Analysis date (UTC): 4 February 2019, 08:08Analysis environment: Windows 7 Pro, build 7601, x86

ShowMyPC3152.exe

MD5:1DDAF4BC34EF4DC35C2745986DD23D8D
SHA1:617DBE4B5BCDBCC0963B6116FD52CBDE7A0884F9
SHA256:A0FDB0BF4D3FE5EC9E75BB3258B7158DE6790B819F44FAE3046C63DA56FB6567

Analysis result

Behavior activities

MALICIOUS

Loads dropped or rewritten executable

  • ShowMyPC3152.exe (PID: 3944)

Application was dropped or rewritten from another process

  • SMPCSetup.exe (PID: 3896)

Changes settings of System certificates

  • SMPCSetup.exe (PID: 3896)

SUSPICIOUS

Reads internet explorer settings

  • SMPCSetup.exe (PID: 3896)

Executable content was dropped or overwritten

  • ShowMyPC3152.exe (PID: 3944)

Reads Internet Cache Settings

  • SMPCSetup.exe (PID: 3896)

Creates files in the user directory

  • SMPCSetup.exe (PID: 3896)

Adds / modifies Windows certificates

  • SMPCSetup.exe (PID: 3896)

INFO

Reads settings of System Certificates

  • SMPCSetup.exe (PID: 3896)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN