Find similar analyses in TI Lookup

Analysis date (UTC): 15 May 2026, 18:30Analysis environment: Windows 10 Pro, build 19044, x64

https://exo-api.tf/Stb/Retev.php?bl=QTuVl0PCseGLafunsZPRE008.txt

MD5:313E81F1A7222BE4283488B20312D104

SHA1:BCDC0FCC57CDD074D37EAC2A0F52A4BBF18DF8C8

SHA256:D4BDCB4709819070E1CCA65242C4B112CF4FBFFBE34CD2E7CD51CDB8B97B79F5

Analysis result

Threat level:Malicious activity

Tags:

autogenericloader

Full analysis:Analysis https://exo-api.tf/Stb/Retev.php?bl=QTuVl0PCseGLafunsZPRE008.txt Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

GENERIC has been found (auto)

msedge.exe (PID: 4272)

SUSPICIOUS

Executable content was dropped or overwritten

notepad.exe (PID: 7556)

INFO

Application launched itself

msedge.exe (PID: 7484)
msedge.exe (PID: 8656)

Reads Environment values

identity_helper.exe (PID: 5588)
identity_helper.exe (PID: 9212)

Reads the computer name

identity_helper.exe (PID: 5588)
identity_helper.exe (PID: 9212)

Checks supported languages

identity_helper.exe (PID: 5588)
identity_helper.exe (PID: 9212)

Manual execution by a user

notepad.exe (PID: 7556)
cmd.exe (PID: 416)

Reads security settings of Internet Explorer

notepad.exe (PID: 7556)

Threats

PID	Process	Class	Message
4272	msedge.exe	Not Suspicious Traffic	INFO [ANY.RUN] Cloudflare Network Error Logging (NEL)
4272	msedge.exe	Not Suspicious Traffic	INFO [ANY.RUN] Cloudflare Network Error Logging (NEL)
6076	svchost.exe	Unknown Traffic	ET USER_AGENTS Microsoft Dr Watson User-Agent (MSDW)