File name:

Listary.exe

Full analysis: https://app.any.run/tasks/1df3c46d-21a1-4359-a8ac-d47b1537ee26
Verdict: Malicious activity
Threats:

Stealers are a group of malicious software that are intended for gaining unauthorized access to users’ information and transferring it to the attacker. The stealer malware category includes various types of programs that focus on their particular kind of data, including files, passwords, and cryptocurrency. Stealers are capable of spying on their targets by recording their keystrokes and taking screenshots. This type of malware is primarily distributed as part of phishing campaigns.

Malware Trends Tracker     >>>
Analysis date: August 26, 2024, 17:24:31
OS: Windows 10 Professional (build: 19045, 64 bit)
Tags:
stealer
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

4D7B3F9C65DF47AAAB7D8D2CBC7C1742

SHA1:

D4295BC74F8695BB98EB1535967C30328F9A1B49

SHA256:

62E1ED1D67B9C9B250ECBAB667556A3A149D55E363B3563A197A60C10B523FE6

SSDEEP:

196608:aH/UpMFXwBpyoCizLTZR4RunzMe0IQ21yJw4:af/FXEpyfK/ZOsnzMcVyJw4

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Changes the autorun value in the registry

      • Listary.tmp (PID: 488)

    • Actions looks like stealing of personal data

      • Listary.exe (PID: 6560)

  • SUSPICIOUS

    • Drops the executable file immediately after the start

      • Listary.exe (PID: 6764)
      • Listary.exe (PID: 7164)
      • Listary.tmp (PID: 488)

    • Executable content was dropped or overwritten

      • Listary.exe (PID: 6764)
      • Listary.tmp (PID: 488)
      • Listary.exe (PID: 7164)

    • Reads the date of Windows installation

      • Listary.tmp (PID: 3036)
      • Listary.exe (PID: 6560)

    • Reads the Windows owner or organization settings

      • Listary.tmp (PID: 488)

    • Starts SC.EXE for service management

      • Listary.tmp (PID: 488)

    • Reads security settings of Internet Explorer

      • Listary.tmp (PID: 3036)
      • Listary.Service.exe (PID: 6848)
      • Listary.exe (PID: 6560)

    • Process drops legitimate windows executable

      • Listary.tmp (PID: 488)

    • Executes as Windows Service

      • Listary.Service.exe (PID: 6848)

    • Deletes scheduled task without confirmation

      • schtasks.exe (PID: 2892)

    • Checks Windows Trust Settings

      • Listary.Service.exe (PID: 6848)

    • Adds/modifies Windows certificates

      • Listary.Service.exe (PID: 6848)

    • Changes Internet Explorer settings (feature browser emulation)

      • Listary.exe (PID: 6560)

  • INFO

    • Checks supported languages

      • Listary.exe (PID: 6764)
      • Listary.tmp (PID: 3036)
      • Listary.tmp (PID: 488)
      • Listary.exe (PID: 7164)
      • Listary.Service.exe (PID: 6848)
      • Listary.exe (PID: 6560)
      • listary-core.exe (PID: 1640)
      • ListaryHookHost64.exe (PID: 6284)
      • ListaryHookHost32.exe (PID: 6720)

    • Create files in a temporary directory

      • Listary.exe (PID: 6764)
      • Listary.tmp (PID: 488)
      • Listary.exe (PID: 7164)

    • Reads the computer name

      • Listary.tmp (PID: 3036)
      • Listary.tmp (PID: 488)
      • Listary.Service.exe (PID: 6848)
      • Listary.exe (PID: 6560)
      • listary-core.exe (PID: 1640)

    • Process checks computer location settings

      • Listary.tmp (PID: 3036)
      • Listary.exe (PID: 6560)

    • Creates a software uninstall entry

      • Listary.tmp (PID: 488)

    • Creates files in the program directory

      • Listary.tmp (PID: 488)
      • Listary.exe (PID: 6560)

    • Reads the software policy settings

      • Listary.Service.exe (PID: 6848)

    • Reads the machine GUID from the registry

      • Listary.Service.exe (PID: 6848)
      • Listary.exe (PID: 6560)

    • Reads Environment values

      • Listary.exe (PID: 6560)

    • Creates files or folders in the user directory

      • Listary.exe (PID: 6560)
      • listary-core.exe (PID: 1640)

    • Checks proxy server information

      • listary-core.exe (PID: 1640)
      • Listary.exe (PID: 6560)

