MALICIOUS
NANOCORE has been detected (YARA)
- kalyanonlinematkaapp.exe (PID: 5420)
SUSPICIOUS
No suspicious indicators.
INFO
Checks supported languages
- kalyanonlinematkaapp.exe (PID: 5420)
Process checks whether UAC notifications are on
- kalyanonlinematkaapp.exe (PID: 5420)
Reads the machine GUID from the registry
- kalyanonlinematkaapp.exe (PID: 5420)
Reads the computer name
- kalyanonlinematkaapp.exe (PID: 5420)
Creates files or folders in the user directory
- kalyanonlinematkaapp.exe (PID: 5420)