Prepare your sandbox virtual machine

Prepare your Windows environment to capture malware behaviors in the sandbox.

Connect to your VM using Remote Desktop Connection and log on to your VM.
Open Local Users and Groups from the Control Panel.
In the left page, click Users.
In the right page, select a user and rename it to Administrator.
Set the Administrator password to cr@cker42.
Restart your VM.
Log on to your VM, then open Control Panel → System → Advanced system settings.
In the Advanced Tab of the System Properties window, under Performance, select Settings....
In the Performance Options windows, select Advanced → Change....
In the Virtual Memory windows, select Automatically manage paging file size for all drives, then click OK.
Install and configure Adobe Reader.
1. To analyze PDF files, download Adobe Reader to the native host and install it to the VM.
2. In Adobe reader, if Adobe Reader Protected Mode message appears, click Open with Protected Mode disabled, then click OK.
3. If Accessibility Setup Assistance message appears, click Cancel.
4. Select Edit → Preferences → Updater, select Do not download or install updated automatically, select OK, then select Yes to confirm the changes.
Install and configure Java.
1. Open Registry Editor.
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy\EnableJavaUpdate.
3. Set its value to 0.
4. Close the Registry Editor.
Install and configure Adobe Flash Player.
1. Run the command prompt as an Administrator.
2. Execute the following command:
  dism.exe /online /add-package /packagepath:"<Adobe-Flash-For-Windows-Package>.mum"
  Note
  Replace <Adobe-Flash-For-Windows-Package> with the name and path of the Adobe Flash for Windows package MUM file.
Run the VM Provisioner Tool.
Shrink the volume to about between 20 GB and 30 GB and leave the rest unallocated.
Download Disk2vhd and extract it on your VM.
You can download Disk2vhd from:
https://docs.microsoft.com/en- us/sysinternals/downloads/disk2vhd
Run the extracted disk2vhd.exe file.
Select your primary drive, then click Create.
After, the VHDX file is created reduce its virtual size.
1. Open PowerShell.
2. Run the following command:
  Resize-VHD -Path <path to your vhdx file> -ToMinimumSize
  Note
  Resize-VHD command is available only on systems with the Hyper-V module.
Convert your VHDX file to an image file.
For details about how to convert your VHDX file to an image file, see Product Guide