Analysis date (UTC): 17 September 2019, 15:38Analysis environment: Windows 7 Pro, build 7601, x86

https://www.vcdelivery.com/Cert/gc.aspx?r=NBQjyZC21z77vG%2b%2fTLWWAA%3d%3d&v=e&c=b7bbTuTzrF%2bXMmYWy6QlWA%3d%3d&data=02|01|sedixon@leprinofoods.com

MD5:6977097DB6C1D1FB90577CD70E4C4182
SHA1:3FD0172EC3DBE00FD317961F0630AA594D833E85
SHA256:4F4D303FD2CC112FEB959B9F3218ACF5185E174F488B42512D37A37CD763BE74

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Modifies files in Chrome extension folder

  • chrome.exe (PID: 3460)

INFO

Reads the hosts file

  • chrome.exe (PID: 3460)
  • chrome.exe (PID: 2932)

Reads settings of System Certificates

  • chrome.exe (PID: 2932)

Application launched itself

  • chrome.exe (PID: 3460)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN