Analysis date (UTC): 11 April 2022, 16:53Analysis environment: Windows 7 Pro, build 7601, x86

https://jsonplaceholder.typicode.com/posts

MD5:A4DB941DFA1409C7BC611F02A4702731
SHA1:810A1E0E1036EF8F5AC5510D6EFFC91455C13AA9
SHA256:78AA29743106D740DF0B6A414B2BC3F5246B18C9FDE11ED84FA3ADEDFC85558E

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Reads Microsoft Outlook installation path

  • iexplore.exe (PID: 3808)

INFO

Changes internet zones settings

  • iexplore.exe (PID: 2924)

Checks supported languages

  • iexplore.exe (PID: 2924)
  • iexplore.exe (PID: 3808)

Reads the computer name

  • iexplore.exe (PID: 2924)
  • iexplore.exe (PID: 3808)

Application launched itself

  • iexplore.exe (PID: 2924)

Reads settings of System Certificates

  • iexplore.exe (PID: 2924)
  • iexplore.exe (PID: 3808)

Checks Windows Trust Settings

  • iexplore.exe (PID: 3808)
  • iexplore.exe (PID: 2924)

Reads the date of Windows installation

  • iexplore.exe (PID: 2924)

Modifies the phishing filter of IE

  • iexplore.exe (PID: 2924)

Reads internet explorer settings

  • iexplore.exe (PID: 3808)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN