Analysis date (UTC): 25 July 2019, 04:38Analysis environment: Windows 7 Pro, build 7601, x86

http://www.cartoondollemporium.com/mariahcareydoll.html

MD5:9A65417B94BBC673D55A2EA3FD4DBE24
SHA1:5787DE0B9765E1BD3A95188032D6B2D87905E991
SHA256:5C92567433138BDFFA42480B695FA1EB7126EA48306E9B0F3FA15EFB5F324A74

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Executed via COM

  • FlashUtil32_26_0_0_131_ActiveX.exe (PID: 3304)

INFO

Reads internet explorer settings

  • iexplore.exe (PID: 2052)

Application launched itself

  • iexplore.exe (PID: 3892)

Changes internet zones settings

  • iexplore.exe (PID: 3892)

Reads Internet Cache Settings

  • iexplore.exe (PID: 2052)

Creates files in the user directory

  • iexplore.exe (PID: 2052)
  • FlashUtil32_26_0_0_131_ActiveX.exe (PID: 3304)

Reads settings of System Certificates

  • iexplore.exe (PID: 2052)

Threats

PIDProcessClassMessage
2052iexplore.exePotential Corporate Privacy ViolationET POLICY Outdated Flash Version M1

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN