Analysis date (UTC): 22 September 2025, 15:50Analysis environment: Windows 10 Pro, build 19044, x64

porsasystem.com

MD5:EC2E6B47DD8B272CB260F060BFD55240
SHA1:14BCF14A0352744EE5049444B59593845F8FAFFC
SHA256:E45E5C3CF867D00C91CED18AFCC4D1DB74408AB924FB7D88F655F5649F56A52D

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Contacting a server suspected of hosting an Exploit Kit

  • msedge.exe (PID: 6900)

INFO

Checks supported languages

  • identity_helper.exe (PID: 7488)

Application launched itself

  • msedge.exe (PID: 6376)

Reads the computer name

  • identity_helper.exe (PID: 7488)

Reads Environment values

  • identity_helper.exe (PID: 7488)

Threats

PIDProcessClassMessage
6900msedge.exeExploit Kit Activity DetectedET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (porsasystem .com)
6900msedge.exeExploit Kit Activity DetectedET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (porsasystem .com)
6900msedge.exeExploit Kit Activity DetectedET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (porsasystem .com)
6900msedge.exeExploit Kit Activity DetectedET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (porsasystem .com)
6900msedge.exeExploit Kit Activity DetectedET EXPLOIT_KIT LandUpdate808 Domain in TLS SNI (porsasystem .com)
——Unknown TrafficET USER_AGENTS Microsoft Dr Watson User-Agent (MSDW)
——Potentially Bad TrafficET INFO Possible Chrome Plugin install

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN