Detailed sandboxing on ANY.RUN indicates the following behaviors:
The program presents itself as a tool for checking mail access (often used by "gray hat" or malicious actors for credential stuffing). MAIL ACCESS Checker G-Klit.rar
The file is a high-risk package containing a known malicious executable . While advertised as a "checker" tool—likely for verifying the validity of email credentials or session cookies—forensic analysis identifies it as a sophisticated data-stealing Trojan. Core Identity & Malware Classification Detailed sandboxing on ANY