Analysis date (UTC): 14 May 2026, 16:12Analysis environment: Windows 10 Pro, build 19044, x64

kalyanonlinematkaapp.exe

MD5:8FE9AFCBC6B755494A8DF57A4F16888F
SHA1:E11A7E0DDB8B3039D94400885B72ECC757BDE136
SHA256:DFC8CE3C3711A5B40887FB310775D17EDDD9D9F42BFD27B3487FD109E325F3DA

Analysis result

Behavior activities

MALICIOUS

NANOCORE has been detected (YARA)

  • kalyanonlinematkaapp.exe (PID: 5420)

SUSPICIOUS

No suspicious indicators.

INFO

Checks supported languages

  • kalyanonlinematkaapp.exe (PID: 5420)

Process checks whether UAC notifications are on

  • kalyanonlinematkaapp.exe (PID: 5420)

Reads the machine GUID from the registry

  • kalyanonlinematkaapp.exe (PID: 5420)

Reads the computer name

  • kalyanonlinematkaapp.exe (PID: 5420)

Creates files or folders in the user directory

  • kalyanonlinematkaapp.exe (PID: 5420)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN