File name:

MicroDicom-2024.1-x64.exe

Full analysis: https://app.any.run/tasks/b56e4997-adb6-4ae0-b9d4-57da51f6f20c
Verdict: Malicious activity
Analysis date: August 22, 2024, 05:46:24
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5:

B6C0E66F052F28887211A1A0EE12994B

SHA1:

805981F2C9FBC74DC60D35D89B438E0C39B6474E

SHA256:

38E49B889CE3102AA49E2095591CB490D5FC27E7069FB89924689B6AF03F675D

SSDEEP:

98304:LFhiddI4FLZ8rKUDdUDklirWSedooitasCpWWdRs7cy8Vj/k4fOZ0H3u/50P+OoO:wy6LxeP0gVReCxcqEkXX

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Drops the executable file immediately after the start

      • MicroDicom-2024.1-x64.exe (PID: 6716)

    • Malware-specific behavior (creating "System.dll" in Temp)

      • MicroDicom-2024.1-x64.exe (PID: 6716)

    • Executable content was dropped or overwritten

      • MicroDicom-2024.1-x64.exe (PID: 6716)

    • The process creates files with name similar to system file names

      • MicroDicom-2024.1-x64.exe (PID: 6716)

    • Creates a software uninstall entry

      • MicroDicom-2024.1-x64.exe (PID: 6716)

  • INFO

    • Checks supported languages

      • MicroDicom-2024.1-x64.exe (PID: 6716)
      • mDicom.exe (PID: 6300)
      • identity_helper.exe (PID: 8028)

    • Creates files in the program directory

      • MicroDicom-2024.1-x64.exe (PID: 6716)
      • mDicom.exe (PID: 6300)

    • Reads the computer name

      • MicroDicom-2024.1-x64.exe (PID: 6716)
      • mDicom.exe (PID: 6300)
      • identity_helper.exe (PID: 8028)

    • Manual execution by a user

      • mDicom.exe (PID: 6300)
      • msedge.exe (PID: 6280)

    • Create files in a temporary directory

      • MicroDicom-2024.1-x64.exe (PID: 6716)
      • mDicom.exe (PID: 6300)

    • Reads Microsoft Office registry keys

      • msedge.exe (PID: 6280)

    • Application launched itself

      • msedge.exe (PID: 6280)

    • Reads Environment values

      • identity_helper.exe (PID: 8028)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable MS Visual C++ (generic) (67.4)
.dll | Win32 Dynamic Link Library (generic) (14.2)
.exe | Win32 Executable (generic) (9.7)
.exe | Generic Win/DOS Executable (4.3)
.exe | DOS Executable Generic (4.3)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2020:08:01 02:43:17+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 26112
InitializedDataSize: 141824
UninitializedDataSize: 2048
EntryPoint: 0x348f
OSVersion: 4
ImageVersion: 6
SubsystemVersion: 4
Subsystem: Windows GUI
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
169
Monitored processes
33
Malicious processes
1
Suspicious processes
0

Behavior graph

Click at the process to see the details
start microdicom-2024.1-x64.exe msedge.exe mdicom.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs identity_helper.exe no specs identity_helper.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs microdicom-2024.1-x64.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
232"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=6484 --field-trial-handle=2276,i,3009794244805864672,16333888888242085186,262144 --variations-seed-version /prefetch:8C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
1164"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=5180 --field-trial-handle=2276,i,3009794244805864672,16333888888242085186,262144 --variations-seed-version /prefetch:8C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
5400"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3512 --field-trial-handle=2276,i,3009794244805864672,16333888888242085186,262144 --variations-seed-version /prefetch:1C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6264"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.59 --initial-client-data=0x300,0x304,0x308,0x2f4,0x310,0x7fffd30e5fd8,0x7fffd30e5fe4,0x7fffd30e5ff0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6280"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.microdicom.com/C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6300"C:\Program Files\MicroDicom\mDicom.exe" C:\Program Files\MicroDicom\mDicom.exe
explorer.exe
User:
admin
Company:
MicroDicom
Integrity Level:
MEDIUM
Description:
MicroDicom DICOM Viewer (64-bit)
Version:
2024.1.0.5132
Modules
Images
c:\program files\microdicom\mdicom.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
6648"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=2780 --field-trial-handle=2276,i,3009794244805864672,16333888888242085186,262144 --variations-seed-version /prefetch:8C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6664"C:\Users\admin\AppData\Local\Temp\MicroDicom-2024.1-x64.exe" C:\Users\admin\AppData\Local\Temp\MicroDicom-2024.1-x64.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221226540
Modules
Images
c:\users\admin\appdata\local\temp\microdicom-2024.1-x64.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
6672"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2272 --field-trial-handle=2276,i,3009794244805864672,16333888888242085186,262144 --variations-seed-version /prefetch:2C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6696"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=2424 --field-trial-handle=2276,i,3009794244805864672,16333888888242085186,262144 --variations-seed-version /prefetch:3C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
Total events
11 197
Read events
11 072
Write events
120
Delete events
5

Modification events

(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_CURRENT_USER\SOFTWARE\RegisteredApplications
Operation:delete valueName:MicroDicom
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications
Operation:delete valueName:MicroDicom
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mDicom.exe
Operation:writeName:Path
Value:
C:\Program Files\MicroDicom
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.dcm
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.dcm30
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.bmp
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.gif
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.jpeg
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.jpe
Value:
(PID) Process:(6716) MicroDicom-2024.1-x64.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\mDicom64.exe\SupportedTypes
Operation:writeName:.jpg
Value:
Executable files
9
Suspicious files
67
Text files
46
Unknown types
1

Dropped files

PID
Process
Filename
Type
6716MicroDicom-2024.1-x64.exeC:\Users\admin\AppData\Local\Temp\nswDE77.tmp\System.dllexecutable
MD5:564BB0373067E1785CBA7E4C24AAB4BF
SHA256:7A9DDEE34562CD3703F1502B5C70E99CD5BBA15DE2B6845A3555033D7F6CB2A5
6716MicroDicom-2024.1-x64.exeC:\Users\admin\AppData\Local\Temp\nswDE77.tmp\advsplash.dllexecutable
MD5:1871AF84805057B5EBC05EE46B56625D
SHA256:62B3DB0446750CA9FD693733EEC927ACC1F50012A47785343286E63B650B7621
6716MicroDicom-2024.1-x64.exeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\MicroDicom DICOM Viewer (64-bit)\MicroDicom DICOM Viewer (64-bit).lnklnk
MD5:3541C695CA23CCEA575037FC96BA4B87
SHA256:77A40176BAE96BFF7531B09B046C671DCBF1A52C1B77A90D20AB0AFE5AF21592
6716MicroDicom-2024.1-x64.exeC:\Users\Public\Desktop\MicroDicom DICOM Viewer (64-bit).lnklnk
MD5:7789BFF8B0C39375D8B4B581BA1C718B
SHA256:E2865ED5C1792E80D91C75CF7A4226B3FAC361159608778E4388531BB4AFDEF6
6716MicroDicom-2024.1-x64.exeC:\Program Files\MicroDicom\uninstall.exeexecutable
MD5:3AA40E1FE0BB5282F5798A36813DDCD0
SHA256:1089B67F961FC018EA75795D00A434BE2A6C66010DDBD66143E6A1FCAADB3165
6716MicroDicom-2024.1-x64.exeC:\Program Files\MicroDicom\licenses\EULA.txttext
MD5:7B11D4A9863C46F7DD99C818BCF2DC25
SHA256:9DE357A6644B877F3F79A485631A95D7528F5656C00492149974407439F1E03B
6280msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\commerce_subscription_db\LOG.old~RF120a68.TMP —
MD5:—
SHA256:—
6716MicroDicom-2024.1-x64.exeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\MicroDicom DICOM Viewer (64-bit)\MicroDicom DICOM Viewer WebSite.urlurl
MD5:31982F7338540CED83F64D72D91C8B6F
SHA256:CA42A48191AB359CB7DFA92A3D90EAB68DCA1113242C04102418D2A8CCEB6FBB
6280msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\commerce_subscription_db\LOG.old —
MD5:—
SHA256:—
6280msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\PersistentOriginTrials\LOG.old~RF120a78.TMP —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
3
TCP/UDP connections
71
DNS requests
76
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2360
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
7772
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
6976
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
5880
RUXIMICS.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
2120
MoUsoCoreWorker.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3540
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
3540
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
3260
svchost.exe
40.113.103.199:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
2360
svchost.exe
20.190.159.4:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2360
svchost.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted
6696
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
6280
msedge.exe
239.255.255.250:1900
—
—
—
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.185.206
whitelisted
settings-win.data.microsoft.com
  • 20.73.194.208
  • 4.231.128.59
  • 51.104.136.2
whitelisted
client.wns.windows.com
  • 40.113.103.199
whitelisted
login.live.com
  • 20.190.159.4
  • 20.190.159.0
  • 20.190.159.68
  • 40.126.31.71
  • 40.126.31.73
  • 40.126.31.69
  • 20.190.159.23
  • 20.190.159.64
  • 20.190.159.2
  • 20.190.159.73
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
config.edge.skype.com
  • 13.107.42.16
whitelisted
www.microdicom.com
  • 35.215.88.130
unknown
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
business.bing.com
  • 13.107.6.158
whitelisted
edge-mobile-static.azureedge.net
  • 13.107.246.45
whitelisted

Threats

No threats detected
Process
Message
MicroDicom-2024.1-x64.exe
ExecShellAsUser: got desktop
MicroDicom-2024.1-x64.exe
ExecShellAsUser: elevated process detected
MicroDicom-2024.1-x64.exe
ExecShellAsUser: thread finished
MicroDicom-2024.1-x64.exe
ExecShellAsUser: DLL_PROCESS_DETACH
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
MicroDicom-2024.1-x64.exe