ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

MALICIOUS	SUSPICIOUS	INFO
Loads dropped or rewritten executable spoolsv.exe (PID: 1196) Setup.exe (PID: 3180) IKernel.exe (PID: 3260) Application was dropped or rewritten from another process Setup.exe (PID: 3180) IKernel.exe (PID: 3868) IKernel.exe (PID: 3260) iKernel.exe (PID: 3700) iKernel.exe (PID: 3500)	Executable content was dropped or overwritten Setup.exe (PID: 3180) lj1488en.exe (PID: 3908) IKernel.exe (PID: 3260) Creates files in the program directory Setup.exe (PID: 3180) IKernel.exe (PID: 3260) Creates files in the Windows directory IKernel.exe (PID: 3260) Creates a software uninstall entry IKernel.exe (PID: 3260) Starts itself from another location IKernel.exe (PID: 3260) Searches for installed software IKernel.exe (PID: 3260) DllHost.exe (PID: 2460) Removes files from Windows directory IKernel.exe (PID: 3260) Creates COM task schedule object IKernel.exe (PID: 3260)	Low-level read access rights to disk partition vssvc.exe (PID: 3600)