Analysis date (UTC): 18 November 2024, 13:44Analysis environment: Windows 10 Pro, build 19045, x64

https://app.seesaw.me/pages/shared_item?item_id=item.8a4ddd0f-2482-4f0d-9c04-7359a88c4288&share_token=hn3_GPmUQcuVnlmnNsWTnw&mode=share

MD5:2AE665F818F3DA7A113AC84816026F2C
SHA1:F14B06C8D963CC02500BBE50DACC0A72B9015B98
SHA256:B171BB83DFD4562E286135742236F9553211EE3746E437123F68DC50D8BC6285

Analysis result

Behavior activities

MALICIOUS

PHISHING has been detected (SURICATA)

  • msedge.exe (PID: 1376)

SUSPICIOUS

No suspicious indicators.

INFO

Application launched itself

  • msedge.exe (PID: 6088)

Threats

PIDProcessClassMessage
1376msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
1376msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
1376msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
1376msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
1376msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Cloudflare content delivery network (cdnjs .cloudflare .com)
——Not Suspicious TrafficINFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com)
1376msedge.exeNot Suspicious TrafficINFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com)
1376msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Domain chain identified as Phishing (cdnchallengezone)
——Possible Social Engineering AttemptedPHISHING [ANY.RUN] Domain chain identified as Phishing (codechallengezone)
——Possible Social Engineering AttemptedPHISHING [ANY.RUN] Domain chain identified as Phishing (codechallengezone)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN