We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
4 May 2020, 12:43
Analysis environment:
Windows 7 Pro, build 7601, x86
https://portal.healthtrackrx.com/?page=3Duser_profile
MD5:
5A216044C73F601B6062A2106572A3A5
SHA1:
CF7D8A0A707136E3AF9F8932D771595A4B923D39
SHA256:
7DA1FF555D56C316C756D3288192985E109E0B470032179FC04514E9B0A55FA8
Analysis result
Threat level:
No threats detected
Full analysis:
Analysis https://portal.healthtrackrx.com/?page=3Duser_profile No threats detected - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Application was injected by another process
dllhost.exe (PID: 1696)
Runs injected code in another process
chrome.exe (PID: 3308)
SUSPICIOUS
Modifies files in Chrome extension folder
chrome.exe (PID: 3308)
INFO
Reads the hosts file
chrome.exe (PID: 3308)
chrome.exe (PID: 2836)
Dropped object may contain Bitcoin addresses
chrome.exe (PID: 3308)
Application launched itself
chrome.exe (PID: 3308)
Reads settings of System Certificates
chrome.exe (PID: 2836)
Threats
No threats detected