Analysis date (UTC): 8 February 2020, 04:15Analysis environment: Windows 7 Pro, build 7601, x86

maintools.js

MD5:F1DD65BB5D4F189983CDB24EC97B54AF
SHA1:1C9DD3E7A55E1E8DCE41D5D923FEC6A4DBF13F99
SHA256:BE12179515A741548D2C6DE142F1895DE384B6FCE78372725FC2C54A9D19B67A

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

Executes scripts

  • cmd.exe (PID: 1536)

INFO

Manual execution by user

  • WScript.exe (PID: 2876)
  • cmd.exe (PID: 1536)
  • WScript.exe (PID: 3776)
  • WScript.exe (PID: 3624)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN