Analysis date (UTC): 5 March 2020, 22:31Analysis environment: Windows 7 Pro, build 7601, x86

https://www.vcdelivery.com/Cert/gc.aspx?r=swIAeBquxdO2i%2f2vdIwMuA%3d%3d&v=e&c=%2b8GBDU89FlbuZE%2bcUnzMag%3d%3d

MD5:CC3E398AAD964103CAABF25D4099C44C
SHA1:03D7ADB60C57975B9007A78F74AF96E3B674F020
SHA256:AB52C11838718D0770CD781CD6F95F0DC26C06F7A07710EA7958BFC610EF9DFD

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Reads Internet Cache Settings

  • iexplore.exe (PID: 2956)
  • iexplore.exe (PID: 2400)

Application launched itself

  • iexplore.exe (PID: 2956)

Changes internet zones settings

  • iexplore.exe (PID: 2956)

Creates files in the user directory

  • iexplore.exe (PID: 2956)
  • iexplore.exe (PID: 2400)

Reads internet explorer settings

  • iexplore.exe (PID: 2400)

Reads settings of System Certificates

  • iexplore.exe (PID: 2400)
  • iexplore.exe (PID: 2956)

Changes settings of System certificates

  • iexplore.exe (PID: 2956)

Adds / modifies Windows certificates

  • iexplore.exe (PID: 2956)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN