Analysis date (UTC): 9 February 2024, 13:57Analysis environment: Windows 7 Pro, build 7601, x86

https://www.bing.com/images/search?view=detailV2&ccid=RLSAQloq&id=C010B5DB0EDAC7D7025D8EE08B2C3121327AA855&thid=OIP.RLSAQloqH40x21pCDBGbtAHaIT&mediaurl=https%3A%2F%2Fi.pinimg.com%2Foriginals%2F3c%2Fca%2F7b%2F3cca7bc262a6e5056cdbff9268e40bf4.jpg&cdnurl=https%3A%2F%2Fth.bing.com%2Fth%2Fid%2FR.44b480425a2a1f8d31db5a420c119bb4%3Frik%3DVah6MiExLIvgjg%26pid%3DImgRaw%26r%3D0&exph=1210&expw=1080&q=alisha+lehmann+photos&simid=608056005540606953&form=IRPRST&ck=7DFB4F1EA48EC4CB7E5C9AF49320A18D&selectedindex=29&itb=0&ajaxhist=0&ajaxserp=0&vt=0&sim=11

MD5:45B7B1B0B03F5D9E9DC8B2ABB0740829

SHA1:08F6A3DA9998D3E0A772DCA4C1C437CEE7F5F47F

SHA256:2EFDB01A9B59F8CA849F129696A6A8E4D2D07757AB83302ECEE3C6960F6D39D8

Analysis result

Threat level:Malicious activity

No malicious indicators.

No suspicious indicators.

PID	Process	Class	Message
1776	chrome.exe	Misc activity	ET INFO External IP Lookup Domain (ipify .org) in DNS Lookup
1776	chrome.exe	Misc activity	ET INFO External IP Lookup Domain (ipify .org) in DNS Lookup
1776	chrome.exe	Misc activity	ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI
1776	chrome.exe	Misc activity	ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)
1776	chrome.exe	Exploit Kit Activity Detected	ET EXPLOIT_KIT VexTrio Domain in DNS Lookup (lookup-domain .com)
1776	chrome.exe	Exploit Kit Activity Detected	ET EXPLOIT_KIT VexTrio Domain in DNS Lookup (lookup-domain .com)
1776	chrome.exe	Exploit Kit Activity Detected	ET EXPLOIT_KIT VexTrio Domain in TLS SNI (lookup-domain .com)
1776	chrome.exe	Potentially Bad Traffic	ET DNS Query to a *.top domain - Likely Hostile
1776	chrome.exe	Potentially Bad Traffic	ET INFO Observed DNS Query to .life TLD
1776	chrome.exe	Potentially Bad Traffic	ET INFO Observed DNS Query to .life TLD