Analysis date (UTC): 12 November 2019, 10:25Analysis environment: Windows 7 Pro, build 7601, x86

http://carrefouruaeV857.regalofree.com?r=FFuu

MD5:8BF3F9F2F10C632AD399621E05E5FF1A
SHA1:6E10B56984D6287C61BC8A4B05CA53195F5B1C95
SHA256:74BE7A2FACF9F83C08076F4A316C2569675AC085E3129FB797132BE7A9F11311

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Modifies files in Chrome extension folder

  • chrome.exe (PID: 2412)

Reads Internet Cache Settings

  • OUTLOOK.EXE (PID: 2668)

Creates files in the user directory

  • OUTLOOK.EXE (PID: 2668)

INFO

Application launched itself

  • chrome.exe (PID: 2412)

Reads Microsoft Office registry keys

  • OUTLOOK.EXE (PID: 2668)

Reads the hosts file

  • chrome.exe (PID: 2412)
  • chrome.exe (PID: 1880)

Threats

PIDProcessClassMessage
1880chrome.exeGeneric Protocol Command DecodeSURICATA STREAM FIN out of window

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN