Analysis date (UTC): 7 May 2026, 20:58Analysis environment: Windows 10 Pro, build 19044, x64

shnyhntww34phqoa6dcgnvps2yu7dlwzmy5lkvejwjdo6z7bmgshzayd.onion

MD5:AAF554E5C596C90D0578C2C9A9E836C3
SHA1:DA3C5DE9CF3A5373D8C82B3541283032857475B5
SHA256:9FC437621A5F80F66DC1FDA08379D354CC087FE594F14DC38A9FEC943063DC2D

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Potential Corporate Privacy Violation

  • chrome.exe (PID: 7660)

INFO

Application launched itself

  • chrome.exe (PID: 1456)

Threats

PIDProcessClassMessage
7660chrome.exePotential Corporate Privacy ViolationET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR
7660chrome.exePotential Corporate Privacy ViolationET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR
7660chrome.exePotential Corporate Privacy ViolationET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR
5276MoUsoCoreWorker.exeUnknown TrafficET USER_AGENTS Microsoft Dr Watson User-Agent (MSDW)
7660chrome.exeNot Suspicious TrafficINFO [ANY.RUN] Cloudflare content delivery network (cdnjs .cloudflare .com)
7660chrome.exeNot Suspicious TrafficINFO [ANY.RUN] Cloudflare content delivery network (cdnjs .cloudflare .com)
7660chrome.exeNot Suspicious TrafficINFO [ANY.RUN] Cloudflare content delivery network (cdnjs .cloudflare .com)
7660chrome.exePotential Corporate Privacy ViolationET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR
7660chrome.exePotential Corporate Privacy ViolationET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR
7660chrome.exePotential Corporate Privacy ViolationET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN