Analysis date (UTC): 16 March 2025, 20:07Analysis environment: Windows 10 Pro, build 19045, x64

armv7l

MD5:C3DE148809B39BAC2B0A4F78148F55D3
SHA1:3675433EC9D9AE3D5E47B4ABF46DEA369F091D0A
SHA256:7DA3D4805795CA85BE0E764D732CEAD98CD68B6A4EBDE6B42CC56BB81979EB20

Analysis result

Behavior activities

MALICIOUS

BOTNET has been found (auto)

  • OpenWith.exe (PID: 6640)

SUSPICIOUS

No suspicious indicators.

INFO

Reads the software policy settings

  • slui.exe (PID: 5008)

Reads Microsoft Office registry keys

  • OpenWith.exe (PID: 6640)

Checks proxy server information

  • slui.exe (PID: 5008)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN