Analysis date (UTC): 12 July 2019, 14:11Analysis environment: Windows 7 Pro, build 7601, x86

http://www.primarygames.com/arcade/simulation/papasfreezeria/

MD5:28A9487EF0086CC0853DE4BA84482C25
SHA1:6AD571FEA0C0CA50F16C68C8D4B761EC57DEADEF
SHA256:F2BEA5561FFA3FF3D216B6676A526F8BFD1304CD8FFC02C7009EF30449D95DCA

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Executed via COM

  • FlashUtil32_26_0_0_131_ActiveX.exe (PID: 3184)

INFO

Changes internet zones settings

  • iexplore.exe (PID: 3036)

Creates files in the user directory

  • iexplore.exe (PID: 3276)
  • FlashUtil32_26_0_0_131_ActiveX.exe (PID: 3184)

Reads internet explorer settings

  • iexplore.exe (PID: 3276)

Reads Internet Cache Settings

  • iexplore.exe (PID: 3276)

Application launched itself

  • iexplore.exe (PID: 3036)

Reads settings of System Certificates

  • iexplore.exe (PID: 3276)

Threats

PIDProcessClassMessage
3276iexplore.exePotential Corporate Privacy ViolationET POLICY Outdated Flash Version M1

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN