Analysis date (UTC): 5 December 2024, 03:05Analysis environment: Windows 10 Pro, build 19045, x64

https://www.bing.com/images/search?view=detailV2&ccid=JJTgA%2bf2&id=ADF91091E8694A930158E07B50C6B15E3DA807B4&thid=OIP.JJTgA-f29AGp5or22lV9mQHaE8&mediaurl=https%3a%2f%2fstatic.wikia.nocookie.net%2fopm-music%2fimages%2f0%2f08%2fRico_Blanco.jpg%2frevision%2flatest%3fcb%3d20220426044606&exph=427&expw=640&q=rico+blanco+fandom&simid=608010917289422328&FORM=IRPRST&ck=556B9DA0A379AF8CB4FF6556A4B4503B&selectedIndex=0&itb=0

MD5:1042C18FB60F299086F44799543D5CA8
SHA1:6D3059A091F981A54B546448B52D532F8F23FE60
SHA256:0EF7B5A5B5C316CC20EE55D7D472868DBE80429CE42A5FCBEA04B3C47FB3C5AB

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Checks supported languages

  • identity_helper.exe (PID: 8124)

Reads the computer name

  • identity_helper.exe (PID: 8124)

Executable content was dropped or overwritten

  • msedge.exe (PID: 12204)

Reads Environment values

  • identity_helper.exe (PID: 8124)

Application launched itself

  • msedge.exe (PID: 6328)

Threats

PIDProcessClassMessage
6696msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6696msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6696msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6696msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN