Analysis date (UTC): 10 June 2024, 11:24Analysis environment: Windows 7 Pro, build 7601, x86

www.bing.com/images/search?view=detailv2&ccid=mll1otos&id=03bd6d403d420245e7cfee3391d2d325e2d3c07b&thid=oip.mll1otosa8pbn176wyhprqaaaa&mediaurl=https://www.auto-roll.com/img/product-info/detail-motors-and-manual-override.jpg&cdnurl=https://th.bing.com/th/id/r.9a52f53ad3ac03c3db9f5efac3284f45?rik=e8dt4ixt0pez7g&pid=imgraw&r=0&exph=460&expw=460&q=roller+shutter+door+manual+crank+winding+handle+to+a+electric+garage+door+long+and+at+a+right+angle&simid=608019197834568663&form=irprst&ck=d3e36dcb6e1ee2ab4ca41560b78a7d07&selectedindex=3&itb=0&mode=overlay

MD5:E36E6D7EBCEA4581AC5B67647CB11A8F
SHA1:033A2CA97FD73C1AC79EDFE66D624A3457CE0CB4
SHA256:40DB5601771DD289903FE8AFBEED0501BCA71FAEEF3FA2273A3A6605E45C7A70

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Manual execution by a user

  • wmpnscfg.exe (PID: 2284)

Checks supported languages

  • wmpnscfg.exe (PID: 2284)

Drops the executable file immediately after the start

  • chrome.exe (PID: 2824)

Reads the computer name

  • wmpnscfg.exe (PID: 2284)

Executable content was dropped or overwritten

  • chrome.exe (PID: 2824)

Application launched itself

  • chrome.exe (PID: 3968)

Threats

PIDProcessClassMessage
864chrome.exePotentially Bad TrafficET INFO Observed DNS Query to .life TLD
864chrome.exePotentially Bad TrafficET INFO Observed DNS Query to .life TLD

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN