Analysis date (UTC): 6 April 2018, 11:47Analysis environment: Windows 7 Pro, build 7601, x86

index.html

MD5:040646848BD6178440C821055733EDFC
SHA1:F99A600B8953D0AB0DEE85533E93A10B6FF3FCF4
SHA256:56E50F1E967918F42E137485402A57EE161A60425C5E5682579B176316A5D357

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Creates files in the user directory

  • FlashUtil32_26_0_0_137_ActiveX.exe (PID: 352)

INFO

Changes internet zones settings

  • iexplore.exe (PID: 3232)

Reads Internet Cache Settings

  • iexplore.exe (PID: 2840)
  • iexplore.exe (PID: 988)

Reads internet explorer settings

  • iexplore.exe (PID: 988)
  • iexplore.exe (PID: 2840)

Application launched itself

  • iexplore.exe (PID: 3232)

Dropped object may contain URL's

  • iexplore.exe (PID: 3232)
  • iexplore.exe (PID: 2840)

Creates files in the user directory

  • iexplore.exe (PID: 2840)

Loads rich edit control libraries

  • FlashUtil32_26_0_0_137_ActiveX.exe (PID: 352)

Reads settings of System Certificates

  • iexplore.exe (PID: 2840)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN