We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
20 May 2022, 02:49
Analysis environment:
Windows 7 Pro, build 7601, x86
https://bit.ly/baby2you
MD5:
874A4D72B86A9DFA9BD334D60D05313C
SHA1:
0796D6F10393F56DEF606962387F6E80EBABE5CA
SHA256:
11F13611953F8CC38025DCBC501F6B5177C86768BD9689FCD15D578039B82610
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis https://bit.ly/baby2you Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Drops executable file immediately after starts
chrome.exe (PID: 2948)
SUSPICIOUS
Modifies files in Chrome extension folder
chrome.exe (PID: 2944)
Executable content was dropped or overwritten
chrome.exe (PID: 2948)
Drops a file with a compile date too recent
chrome.exe (PID: 2948)
INFO
Checks supported languages
chrome.exe (PID: 2944)
chrome.exe (PID: 3152)
chrome.exe (PID: 3612)
chrome.exe (PID: 3544)
chrome.exe (PID: 1620)
chrome.exe (PID: 3356)
chrome.exe (PID: 2308)
chrome.exe (PID: 2524)
chrome.exe (PID: 2644)
chrome.exe (PID: 3024)
chrome.exe (PID: 1064)
chrome.exe (PID: 4024)
chrome.exe (PID: 2000)
chrome.exe (PID: 3464)
chrome.exe (PID: 1408)
chrome.exe (PID: 2348)
chrome.exe (PID: 3892)
chrome.exe (PID: 3864)
chrome.exe (PID: 3732)
chrome.exe (PID: 3268)
chrome.exe (PID: 3064)
chrome.exe (PID: 2588)
chrome.exe (PID: 2840)
chrome.exe (PID: 2540)
chrome.exe (PID: 3220)
chrome.exe (PID: 3196)
chrome.exe (PID: 2640)
chrome.exe (PID: 2948)
chrome.exe (PID: 2764)
chrome.exe (PID: 3600)
chrome.exe (PID: 3520)
chrome.exe (PID: 2976)
chrome.exe (PID: 928)
chrome.exe (PID: 116)
chrome.exe (PID: 400)
chrome.exe (PID: 576)
chrome.exe (PID: 2772)
chrome.exe (PID: 2332)
chrome.exe (PID: 916)
chrome.exe (PID: 3392)
chrome.exe (PID: 1124)
chrome.exe (PID: 2564)
chrome.exe (PID: 2908)
chrome.exe (PID: 3064)
chrome.exe (PID: 604)
Reads the computer name
chrome.exe (PID: 2944)
chrome.exe (PID: 3356)
chrome.exe (PID: 3612)
chrome.exe (PID: 1620)
chrome.exe (PID: 3024)
chrome.exe (PID: 3464)
chrome.exe (PID: 1064)
chrome.exe (PID: 4024)
chrome.exe (PID: 3892)
chrome.exe (PID: 2840)
Application launched itself
chrome.exe (PID: 2944)
Reads the hosts file
chrome.exe (PID: 3612)
chrome.exe (PID: 2944)
Reads settings of System Certificates
chrome.exe (PID: 3612)
Reads the date of Windows installation
chrome.exe (PID: 3464)
Threats
PID
Process
Class
Message
—
—
Potentially Bad Traffic
ET DNS Query to a *.top domain - Likely Hostile
—
—
Potentially Bad Traffic
ET DNS Query to a *.top domain - Likely Hostile