Analysis date (UTC): 23 December 2019, 08:49Analysis environment: Windows 7 Pro, build 7601, x86

https://mea.aconex.com/Logon?Action=Logon&userName=tabdulla&key=8bcea7107cb38b1f%2026058c57b19503fdc20ba32dadebb70fa2a9a8f6df5eecd649aa66c41227526fc52311b2c5a17d8f%2011d378fe92fd8e093c73cc7aff7e53e7&expiry=1577686244468&utm_campaign=ACX_ac_detail%20s&utm_source=app

MD5:695ECF28DA93ACB5689B093925AA5AA6
SHA1:4A68153518171657CF9D2292986F286034793185
SHA256:1327FF15F351EAB99115A34F1A9CD093413EF95E6849DFD372D899B46F40BB22

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Executed via COM

  • FlashUtil32_26_0_0_131_ActiveX.exe (PID: 3408)

INFO

Changes internet zones settings

  • iexplore.exe (PID: 2480)

Application launched itself

  • iexplore.exe (PID: 2480)

Reads internet explorer settings

  • iexplore.exe (PID: 3324)
  • iexplore.exe (PID: 912)
  • iexplore.exe (PID: 3908)

Reads settings of System Certificates

  • iexplore.exe (PID: 2480)

Changes settings of System certificates

  • iexplore.exe (PID: 2480)

Reads Internet Cache Settings

  • iexplore.exe (PID: 3324)
  • iexplore.exe (PID: 912)
  • iexplore.exe (PID: 3908)

Creates files in the user directory

  • iexplore.exe (PID: 3324)
  • iexplore.exe (PID: 912)
  • iexplore.exe (PID: 3908)
  • FlashUtil32_26_0_0_131_ActiveX.exe (PID: 3408)
  • iexplore.exe (PID: 2480)

Adds / modifies Windows certificates

  • iexplore.exe (PID: 2480)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN