpu-preferences=KAAAAAAAAADgAAAgAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=17540051415219091050 --mojo-platform-channel-handle=4380 /prefetch:2C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2512"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --lang=en-US --no-sandbox --service-request-channel-token=8717116935124679145 --mojo-platform-channel-handle=1056 /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2544"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --lang=en-US --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15782370479179580163 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2444 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2580"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --lang=en-US --service-sandbox-type=utility --service-request-channel-token=15847336073261027769 --mojo-platform-channel-handle=488 --ignored=" --type=renderer " /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2636"C:\Program Files\PVproctor\PVproctor.exe" C:\Program Files\PVproctor\PVproctor.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
0
Modules
Images
c:\program files\pvproctor\pvproctor.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
2664"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=6882734592509711683 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2200 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2712"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1024,15347685581355363113,2482251261704281407,131072 --enable-features=PasswordImport --disable-gpu-compositing --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=544142240186996568 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
Total events
2 882
Read events
2 447
Write events
409
Delete events
26

Modification events

(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:failed_count
Value:
0
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:state
Value:
2
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
Operation:writeName:StatusCodes
Value:
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
Operation:writeName:StatusCodes
Value:
01000000
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:state
Value:
1
(PID) Process:(3080) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BrowserExitCodes
Operation:writeName:2944-13206628562357750
Value:
259
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Operation:writeName:dr
Value:
1
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome
Operation:writeName:UsageStatsInSample
Value:
0
(PID) Process:(2944) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BrowserExitCodes
Operation:delete valueName:1512-13197841398593750
Value:
0
(PID) Process:(2944) chrome.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}
Operation:writeName:usagestats
Value:
0
Executable files
42
Suspicious files
21
Text files
180
Unknown types
46

Dropped files

PID
Process
Filename
Type
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\620134e7-9e51-4687-a503-2770d04fe40c.tmp —
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000020.dbtmp —
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.oldtext
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.oldtext
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old —
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old~RF14634c.TMPtext
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.oldtext
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old~RF14639a.TMPtext
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\000001.dbtmp —
MD5:—
SHA256:—
2944chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\CURRENT —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
50
DNS requests
12
Threats
5

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2984
Install PVproctor.exe
GET
301
104.111.214.232:80
http://airdownload.adobe.com/air/3/nai/windows6.1/x86/installer.p7
NL
—
—
whitelisted
2984
Install PVproctor.exe
GET
301
104.111.214.232:80
http://airdownload.adobe.com/air/3/nai/windows6.1/x86/installer
NL
—
—
whitelisted
2760
chrome.exe
GET
200
99.86.243.8:80
http://download.proctorcam.com/production/pearson_vue/PVproctor-2.22.2.exe
US
executable
2.55 Mb
whitelisted
3892
Adobe AIR Application Installer.exe
GET
200
151.139.128.14:80
http://crl.usertrust.com/UTN-USERFirst-Object.crl
US
binary
74.4 Kb
whitelisted
2984
Install PVproctor.exe
GET
200
2.16.31.24:80
http://crl.adobe.com/cds.crl
unknown
der
637 b
whitelisted
2984
Install PVproctor.exe
GET
200
2.16.31.24:80
http://crl.adobe.com/prodSvce.crl
unknown
der
425 b
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2760
chrome.exe
172.217.18.163:443
clientservices.googleapis.com
Google Inc.
US
whitelisted
2760
chrome.exe
99.86.243.8:80
download.proctorcam.com
AT&T Services, Inc.
US
suspicious
2760
chrome.exe
172.217.18.14:443
sb-ssl.google.com
Google Inc.
US
whitelisted
2760
chrome.exe
172.217.21.196:443
www.google.com
Google Inc.
US
whitelisted
2984
Install PVproctor.exe
104.111.214.232:80
airdownload.adobe.com
Akamai International B.V.
NL
whitelisted
4064
PVproctor.exe
54.163.252.224:443
service.proctorcam.com
Amazon.com, Inc.
US
unknown
—
—
54.163.252.224:443
service.proctorcam.com
Amazon.com, Inc.
US
unknown
—
—
172.217.23.163:443
www.gstatic.com
Google Inc.
US
whitelisted
4076
PVproctor.exe
54.163.252.224:443
service.proctorcam.com
Amazon.com, Inc.
US
unknown
2760
chrome.exe
216.58.207.45:443
accounts.google.com
Google Inc.
US
whitelisted

DNS requests

Domain
IP
Reputation
clientservices.googleapis.com
  • 172.217.18.163
whitelisted
download.proctorcam.com
  • 99.86.243.8
  • 99.86.243.22
  • 99.86.243.77
  • 99.86.243.27
whitelisted
accounts.google.com
  • 216.58.207.45
shared
sb-ssl.google.com
  • 172.217.18.14
whitelisted
www.google.com
  • 172.217.21.196
malicious
ssl.gstatic.com
  • 216.58.207.35
whitelisted
airdownload.adobe.com
  • 104.111.214.232
whitelisted
crl.adobe.com
  • 2.16.31.24
whitelisted
crl.usertrust.com
  • 151.139.128.14
whitelisted
service.proctorcam.com
  • 54.163.252.224
  • 23.23.121.37
suspicious

Threats

PID
Process
Class
Message
2760
chrome.exe
Potentially Bad Traffic
ET POLICY Executable served from Amazon S3
2760
chrome.exe
Misc activity
ET INFO Packed Executable Download
2760
chrome.exe
Potential Corporate Privacy Violation
ET POLICY PE EXE or DLL Windows file download HTTP
2760
chrome.exe
Misc activity
ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)
3892
Adobe AIR Application Installer.exe
Potential Corporate Privacy Violation
ET POLICY Outdated Flash Version M1
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
http://download.proctorcam.com/production/pearson_vue/PVproctor-2.22.2.exe