We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
17 February 2025, 08:44
Analysis environment:
Windows 10 Pro, build 19045, x64
attachment.zip
MD5:
E0DD5DB184384CB5A9B1762906DB0C95
SHA1:
55F99C69399134EE39C7CE9E30CD268E7536B82F
SHA256:
889D79E7E004891E2A887C3A11D37DDD7E9028D53BB33622AE12685776181068
Analysis result
Threat level:
Suspicious activity
Tags:
arch-doc
Full analysis:
Analysis attachment.zip (MD5: E0DD5DB184384CB5A9B1762906DB0C95) Suspicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Unusual execution from MS Office
WINWORD.EXE (PID: 6884)
SUSPICIOUS
Generic archive extractor
WinRAR.exe (PID: 6280)
Reads security settings of Internet Explorer
WinRAR.exe (PID: 6280)
INFO
Checks proxy server information
DWWIN.EXE (PID: 5988)
Reads Microsoft Office registry keys
DWWIN.EXE (PID: 5988)
WinRAR.exe (PID: 6280)
Reads the software policy settings
DWWIN.EXE (PID: 5988)
Creates files in the program directory
DWWIN.EXE (PID: 5988)
Threats
No threats detected