MALICIOUS
NANOCORE has been detected (YARA)
- Document_Final.exe (PID: 4692)
SUSPICIOUS
No suspicious indicators.
INFO
Checks supported languages
- Document_Final.exe (PID: 4692)
- Document_Final.exe (PID: 2164)
Manual execution by a user
- Document_Final.exe (PID: 2164)
Reads the machine GUID from the registry
- Document_Final.exe (PID: 4692)
- Document_Final.exe (PID: 2164)
Creates files or folders in the user directory
- Document_Final.exe (PID: 4692)
Reads the computer name
- Document_Final.exe (PID: 4692)
- Document_Final.exe (PID: 2164)
Process checks whether UAC notifications are on
- Document_Final.exe (PID: 4692)
There is functionality for taking screenshot (YARA)
- Document_Final.exe (PID: 4692)