    • Disables trace logs

      • Listary.exe (PID: 6560)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Inno Setup installer (53.5)
.exe | InstallShield setup (21)
.exe | Win32 EXE PECompact compressed (generic) (20.2)
.exe | Win32 Executable (generic) (2.1)
.exe | Win16/32 Executable Delphi generic (1)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2022:04:14 16:10:23+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
PEType: PE32
LinkerVersion: 2.25
CodeSize: 741888
InitializedDataSize: 89600
UninitializedDataSize: -
EntryPoint: 0xb5eec
OSVersion: 6.1
ImageVersion: 6
SubsystemVersion: 6.1
Subsystem: Windows GUI
FileVersionNumber: 0.0.0.0
ProductVersionNumber: 0.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Listary Setup
FileVersion:
LegalCopyright:
OriginalFileName:
ProductName: Listary
ProductVersion: 6.3
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
155
Monitored processes
24
Malicious processes
4
Suspicious processes
2

Behavior graph

Click at the process to see the details
start listary.exe listary.tmp no specs listary.exe listary.tmp sc.exe no specs conhost.exe no specs sc.exe no specs conhost.exe no specs sc.exe no specs conhost.exe no specs sc.exe no specs conhost.exe no specs sc.exe no specs conhost.exe no specs sc.exe no specs conhost.exe no specs listary.service.exe schtasks.exe no specs conhost.exe no specs listary.exe listary-core.exe no specs conhost.exe no specs listaryhookhost32.exe no specs listaryhookhost64.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
188\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—sc.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
488"C:\Users\admin\AppData\Local\Temp\is-N0EQE.tmp\Listary.tmp" /SL5="$E035E,12083863,832512,C:\Users\admin\AppData\Local\Temp\Listary.exe" /SPAWNWND=$4007A /NOTIFYWND=$7026A C:\Users\admin\AppData\Local\Temp\is-N0EQE.tmp\Listary.tmp
Listary.exe
User:
admin
Company:
Integrity Level:
HIGH
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-n0eqe.tmp\listary.tmp
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\comdlg32.dll
1140"C:\WINDOWS\system32\sc.exe" stop ListaryServiceC:\Windows\System32\sc.exe—Listary.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Service Control Manager Configuration Tool
Exit code:
1060
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sechost.dll
c:\windows\system32\bcrypt.dll
1640"C:\Program Files\Listary\listary-core.exe" -p 6560 -l "C:\Users\admin\AppData\Roaming\Listary\UserProfile\Cache\DESKTOP-JGLLJLD\ListaryMiniCoreLog.txt"C:\Program Files\Listary\listary-core.exe—Listary.exe
User:
admin
Integrity Level:
MEDIUM
Description:
listary-core
Version:
0.2.1
Modules
Images
c:\program files\listary\listary-core.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
2584"C:\WINDOWS\system32\sc.exe" delete ListaryServiceC:\Windows\System32\sc.exe—Listary.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Service Control Manager Configuration Tool
Exit code:
1060
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\sc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sechost.dll
c:\windows\system32\bcrypt.dll
2628\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—sc.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
2892"C:\WINDOWS\system32\schtasks.exe" /delete /tn Listary /fC:\Windows\SysWOW64\schtasks.exe—Listary.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Task Scheduler Configuration Tool
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\schtasks.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvcrt.dll
3036"C:\Users\admin\AppData\Local\Temp\is-EC9O3.tmp\Listary.tmp" /SL5="$7026A,12083863,832512,C:\Users\admin\AppData\Local\Temp\Listary.exe" C:\Users\admin\AppData\Local\Temp\is-EC9O3.tmp\Listary.tmp—Listary.exe
User:
admin
Company:
Integrity Level:
MEDIUM
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-ec9o3.tmp\listary.tmp
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\comdlg32.dll
3180\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—sc.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
3332\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—schtasks.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
Total events
23 912
Read events
23 766
Write events
141
Delete events
5

Modification events

(PID) Process:(488) Listary.tmpKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Operation:writeName:Listary
Value:
"C:\Program Files\Listary\Listary.exe" --startup
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\listary
Operation:writeName:URL Protocol
Value:
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
Operation:delete valueName:C:\Program Files\Listary\Listary.exe
Value:
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:Inno Setup: Setup Version
Value:
6.2.1
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:Inno Setup: App Path
Value:
C:\Program Files\Listary
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:InstallLocation
Value:
C:\Program Files\Listary\
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:Inno Setup: Icon Group
Value:
Listary
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:Inno Setup: User
Value:
admin
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:Inno Setup: Selected Tasks
Value:
desktopicon
(PID) Process:(488) Listary.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Listary_is1
Operation:writeName:Inno Setup: Deselected Tasks
Value:
quicklaunchicon
Executable files
309
Suspicious files
13
Text files
82
Unknown types
6

Dropped files

PID
Process
Filename
Type
488Listary.tmpC:\Program Files\Listary\unins000.exeexecutable
MD5:A68D75C7B71DEAE8CC2C1F33322A3A8D
SHA256:4A58E8C47CECB6CD086346855415594CCB0A134E5966452E9281965D1D1F611A
6764Listary.exeC:\Users\admin\AppData\Local\Temp\is-EC9O3.tmp\Listary.tmpexecutable
MD5:CFF49D095AABF9F032CA8F6712DC2B04
SHA256:CA5EA4A437857650BA3E430ED1CF32FC8736B5539C1FD6CE6EC9BF77F7DB7367
7164Listary.exeC:\Users\admin\AppData\Local\Temp\is-N0EQE.tmp\Listary.tmpexecutable
MD5:CFF49D095AABF9F032CA8F6712DC2B04
SHA256:CA5EA4A437857650BA3E430ED1CF32FC8736B5539C1FD6CE6EC9BF77F7DB7367
488Listary.tmpC:\Users\admin\AppData\Local\Temp\is-FUJTC.tmp\_isetup\_setup64.tmpexecutable
MD5:E4211D6D009757C078A9FAC7FF4F03D4
SHA256:388A796580234EFC95F3B1C70AD4CB44BFDDC7BA0F9203BF4902B9929B136F95
488Listary.tmpC:\Program Files\Listary\is-6FVSO.tmpexecutable
MD5:6C92EADEE7CA08AEB193B556FAE00D9A
SHA256:5EAC2551748FC723CE062C5B99A387FDD13322C8FD1935A5CFA29CC8661B9329
488Listary.tmpC:\Program Files\Listary\ControlzEx.dllexecutable
MD5:8672A8C07C7BC1EC086B2893A4C6E2CD
SHA256:3B22547F8CB828A63D83BFD82FD8FBA42A77AB25455F2BB926F76B8E1AB5C72E
488Listary.tmpC:\Program Files\Listary\is-I1Q9K.tmpexecutable
MD5:A68D75C7B71DEAE8CC2C1F33322A3A8D
SHA256:4A58E8C47CECB6CD086346855415594CCB0A134E5966452E9281965D1D1F611A
488Listary.tmpC:\Program Files\Listary\CommandLine.dllexecutable
MD5:2F345B6D207489E52DB3F85C2E4E617D
SHA256:2135B40FA819E58CF1942453E4409BFDEA2BE631077A354B878DE8402BE7E026
488Listary.tmpC:\Program Files\Listary\CalcBinding.dllexecutable
MD5:AA60EBB3568E4CFB12B29368F348464B
SHA256:8DB0941D1ECBA3B828FA0FA452EB9C7183BC87F81C1A76AB40D32628D65C3A25
488Listary.tmpC:\Program Files\Listary\cnmatch.binbinary
MD5:3E69BFD5ECDF07FF8084571D5088FC84
SHA256:3AFAB3FBE804F02BEF9BB1D99295447F347D8B5D3E944276B68102CCAAF82997
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
5
TCP/UDP connections
22
DNS requests
13
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
6848
Listary.Service.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfIs%2BLjDtGwQ09XEB1Yeq%2BtX%2BBgQQU7NfjgtJxXWRM3y5nP%2Be6mK4cD08CEAitQLJg0pxMn17Nqb2Trtk%3D
unknown
—
—
whitelisted
5504
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
5504
SIHClient.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
6848
Listary.Service.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSRXerF0eFeSWRripTgTkcJWMm7iQQUaDfg67Y7%2BF8Rhvv%2BYXsIiGX0TkICEAjfW2biAeCNICRe9hwtUJc%3D
unknown
—
—
whitelisted
1060
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
6612
svchost.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6020
RUXIMICS.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2120
MoUsoCoreWorker.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
3260
svchost.exe
40.115.3.253:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6848
Listary.Service.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted
2120
MoUsoCoreWorker.exe
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
1060
svchost.exe
40.126.32.74:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
1060
svchost.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 51.104.136.2
  • 51.124.78.146
  • 4.231.128.59
whitelisted
google.com
  • 142.250.185.142
whitelisted
client.wns.windows.com
  • 40.115.3.253
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
login.live.com
  • 40.126.32.74
  • 40.126.32.72
  • 20.190.160.20
  • 40.126.32.133
  • 40.126.32.136
  • 40.126.32.68
  • 20.190.160.22
  • 40.126.32.138
whitelisted
slscr.update.microsoft.com
  • 52.165.165.26
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 20.242.39.171
whitelisted

Threats

No threats detected
Process
Message
Listary.Service.exe
2024-08-26 17:24:55.5170|DEBUG|Listary.Service.Program|Listary service start
Listary.Service.exe
2024-08-26 17:24:55.6731|DEBUG|Listary.Service.ListaryWindowsServiceHost|Start windows service
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Listary.exe