Is inphic_V1.1.3.rar safe? Yes, no threats found.

Programs the file ran, with their command lines.

• inphic V1.1.3.exe"C:\Users\<USER>\AppData\Local\Temp\inphic V1.1.3.exe"
• inphic V1.1.3.tmp"C:\Users\<USER>\AppData\Local\Temp\is-6AG8G.tmp\inphic V1.1.3.tmp" /SL5="$200EC,5482117,197120,C:\Users\<USER>\AppData\Local\Temp\inphic V1.1.3.exe"
• GAMINGMOUSE.exe"C:\Program Files (x86)\inphic driver\GAMINGMOUSE.exe"
• unarchiver.exe"C:\Windows\System32\unarchiver.exe" "C:\Users\user\Desktop\inphic_V1.1.3.rar"
• 7za.exeC:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\mov441f0.qyt" "C:\Users\user\Desktop\inphic_V1.1.3.rar"
• cmd.exeC:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\mov441f0.qyt\inphic V1.1.3.exe"

Files the file created, changed or deleted.

• WrittenC:\Users\<USER>\AppData\Local\Temp\is-6AG8G.tmp\inphic V1.1.3.tmp
• WrittenC:\Users\<USER>\AppData\Local\Temp\is-89Q4L.tmp\_isetup\_setup64.tmp
• WrittenC:\Program Files (x86)\inphic driver\DuiLib.dll
• WrittenC:\Program Files (x86)\inphic driver\libcurl.dll
• WrittenC:\Program Files (x86)\inphic driver\fftw3f.dll
• WrittenC:\Program Files (x86)\inphic driver\fmt.dll

Settings the file changed, including ways to start again after a restart.

• DeletedHKEY_CURRENT_USER\SOFTWARE\Microsoft\Multimedia\ActiveMovie\Filter Cache\1
• DeletedHKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000\SessionHash
• DeletedHKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000\Sequence
• DeletedHKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000\Owner
• DeletedHKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000\RegFiles0000
• DeletedHKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000\RegFilesHash

Named locks a program uses so only one copy runs; malware families often reuse them.

• {AppId}Installer
• Global\{AppId}Installer
• InstatSetup
• cversions.3.m
• CIST_GMouseApp_New825
• DirectSound Administrator shared thread array (lock

The analysis machine's own processes and connections, recorded in every run.

• VM processExplorer.EXEC:\Windows\Explorer.EXE
• VM processservices.exeC:\Windows\system32\services.exe
• VM processsvchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p
• VM processsvchost.exeC:\Windows\system32\svchost.exe -k UnistackSvcGroup
• VM processsvchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
• VM processlsass.exeC:\Windows\system32\lsass.exe