Find similar analyses in TI Lookup
Analysis date (UTC): 13 November 2024, 20:50Analysis environment: Windows 10 Pro, build 19045, x64

ppv.land

MD5:2D191E43A283AF9958CFA410E63CF454
SHA1:B2C04D55E674A7D8EA39822E2694AA80ABB1EB35
SHA256:CFE60A0FC5A81A3930A2BFAD3CC3646B3C82A52D1FF33EAB3890270B0297FC6D

Analysis result

Threat level:Malicious activity
Full analysis:Analysis ppv.land Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Application launched itself

  • msedge.exe (PID: 5004)

Checks supported languages

  • identity_helper.exe (PID: 7836)

Executable content was dropped or overwritten

  • msedge.exe (PID: 7224)

Reads the computer name

  • identity_helper.exe (PID: 7836)

Reads Environment values

  • identity_helper.exe (PID: 7836)

Threats

PIDProcessClassMessage
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] jQuery JavaScript Library Code Loaded (code .jquery .com)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6028msedge.exeNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
6028msedge.exePotentially Bad TrafficET INFO File Sharing Service Domain in DNS Lookup (link .storjshare .io)
6028msedge.exePotentially Bad TrafficET INFO File Sharing Service Domain in DNS Lookup (link .storjshare .io)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED