Extracting archived objects

In addition to the MD5 checksum data, all files or OS objects that were created or modified during MVX detonation for a file analysis job are available as a zipped collection, along with a full memory dump.

To view and extract a VM memory and object dump for a selected file analysis job:

Open the File Analysis page as described in Viewing malware using the Web UI.
Click the orange arrow to expand the malware information.
Click the Archived Object link to download the .zip file.
Open the .zip file to extract its contents. When prompted for a password, type "infected."