download:

index.html

Full analysis: https://app.any.run/tasks/6ac120b4-8dde-4650-8ce0-3995fc16299a
Verdict: No threats detected
Analysis date: March 05, 2019, 00:37:32
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: text/html
File info: HTML document, UTF-8 Unicode text, with very long lines
MD5:

859A19D2C14B7FAFF1CA084B2D2A2C0F

SHA1:

FD5D9F8E4A6D4C2A548E2362048A20DCA1287790

SHA256:

099A211D30553FAFCB3B6AC6930D56D17338BDD5811FD19BDEA4424F3B32695C

SSDEEP:

3072:4ex9lpGpELDfCUsLPd82vlcKEQeqAaDgUsGwx6MDKnNNvu:7dG1I5

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    No suspicious indicators.

  • INFO

    • Reads Internet Cache Settings

      • iexplore.exe (PID: 3328)

    • Reads internet explorer settings

      • iexplore.exe (PID: 3328)

    • Changes internet zones settings

      • iexplore.exe (PID: 2916)

    • Application launched itself

      • iexplore.exe (PID: 2916)

    • Reads settings of System Certificates

      • iexplore.exe (PID: 3328)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.htm/html | HyperText Markup Language with DOCTYPE (80.6)
.html | HyperText Markup Language (19.3)

EXIF

HTML

ContentType: text/html; charset=utf-8
Title: Darling Cams - Amateur Webcams
twitterSite: @chaturbate
twitterCard: summary
msapplicationTileColor: #ffffff
msapplicationTileImage: https://ssl-ccstatic.highwebmedia.com/favicons/mstile-144x144.png
No data.
screenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
33
Monitored processes
2
Malicious processes
0
Suspicious processes
0

Behavior graph

Click at the process to see the details
start iexplore.exe iexplore.exe

Process information

PID
CMD
Path
Indicators
Parent process
2916"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\admin\AppData\Local\Temp\index.htmlC:\Program Files\Internet Explorer\iexplore.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Internet Explorer
Exit code:
0
Version:
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
3328"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2916 CREDAT:79873C:\Program Files\Internet Explorer\iexplore.exe
iexplore.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Internet Explorer
Exit code:
0
Version:
8.00.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
Total events
411
Read events
336
Write events
73
Delete events
2

Modification events

(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Operation:writeName:CompatibilityFlags
Value:
0
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
0
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
1
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
Operation:writeName:SecuritySafe
Value:
1
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:writeName:ProxyEnable
Value:
0
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Operation:writeName:SavedLegacySettings
Value:
4600000069000000010000000000000000000000000000000000000000000000C0E333BBEAB1D301000000000000000000000000020000001700000000000000FE800000000000007D6CB050D9C573F70B000000000000006D00330032005C004D00530049004D004700330032002E0064006C000100000004AA400014AA4000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000C0A8016400000000000000000000000000000000000000000800000000000000805D3F00983740000008000002000000000000600000002060040000B8A94000020000008802000060040000B8A9400004000000F8010000B284000088B64000B84B400043003A000000000000000000000000000000000000000000
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\Active
Operation:writeName:{ED1CB85B-3EDE-11E9-BAD8-5254004A04AF}
Value:
0
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Operation:writeName:Type
Value:
4
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Operation:writeName:Count
Value:
3
(PID) Process:(2916) iexplore.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2670000A-7350-4F3C-8081-5663EE0C6C49}\iexplore
Operation:writeName:Time
Value:
E3070300020005000000260000008703
Executable files
0
Suspicious files
0
Text files
108
Unknown types
10

Dropped files

PID
Process
Filename
Type
2916iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\favicon[1].ico —
MD5:—
SHA256:—
2916iexplore.exeC:\Users\admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico —
MD5:—
SHA256:—
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\e46b47205d16[1].csstext
MD5:527C57497E27B56F288E5AD3624CA419
SHA256:C0C79C4FD61699291673A8A33AE48748699F82AEFB4EDB0B4232F2C0669C36BA
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0UU90R59\ubuntum-webfont[1].eoteot
MD5:21AE99A333E44741586CA5FBEA48E72F
SHA256:D8F8BA0DA549641585432B0CBD833743E141B115A467DFCECB0DD27F80FFCB52
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\close_icon[1].gifimage
MD5:C5EE6A2B1B2CC1742010B250DC58DFC3
SHA256:DDBF9C358459F90991EBCC60366C901A8368287840E446AF0AE9DB52F95B3531
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\ubuntur-webfont[1].eoteot
MD5:32CC1D69F32A4543EAE2A4DAE6DD90AF
SHA256:1188017ABDC0AB8EA2E3FAE734F1CB2E77DC08DA522B9347B4B64B64CF0E77C2
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\2725a150b778[1].jstext
MD5:A201526845876A10FE0125057CA30551
SHA256:82088F563BF502460AAA62CE08F4F10E5A0711E084D91DC46BE1CE680CDFF80A
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D2YPIJ90\ubuntub-webfont[1].eoteot
MD5:59C7E4FC41AF62804895F24BC427E5D7
SHA256:A870EBADCE327F727070AB9352DB1860883B1FDAB70D60D9A9C7C8E2310E791B
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\a8c025e8b244[1].csstext
MD5:BB646D665A0094B68E39CD66AF512DBD
SHA256:AE2F036B1329D9BEF6428F2FE9AE5B5FAA0F5B8AB24D04195C1B93B7A6A03D21
3328iexplore.exeC:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R9ZEWH8D\88x31_RTA-5042-1996-1400-1577-RTA_a[1].gifimage
MD5:BF77B8F90E62758D066176BF1B020A6F
SHA256:4BE33E5C9E904F4D342735469BFD814D94D87F2E9FC288788F33F92B7F9D29AD
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
1
TCP/UDP connections
94
DNS requests
8
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2916
iexplore.exe
GET
200
204.79.197.200:80
http://www.bing.com/favicon.ico
US
image
237 b
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2916
iexplore.exe
204.79.197.200:80
www.bing.com
Microsoft Corporation
US
whitelisted
3328
iexplore.exe
104.16.47.23:443
ssl-ccstatic.highwebmedia.com
Cloudflare Inc
US
shared
3328
iexplore.exe
104.16.47.55:443
roomimg.stream.highwebmedia.com
Cloudflare Inc
US
shared
3328
iexplore.exe
104.16.108.24:443
public.chaturbate.com
Cloudflare Inc
US
shared
3328
iexplore.exe
172.217.16.164:443
www.google.com
Google Inc.
US
whitelisted
3328
iexplore.exe
104.16.57.24:443
cdn.exoticads.com
Cloudflare Inc
US
shared
3328
iexplore.exe
104.16.48.55:443
roomimg.stream.highwebmedia.com
Cloudflare Inc
US
shared

DNS requests

Domain
IP
Reputation
ssl-ccstatic.highwebmedia.com
  • 104.16.47.23
  • 104.16.46.23
unknown
www.bing.com
  • 204.79.197.200
  • 13.107.21.200
whitelisted
roomimg.stream.highwebmedia.com
  • 104.16.47.55
  • 104.16.48.55
unknown
public.chaturbate.com
  • 104.16.108.24
  • 104.16.107.24
suspicious
www.google.com
  • 172.217.16.164
malicious
cdn.exoticads.com
  • 104.16.57.24
  • 104.16.56.24
unknown
dns.msftncsi.com
  • 131.107.255.255
shared

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
index.html