Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 839231" data-attributes="member: 32260">I use open file location from the web browser and then &quot;Run As SmartScreen&quot; - that is probably that you do, too.In H_C&#039;s Recommended Settings, you do not use &quot;Run By SmartScreen&quot; but &quot;Run As SmartScreen&quot;. For &quot;Run As SmartScreen&quot; there will be another alert. I will post about it later.This alert was exactly for the Allow EXE and TMP case.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" />In most cases when it was an email attachment or something similarly suspicious, there is no need to investigate. Just delete it.You can also pack all files located in the suspicious folder, or take the unpacked email attachment and send it to online analysis. I often use any.run (requires registration <a href="https://app.any.run/#register" target="_blank">Interactive Online Malware Analysis Sandbox - ANY.RUN</a>)</blockquote>

[QUOTE="Andy Ful, post: 839231, member: 32260"] I use open file location from the web browser and then "Run As SmartScreen" - that is probably that you do, too. In H_C's Recommended Settings, you do not use "Run [B][COLOR=rgb(184, 49, 47)]By[/COLOR][/B] SmartScreen" but "Run [B][COLOR=rgb(184, 49, 47)]As[/COLOR][/B] SmartScreen". For "Run As SmartScreen" there will be another alert. I will post about it later. This alert was exactly for the Allow EXE and TMP case.(y):giggle: In most cases when it was an email attachment or something similarly suspicious, there is no need to investigate. Just delete it. You can also pack all files located in the suspicious folder, or take the unpacked email attachment and send it to online analysis. I often use any.run (requires registration [URL='https://app.any.run/#register']Interactive Online Malware Analysis Sandbox - ANY.RUN[/URL]) [/QUOTE]

Verification